last executing test programs: 4m35.849753327s ago: executing program 3 (id=3215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 4m35.633845703s ago: executing program 3 (id=3219): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000100)=@l2={0x1f, 0x6, @any, 0x401, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="0523f739da793143095bedd6d41e8924ce47fb345495a866d7ebaec5c36868f3f72b6cad486800a9a3118e17f1e062d1e2faafd5e28d4e69c25abe9158790a206a6bbc6d3a2d9d25ba6c4234f31ce279547118f88351a93d8ab6cf2cb83b243120449f6212ccc3a4727335f0c7a472e23031ced02a17620fb56392b9534fc718", 0x80}, {&(0x7f0000000040)}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="389b2e43dbcd0feda25dfcd649d0f43e9a1cabdcde2f809a17679cde7b7fe22b0cd162c523291068f57ca7736998770569297022d6b674aa471e2887a3be37", 0x3f}], 0x1, &(0x7f00000006c0)=[{0x10, 0x118, 0x243c}], 0x10}}, {{0x0, 0x0, 0x0}}], 0x3, 0x1) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a57840feffff7f000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x324) 4m35.434168997s ago: executing program 3 (id=3221): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0)='4', 0x1) tee(r2, r0, 0xffffffffffffffff, 0x2) 4m35.285802665s ago: executing program 3 (id=3224): r0 = socket(0x28, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="bcb037ff34133baa7df544da2207d689909540c95c", 0x15}, {&(0x7f00000000c0)="cff7aece10e2169b075bd197203a8e2ba12e239cf330a9d79c76e2fc934045bd26c45fb4a8fe84d1c00261b85ffe068130331c4f15bc16e5c4aa8c00898864a386c1bdf72e4cacc91c3fc26df3a894e031f5f13006c23dcb26566f81122e23bc3fe65cac749de21034a7073eb1a190f57e1cf57f4f37", 0x76}, {&(0x7f0000000140)="ea24072ed0430f5a77da1ff9f8c4cdb76d9ff6c77003621a011fc3b0661a74758c6aac5061e95b978cb1a177886ebdcf1ebb0c4484aebef2d12eec4a8881f1ae61765421035f5b9f3f5eeb39de4d599ab711d76ffba2f88a62c1233ca794f534051417bcb8447110c8de38ae68354f840f9054b82de14bc8a86a4dfc0f100832aa9c1ff89e6bb3aca5c35af093dd3b7a15f12c558598475eeb3583c7be34785a3c95a4eb8ca1b99cd4ceae44a4c85c7623443ef04a86edf406629d36a3ca79", 0xbf}, {&(0x7f00000013c0)="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", 0x1000}], 0x4, &(0x7f0000000300)=[{0xb8, 0x0, 0x5, "edcc7844f485f63110194e87a30b79dda44b7e19797c8d8824d0af09219d282125af2d232ffe422e89f67f2ad615475bc0046dc722e6f02fa33932ef29c387a193c6edaa7d3ae9b695a4120c7b50d5aec6923de635bb1c8becd64eef1986c6c76af7b30ac71592aa32b9b6d16c51f41c3fbb804b508496b3b7344b621dd2d5e22fe63f21240b9fab1f2c6314b36e2ff825820faebab5da051016033e82a4f74a47e2f9c5"}, {0x38, 0x1, 0x1f57, "175eef1fa2901cef363f47bffc2e9aa9951bf41c25e637f27f2afafd8fa77b7cc4"}, {0x88, 0x112, 0x6, "b6285f36966e0023be67a8cd9fdb4d93587e0814c5ff741268ef396484653800000000e8fafaeaa556e99aefa390adcbc588baad87f33c17dff3738bc2784cd6a1272bda805c6d854743dd95c1616e1e96327f9065c9338ae8ceb5c4e9e598c44ad9a5dcaced6f2823efd49d166e149f7a8d"}], 0x178}}, {{&(0x7f0000000200)=@isdn={0x22, 0x2, 0x0, 0xf9, 0x3}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="964d886d9184ec2cb1383f66b1c5f49acd1181db3fa8cf8f0150826dcd45dc91f28df524e40a8f449f2bf42858a1b81f0d0345e5728aedcac6402aa93373fe1ccc2a68faa168427bbd657b69d1beb548943532d4da8e1bdbfb414521c5f38874f6b7ef48ed014c26608ea9fd655d97178ea211e2562ead7933d87581e5938e094a", 0x81}, {&(0x7f0000000580)="241ce20c3238d5949ff6acd81206521b51c992f689d6cacbb936c51b328c980d1decdc37f3db62241edb84f9e53393c0e7b4e0e47ee6e906000a3dc8df599494f2b608a0cab4d12a8084a5c77619498f1f26b69d7aaef31626090628d2fbac16c4fa87460183b37e46758c1e7b038fb92fd6c1e38c45a100f4c8d77a37dd3416b78435d521fc6c997307a6f0a6467aac9d8fc61bb6a8b8693cc60c4f5bd27e49fd2699fe323a83719790cd7e25b97ba0a11ef346da443d01a4a97666e6a0402c1b2da679b69c8f1ac2b939c687c3dd73c1b6faedae761c4cd522b3d2874fb67e255e25cf92308da83e98c96aa4", 0xed}], 0x2, &(0x7f0000000680)=[{0x20, 0x1, 0x98bd, "b2c09c0c08b28a4adbb404898bd8502c"}, {0x78, 0x10d, 0xa70, "ceda341db10a706c2212790c09127832f3b5db22b4023912c36ee65a8c1f1b6b2b7461f87245e46d9e663cd64478b7329cfe76c895b7b11db16d6a8f1ebed903aedc3c19bea18815f002ff132caf65c51911cdf596bb1ae32135a413614a0bfe46cc02f6ccd10ec9"}, {0x68, 0x0, 0x6, "b739a19bfec8136ae25ddab80a3925810c10ae36855d7cdf9f8e512e87a0b22c07bfee7220166e9c49a89711111d04969af3cc6b539b1f985295fa60413c081be3de49d4672bd23546eff897913ad01310316ff7ae"}, {0x90, 0x10a, 0x2, "e3092af527f4ee2620159e5bed1b29bbf89a01dc1bfc3d41233bb54b5f69f39a9282f5244a8ad6cef3b4f40f2703a65703b8266b3785dcbe9bf09a2bc0b9ecfc040c09f73f264c6764589bd1fd9aed29aba5240fb54e5f725218e3c0eab632f9cd86444ea0f25ea076dcbebbd706c07c6c0864ecb199bd50e943fe2f146bb116"}, {0xe0, 0x10c, 0x3, "627580f7a5aada12839851d6fc98c9313cce04e37a60c3de80b1f3481b5855bdf7145ecf5bea4c2c57a49f92c73b0dde5f5ed2b03fcb9c30d5ed23d82ad3b6b45a34b072add81d83e8f96717f14fc8ef0d9d309907265423a22c3727653a528ac238bc73e64ffa95cd0a3c4ccea1e063ff3e81e1168ebccffebdc99954de5719941e1a19536252281cc0f32161a38735ebbb9a4f74733aa3fa0f431785603c59f4d6cfd93bd2ae1152f1038d6b82ceb7c960c92e1be12ce82132728a34b73d704e748c744cbb8a2e5665f6df"}], 0x270}}], 0x3, 0x4008014) (async) socket(0x1d, 0x80000, 0x8) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}}, 0x0) 4m35.189711337s ago: executing program 3 (id=3226): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet6(0xa, 0x80000, 0x5ecc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x80000001, @mcast1, 0xf}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4014) 4m34.961273182s ago: executing program 3 (id=3229): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) recvmmsg(r6, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@noop, @lsrr={0x83, 0x3, 0x77}]}}, @address_request={0x11, 0x0, 0x0, 0x576}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000004c0)=[@mss={0x2, 0x100}, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp, @sack_perm], 0x6) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x40900a4, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) writev(r8, &(0x7f0000003700)=[{&(0x7f0000002380)="d3f5a8d1", 0x4}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 4m19.838258638s ago: executing program 32 (id=3229): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) recvmmsg(r6, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@noop, @lsrr={0x83, 0x3, 0x77}]}}, @address_request={0x11, 0x0, 0x0, 0x576}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000004c0)=[@mss={0x2, 0x100}, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp, @sack_perm], 0x6) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x40900a4, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) writev(r8, &(0x7f0000003700)=[{&(0x7f0000002380)="d3f5a8d1", 0x4}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 2m34.666373047s ago: executing program 1 (id=4035): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000001200)=""/4137, 0x1029}, {0x0}], 0x2) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000ee150100000018000003003600000000000000056cedb000000000"], 0x38}}, 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0xe403, r5, 0x442b3, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x4040) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0xe403, r5, 0x442b3, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x4040) 2m34.636197926s ago: executing program 1 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010000000000007f000007000000", @ANYRES32, @ANYBLOB="000000000a000500aaaaaaaaaabb0000080009"], 0x30}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0e00eb00", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x810) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2m34.47674053s ago: executing program 1 (id=4045): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000540)={0x20, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000540)={0x20, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) (async) 2m34.31932043s ago: executing program 1 (id=4049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xce, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r8, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2m34.122146s ago: executing program 1 (id=4052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x80, 0xd}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48cd}, 0x4000080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 2m33.477215917s ago: executing program 1 (id=4062): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2m18.427469692s ago: executing program 33 (id=4062): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r2, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2.146890148s ago: executing program 0 (id=5204): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r0, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd47, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 2.037788906s ago: executing program 0 (id=5205): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8c04}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x10000, 0x9, 0x0, 0x6, 0x8, 0xf857}, {0x6, 0x3ff, 0x1, 0x10001, 0x8, 0xffffffff}], ['\x00', '\x00', '\x00']}) 1.932341756s ago: executing program 0 (id=5208): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23, 0x4}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23, 0x4}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 1.753111085s ago: executing program 0 (id=5210): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x3a}, 0x1, 0x0, 0x0, 0x2404c0e4}, 0x20004080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@gettaction={0x80, 0x32, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xa}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x198, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff8}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x164, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_MATCHALL_ACT={0x150, 0x2, [@m_nat={0x14c, 0x1c, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7, 0x7, 0x2, 0xbc}, @empty, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x5, 0x5, 0x1000, 0x3}, @multicast2, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x6, 0x1}, @private=0xa010100, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x2, 0x1, 0x4, 0x8c1}, @multicast2, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x6, 0x379, 0xffff8001}, @empty, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x1, 0x8, 0x2}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}]}, {0x32, 0x6, "975a7f57cea5277d65156a4c9dac9553a6da10a25a7008a3856e01220c970422570b933e0c717528ae0b827494eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x9}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r13, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r11, &(0x7f0000000040)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 1.601409436s ago: executing program 6 (id=5213): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.361701407s ago: executing program 4 (id=5214): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400000000fbdbdf25000000008d00a71cb9629c86", @ANYRES32=r1, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c00028005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32, @ANYRES16=r5, @ANYBLOB="c60d8e00832956998a92fbf452d1cfe8f62197f04b10dd1f3bf2e3d3579c80f0dd08407724454137bc652d16804b20ae1b63be59bb484a6f22f562b87e5635a735d6ef6b10b2ecd02cc9131052b32f0d3d317b2aca3eabf524043c3f9f5c922d85fbdc125bb5d3be5ab90ccb1070dad11c76fb46cf8cad92115bf61cc8ad1b94a4824c3125c4699339244b844ea378b8ffef8dd691fdbb5ba4dbf206d68405a941bb6a78e9ad10fe256b66e2a525", @ANYRES16=r5, @ANYRESHEX=r2], 0x44}}, 0x884) 1.359790425s ago: executing program 2 (id=5215): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xaa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x1, 0x25, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x576, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x0, 0x8, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000ff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) writev(r2, &(0x7f0000001340)=[{&(0x7f0000000240)="edabc9761eeb7fbbbe436182f40092899e9895f4c74ad3508412c999ebea78e9b5df2606934976fb5838a7c3948b24c8acd34966eca591892b0b4356ad08878895106b9af9d362da725e05d97a0c35a9e92d0e5bca37ab23fe013230ca78571012ce62ab5aeeeb93c96144776a478d8e2e3a5422a4c32333aed76311898cfd43b1a9a8bfc9ac3be8cdf75454c4a4b881757e09582863c583d6ca375d2c70e4b42b223c644b7b0ee0ffcbd580c6adb938769dc0b8d65b4c45dc5f480aded55ac7c8f892c9d87c4d860220609fc5072dd03fa7c9c953ef27cc2ed254e8406384127a86e43f44bd1a24c24446d64a", 0xed}, {&(0x7f00000000c0)="dac555bae4095e91e115c6aaea85ea23a718fba74220481fecb669a2cf8b9160a880192724dd05fe3c2a1b42cd528db4404168ee18e552087ae7f0cd626c7e52cf21770e", 0x44}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000180)="2432c915ab0d249af953cdd79049830522db04cca567a2d94f19f352909b07ec2567e45eca6af6ce2115fbf3d28270f78278c2538adb4eb1fe4c1bac248242ae", 0x40}, {&(0x7f00000001c0)="1b42cdfc13003019dbe983be612aea30d96fde01226d0719d855fb2f8fbb387947f4c52b6a116052e3d82b745d6d3d83b119f176ab4e440a", 0x38}], 0x5) 1.244275181s ago: executing program 5 (id=5216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x10040001) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) 1.237225225s ago: executing program 2 (id=5217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002c00010122bd7005fcffffff0a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x8000) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x2c4, r8, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffb9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd6}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x691}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb45fcb57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x812}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff4c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x2c4}}, 0x8000) 1.121830375s ago: executing program 4 (id=5218): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="74010000100013042000000000000000fe8800000000000000000000000700010a010100000000000000000000000000fffd00004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x174}}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r3, 0x0, 0x0, 0x0) (async) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="74010000100013042000000000000000fe8800000000000000000000000700010a010100000000000000000000000000fffd00004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x174}}, 0x804) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) (async) 1.119871774s ago: executing program 6 (id=5219): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYBLOB="15108bf4b0ded02261014f9a652f4926a5abbfdc045801a5af98702b016906ef66670721d1f4cbc8a8e443654f344bb2dc27371ff811790f99bbdf632e263b3b91092048985cb6fbec96020f16bf341d8d723c4037a25cedd807a18812932290dfcd10d14ddc32442de3c8e3b02721dcb34d7a3f79ba8fe3646099c049b0c9b770bdbde54a106057e48c31af3c1e8908826f39c432ec97a40e3c1f4e595fe488ebe7237cf8766bb85cb7bdc3df5ca03e7fc7453be1364fb65884a29f2c93c357cda6fefbe944edd440a524baf75c7022609d5430b175d6eecd7a8fb3bd4a234b66", @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) 1.108194617s ago: executing program 0 (id=5220): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1, 0x0, 0x20000000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newaddr={0x26, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r5}, [@IFA_LABEL={0x0, 0x3, 'macvtap0\x00'}, @IFA_CACHEINFO={0x0, 0x6, {0x2, 0x6, 0x3, 0x3}}]}, 0x28}}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x2}]}]}}, &(0x7f0000000540)=""/228, 0x36, 0xe4, 0x1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x140, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x110, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0xa1c8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.059265229s ago: executing program 5 (id=5221): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="90007f0a0a0002000180c2"], 0x30}, 0x1, 0x0, 0x0, 0x2bfdd7b83b402990}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) 918.118851ms ago: executing program 4 (id=5222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x3f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'macvlan1\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "0ee8a808941c4da72524f794b5edc67608616d924ca70d8235ff19fd43cfbbdc", "bfe519402c358b35d3605adfd271a54806ff5004e7186adc2cccd48265ef3a4b", "49b2f2e05ac6b34d7b93d55fbea1d36c5a838fdd6f7c536af96335affbcf4c27", "89e6f349fd75d21b00d5f3c79164081b1202fe3586b20c1750be1146bcf001ec", "64fde8cc0b51858d4bbed89b789057adf7894f4b1c8bbeb0e1850144997bf967", "ae010cd12d01e1bbf73405af", 0x4, 0x7f, 0x1, 0x8a, 0xaa}}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)='s', 0x1}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 917.594308ms ago: executing program 6 (id=5223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000ec6af4748dc0439b829b86477500966601f5d38eca0fb129d827c9bc9183637978d76fcffe134064dda92bd75f6b712e87f9d9720e6b18a1b6508b7fb3c24e6449be0d0466e62f83ff48cee61069925d540c772d4978afb25b735afcec9dccf083c2faf05d8b939e4622e57697340618abd4f3dce7015a935a8104504944d22181d1feaec9f598c2ebadf135073874a834277f13dce2f1ffffffffffff7462d090f9fc47fa735cca46b18a8e6a74d89753ac87c5a1eeec31fe9ca13749ea4d3b97232dbea02711862d8273e7c6ae7988", @ANYRES16=r1, @ANYBLOB="050129bd7000fddbdf255500000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20004080) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000001fc0)={'dvmrp0\x00', @ifru_ivalue=0xffff}) close(r0) 877.237961ms ago: executing program 0 (id=5224): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) r4 = socket(0x1d, 0x2, 0x6) (rerun: 32) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (rerun: 32) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 850.43229ms ago: executing program 2 (id=5225): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r4, 0x10, r5}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 737.316949ms ago: executing program 4 (id=5226): syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x5, "111fad"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x0) 658.70434ms ago: executing program 2 (id=5227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r3, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)=0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newlink={0xec, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0xc4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xb4, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0xd}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xeb, 0xae1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xce2b}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x14, 0x15}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2764f162}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x67}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xa2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xba8, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff6f, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r8}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 610.471472ms ago: executing program 5 (id=5228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a50d6d81803c506bbcf7dde984e379be16f35fff3e59d02738763d4e3e9b942e98", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff07000070000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a50d6d81803c506bbcf7dde984e379be16f35fff3e59d02738763d4e3e9b942e98", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff07000070000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) 517.595296ms ago: executing program 4 (id=5229): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r2, 0x0, 0x53, 0x0, &(0x7f0000002e40)) socket$isdn(0x22, 0x3, 0x21) 431.417533ms ago: executing program 2 (id=5230): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1c00000, 0x2aa3, 0xfffffffffffffff8, 0x6}, {0x0, 0x400, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x2, 0x1}}, 0xb8}}, 0x0) 418.027492ms ago: executing program 6 (id=5231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 417.563266ms ago: executing program 5 (id=5232): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000640)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="000000ce0f"], 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000000000080003400500000105000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x16) 325.707824ms ago: executing program 4 (id=5233): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0xffffff88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) 266.853307ms ago: executing program 6 (id=5234): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x40, {{0x2, 0x4e22, @loopback}}, 0x0, 0x2, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @multicast1}}]}, 0x190) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x493c}]}, 0x44}, 0x1, 0x0, 0x0, 0x100c1}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x644b, @local, 0x9}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0x9}, @in6={0xa, 0x4e24, 0x100, @mcast1, 0x6}, @in6={0xa, 0x4e21, 0xfb4, @empty, 0x3}], 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) clock_gettime(0x0, &(0x7f0000003ec0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003d00)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f00000008c0)=""/12, 0xc}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/132, 0x84}, {&(0x7f00000019c0)=""/21, 0x15}], 0x9, &(0x7f0000001ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001b40)=""/213, 0xd5}, {&(0x7f0000001c40)=""/146, 0x92}], 0x2, &(0x7f0000001d40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000002280)=[{&(0x7f0000001e00)=""/28, 0x1c}, {&(0x7f0000001e40)=""/220, 0xdc}, {&(0x7f0000001f40)=""/69, 0x45}, {&(0x7f0000001fc0)=""/206, 0xce}, {&(0x7f00000020c0)=""/103, 0x67}, {&(0x7f0000002140)=""/147, 0x93}, {&(0x7f0000002200)=""/91, 0x5b}], 0x7, &(0x7f0000002300)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002440)=""/73, 0x49}], 0x1}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002580)=""/20, 0x14}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002680)=""/5, 0x5}, {&(0x7f00000026c0)=""/178, 0xb2}, {&(0x7f0000002780)=""/215, 0xd7}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/11, 0xb}, {&(0x7f00000038c0)=""/185, 0xb9}, {&(0x7f0000003980)=""/55, 0x37}, {&(0x7f00000039c0)=""/95, 0x5f}], 0x8}}, {{&(0x7f0000003ac0)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003b40)=""/219, 0xdb}, {&(0x7f0000003c40)=""/56, 0x38}], 0x2, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x7, 0x40000021, &(0x7f0000003f00)={r5, r6+10000000}) clock_gettime(0x4, &(0x7f0000003f40)) clock_gettime(0x6, &(0x7f0000003f80)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r13, &(0x7f00000040c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004080)={&(0x7f0000004000)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x44000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004100)) sendto$inet6(r14, &(0x7f0000004140)="253b3d02586ff85d0862d76d0ad1430e2aa3e743329fe8520eaf0a98716b0dfdb83f507dcf7a6d2b876fc0e0fc8520f7c383ed2fb92e8cb1f1f1d5471fa8201222d298df3d0fb61792e1b1a9eb4179ffab94595f7bf31aa09115f79fa12ab1451cbb8ccc8c0f440c9bc955035c1a8d16263f911a84dcd0ce2ba6000cb30a6113f06e2bd421bc1b366ad78aff4906afb97e6df629caac9b7acf88d979b747b0020d2a438bb5784e9bbed105c1b641553106994515e444feba462cf47eda066ebedc3629a600c17009969e4f41b66e2ea472ebcdbd039891af66bbaaf1116c2812d6a09bff65ba84f0fc1fda898cf83341b94256bb733076c5ab4c9fd67f979d7af9d0016efde8d6e8dc2e3cd82517ff4529721bcc3b4df8691724668454eec1506434495d0eb79cd068c2f4e89129f03a746f42ce53857bffe641669476c41e383ae7be0ade440adeb436b24116bb07880a0e66ba3c98fde55b6127a9be65a11f6411adbca4642962e96a63bc653c0f0ea630643c7c6aa7181d83cf81b90f16e5edf3ec01a5c9e7f430e4f2a4433913c0fbc4b31404b582191246c7c2360c6499c7d600534a55b19b0934062ea639e076141aab63197ec7fd8f757b5589a42b189d61523962d97fb5005a96ce71c00480970eaedf91a1bf841e279995a487611b4c779c238885c76018ad7f3211d737e3808334ab154e5780f25dd3bf0622121e24035e36fb5a9af47f82b06f7613f2731b28f62f9c600941e4221b02acf638f43eafe28c68054e2ca9c661a9d85360fef0aeaab427071f565ecca629db922f5e74134d8d8a6e887bb1a58f81c41189cfdfe64943f56e3937623f3bbe5bebff2cc44810be2a34f5064833cf317a0173cbc24c54e05b8cb73711f403d5277239c84df7ae34b7ea952f88dd63cb06d906da68db22a52f327ad9e5062c114c644c369393a4f024bacd14fac4efb304b00b102d21357b4764f543b101d3a759587ffc31a0e638735e8b62c7e578d86f17ba52582e7bd71633a7ab5c01674ad9d2d4f5eec2e2cf9badd8295ca827e39b5340df8843a067d0230096e8f227367ac2da440ec30fea2363ea1552f71f8a005b5319b86a18437af914e02174008b75e4d1cfa944cff6f00d699fe03464d171db9baae00c6ce525fab4b5e853b873150165369e8cad0f6facf81b76385532210ed4e9a0cacfc1bd003433c7517c0e19628b829fe154462bcb5616669f1761d55b31299fdf144c0b229d0d2bafb823203b52d7000caa6398f85d1ffa06dc94ff18adae388fc601b933ea7c71ee71d990241241c126e501e93a102f0f974743cd54ed5745f94ee08922a02876216dad18a5cf7021dbddd9e070c7deae14bd39e46867262d96dd63a31a77a8e6966632e786fda746442f21a0fe28d88f4ea5ab83ed93cfb9a1d7e7841ec7eb70246b5def00ec08b58996ebbc82bf09caef20ce705a38ee5eba272869ea617a8bcd4da82e2c73f07a0aa47b1cfaaf153bb842714c796569dd57236198b09287c77ac90959d3f6e7217c2ff46bed5acc636786c94a4ce4e6bad338c35ec72deb794af85b55342cf9ecff01ca1b57f4b3b577c0f3220bd5a6ab9510f1a7350d3b3981a2c4570d506fd9816b7d51594f47d38d58907780394285aac1d26bb74fbceba12fb7272e7621c1851d507041ae9c22007036ea19f4f1270a69db6f2371736e4b56a32fcc80b19f56b778157f28e95c4553e7af8c7192bd76bb386697a8d9d2b1e9e5ac1d31b51ddbca954e3849ff8649626c0bee61658369e95f531bd70ddebc60f10fd02326635d92fba25132c1af60d76f0dfb101a29ea04dd50b1c5700a9e977926ef56698e45f29a87f44d285f04a6bdc0e87fcb1ff6e2baaec4a50b17a2021c44216e532bbf26bf0f71daee30ee5d645c99b27f2bc1e400186b8443be8a9e008b2491f3aac9bd5c2649dd7fe298d4f9b7a84de56305427cc430381627b60335d8f4db7feb7a8c00ff11d4ee6f9e53149ff2b7307c45679177050f379a8c006e91ddb7d8cf33ba317e64d3c5f440d351c6fc1817ec9047da50a47575ed9e0f8998769c93d37c5195a7c63ad71386ac2bff60f62090b4a2c39ab38c5499146973230163719e67da5431c3b6a3dfaf46e8fd59cb6a45e3dd84c838b5baeef723f2911d2f238c696ad39a644ae7a525ff2d46fc276920b13e1b1d437aa8e31c0df015dd6b32f507c4e54d17907384c8d77be28e1583ff6ca995b4fe9d33bec5368d43bd90c50f4f1783b9d69c3559bc4d8609d8f028f502a7abded65c4a129b4c4d6549a26808c1aca082d7744f33df580f5ac313f0add1f2264687c3694d304103262a99c8ef08805e76734673ce6a2850af3d5db8d60fdc25b191989c6839a7ace795dad8adab3ad27ed2d2729f21554aba76c371ab07f619f8ab4f4c10ed9c2986f2f50516ed5b633145582bedad9231956e1d4729e36df9cab4017459b64a04394fd0cfa2fc32f41deafa60e1f1a4e1f45d44e91b6039450b8080a2440f666d17747a8def62344ec677d4d7bb5f2e0d0c850f562ef644daf70cd8b832fcc92ef9c7aec6c0d72a539b462cd6ee3604bd7c866f29a8b1402a7cf6f063246eae83981443335fca01f8cefefd237d2031427ca523132ef9ae6b9e91e47af1b9ae5d562dfe548687fe49fd10970babea0b59487564cb520d9efc5247477fedcb597ffeb12da236a06c791b94b0226df3ed01eba5f6b8bed2c32f231c7e5d15d1866c711e908878fdcfeb968b80c88bc69e03469a14059a91ac523d021691fc3d21e06f4c6a6d3b69631d62d62b32e5e5e753d1d3d8590a59691f93695b80e1f1e36a2570ed08c2b5e36d0a9fa27012adcaeaf7f07f4c15098eaafa2c2195ece15f36bfab35131dd691b8a9df4675e218612c6a2f8c671e373c85f33bedc176cae8c684a819e2d3808ceba032e3eb3fde27c88ef0e73e7b629bc506279ac5ea58aa27bfe0f70e90820571ee3399d0126a56acdc647e88173d4eca3084b9ec1aa013c35fabc8af7d99cd48d0e8788aa0f0e6f45a7e971f06c4a31c8c77b97b27b9da2037b4a759d217f2ec14e3bbcc48c5463b0d14352d0ee0352177b8c86ee8a48031bf7c6a0607d6557c05bf51d81a635790446246858b1fa9adc1f2d69264d713034de8021dc747322e2ab2514a70554c7ca4833c173f2d90aaa5263f786226e80d7e6b9cc8628bb8e092dadd2aeb094193a78229c4179edb95ffa33c0baab95ab280d2c92df84fdc0c7ccc9ec0b6422c1aad821de11b14ef8a64f92b56627f41e71f6034a255799a6eca4c67da6f08fb7e35a1ef42c54079579fa1a63da289e360175ec08a3bad57b8af00887bb78f3a9e8503ca136ec9c811f16ed5dddf78d86d2157f16eea4b8b1442055c744b49ae1f486f02f6a6c173c454a8a1aa86691ee0bb084557f631173e62b94ea8b22c7656a6a6dd500a12416ee20447e03af748df4f504895f710d8041f75db458f1ae6fdd6e29099ffb642f40eea3a4291c8c0aebe43b6cd0d8969a6be59fd817d6f315c78b1b4552a6544847672323f15cad44b2ed12573b7aba7ac3f5549ad6b5027d4b274245a9a25badbfc1137f2fb7276b2b1370ba1c2e78a71207f6cc7d148bda04d95d864bea4a21a0f935e9bfed8239c6717f0584a7f3251618f2b103b49d313bbf7ba3ffcbf992ed826cd48cc537321ef22a9b1f8a9ae84f74212b8ea6c74da5197abd594c95751e4d095755d17c6f949bb17e7e9ff8272f037e3b8f640a5439cadbf10a527d07e502fc6d33e340f32c86151d57733ad13f63894e089ae32add1a347c0ba91f61e66fd7f39015c5435369eb46ed310842fa27bd4594b90a32544cdd95fd246db0889d861f6e6a3dd45a89f920d32cdff12dd8675da3278bd1b2d5562bd91b0a5f61d77d5253a57906811200b876c1c515868323e7b045c05e16063ff3453edcc1f6407c43151ec81e7501d7a2b31f0a2c09b4de951555303bb14f8bd96c16b944c63f712d09ee54b0b8950b29fabf1d3cccc61ddcff04b54c71fa32f3086db29d777a0078d362456517e57bf1ccab49f2b08b551b8520de61aa418e7c150d33ead27334dbc72441ff4ac1ac5a32570d6d41d83914cb78a32747b669c32fcd88ae66b1b8e45383728c4a3d15014893f959bcab70a36db3ab244d3b8a41716f08a4db59d76376a6c0f4a0b912d836d114aa51eee7936c83bfbd93800b222379c21759e7859b4d223fec57d363bc4aa5d5b1d0de54dac3f95c326b5ab9639cea59154bb7f31fc445159792372ac59eea9ef07af6c208751b1ad370eef70169aae8b345daf1279724d3b5532a8f8f6442bf2ec94404d544b37e958c9e0b77ae273e4b0aad5907b1a1602c1fecbc5ca1f2a1152a561798f40cf42c3bd3ea5dc04f0754a3fffa0f299c49682994517e7db2d87682dc04e72dd5ef809c6a2b25941848f9c3c3fa84c2bc8bf9851afb9aaa8da455f2c93fa1f0530e56c89847f8347c78be5677b1e8f24da26998c6cbfe7b12e2aeb75962cc98f0b4be3bb5d104cd4226e6ec19700d6894e5ca2677d699dc0c474818fc85660a4de4760e2b767c24cc5622e76b464d64e8f34459450e89b22ba0e11ad813050f578669b723c46e1eb7adcab4cd4b88ce04fc78b8807800d6c7cb9888c5060bbaa77fe2a1c6b3266ebe4c755042fa521e4a6e6e3d6c35d44261ede2db032095d0a167380230b07ca3d1f347bc4f63734f8297d92f85ceee947e185c2371fafc3f4d7312f166188577ac4212fca7b87b3e6d13753e3c8c612f95648de7c7d7aa44e9ea6f7e698796ad4a74ceb70f2f29f5f5f45482740cee34ae4442aea2691fea02e84d4900e457b153d26a8563f639804503b6fbc3b242a741b945746444b0eda78a2463dbb9c45c2db06a28c7c2463ede65dc93b7b7adb01744e7623125052e36f6900ba4f3eba71ff729cb4dd85c8a5c3d2f37ba75a8c32239980b207011b608003afac3182e474aca0792d3bc769871d3c0a6cc351d0218115a763570b94c693949b432c1e97fef6c96f250387ca27bac10abc4aeea077358ae6447e666e5cdf7f1fe488e695e048947ca509e6dc8108dbf0b65fd0b228983d416012a377c9bb4f323d8e95bd8fd9354141681bf4154d5155a1c2ba770069ccd19cea02d9659408464354df60c1848aa58e8ff7edf28af4d99fde8fbd95c693e12cbe463ed748b80f29debbb1562f94ef007aa1ab14a2ef82a056d865a5278fcc0acfcea4684614f8ae6218291aea65d357e737e4d371fb3c8b54a2787249443463daef02c2e6f0236cedd5bb5f90108bb6cb5f7b1ba307bbaf74f9e794b65e9e2faffc8af88b305c78fa2ba154bd0900fcd09725f5871a8f1c6b1834139e9715105a055674d201f8677d1025f28fefd73f642d94e32235fc18adc9df5c737858387b632ba96e1aa3c1230c3b65da64019ba854b4fd9024146fcc24084fee5a41fdd659dc54e8a44e2dfd40bb2d04448916199e84c79047d739bd9c01394962c291a123c66b13786dc1d429a55bc7bfd100410ce67f4b78de0aa198057f9fb23bd897ed0103650a17e5a7a9ccddc94258d764f23e6755dab06c17c80292dcf1cc0eaf3e958346d205e428ae532ac65759479283b575a09af8c17475117f63c9e251d18b86827a68e1d404be761fbf35b526557a4f62082e17633bd01fa0a4bbfab147c9ffa99f7898c9f5ef0f24bb5eb4dd934700da34faed989c25a0bde9154f4547df719e98cd584bb9b1db101940239235bdf33dd19c3c73e15811", 0x1000, 0x81, &(0x7f0000005140)={0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) pselect6(0x40, &(0x7f0000005180)={0x3, 0x8, 0xff, 0x4, 0xfffffffffffffe4f, 0xfffffffffffffffc, 0x10001, 0x6}, &(0x7f00000051c0)={0xcfa, 0x8, 0x14418a55, 0x10000, 0xfffffffffffffff7, 0xf, 0x1}, &(0x7f0000005200)={0x8, 0x97a3, 0x4, 0x8000000000000001, 0x40, 0x7, 0x4, 0x5}, &(0x7f0000005240)={0x77359400}, &(0x7f00000052c0)={&(0x7f0000005280)={[0x800]}, 0x8}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005340), r8) sendmsg$IPVS_CMD_SET_DEST(r15, &(0x7f0000005500)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x40800100}, 0xc, &(0x7f00000054c0)={&(0x7f0000005380)={0x118, r16, 0x204, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x6}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x14}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8880}, 0x20000050) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000005540)={r11}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r17, &(0x7f0000005640)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005600)={&(0x7f00000055c0)={0x20, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x80}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000005740)={&(0x7f0000005680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005700)={&(0x7f00000056c0)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ae4e994}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000c4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r12, 0x84, 0x73, &(0x7f0000005780)={0x0, 0x8, 0x10, 0x96c, 0xffffffffffffffe8}, &(0x7f00000057c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000005800)={r18, 0xe0, 0xfffc}, 0x8) r19 = socket$inet(0x2, 0x0, 0xfffffffe) ioctl$sock_SIOCINQ(r19, 0x541b, &(0x7f0000005840)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000005880)={r18, 0x200}, &(0x7f00000058c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000005900)={r20, @in={{0x2, 0x4e24, @loopback}}, 0x40000000, 0x4, 0x9, 0x7fff, 0x1, 0xdd, 0x4e}, 0x9c) 183.453125ms ago: executing program 2 (id=5235): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1003}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0xba01}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000210000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x0]}, {}, {0x8, 0x88be, 0x2}}}}}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000000)=',&+-&\x00', 0x6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x48081}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 90.365247ms ago: executing program 5 (id=5236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 81.190421ms ago: executing program 6 (id=5237): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000)=[{r0, 0x209}], 0x1, 0x8000) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'pimreg1\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39, 0x1, [0x5]}}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x0, 0x10, 0x9, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) (async) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r11, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) 0s ago: executing program 5 (id=5238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x98, [{0x5, 0x3}]}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e]}}, 0x0, 0x37, 0x0, 0x8, 0xbf81}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x98, [{0x5, 0x3}]}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e]}}, 0x0, 0x37, 0x0, 0x8, 0xbf81}, 0x20) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) kernel console output (not intermixed with test programs): wmediumd released netlink socket, switching to perfect channel medium [ 394.107350][T22183] netlink: 'syz.1.3787': attribute type 1 has an invalid length. [ 394.133683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.160169][T22183] bond5: entered promiscuous mode [ 394.177877][T22183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.210910][T22183] bond5: (slave bridge5): making interface the new active one [ 394.219016][T22183] bridge5: entered promiscuous mode [ 394.225691][T22183] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 394.270716][T22190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3788'. [ 394.305248][T22194] openvswitch: netlink: Flow actions attr not present in new flow. [ 394.325590][T22190] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3788'. [ 394.454682][ T2991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.521337][T22207] tipc: Enabling of bearer rejected, already enabled [ 394.560482][T22204] syzkaller0: entered allmulticast mode [ 394.576038][T22204] syzkaller0 (unregistering): left allmulticast mode [ 394.666411][T22216] tipc: Enabling of bearer rejected, already enabled [ 394.941307][T22232] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 395.173720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.239521][T22244] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3802'. [ 395.279012][T22254] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 395.454753][T22259] netlink: 'syz.5.3806': attribute type 10 has an invalid length. [ 395.533497][T22259] batman_adv: batadv0: Adding interface: netdevsim0 [ 395.564203][T22259] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.597998][T22259] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 395.611563][T22269] netlink: 'syz.2.3810': attribute type 1 has an invalid length. [ 395.619687][T22269] netlink: 'syz.2.3810': attribute type 4 has an invalid length. [ 395.663815][T22269] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.3810'. [ 395.775460][T22284] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.791973][T22283] netlink: 'syz.0.3813': attribute type 3 has an invalid length. [ 395.994377][T22299] tipc: Enabling of bearer rejected, already enabled [ 396.019300][ T30] audit: type=1800 audit(1770096673.083:5): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3818" name="memory.events" dev="tmpfs" ino=714 res=0 errno=0 [ 396.025704][T22302] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.213916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.328950][T22322] __nla_validate_parse: 2 callbacks suppressed [ 396.328969][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3823'. [ 396.385032][T22322] openvswitch: netlink: Duplicate key (type 32). [ 396.402364][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3826'. [ 396.423216][T22315] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 396.634658][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3830'. [ 396.688196][T22344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3829'. [ 396.694336][T22342] bridge0: entered promiscuous mode [ 396.712814][T22342] macsec1: entered promiscuous mode [ 396.723403][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3829'. [ 396.734865][T22342] macsec1: entered allmulticast mode [ 396.750762][T22342] bridge0: entered allmulticast mode [ 396.778107][T22342] bridge0: port 1(macsec1) entered blocking state [ 396.808490][T22342] bridge0: port 1(macsec1) entered disabled state [ 396.846533][T22342] bridge0: left allmulticast mode [ 396.851998][T22342] bridge0: left promiscuous mode [ 396.913638][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 396.921698][ C0] lec:lec_tx_timeout: lec0 [ 396.928293][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 396.934830][T22353] bond3: option resend_igmp: invalid value (32767) [ 396.941664][T22353] bond3: option resend_igmp: allowed values 0 - 255 [ 396.951212][T22353] bond3 (unregistering): Released all slaves [ 396.994862][T22359] tipc: Enabling of bearer rejected, already enabled [ 397.235982][T22372] validate_nla: 4 callbacks suppressed [ 397.235998][T22372] netlink: 'syz.0.3838': attribute type 2 has an invalid length. [ 397.253656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.381390][T22387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.468274][T22389] IPVS: set_ctl: invalid protocol: 50 172.20.20.57:20002 [ 397.555603][ T983] IPVS: starting estimator thread 0... [ 397.566196][T22396] netlink: 'syz.1.3844': attribute type 3 has an invalid length. [ 397.614086][T22396] IPVS: ip_vs_edit_dest(): server weight less than zero [ 397.640839][T22396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3844'. [ 397.731956][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3844'. [ 397.774315][T22398] IPVS: using max 31 ests per chain, 74400 per kthread [ 397.881877][T22413] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 397.905417][T22413] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 397.914018][T22413] gretap1: entered promiscuous mode [ 397.921448][T22413] gretap1: entered allmulticast mode [ 397.946850][T22416] tipc: Enabling of bearer rejected, already enabled [ 398.055165][T22426] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3852'. [ 398.152917][T22432] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3853'. [ 398.200966][T22439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'. [ 398.222588][T22439] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 398.322297][T22439] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 398.339698][T22439] gretap2: entered promiscuous mode [ 398.353830][T22439] gretap2: entered allmulticast mode [ 398.717760][T22466] gretap0: entered promiscuous mode [ 398.749446][T22466] gretap0: left promiscuous mode [ 398.837935][T22466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.847454][T22466] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.147984][T22492] syzkaller0: entered promiscuous mode [ 399.154711][T22492] syzkaller0: entered allmulticast mode [ 399.180399][ T6077] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.217625][ T6077] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.247908][ T6077] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.350208][ T6077] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.575861][ T6078] net_ratelimit: 5 callbacks suppressed [ 399.575879][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.829711][T22609] Unknown options in mask b7f2 [ 400.873362][T22615] netlink: 'syz.0.3898': attribute type 142 has an invalid length. [ 401.018849][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.129052][T22629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.137976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.173996][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.188901][T22634] netlink: 'syz.0.3903': attribute type 32 has an invalid length. [ 401.266768][T22634] bond3: Setting coupled_control to off (0) [ 401.277691][T22640] netlink: 'syz.1.3905': attribute type 1 has an invalid length. [ 401.362882][T22640] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.390595][T22641] __nla_validate_parse: 13 callbacks suppressed [ 401.390612][T22641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3905'. [ 401.529224][T22652] FAULT_INJECTION: forcing a failure. [ 401.529224][T22652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.554016][T22654] netlink: 'syz.2.3909': attribute type 1 has an invalid length. [ 401.583913][T22652] CPU: 0 UID: 0 PID: 22652 Comm: syz.5.3908 Not tainted syzkaller #0 PREEMPT(full) [ 401.583960][T22652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 401.583970][T22652] Call Trace: [ 401.583978][T22652] [ 401.583985][T22652] dump_stack_lvl+0xe8/0x150 [ 401.584010][T22652] should_fail_ex+0x412/0x560 [ 401.584033][T22652] _copy_to_user+0x31/0xb0 [ 401.584060][T22652] bpf_mprog_query+0x236/0x7b0 [ 401.584079][T22652] ? get_pid_task+0x20/0x1f0 [ 401.584093][T22652] ? tcx_prog_query+0x86/0x140 [ 401.584116][T22652] ? __pfx___mutex_lock+0x10/0x10 [ 401.584136][T22652] ? __pfx_bpf_mprog_query+0x10/0x10 [ 401.584167][T22652] ? lockdep_rtnl_is_held+0x26/0x40 [ 401.584192][T22652] tcx_prog_query+0xdd/0x140 [ 401.584215][T22652] __sys_bpf+0x853/0x920 [ 401.584235][T22652] ? __pfx___sys_bpf+0x10/0x10 [ 401.584269][T22652] ? ksys_write+0x242/0x270 [ 401.584292][T22652] ? __pfx_ksys_write+0x10/0x10 [ 401.584321][T22652] __x64_sys_bpf+0x7c/0x90 [ 401.584343][T22652] do_syscall_64+0xe2/0xf80 [ 401.584359][T22652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.584383][T22652] ? trace_irq_disable+0x37/0x100 [ 401.584397][T22652] ? clear_bhb_loop+0x60/0xb0 [ 401.584416][T22652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.584431][T22652] RIP: 0033:0x7f27e9b9aeb9 [ 401.584447][T22652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.584459][T22652] RSP: 002b:00007f27e7df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.584478][T22652] RAX: ffffffffffffffda RBX: 00007f27e9e15fa0 RCX: 00007f27e9b9aeb9 [ 401.584490][T22652] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000010 [ 401.584501][T22652] RBP: 00007f27e7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.584512][T22652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.584521][T22652] R13: 00007f27e9e16038 R14: 00007f27e9e15fa0 R15: 00007ffdbe4d0298 [ 401.584547][T22652] [ 401.628375][T22663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.801292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.864043][T22657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.877474][T22657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.890969][T22657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.943650][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 401.951681][ C0] lec:lec_tx_timeout: lec0 [ 401.956316][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.927924][T22726] netlink: 'syz.4.3923': attribute type 15 has an invalid length. [ 402.959774][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3923'. [ 402.997715][T22726] netlink: 'syz.4.3923': attribute type 15 has an invalid length. [ 403.007007][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3923'. [ 403.093539][T22734] FAULT_INJECTION: forcing a failure. [ 403.093539][T22734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.123721][T22734] CPU: 1 UID: 0 PID: 22734 Comm: syz.2.3926 Not tainted syzkaller #0 PREEMPT(full) [ 403.123747][T22734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 403.123757][T22734] Call Trace: [ 403.123763][T22734] [ 403.123771][T22734] dump_stack_lvl+0xe8/0x150 [ 403.123798][T22734] should_fail_ex+0x412/0x560 [ 403.123822][T22734] _copy_to_user+0x31/0xb0 [ 403.123847][T22734] bpf_mprog_query+0x26a/0x7b0 [ 403.123864][T22734] ? get_pid_task+0x20/0x1f0 [ 403.123880][T22734] ? tcx_prog_query+0x86/0x140 [ 403.123905][T22734] ? __pfx___mutex_lock+0x10/0x10 [ 403.123928][T22734] ? __pfx_bpf_mprog_query+0x10/0x10 [ 403.123960][T22734] ? lockdep_rtnl_is_held+0x26/0x40 [ 403.123985][T22734] tcx_prog_query+0xdd/0x140 [ 403.124007][T22734] __sys_bpf+0x853/0x920 [ 403.124025][T22734] ? __pfx___sys_bpf+0x10/0x10 [ 403.124054][T22734] ? ksys_write+0x242/0x270 [ 403.124077][T22734] ? __pfx_ksys_write+0x10/0x10 [ 403.124104][T22734] __x64_sys_bpf+0x7c/0x90 [ 403.124126][T22734] do_syscall_64+0xe2/0xf80 [ 403.124144][T22734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.124159][T22734] ? trace_irq_disable+0x37/0x100 [ 403.124175][T22734] ? clear_bhb_loop+0x60/0xb0 [ 403.124195][T22734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.124212][T22734] RIP: 0033:0x7f9a3a19aeb9 [ 403.124228][T22734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.124249][T22734] RSP: 002b:00007f9a3b103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.124266][T22734] RAX: ffffffffffffffda RBX: 00007f9a3a415fa0 RCX: 00007f9a3a19aeb9 [ 403.124278][T22734] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000010 [ 403.124288][T22734] RBP: 00007f9a3b103090 R08: 0000000000000000 R09: 0000000000000000 [ 403.124298][T22734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.124308][T22734] R13: 00007f9a3a416038 R14: 00007f9a3a415fa0 R15: 00007fff6c62c698 [ 403.124338][T22734] [ 403.331153][T22743] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3928'. [ 403.419045][T22749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3929'. [ 403.588118][T22754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3931'. [ 403.895043][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 403.900017][T22777] tipc: New replicast peer: 255.255.255.255 [ 403.927369][T22777] tipc: Enabled bearer , priority 10 [ 403.952263][T22781] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3939'. [ 404.073968][T22784] FAULT_INJECTION: forcing a failure. [ 404.073968][T22784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.091552][T22784] CPU: 0 UID: 0 PID: 22784 Comm: syz.0.3941 Not tainted syzkaller #0 PREEMPT(full) [ 404.091577][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 404.091587][T22784] Call Trace: [ 404.091594][T22784] [ 404.091602][T22784] dump_stack_lvl+0xe8/0x150 [ 404.091627][T22784] should_fail_ex+0x412/0x560 [ 404.091651][T22784] _copy_to_user+0x31/0xb0 [ 404.091677][T22784] bpf_mprog_query+0x29e/0x7b0 [ 404.091697][T22784] ? tcx_prog_query+0x86/0x140 [ 404.091723][T22784] ? __pfx___mutex_lock+0x10/0x10 [ 404.091741][T22784] ? __pfx_bpf_mprog_query+0x10/0x10 [ 404.091771][T22784] ? lockdep_rtnl_is_held+0x26/0x40 [ 404.091797][T22784] tcx_prog_query+0xdd/0x140 [ 404.091821][T22784] __sys_bpf+0x853/0x920 [ 404.091840][T22784] ? __pfx___sys_bpf+0x10/0x10 [ 404.091872][T22784] ? ksys_write+0x242/0x270 [ 404.091894][T22784] ? __pfx_ksys_write+0x10/0x10 [ 404.091922][T22784] __x64_sys_bpf+0x7c/0x90 [ 404.091945][T22784] do_syscall_64+0xe2/0xf80 [ 404.091961][T22784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.091978][T22784] ? trace_irq_disable+0x37/0x100 [ 404.091993][T22784] ? clear_bhb_loop+0x60/0xb0 [ 404.092014][T22784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.092031][T22784] RIP: 0033:0x7f69fc59aeb9 [ 404.092047][T22784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.092062][T22784] RSP: 002b:00007f69fd3b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.092082][T22784] RAX: ffffffffffffffda RBX: 00007f69fc815fa0 RCX: 00007f69fc59aeb9 [ 404.092095][T22784] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000010 [ 404.092106][T22784] RBP: 00007f69fd3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 404.092116][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.092125][T22784] R13: 00007f69fc816038 R14: 00007f69fc815fa0 R15: 00007fff4bcb5f88 [ 404.092156][T22784] [ 404.681466][T22811] net_ratelimit: 12 callbacks suppressed [ 404.681485][T22811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.695802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.144679][T22845] FAULT_INJECTION: forcing a failure. [ 405.144679][T22845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.158640][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3952'. [ 405.174399][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.183880][T22845] CPU: 0 UID: 0 PID: 22845 Comm: syz.4.3956 Not tainted syzkaller #0 PREEMPT(full) [ 405.183905][T22845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 405.183916][T22845] Call Trace: [ 405.183922][T22845] [ 405.183930][T22845] dump_stack_lvl+0xe8/0x150 [ 405.183955][T22845] should_fail_ex+0x412/0x560 [ 405.183980][T22845] _copy_to_user+0x31/0xb0 [ 405.184006][T22845] simple_read_from_buffer+0xe1/0x170 [ 405.184029][T22845] proc_fail_nth_read+0x1bb/0x230 [ 405.184055][T22845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.184080][T22845] ? rw_verify_area+0x2a6/0x4d0 [ 405.184101][T22845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.184124][T22845] vfs_read+0x20c/0xa70 [ 405.184143][T22845] ? fdget_pos+0x246/0x320 [ 405.184166][T22845] ? __pfx___mutex_lock+0x10/0x10 [ 405.184186][T22845] ? __pfx_vfs_read+0x10/0x10 [ 405.184209][T22845] ? __fget_files+0x2a/0x420 [ 405.184231][T22845] ? __fget_files+0x3a0/0x420 [ 405.184248][T22845] ? __fget_files+0x2a/0x420 [ 405.184274][T22845] ksys_read+0x150/0x270 [ 405.184305][T22845] ? __pfx_ksys_read+0x10/0x10 [ 405.184339][T22845] do_syscall_64+0xe2/0xf80 [ 405.184356][T22845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.184374][T22845] ? clear_bhb_loop+0x60/0xb0 [ 405.184394][T22845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.184411][T22845] RIP: 0033:0x7f59dc15b78e [ 405.184427][T22845] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.184442][T22845] RSP: 002b:00007f59dd006fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 405.184461][T22845] RAX: ffffffffffffffda RBX: 00007f59dd0076c0 RCX: 00007f59dc15b78e [ 405.184474][T22845] RDX: 000000000000000f RSI: 00007f59dd0070a0 RDI: 0000000000000007 [ 405.184485][T22845] RBP: 00007f59dd007090 R08: 0000000000000000 R09: 0000000000000000 [ 405.184496][T22845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.184506][T22845] R13: 00007f59dc416038 R14: 00007f59dc415fa0 R15: 00007ffc927c02b8 [ 405.184537][T22845] [ 405.400083][ T2991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.559897][T22857] tipc: Resetting bearer [ 405.575353][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.672723][T22869] IPv6: NLM_F_REPLACE set, but no existing node found! [ 405.674298][T22870] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 405.680406][T22869] netlink: 'syz.1.3963': attribute type 4 has an invalid length. [ 405.750535][T22869] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3963'. [ 405.806353][T22869] `: renamed from bond0 (while UP) [ 405.828874][T22876] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3965'. [ 406.024908][ T24] IPVS: starting estimator thread 0... [ 406.042418][T22884] netlink: 'syz.5.3967': attribute type 1 has an invalid length. [ 406.123823][T22898] IPVS: using max 28 ests per chain, 67200 per kthread [ 406.425101][T22911] netlink: 'syz.5.3974': attribute type 4 has an invalid length. [ 406.485527][T22922] netlink: 'syz.5.3974': attribute type 4 has an invalid length. [ 406.505297][T22920] netlink: 'syz.0.3976': attribute type 4 has an invalid length. [ 406.516488][T22925] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 406.554153][T22926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.562532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.592305][T22928] xt_bpf: check failed: parse error [ 406.600616][T22926] syzkaller1: entered promiscuous mode [ 406.617203][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.619230][T22926] syzkaller1: entered allmulticast mode [ 406.685916][T22933] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 3, id = 0 [ 406.686064][T22926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.728921][T22935] tipc: Enabled bearer , priority 0 [ 406.770400][T22938] netlink: 'syz.2.3982': attribute type 1 has an invalid length. [ 406.842187][T22935] syzkaller0: entered promiscuous mode [ 406.852102][T22935] syzkaller0: entered allmulticast mode [ 406.867073][T22935] tipc: Resetting bearer [ 406.939050][T22938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.955189][T22948] vlan2: entered promiscuous mode [ 406.961504][T22948] bond1: entered promiscuous mode [ 406.967004][T22948] vlan2: entered allmulticast mode [ 406.973306][T22948] bond1: entered allmulticast mode [ 406.980012][T22934] tipc: Resetting bearer [ 407.507244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.895692][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 407.903768][ C0] lec:lec_tx_timeout: lec0 [ 407.908667][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 408.682732][T22934] tipc: Disabling bearer [ 409.198069][T23020] __nla_validate_parse: 1 callbacks suppressed [ 409.198086][T23020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4001'. [ 409.309336][T23029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 409.362817][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4004'. [ 409.738601][ T5903] net_ratelimit: 6 callbacks suppressed [ 409.738620][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.818776][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.178884][T23049] Bluetooth: MGMT ver 1.23 [ 410.211716][T23049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'. [ 410.511565][T23072] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4011'. [ 410.599161][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4015'. [ 410.622963][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4013'. [ 410.646501][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4013'. [ 410.757567][T23099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4015'. [ 410.776666][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.094963][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.207132][T23119] syz_tun: entered allmulticast mode [ 411.237047][T23119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4026'. [ 411.254357][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.356089][T23119] syz_tun (unregistering): left allmulticast mode [ 411.455603][T23145] IPVS: length: 64 != 24 [ 411.814303][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.137331][T23127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.856291][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.923696][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 412.931727][ C0] lec:lec_tx_timeout: lec0 [ 412.936410][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 413.893975][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.298344][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.307912][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.934451][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.940923][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.954423][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.973805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.983803][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.138431][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.014083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.014101][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.345768][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.943691][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 417.951746][ C0] lec:lec_tx_timeout: lec0 [ 417.956536][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 418.054258][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.057429][ T6081] net_ratelimit: 5 callbacks suppressed [ 420.057446][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.133819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.134239][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.375392][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.694719][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.174179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.175047][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.337102][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.214792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.227208][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.893627][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 423.901665][ C0] lec:lec_tx_timeout: lec0 [ 423.908152][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.335166][ T9] net_ratelimit: 5 callbacks suppressed [ 425.335186][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.819162][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.379294][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.454797][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.465403][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.853718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.094134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.095234][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.104142][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.415923][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.923712][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 428.931742][ C0] lec:lec_tx_timeout: lec0 [ 428.936722][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 430.534553][ T9] net_ratelimit: 6 callbacks suppressed [ 430.534571][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.013675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.575134][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.733788][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 432.053873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.214625][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.222966][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.614501][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.854387][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.093676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.173891][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.943640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 433.951661][ C0] lec:lec_tx_timeout: lec0 [ 433.956290][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 435.735433][ T5903] net_ratelimit: 4 callbacks suppressed [ 435.735446][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.215525][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.778537][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.334133][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.345256][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.354923][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.814552][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.974946][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.373880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.855079][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.899153][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 439.904054][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.907225][ C0] lec:lec_tx_timeout: lec0 [ 439.913456][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.918469][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 441.014216][ T797] net_ratelimit: 5 callbacks suppressed [ 441.014233][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.493984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.815936][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.055913][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.533706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.094809][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.095865][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.111010][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.418737][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.583846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.933737][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 444.941756][ C0] lec:lec_tx_timeout: lec0 [ 444.946525][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.433185][ T6077] dvmrp0 (unregistering): left allmulticast mode [ 445.798990][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.811697][ T6077] bond0 (unregistering): (slave c@0): Releasing backup interface [ 445.821659][ T6077] bond0 (unregistering): (slave bond2): Releasing backup interface [ 445.831326][ T6077] bond0 (unregistering): Released all slaves [ 445.918167][ T6077] bond1 (unregistering): Released all slaves [ 446.006290][ T6077] bond2 (unregistering): Released all slaves [ 446.018045][ T6077] bond3 (unregistering): Released all slaves [ 446.030170][ T6077] bond4 (unregistering): Released all slaves [ 446.041997][ T6077] bond5 (unregistering): Released all slaves [ 446.138629][ T6077] bond6 (unregistering): (slave veth7): Releasing active interface [ 446.148015][ T6077] bond6 (unregistering): Released all slaves [ 446.160257][ T6077] bond7 (unregistering): Released all slaves [ 446.214199][ T5896] net_ratelimit: 5 callbacks suppressed [ 446.214217][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.310204][ T6077] 9: left promiscuous mode [ 446.360212][ T6077] tipc: Left network mode [ 446.382351][ T6077] IPVS: stopping master sync thread 12442 ... [ 446.389485][ T6077] IPVS: stopping backup sync thread 11373 ... [ 446.454630][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.810381][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.830227][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.843141][ T6077] batman_adv: batadv0: Interface deactivated: dummy0 [ 446.850009][ T6077] batman_adv: batadv0: Removing interface: dummy0 [ 446.871453][ T6077] veth1_macvtap: left promiscuous mode [ 446.879022][ T6077] veth0_macvtap: left promiscuous mode [ 447.026009][ T6077] pimreg (unregistering): left allmulticast mode [ 447.256246][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.276612][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 447.312054][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 447.507123][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.216665][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.294054][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.533724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.854156][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.142961][ T6077] IPVS: stop unused estimator thread 0... [ 449.334072][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.494666][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.773709][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 450.781751][ C0] lec:lec_tx_timeout: lec0 [ 450.786922][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 451.414523][ T43] net_ratelimit: 4 callbacks suppressed [ 451.414541][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.428502][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.653672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.215333][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 452.219414][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 452.455525][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.541462][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.693671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.496882][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.733901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.975327][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.537657][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.793636][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 455.801672][ C0] lec:lec_tx_timeout: lec0 [ 455.806872][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 456.613971][ T5903] net_ratelimit: 6 callbacks suppressed [ 456.613991][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.655247][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.454466][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.617702][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.694218][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.493764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.734513][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.749683][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.390590][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.533842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.813626][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 460.821678][ C0] lec:lec_tx_timeout: lec0 [ 460.827275][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 461.317022][T25353] netlink: 'syz.1.4039': attribute type 5 has an invalid length. [ 461.356241][T25359] netlink: 'syz.2.4043': attribute type 24 has an invalid length. [ 461.637757][T25382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4046'. [ 461.655223][ T6080] net_ratelimit: 3 callbacks suppressed [ 461.655238][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.658648][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.817557][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.882137][T25400] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4051'. [ 461.925814][T25402] netlink: 'syz.1.4052': attribute type 1 has an invalid length. [ 462.037663][T25403] bond0: invalid ARP target 0.0.0.0 specified for addition [ 462.045235][T25403] bond0: option arp_ip_target: invalid value (0) [ 462.050412][T25409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4055'. [ 462.105547][T25403] bond0 (unregistering): Released all slaves [ 462.384868][T25432] tipc: Enabling of bearer rejected, failed to enable media [ 462.566979][T25443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4064'. [ 462.613723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.793384][T25454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4066'. [ 462.799603][T25460] netlink: 'syz.2.4067': attribute type 10 has an invalid length. [ 462.820961][T25460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4067'. [ 462.835971][T25447] syzkaller1: entered promiscuous mode [ 462.841598][T25447] syzkaller1: entered allmulticast mode [ 462.859698][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.196619][T25486] netlink: 'syz.5.4072': attribute type 1 has an invalid length. [ 463.297984][T25491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.653710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.841442][T25529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4085'. [ 463.897660][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.250862][T25540] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 464.262759][T25540] bond3 (unregistering): Released all slaves [ 464.471754][T25561] netlink: 'syz.4.4093': attribute type 21 has an invalid length. [ 464.505461][T25561] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4093'. [ 464.528711][T25565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4094'. [ 464.561131][T25561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4093'. [ 464.572769][T25566] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 464.693962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.703082][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.972473][T25593] netlink: 'syz.4.4100': attribute type 1 has an invalid length. [ 465.145269][T25590] syzkaller0: entered promiscuous mode [ 465.156555][T25590] syzkaller0: entered allmulticast mode [ 465.834747][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 465.842768][ C0] lec:lec_tx_timeout: lec0 [ 466.597820][T25612] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.702567][T25618] __nla_validate_parse: 3 callbacks suppressed [ 466.702587][T25618] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4107'. [ 466.743142][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4107'. [ 466.774000][ C0] net_ratelimit: 6 callbacks suppressed [ 466.774016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.015666][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.418561][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.576636][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 467.606893][T25663] netlink: 'syz.4.4116': attribute type 4 has an invalid length. [ 467.712403][T25671] netlink: 'syz.2.4119': attribute type 33 has an invalid length. [ 467.734668][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.027831][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4121'. [ 468.054485][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.094048][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.653772][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 469.985356][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.134225][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.534470][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.573093][T25661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.618522][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.903097][ T797] IPVS: starting estimator thread 0... [ 470.962069][T25712] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4130'. [ 471.004250][T25708] IPVS: using max 35 ests per chain, 84000 per kthread [ 471.049922][T25717] netlink: 'syz.2.4131': attribute type 12 has an invalid length. [ 471.058031][T25717] netlink: 'syz.2.4131': attribute type 29 has an invalid length. [ 471.066868][T25717] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4131'. [ 471.076452][T25713] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.094197][T25720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4132'. [ 471.382445][T25731] bond3: Removing last arp target with arp_interval on [ 471.813356][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4138'. [ 471.831276][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4138'. [ 471.895957][ T6081] net_ratelimit: 6 callbacks suppressed [ 471.895974][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.053961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.224359][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.536181][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.656335][T25799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4144'. [ 472.688017][T25799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4144'. [ 473.041566][T25820] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 473.052264][T25820] bond3 (unregistering): Released all slaves [ 473.081519][T25823] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 473.092860][T25823] bond3 (unregistering): Released all slaves [ 473.099466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.121121][T25818] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.227307][T25832] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 473.254949][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.524630][T25845] IPv6: NLM_F_CREATE should be specified when creating new route [ 473.687644][T25860] : entered promiscuous mode [ 473.807575][T25866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4159'. [ 473.816830][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.853935][T25866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4159'. [ 473.862838][T25866] netlink: 'syz.5.4159': attribute type 14 has an invalid length. [ 473.868110][T25870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.879707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.885048][T25866] netlink: 'syz.5.4159': attribute type 13 has an invalid length. [ 474.124042][T25884] netlink: 'syz.5.4164': attribute type 3 has an invalid length. [ 474.133872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.143262][T25884] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4164'. [ 474.172948][T25882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4163'. [ 474.189653][T25882] netlink: 'syz.2.4163': attribute type 7 has an invalid length. [ 474.218000][T25882] netlink: 'syz.2.4163': attribute type 8 has an invalid length. [ 474.241952][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4163'. [ 474.707024][T25917] xt_TCPMSS: Only works on TCP SYN packets [ 474.858818][T25922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4175'. [ 475.261602][T25950] x_tables: duplicate entry at hook 3 [ 475.409858][T25959] syzkaller0: entered promiscuous mode [ 475.421190][T25959] syzkaller0: entered allmulticast mode [ 475.481241][T25969] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.514701][T25961] syzkaller1: entered promiscuous mode [ 475.520274][T25961] syzkaller1: entered allmulticast mode [ 475.820056][T25989] ipt_rpfilter: unknown options [ 477.149977][ T30] audit: type=1800 audit(1770096754.213:6): pid=25999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4195" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=933 res=0 errno=0 [ 477.239093][T26003] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.253861][ C0] net_ratelimit: 13 callbacks suppressed [ 477.253877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.277430][T26005] __nla_validate_parse: 5 callbacks suppressed [ 477.277448][T26005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4197'. [ 477.415042][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.566121][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 477.622116][T26021] tipc: Enabling of bearer rejected, already enabled [ 477.654708][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.802417][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.833885][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.847569][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.871183][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.883997][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 478.029512][T26032] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.293874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.303431][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.454675][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.586906][T26072] netlink: 'syz.5.4213': attribute type 21 has an invalid length. [ 478.729507][T26077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.741658][T26081] netlink: zone id is out of range [ 478.747634][T26081] netlink: del zone limit has 4 unknown bytes [ 478.774072][T26077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.981995][T26092] netlink: 'syz.4.4218': attribute type 3 has an invalid length. [ 479.040302][T26092] tipc: Enabling of bearer rejected, failed to enable media [ 479.169719][T26103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.260826][T26032] chnl_net:caif_netlink_parms(): no params data found [ 479.501433][T26032] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.510118][T26032] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.530085][T26032] bridge_slave_0: entered allmulticast mode [ 479.541742][T26032] bridge_slave_0: entered promiscuous mode [ 479.561302][T26032] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.580124][T26032] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.587555][T26032] bridge_slave_1: entered allmulticast mode [ 479.595553][T26032] bridge_slave_1: entered promiscuous mode [ 479.669065][T26032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.682643][T26032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.816465][T26032] team0: Port device team_slave_0 added [ 479.835732][T26032] team0: Port device team_slave_1 added [ 479.885925][T26141] macvtap1: entered promiscuous mode [ 479.891422][T26141] macvtap1: entered allmulticast mode [ 479.906330][T26141] veth1_vlan: entered allmulticast mode [ 479.944293][T26032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.951840][T26032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.984879][ T5840] Bluetooth: hci6: command tx timeout [ 479.990031][T26032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.033273][T26032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.047461][T26032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.112164][T26032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.249044][T26157] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.286860][T26032] hsr_slave_0: entered promiscuous mode [ 480.301129][T26032] hsr_slave_1: entered promiscuous mode [ 480.309736][T26032] debugfs: 'hsr0' already exists in 'hsr' [ 480.316647][T26032] Cannot create hsr debugfs directory [ 480.580730][T26171] netlink: 'syz.5.4234': attribute type 2 has an invalid length. [ 480.600575][T26171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4234'. [ 480.673424][T26177] bridge0: entered allmulticast mode [ 480.899821][T26189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4238'. [ 480.955796][T26189] netlink: 'syz.2.4238': attribute type 39 has an invalid length. [ 481.389914][T26032] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 481.455128][T26032] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.495214][T26032] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.522493][T26032] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.656637][T26228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 481.805121][T26032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.880691][T26032] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.928337][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.935551][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.966821][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.973986][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.049150][T26242] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.059301][ T5840] Bluetooth: hci6: command tx timeout [ 482.293791][ C0] net_ratelimit: 12 callbacks suppressed [ 482.293808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.530263][T26272] tipc: MTU too low for tipc bearer [ 482.620946][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.722394][T26283] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4261'. [ 482.752681][T26281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4260'. [ 482.772762][T26281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4260'. [ 482.785375][T26277] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 482.811186][T26279] netlink: 'syz.4.4259': attribute type 4 has an invalid length. [ 482.818067][T26277] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 482.819127][T26279] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4259'. [ 482.868085][T26032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.881671][T26277] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 482.935737][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.333934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.417806][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.459745][T26032] veth0_vlan: entered promiscuous mode [ 483.478193][T26032] veth1_vlan: entered promiscuous mode [ 483.547509][T26032] veth0_macvtap: entered promiscuous mode [ 483.580232][T26032] veth1_macvtap: entered promiscuous mode [ 483.658022][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.662043][T26032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.701948][T26032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.722086][ T1114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.746905][ T1114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.759076][T26324] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4265'. [ 483.777890][ T1114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.802878][ T1114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.826653][T26319] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4265'. [ 483.919357][T26329] tipc: Enabling of bearer rejected, failed to enable media [ 484.054730][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.095190][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4269'. [ 484.105073][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4269'. [ 484.116623][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4269'. [ 484.127632][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4269'. [ 484.145185][ T5840] Bluetooth: hci6: command tx timeout [ 484.216025][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.240743][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.251199][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.278066][T26341] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.312103][T26340] tipc: Enabled bearer , priority 0 [ 484.328583][T26339] tipc: Disabling bearer [ 484.351390][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.365115][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.373749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.453315][ T6081] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.475448][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.489117][ T6081] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.527745][ T6081] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.564324][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.084833][T26389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.124031][T26389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.160039][T26389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.187807][T26389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.713463][ T6081] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.723148][ T6081] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.790649][ T6081] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.835025][ T6081] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.045817][T26448] sctp: [Deprecated]: syz.2.4295 (pid 26448) Use of int in max_burst socket option deprecated. [ 486.045817][T26448] Use struct sctp_assoc_value instead [ 486.219736][ T5840] Bluetooth: hci6: command tx timeout [ 486.529740][T26471] syzkaller0: entered promiscuous mode [ 486.548907][T26471] syzkaller0: entered allmulticast mode [ 486.670975][T26481] ip6_vti0 speed is unknown, defaulting to 1000 [ 486.841342][T26496] netlink: 'syz.0.4302': attribute type 1 has an invalid length. [ 486.955886][T26496] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.098043][T26505] bond4: (slave gretap4): making interface the new active one [ 487.120822][T26505] bond4: (slave gretap4): Enslaving as an active interface with an up link [ 487.493665][ C0] net_ratelimit: 7 callbacks suppressed [ 487.493681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.730145][T26533] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.824349][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.895448][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.041236][T26560] syzkaller0: entered promiscuous mode [ 488.064727][T26560] syzkaller0: entered allmulticast mode [ 488.533665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.543908][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.875204][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.897188][T26593] __nla_validate_parse: 94 callbacks suppressed [ 488.897205][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4328'. [ 488.902737][T26594] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4327'. [ 488.923871][T26594] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4327'. [ 488.933175][T26594] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4327'. [ 488.957024][T26593] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 489.004880][T26593] team1: entered promiscuous mode [ 489.019199][T26593] team1: entered allmulticast mode [ 489.020563][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.075731][T26597] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4329'. [ 489.088807][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4329'. [ 489.623245][T26625] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4337'. [ 489.816028][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.825094][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.856611][T26635] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.858406][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.984298][T26654] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4341'. [ 490.327858][T26666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4346'. [ 490.513752][T26677] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 490.583277][T26681] pimreg: entered allmulticast mode [ 490.677895][T26654] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 490.738772][T26654] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 490.987537][T26697] syzkaller1: entered promiscuous mode [ 490.993041][T26697] syzkaller1: entered allmulticast mode [ 491.329189][T26654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.336066][T26654] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 491.411733][T26654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.427813][T26654] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 491.554289][T26654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.560222][T26654] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 491.628628][T26654] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 491.654013][T26654] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 491.739151][T26729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4357'. [ 491.807673][T26729] geneve2: entered promiscuous mode [ 491.860612][T26654] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 491.867578][T26654] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 492.192983][T26754] netlink: 'syz.4.4362': attribute type 1 has an invalid length. [ 492.469508][T26774] syzkaller0: create flow: hash 2994724616 index 1 [ 492.519253][ T6080] syzkaller0: tun_net_xmit 76 [ 492.525868][ T6080] syzkaller0: tun_net_xmit 48 [ 492.543870][ T983] syzkaller0: tun_net_xmit 76 [ 492.683755][T26764] syzkaller0: delete flow: hash 2994724616 index 1 [ 493.018837][ T5903] net_ratelimit: 7 callbacks suppressed [ 493.018856][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.093980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.655547][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.056836][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.133895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.297424][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.298291][T26809] xt_nat: multiple ranges no longer supported [ 494.411714][T26811] ip6_vti0 speed is unknown, defaulting to 1000 [ 494.461532][T26818] netlink: 'syz.6.4380': attribute type 10 has an invalid length. [ 494.564738][T26826] pim6reg1: entered promiscuous mode [ 494.583428][T26826] pim6reg1: entered allmulticast mode [ 494.646060][T26831] netlink: 'syz.2.4382': attribute type 2 has an invalid length. [ 494.752369][T26831] 9: entered promiscuous mode [ 494.773271][T26833] __nla_validate_parse: 10 callbacks suppressed [ 494.773286][T26833] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4383'. [ 494.950052][T26843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4385'. [ 495.003190][T26845] netlink: 'syz.6.4386': attribute type 17 has an invalid length. [ 495.024119][T26845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4386'. [ 495.041665][T26845] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4386'. [ 495.094471][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.102630][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.128209][T26847] syzkaller0: entered promiscuous mode [ 495.135906][T26847] syzkaller0: entered allmulticast mode [ 495.139571][T26851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4387'. [ 495.173815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.179181][T26851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4387'. [ 495.369048][T26855] ip6_vti0 speed is unknown, defaulting to 1000 [ 495.512513][T26871] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.4391'. [ 495.566472][T26874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.609704][T26876] netlink: 'syz.6.4392': attribute type 23 has an invalid length. [ 495.696927][T26880] geneve2: entered promiscuous mode [ 495.708984][T26880] geneve2: entered allmulticast mode [ 495.815929][T26887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4394'. [ 495.827191][T26887] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4394'. [ 495.836871][T26887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4394'. [ 496.525519][T26912] netlink: 'syz.2.4397': attribute type 6 has an invalid length. [ 496.551741][T26912] block nbd0: not configured, cannot reconfigure [ 496.985849][T26935] syzkaller0: entered promiscuous mode [ 496.991350][T26935] syzkaller0: entered allmulticast mode [ 497.456798][T26971] syzkaller0: entered promiscuous mode [ 497.462306][T26971] syzkaller0: entered allmulticast mode [ 497.929908][T27001] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 498.133946][ T43] net_ratelimit: 10 callbacks suppressed [ 498.133963][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.221204][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.293674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.617865][T27027] @0: renamed from bond_slave_1 (while UP) [ 498.647710][T27027] netlink: 'syz.5.4422': attribute type 1 has an invalid length. [ 498.822192][T27027] bond4: entered promiscuous mode [ 498.855261][T27027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.948237][T27049] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 499.026839][T27027] bond4: (slave bridge4): making interface the new active one [ 499.043563][T27027] bridge4: entered promiscuous mode [ 499.064599][T27027] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 499.109729][T27056] ip6_vti0 speed is unknown, defaulting to 1000 [ 499.331115][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.333730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.354499][T27066] bond3: entered promiscuous mode [ 499.364844][T27066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.380539][T27071] netlink: 'syz.2.4431': attribute type 1 has an invalid length. [ 499.415268][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.548223][T27082] xt_limit: Overflow, try lower: 604147548/4200216962 [ 499.596966][T27082] netlink: 'syz.2.4433': attribute type 21 has an invalid length. [ 499.620132][T27085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.862419][T27100] x_tables: duplicate underflow at hook 2 [ 500.055767][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.102562][T27117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.111069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.364209][T27134] __nla_validate_parse: 18 callbacks suppressed [ 500.364227][T27134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4445'. [ 500.412492][T27131] sctp: [Deprecated]: syz.0.4444 (pid 27131) Use of int in maxseg socket option. [ 500.412492][T27131] Use struct sctp_assoc_value instead [ 500.630025][T27143] syzkaller0: entered promiscuous mode [ 500.635685][T27143] syzkaller0: entered allmulticast mode [ 501.347378][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.359327][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.368020][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 502.242938][T27148] ip6_vti0 speed is unknown, defaulting to 1000 [ 502.247949][T27154] IPv6: sit1: Disabled Multicast RS [ 502.255928][T27154] sit1: entered allmulticast mode [ 502.308757][T27164] tipc: Started in network mode [ 502.323708][T27164] tipc: Node identity aa51a70be67d, cluster identity 4711 [ 502.331480][T27164] tipc: Enabled bearer , priority 0 [ 502.452073][T27167] syzkaller0: entered promiscuous mode [ 502.468547][T27167] syzkaller0: entered allmulticast mode [ 502.486022][T27167] tipc: Resetting bearer [ 502.565652][T27158] tipc: Resetting bearer [ 502.643837][T27187] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.4454'. [ 503.174539][ C1] net_ratelimit: 10 callbacks suppressed [ 503.174554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.265897][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.495218][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.918689][T27158] tipc: Disabling bearer [ 503.929549][T27174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.984391][T27190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4455'. [ 504.002314][T27192] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4456'. [ 504.012685][T27193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4456'. [ 504.039407][ T5896] tipc: Node number set to 1277994763 [ 504.086755][T27195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4457'. [ 504.213832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.281383][T27208] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4459'. [ 504.337943][T27198] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4458'. [ 504.382196][T27198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4458'. [ 504.404894][T27198] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4458'. [ 504.421674][T27198] gretap1: entered promiscuous mode [ 504.427325][T27198] gretap1: entered allmulticast mode [ 504.506255][T27217] netlink: 'syz.0.4462': attribute type 1 has an invalid length. [ 504.610180][T27225] netlink: 'syz.6.4463': attribute type 18 has an invalid length. [ 504.618862][T27227] netlink: 'syz.4.4464': attribute type 1 has an invalid length. [ 504.725690][T27217] bond5 (unregistering): Released all slaves [ 504.849654][T27229] syzkaller1: entered promiscuous mode [ 504.893793][T27229] syzkaller1: entered allmulticast mode [ 504.915637][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.992434][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.011444][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.022157][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.056561][T27244] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 505.153006][T27251] netlink: 'syz.0.4466': attribute type 21 has an invalid length. [ 505.178503][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.194639][T27250] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 505.201228][T27250] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 505.253724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.276516][T27260] netlink: 'syz.5.4468': attribute type 13 has an invalid length. [ 505.288205][T27260] netlink: 'syz.5.4468': attribute type 58 has an invalid length. [ 505.426333][T27266] openvswitch: netlink: Key type 137 is out of range max 32 [ 505.502829][T27268] __nla_validate_parse: 3 callbacks suppressed [ 505.502848][T27268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4474'. [ 505.713048][T27272] ip6_vti0 speed is unknown, defaulting to 1000 [ 506.162486][T27303] tipc: Enabled bearer , priority 0 [ 506.202805][T27303] syzkaller0: entered promiscuous mode [ 506.220928][T27303] syzkaller0: entered allmulticast mode [ 506.277711][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 506.287919][T27307] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 506.348937][T27303] tipc: Resetting bearer [ 506.403339][T27302] tipc: Resetting bearer [ 506.430184][T27302] tipc: Disabling bearer [ 506.430677][T27326] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4486'. [ 506.463788][T27326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4486'. [ 506.487221][T27326] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4486'. [ 506.521019][T27326] netlink: 'syz.6.4486': attribute type 3 has an invalid length. [ 506.543737][T27326] netlink: 'syz.6.4486': attribute type 2 has an invalid length. [ 506.579549][T27326] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4486'. [ 506.773602][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5400 ms [ 506.781664][ C0] lec:lec_tx_timeout: lec0 [ 506.817225][T27341] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4492'. [ 506.926373][T27351] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 507.391101][T27377] netlink: 'syz.0.4499': attribute type 1 has an invalid length. [ 507.899225][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4502'. [ 507.971095][T27400] bond1: option min_links: invalid value (18446744073709551614) [ 507.979098][T27400] bond1: option min_links: allowed values 0 - 2147483647 [ 507.990851][T27400] bond1 (unregistering): Released all slaves [ 508.136121][T27424] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4508'. [ 508.245017][T27427] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.294744][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4510'. [ 508.351695][T27436] netlink: 'syz.0.4511': attribute type 1 has an invalid length. [ 508.373665][ C1] net_ratelimit: 4 callbacks suppressed [ 508.373681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.603087][T27436] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.674209][T27443] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.683237][T27443] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 508.701787][T27443] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 509.283300][T27506] syzkaller0: entered promiscuous mode [ 509.292022][T27506] syzkaller0: entered allmulticast mode [ 509.413733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.568577][T27523] validate_nla: 7 callbacks suppressed [ 509.568593][T27523] netlink: 'syz.0.4533': attribute type 4 has an invalid length. [ 509.813310][T27533] openvswitch: netlink: Message has -2 unknown bytes. [ 510.243761][T27553] sctp: [Deprecated]: syz.6.4539 (pid 27553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 510.243761][T27553] Use struct sctp_sack_info instead [ 510.268142][T27572] netlink: 'syz.2.4542': attribute type 24 has an invalid length. [ 510.306153][T27558] sock: sock_timestamping_bind_phc: sock not bind to device [ 510.319956][T27573] openvswitch: netlink: Flow actions attr not present in new flow. [ 510.398419][T27568] sock: sock_timestamping_bind_phc: sock not bind to device [ 510.741290][T27610] __nla_validate_parse: 13 callbacks suppressed [ 510.741309][T27610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4550'. [ 510.774474][T27610] netlink: 'syz.4.4550': attribute type 7 has an invalid length. [ 510.826188][T27610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4550'. [ 510.863843][T27610] netlink: 'syz.4.4550': attribute type 7 has an invalid length. [ 510.940951][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.955018][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.195413][T27631] netlink: 'syz.2.4556': attribute type 3 has an invalid length. [ 511.233694][T27631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4556'. [ 511.332899][T27643] tipc: Enabling of bearer rejected, already enabled [ 511.384149][T27642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4558'. [ 511.477239][T27654] erspan0: entered promiscuous mode [ 511.495242][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.496590][T27654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4560'. [ 511.586898][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.739096][T27672] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20004 [ 511.807137][T27677] x_tables: duplicate underflow at hook 1 [ 511.888209][T27679] sock: sock_set_timeout: `syz.0.4568' (pid 27679) tries to set negative timeout [ 511.925098][T27679] sock: sock_set_timeout: `syz.0.4568' (pid 27679) tries to set negative timeout [ 512.080089][T27694] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4570'. [ 512.335440][T27705] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:32789 [ 512.360727][T27705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4574'. [ 512.424154][T27713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4576'. [ 512.759523][T27738] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4584'. [ 512.772626][T27734] netlink: 212192 bytes leftover after parsing attributes in process `syz.5.4583'. [ 513.001409][T27752] xt_hashlimit: size too large, truncated to 1048576 [ 513.214796][T27770] netlink: 'syz.6.4591': attribute type 1 has an invalid length. [ 513.319969][T27770] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 513.518396][T27784] netlink: 'syz.4.4595': attribute type 2 has an invalid length. [ 513.653840][ C0] net_ratelimit: 65 callbacks suppressed [ 513.653858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.104624][T27826] netlink: 'syz.0.4604': attribute type 2 has an invalid length. [ 514.239139][T27832] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 514.694027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.777149][T27869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.946546][T27881] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 515.176500][T27898] netlink: 'syz.4.4626': attribute type 1 has an invalid length. [ 515.318369][T27909] netlink: 'syz.5.4630': attribute type 1 has an invalid length. [ 515.330460][T27909] netlink: 'syz.5.4630': attribute type 4 has an invalid length. [ 515.666046][T27925] tipc: Enabled bearer , priority 0 [ 515.688962][T27923] tipc: Enabling of bearer rejected, already enabled [ 515.733880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.740981][T27925] syzkaller0: entered promiscuous mode [ 515.789012][T27925] syzkaller0: entered allmulticast mode [ 515.816030][T27923] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 515.891234][T27925] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 516.012459][T27925] tipc: Resetting bearer [ 516.131116][T27925] tipc: Disabling bearer [ 516.489451][T27981] netlink: 'syz.0.4649': attribute type 1 has an invalid length. [ 516.531155][T27988] __nla_validate_parse: 18 callbacks suppressed [ 516.531173][T27988] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4652'. [ 516.552525][T27981] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.607398][T27981] bond6: (slave veth5): Enslaving as an active interface with a down link [ 516.697131][ T6078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.714227][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.727874][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.749702][T27981] vlan3: entered allmulticast mode [ 516.773878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.780267][T27981] veth1: entered allmulticast mode [ 516.943974][T28006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4656'. [ 517.144684][T28019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4659'. [ 517.167124][T28019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4659'. [ 517.532362][T28054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4667'. [ 517.588612][T28054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4667'. [ 517.604917][T28058] netlink: 'syz.6.4668': attribute type 21 has an invalid length. [ 517.612752][T28058] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4668'. [ 517.670283][T28063] xt_cluster: node mask cannot exceed total number of nodes [ 517.693342][T28058] netlink: 'syz.6.4668': attribute type 4 has an invalid length. [ 517.723434][T28058] netlink: 'syz.6.4668': attribute type 5 has an invalid length. [ 517.759214][T28072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4670'. [ 517.774039][T28058] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4668'. [ 517.814015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.152727][T28092] netlink: 'syz.4.4676': attribute type 24 has an invalid length. [ 518.685455][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4684'. [ 518.720041][T28124] ipt_REJECT: TCP_RESET invalid for non-tcp [ 518.853771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.865360][T28134] netlink: 'syz.6.4688': attribute type 83 has an invalid length. [ 518.942509][T28132] dvmrp0: entered allmulticast mode [ 519.340588][T28167] netlink: 'syz.5.4696': attribute type 1 has an invalid length. [ 519.402958][T28168] 8021q: adding VLAN 0 to HW filter on device bond6 [ 519.507245][T28167] veth3: entered promiscuous mode [ 519.518700][T28167] bond6: (slave veth3): Enslaving as an active interface with a down link [ 519.584341][T28171] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 519.823144][T28195] syzkaller0: entered promiscuous mode [ 519.847004][T28195] syzkaller0: entered allmulticast mode [ 519.877832][T28195] 0: reclassify loop, rule prio 0, protocol 800 [ 519.894200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.182178][T28218] bond0: Error: Cannot enslave bond to itself. [ 521.308655][T28309] ieee802154 phy0 wpan0: encryption failed: -22 [ 521.619884][T28328] validate_nla: 2 callbacks suppressed [ 521.619902][T28328] netlink: 'syz.4.4734': attribute type 1 has an invalid length. [ 521.650087][T28328] netlink: 'syz.4.4734': attribute type 2 has an invalid length. [ 521.683883][T28328] netlink: 'syz.4.4734': attribute type 1 has an invalid length. [ 521.722202][T28328] netlink: 'syz.4.4734': attribute type 3 has an invalid length. [ 521.730045][T28328] __nla_validate_parse: 10 callbacks suppressed [ 521.730061][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4734'. [ 521.901096][T28348] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4740'. [ 522.234799][T28381] netlink: 'syz.2.4747': attribute type 4 has an invalid length. [ 522.294269][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.302663][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.311845][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.321567][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.342590][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.425452][T28391] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4753'. [ 522.457798][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.466626][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.558012][T28394] bond5: option miimon: invalid value (18446744073709551585) [ 522.610630][T28394] bond5: option miimon: allowed values 0 - 2147483647 [ 522.637311][T28394] bond5 (unregistering): Released all slaves [ 522.711709][T28406] x_tables: duplicate underflow at hook 3 [ 522.801035][T28414] syzkaller0: entered promiscuous mode [ 522.830710][T28414] syzkaller0: entered allmulticast mode [ 522.915815][T28419] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4759'. [ 523.110371][T28431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4762'. [ 523.141515][T28437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4763'. [ 523.149757][T28436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4764'. [ 524.376555][ T983] net_ratelimit: 4 callbacks suppressed [ 524.376572][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.534014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.600801][T28503] pimreg3: entered allmulticast mode [ 524.693450][T28509] syz_tun: entered allmulticast mode [ 524.700989][T28507] syz_tun: left allmulticast mode [ 524.872978][T28517] syz_tun: entered allmulticast mode [ 524.891083][T28522] netlink: 'syz.2.4781': attribute type 4 has an invalid length. [ 525.069588][T28527] tipc: Enabled bearer , priority 0 [ 525.082427][T28527] syzkaller0: entered promiscuous mode [ 525.088853][T28527] syzkaller0: entered allmulticast mode [ 525.118329][T28531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.127563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.156263][T28531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.172320][T28527] tipc: Resetting bearer [ 525.175654][T28531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.188774][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.203198][T28525] tipc: Resetting bearer [ 525.207228][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.218374][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.228461][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.249657][T28525] tipc: Disabling bearer [ 525.440485][T12491] lec:lec_start_xmit: lec0:No lecd attached [ 525.994511][T28576] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4798'. [ 526.506661][T28603] tipc: New replicast peer: 255.255.255.255 [ 526.520377][T28603] tipc: Enabled bearer , priority 10 [ 526.549387][T28604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4809'. [ 526.992802][T19768] NFSD: Failed to start, no listeners configured. [ 527.168990][T28638] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.327745][T28645] dvmrp6: entered allmulticast mode [ 527.939521][T28670] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.947255][T28670] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.189990][T28670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.231971][T28670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.350425][T28670] bond4: left promiscuous mode [ 528.356282][T28670] bridge4: left promiscuous mode [ 528.366517][T28670] gretap1: left promiscuous mode [ 528.371454][T28670] gretap1: left allmulticast mode [ 528.381515][T28670] veth3: left promiscuous mode [ 528.387612][T28672] mac80211_hwsim hwsim33 : renamed from wlan1 [ 528.407545][ T6080] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.428633][ T6080] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.448766][ T6080] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.460780][ T6080] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.528903][ T6080] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.533112][T28707] netlink: 'syz.4.4843': attribute type 21 has an invalid length. [ 528.613944][ T6080] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.627365][ T6080] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.658071][ T6080] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.711590][T28707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4843'. [ 528.733712][T28710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4841'. [ 528.759552][T28723] netlink: 'syz.0.4845': attribute type 1 has an invalid length. [ 528.864737][T28710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.921344][T28724] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 528.938267][T28724] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 528.950222][T28724] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 529.521946][T28776] tipc: Enabling of bearer rejected, failed to enable media [ 529.577550][ T9] net_ratelimit: 25 callbacks suppressed [ 529.577567][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.700684][T28785] syz.4.4854 (28785) used greatest stack depth: 17656 bytes left [ 529.733662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.298845][T28818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4864'. [ 530.345718][T28821] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4865'. [ 530.388456][T28822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4866'. [ 530.422690][T28826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4866'. [ 530.605684][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4868'. [ 530.625695][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.773802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 530.773933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.781848][ C0] lec:lec_tx_timeout: lec0 [ 531.254421][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.434235][T28863] tipc: Resetting bearer [ 531.591751][T28863] gretap1: left promiscuous mode [ 531.598653][T28863] gretap1: left allmulticast mode [ 531.613391][T28863] veth1_vlan: left allmulticast mode [ 531.622513][T28863] macvtap1: left promiscuous mode [ 531.628659][T28863] macvtap1: left allmulticast mode [ 531.637426][T28863] bond3: left promiscuous mode [ 531.652791][T28864] geneve2: entered promiscuous mode [ 531.663151][T28864] geneve2: entered allmulticast mode [ 531.664946][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.697137][ T6081] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.717222][ T6081] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.728902][ T6081] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.740148][ T6081] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.760474][ T6081] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.791338][ T6081] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.816035][ T6081] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.838861][ T6081] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.867868][T28913] FAULT_INJECTION: forcing a failure. [ 531.867868][T28913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.882288][T28909] vlan3: entered promiscuous mode [ 531.889080][T28909] vlan3: entered allmulticast mode [ 531.894423][T28909] hsr_slave_1: entered allmulticast mode [ 531.902145][ T6081] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 531.930234][ T6081] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 531.955786][ T6081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 531.973812][T28913] CPU: 1 UID: 0 PID: 28913 Comm: syz.0.4883 Not tainted syzkaller #0 PREEMPT(full) [ 531.973856][T28913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.973878][T28913] Call Trace: [ 531.973885][T28913] [ 531.973893][T28913] dump_stack_lvl+0xe8/0x150 [ 531.973920][T28913] should_fail_ex+0x412/0x560 [ 531.973946][T28913] _copy_from_user+0x2d/0xb0 [ 531.973971][T28913] __sys_connect+0x156/0x450 [ 531.974001][T28913] ? __pfx___sys_connect+0x10/0x10 [ 531.974032][T28913] ? __pfx_ksys_write+0x10/0x10 [ 531.974061][T28913] __x64_sys_connect+0x7a/0x90 [ 531.974081][T28913] do_syscall_64+0xe2/0xf80 [ 531.974099][T28913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.974114][T28913] ? trace_irq_disable+0x37/0x100 [ 531.974130][T28913] ? clear_bhb_loop+0x60/0xb0 [ 531.974150][T28913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.974170][T28913] RIP: 0033:0x7f69fc59aeb9 [ 531.974185][T28913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.974199][T28913] RSP: 002b:00007f69fd3b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 531.974218][T28913] RAX: ffffffffffffffda RBX: 00007f69fc815fa0 RCX: 00007f69fc59aeb9 [ 531.974231][T28913] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 531.974241][T28913] RBP: 00007f69fd3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 531.974251][T28913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.974262][T28913] R13: 00007f69fc816038 R14: 00007f69fc815fa0 R15: 00007fff4bcb5f88 [ 531.974291][T28913] [ 531.991204][ T6081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 532.208991][T28919] tipc: Enabling of bearer rejected, already enabled [ 532.392977][T28939] netlink: zone id is out of range [ 532.403240][T28939] netlink: zone id is out of range [ 532.527225][T28940] netlink: set zone limit has 4 unknown bytes [ 532.566326][T28941] netlink: set zone limit has 4 unknown bytes [ 532.798640][T28961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4893'. [ 532.840262][T28963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4895'. [ 532.936800][T28966] syzkaller0: entered promiscuous mode [ 532.942307][T28966] syzkaller0: entered allmulticast mode [ 532.991135][T28976] FAULT_INJECTION: forcing a failure. [ 532.991135][T28976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.027925][T28976] CPU: 1 UID: 0 PID: 28976 Comm: syz.2.4897 Not tainted syzkaller #0 PREEMPT(full) [ 533.027949][T28976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 533.027959][T28976] Call Trace: [ 533.027966][T28976] [ 533.027974][T28976] dump_stack_lvl+0xe8/0x150 [ 533.027999][T28976] should_fail_ex+0x412/0x560 [ 533.028025][T28976] _copy_to_user+0x31/0xb0 [ 533.028051][T28976] simple_read_from_buffer+0xe1/0x170 [ 533.028074][T28976] proc_fail_nth_read+0x1bb/0x230 [ 533.028100][T28976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.028125][T28976] ? rw_verify_area+0x2a6/0x4d0 [ 533.028146][T28976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.028167][T28976] vfs_read+0x20c/0xa70 [ 533.028186][T28976] ? fdget_pos+0x246/0x320 [ 533.028209][T28976] ? __pfx___mutex_lock+0x10/0x10 [ 533.028228][T28976] ? __pfx_vfs_read+0x10/0x10 [ 533.028251][T28976] ? __fget_files+0x2a/0x420 [ 533.028273][T28976] ? __fget_files+0x3a0/0x420 [ 533.028291][T28976] ? __fget_files+0x2a/0x420 [ 533.028318][T28976] ksys_read+0x150/0x270 [ 533.028342][T28976] ? __pfx_ksys_read+0x10/0x10 [ 533.028376][T28976] do_syscall_64+0xe2/0xf80 [ 533.028395][T28976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.028411][T28976] ? trace_irq_disable+0x37/0x100 [ 533.028428][T28976] ? clear_bhb_loop+0x60/0xb0 [ 533.028448][T28976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.028465][T28976] RIP: 0033:0x7f9a3a15b78e [ 533.028481][T28976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.028494][T28976] RSP: 002b:00007f9a3b102fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.028512][T28976] RAX: ffffffffffffffda RBX: 00007f9a3b1036c0 RCX: 00007f9a3a15b78e [ 533.028525][T28976] RDX: 000000000000000f RSI: 00007f9a3b1030a0 RDI: 0000000000000004 [ 533.028536][T28976] RBP: 00007f9a3b103090 R08: 0000000000000000 R09: 0000000000000000 [ 533.028547][T28976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.028558][T28976] R13: 00007f9a3a416038 R14: 00007f9a3a415fa0 R15: 00007fff6c62c698 [ 533.028589][T28976] [ 533.307939][T28987] netlink: 'syz.2.4901': attribute type 1 has an invalid length. [ 533.315814][T28987] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.4901'. [ 533.574331][T29003] syzkaller0: entered promiscuous mode [ 533.590062][T29003] syzkaller0: entered allmulticast mode [ 533.623383][T29003] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 533.919614][T29017] __nla_validate_parse: 4 callbacks suppressed [ 533.919634][T29017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4908'. [ 533.942943][T29024] netlink: 'syz.6.4909': attribute type 1 has an invalid length. [ 534.503869][T29065] netlink: 'syz.4.4919': attribute type 21 has an invalid length. [ 534.511763][T29065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4919'. [ 534.599018][T29070] net_ratelimit: 10 callbacks suppressed [ 534.599036][T29070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.774788][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.812931][T29093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4927'. [ 534.967944][T29099] bond2: option resend_igmp: invalid value (32767) [ 535.007490][T29099] bond2: option resend_igmp: allowed values 0 - 255 [ 535.042989][T29099] bond2 (unregistering): Released all slaves [ 535.119431][T29115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4935'. [ 535.131245][T29115] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4935'. [ 535.413761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.603413][T29144] pim6reg: entered allmulticast mode [ 535.614706][T29145] pim6reg: left allmulticast mode [ 535.816257][T29161] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 535.826824][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.840188][T29158] geneve2: entered promiscuous mode [ 535.876123][T28760] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.929753][T28760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.979355][T28760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.993787][T28760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.098029][T29178] netlink: 'syz.0.4949': attribute type 9 has an invalid length. [ 536.116278][T29178] netlink: 'syz.0.4949': attribute type 11 has an invalid length. [ 536.140284][T29178] netlink: 'syz.0.4949': attribute type 12 has an invalid length. [ 536.163728][T29178] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4949'. [ 536.206424][T29191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4949'. [ 536.206557][T29190] syzkaller0: entered promiscuous mode [ 536.221393][T29190] syzkaller0: entered allmulticast mode [ 536.255531][T29178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4949'. [ 536.453855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.681820][T29221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.690252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.709459][T29221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.722889][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.743864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.979044][T29243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4965'. [ 536.996708][T29243] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4965'. [ 537.144177][T29252] netlink: 'syz.4.4970': attribute type 10 has an invalid length. [ 537.219421][T29260] netlink: 'syz.4.4970': attribute type 1 has an invalid length. [ 537.219440][T29252] team0 (unregistering): Port device team_slave_0 removed [ 537.237410][T29252] team0 (unregistering): Port device team_slave_1 removed [ 537.453000][T29269] netlink: 'syz.6.4973': attribute type 1 has an invalid length. [ 537.461840][T29269] netlink: 'syz.6.4973': attribute type 2 has an invalid length. [ 538.715327][T29348] netlink: 'syz.4.4993': attribute type 18 has an invalid length. [ 538.882929][T29359] syzkaller0: entered promiscuous mode [ 538.895944][T29359] syzkaller0: entered allmulticast mode [ 539.017640][T29370] __nla_validate_parse: 8 callbacks suppressed [ 539.017658][T29370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5000'. [ 539.035225][T29370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5000'. [ 539.084908][T29371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5001'. [ 539.108490][T29371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5001'. [ 539.123532][T29373] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 539.154510][T29373] bond0: (slave gre0): Error -95 calling set_mac_address [ 539.704315][T29395] validate_nla: 3 callbacks suppressed [ 539.704331][T29395] netlink: 'syz.5.5005': attribute type 39 has an invalid length. [ 539.974894][ T983] net_ratelimit: 1037 callbacks suppressed [ 539.974911][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.081373][T29413] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5014'. [ 540.100691][T29419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.109564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.125356][T29420] netlink: 'syz.5.5012': attribute type 1 has an invalid length. [ 540.133116][T29420] netlink: 'syz.5.5012': attribute type 2 has an invalid length. [ 540.165762][T29420] netlink: 'syz.5.5012': attribute type 1 has an invalid length. [ 540.173508][T29420] netlink: 'syz.5.5012': attribute type 3 has an invalid length. [ 540.199948][T29413] sctp: [Deprecated]: syz.4.5014 (pid 29413) Use of int in max_burst socket option deprecated. [ 540.199948][T29413] Use struct sctp_assoc_value instead [ 540.216434][T29426] sctp: [Deprecated]: syz.4.5014 (pid 29426) Use of int in max_burst socket option deprecated. [ 540.216434][T29426] Use struct sctp_assoc_value instead [ 540.243874][T29420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5012'. [ 540.376356][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.452752][T29438] syzkaller1: entered promiscuous mode [ 540.470737][T29438] syzkaller1: entered allmulticast mode [ 540.613657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.663469][T29427] infiniband : set down [ 540.668416][T29427] infiniband : added ipvlan0 [ 540.687521][T29450] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5023'. [ 540.720313][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5023'. [ 540.803364][T29450] bond2: entered promiscuous mode [ 540.804095][T29427] RDS/IB: : added [ 540.809126][T29450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.817838][T29427] smc: adding ib device  with port count 1 [ 540.826997][T29427] smc: ib device  port 1 has no pnetid [ 541.020229][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.206641][T29481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.215764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.226081][T29481] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5026'. [ 541.250838][T29484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5032'. [ 541.268317][T29484] geneve2: entered promiscuous mode [ 541.273921][T29484] geneve2: entered allmulticast mode [ 541.654984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.998163][T29505] pim6reg: entered allmulticast mode [ 542.054315][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.182280][T29521] netlink: 'syz.0.5041': attribute type 1 has an invalid length. [ 542.452751][T29536] syzkaller0: entered promiscuous mode [ 542.459862][T29536] syzkaller0: entered allmulticast mode [ 545.175646][ T9] net_ratelimit: 8 callbacks suppressed [ 545.175663][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.653719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.214814][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.454301][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.693915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.266093][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.743726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.296241][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.783695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.335183][T28760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.384574][ T5896] net_ratelimit: 3 callbacks suppressed [ 550.384593][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.617516][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.853732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.414463][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.893850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.454280][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.538210][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.175207][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.495528][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.455192][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.493761][ C0] net_ratelimit: 2 callbacks suppressed [ 555.493779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.574776][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.582894][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.374782][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.533845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.615054][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.573899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.657032][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.616297][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.623737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.703901][ C0] net_ratelimit: 4 callbacks suppressed [ 560.703919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.778024][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.855530][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.658810][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.743936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.815955][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.140787][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.778564][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.778896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.785168][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.800511][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 562.854311][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.912226][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.980332][ T9] net_ratelimit: 4 callbacks suppressed [ 565.980350][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.383697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.616182][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.018797][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.255047][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.413971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.734812][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.813971][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.821994][ C0] lec:lec_tx_timeout: lec0 [ 568.064073][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.463814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.094305][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.182336][ T5896] net_ratelimit: 5 callbacks suppressed [ 571.182353][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.583909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.738777][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.215157][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.613966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.016087][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.264548][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.654083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.815316][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.303048][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.375118][ T5896] net_ratelimit: 2 callbacks suppressed [ 576.375135][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.854724][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.855207][T28760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.872485][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.424357][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.903723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.456322][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.778509][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.933713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.494789][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.574694][ T5896] net_ratelimit: 5 callbacks suppressed [ 581.574710][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.053701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.627329][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.628505][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.933924][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.103830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.654219][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.894714][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.143682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.695861][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.776743][ T983] net_ratelimit: 4 callbacks suppressed [ 586.776760][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.734337][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.824399][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.385537][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.773743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.857915][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.014485][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.019075][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.707176][T12491] lec:lec_start_xmit: lec0:No lecd attached [ 589.813819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.897439][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.893763][ C1] net_ratelimit: 3 callbacks suppressed [ 591.893782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.974889][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.060211][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.933742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.017215][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.498997][T28760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.974013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.054341][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.774182][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 594.782181][ C0] lec:lec_tx_timeout: lec0 [ 594.787311][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.013775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.174563][ T5896] net_ratelimit: 5 callbacks suppressed [ 597.174580][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.141947][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.216451][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.257818][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.270604][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.278740][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.906750][ T6080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.293718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.295542][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.514682][T32192] __nla_validate_parse: 3 callbacks suppressed [ 600.514742][T32192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5048'. [ 600.543184][T32194] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 600.547449][T32192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5048'. [ 600.622188][T32195] syzkaller0: entered promiscuous mode [ 600.628049][T32195] syzkaller0: entered allmulticast mode [ 600.720437][T32199] tipc: Enabling of bearer rejected, already enabled [ 600.730033][T32197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5050'. [ 600.747025][T32200] veth7: entered allmulticast mode [ 600.758986][T32192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5048'. [ 600.764986][T32201] syzkaller1: entered promiscuous mode [ 600.768144][T32192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5048'. [ 600.773734][T32201] syzkaller1: entered allmulticast mode [ 600.878681][T32206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5049'. [ 600.955360][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5053'. [ 601.015994][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.317195][T32206] team0: Port device team_slave_0 removed [ 602.373917][ C1] net_ratelimit: 3 callbacks suppressed [ 602.373935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.392470][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.417762][T32218] syzkaller0: entered promiscuous mode [ 602.425099][T32218] syzkaller0: entered allmulticast mode [ 602.434357][T32230] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5056'. [ 602.444224][T32228] tipc: Enabling of bearer rejected, already enabled [ 602.490291][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5057'. [ 602.938315][T32261] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 603.092209][T32281] vlan4: entered allmulticast mode [ 603.152606][T32281] geneve1: entered allmulticast mode [ 603.246119][T32287] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5067'. [ 603.413686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.532868][T32311] netlink: 'syz.6.5073': attribute type 21 has an invalid length. [ 603.675701][T32327] tipc: Bearer : already 2 bearers with priority 10 [ 603.695210][T32327] tipc: Bearer : trying with adjusted priority [ 603.702348][T32327] tipc: Enabling of bearer rejected, failed to enable media [ 603.742250][T32332] netlink: 'syz.6.5078': attribute type 1 has an invalid length. [ 604.348686][T32360] sctp: [Deprecated]: syz.6.5087 (pid 32360) Use of int in max_burst socket option deprecated. [ 604.348686][T32360] Use struct sctp_assoc_value instead [ 604.453719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.934197][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.020371][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.494910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.286322][T32422] netlink: 'syz.4.5098': attribute type 13 has an invalid length. [ 606.294777][T32422] netlink: 'syz.4.5098': attribute type 58 has an invalid length. [ 606.297509][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.303126][T32422] __nla_validate_parse: 3 callbacks suppressed [ 606.303139][T32422] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5098'. [ 606.449508][T32433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5100'. [ 606.533663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.556924][T32441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5102'. [ 606.597124][T32441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5102'. [ 606.606650][ T6069] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.633919][ T6069] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.652788][ T6069] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.701897][ T6069] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.776923][T32454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5105'. [ 606.886730][T32465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5108'. [ 606.956572][T32459] xt_CT: No such helper "pptp" [ 607.187762][T32480] veth0: entered promiscuous mode [ 607.209616][T32480] netlink: 'syz.2.5112': attribute type 1 has an invalid length. [ 607.231166][T32482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5113'. [ 607.270748][T32487] veth0: left promiscuous mode [ 607.404577][T32498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5116'. [ 607.442218][T32498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5116'. [ 607.489719][T32498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5116'. [ 607.573746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.051921][T32540] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 608.078286][T32535] bond8 (unregistering): Released all slaves [ 608.374847][T32563] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 608.593497][T32575] Bluetooth: hci4: Opcode 0x0c1a failed: -22 [ 608.726910][T32583] mac80211_hwsim hwsim47 : renamed from wlan1 [ 608.944809][T32598] bond3 (unregistering): Released all slaves [ 609.381199][T32631] x_tables: duplicate underflow at hook 4 [ 609.381214][T32632] x_tables: duplicate underflow at hook 4 [ 609.426259][T32632] erspan0: entered allmulticast mode [ 609.639296][T32650] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 609.738846][T32650] syzkaller0: create flow: hash 2994724616 index 1 [ 609.892945][T32650] syzkaller0: delete flow: hash 2994724616 index 1 [ 610.002754][T32682] netlink: 'syz.2.5162': attribute type 1 has an invalid length. [ 610.145009][T28760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.154070][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.775025][T28760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.173718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.308528][T32682] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 611.786362][T32727] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 611.999416][T32741] __nla_validate_parse: 27 callbacks suppressed [ 611.999433][T32741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5176'. [ 612.020516][T32741] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 612.028611][T32736] tipc: Enabled bearer , priority 10 [ 612.029540][T32742] IPVS: set_ctl: invalid protocol: 29799 0.0.0.0:256 [ 612.049765][T32739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5174'. [ 612.069997][ T6081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.185851][T32750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5179'. [ 612.213696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.295556][T32750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.337557][T32750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 612.359083][T32765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5180'. [ 612.447319][ T300] netlink: 'syz.0.5184': attribute type 5 has an invalid length. [ 612.532983][ T306] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 612.548850][ T306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.727301][ T307] macvtap1: entered allmulticast mode [ 612.732961][ T307] veth0_macvtap: entered allmulticast mode [ 613.111525][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5190'. [ 613.253959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.322192][ T347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5194'. [ 613.338854][ T347] netlink: 'syz.2.5194': attribute type 21 has an invalid length. [ 613.349725][ T350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5193'. [ 613.420958][ T347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'. [ 613.512928][ T356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5198'. [ 613.524852][ T356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5198'. [ 613.534357][ T356] netlink: 'syz.0.5198': attribute type 14 has an invalid length. [ 613.542320][ T356] netlink: 'syz.0.5198': attribute type 13 has an invalid length. [ 613.572223][ T347] netlink: 'syz.2.5194': attribute type 21 has an invalid length. [ 613.623188][ T359] ip6tnl1: entered promiscuous mode [ 613.803982][ T370] xt_hashlimit: size too large, truncated to 1048576 [ 613.832917][ T375] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 614.293679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.424919][ T420] netlink: 'syz.6.5213': attribute type 32 has an invalid length. [ 614.548896][ T420] bond3: option coupled_control: invalid value (52) [ 614.572509][ T420] bond3 (unregistering): Released all slaves [ 615.333666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.894400][ T31] INFO: task syz.1.4062:25439 blocked for more than 143 seconds. [ 615.894700][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.922480][ T31] Not tainted syzkaller #0 [ 615.949414][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.990123][ T31] task:syz.1.4062 state:D stack:24536 pid:25439 tgid:25438 ppid:18735 task_flags:0x400140 flags:0x00080002 [ 616.017104][ T31] Call Trace: [ 616.024018][ T31] [ 616.030669][ T31] __schedule+0x14ea/0x5050 [ 616.043911][ T31] ? __pfx___schedule+0x10/0x10 [ 616.050067][ T31] ? schedule+0x90/0x360 [ 616.066070][ T31] schedule+0x164/0x360 [ 616.074846][ T31] schedule_preempt_disabled+0x13/0x30 [ 616.083863][ T31] __mutex_lock+0x7fe/0x1300 [ 616.088687][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 616.097390][ T31] ? __mutex_lock+0x5ac/0x1300 [ 616.107750][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 616.120025][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 616.130816][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 616.146156][ T31] ? rcu_is_watching+0x15/0xb0 [ 616.161033][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 616.176161][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 616.190517][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 616.198885][ T31] ? __asan_memcpy+0x40/0x70 [ 616.204120][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 616.210486][ T31] ? bpf_lsm_capable+0x9/0x20 [ 616.215907][ T31] ? security_capable+0x7e/0x2c0 [ 616.221148][ T31] genl_rcv_msg+0x61c/0x7a0 [ 616.226146][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.241529][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 616.258166][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 616.267898][ T31] netlink_rcv_skb+0x232/0x4b0 [ 616.272792][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.278372][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.284170][ T31] ? genl_rcv+0x19/0x40 [ 616.288607][ T31] ? down_read+0x272/0x2e0 [ 616.293254][ T31] ? genl_rcv+0xd/0x40 [ 616.302657][ T31] genl_rcv+0x28/0x40 [ 616.317517][ T31] netlink_unicast+0x80f/0x9b0 [ 616.328244][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 616.339605][ T31] ? __alloc_skb+0x193/0x390 [ 616.351509][ T31] ? netlink_sendmsg+0x650/0xb40 [ 616.364920][ T31] ? skb_put+0x11b/0x210 [ 616.371954][ T31] netlink_sendmsg+0x813/0xb40 [ 616.377169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.386884][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.392298][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 616.397840][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 616.403247][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.411239][ T31] ____sys_sendmsg+0xa68/0xad0 [ 616.416383][ T31] ? __might_fault+0xaf/0x130 [ 616.421456][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.427495][ T31] ? import_iovec+0x73/0xa0 [ 616.433355][ T31] ___sys_sendmsg+0x2a5/0x360 [ 616.444212][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.462688][ T31] ? futex_wait+0x29a/0x380 [ 616.467655][ T31] ? file_init_path+0x434/0x590 [ 616.472534][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 616.479745][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.485612][ T31] ? rcu_is_watching+0x15/0xb0 [ 616.490510][ T31] do_syscall_64+0xe2/0xf80 [ 616.495451][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.501631][ T31] ? trace_irq_disable+0x37/0x100 [ 616.507002][ T31] ? clear_bhb_loop+0x60/0xb0 [ 616.511795][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.519228][ T31] RIP: 0033:0x7f8b5ef9aeb9 [ 616.523994][ T31] RSP: 002b:00007f8b5ff04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.532420][ T31] RAX: ffffffffffffffda RBX: 00007f8b5f215fa0 RCX: 00007f8b5ef9aeb9 [ 616.541425][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000009 [ 616.549977][ T6069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.558666][ T31] RBP: 00007f8b5f008c1f R08: 0000000000000000 R09: 0000000000000000 [ 616.567871][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.575979][ T31] R13: 00007f8b5f216038 R14: 00007f8b5f215fa0 R15: 00007ffda684f918 [ 616.585284][ T31] [ 616.588412][ T31] [ 616.588412][ T31] Showing all locks held in the system: [ 616.598074][ T31] 2 locks held by kworker/u8:1/13: [ 616.603195][ T31] #0: ffff88813fe69148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 616.648287][ T31] #1: ffffc90000127bc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 616.660575][ T31] 1 lock held by khungtaskd/31: [ 616.665820][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 616.675890][ T31] 2 locks held by dhcpcd/5492: [ 616.680664][ T31] #0: ffff8880367c86f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 616.691727][ T31] #1: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 616.701936][ T31] 2 locks held by getty/5587: [ 616.706921][ T31] #0: ffff88814eadf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 616.717711][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 616.728394][ T31] 2 locks held by syz.3.3229/19768: [ 616.734228][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 616.742618][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 616.755824][ T31] 2 locks held by syz.1.4062/25439: [ 616.761030][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 616.769869][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 616.780377][ T31] 3 locks held by kworker/u8:0/28760: [ 616.786132][ T31] #0: ffff88814d9cb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 616.798236][ T31] #1: ffffc9000d197bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 616.812582][ T31] #2: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 616.822585][ T31] 2 locks held by syz.0.5224/461: [ 616.827879][ T31] #0: ffff888045296f48 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 616.838592][ T31] #1: ffff888034172260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 616.848092][ T31] 1 lock held by syz.4.5233/505: [ 616.853197][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 616.862684][ T31] 2 locks held by syz.6.5237/522: [ 616.877474][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 616.886865][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 616.898289][ T31] 1 lock held by syz.5.5238/530: [ 616.903231][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 616.913094][ T31] 1 lock held by syz.5.5238/534: [ 616.918585][ T31] #0: ffff88807a5868d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 616.929704][ T31] 1 lock held by modprobe/561: [ 616.934861][ T31] [ 616.937459][ T31] ============================================= [ 616.937459][ T31] [ 616.948584][ T31] NMI backtrace for cpu 1 [ 616.948600][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 616.948619][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 616.948629][ T31] Call Trace: [ 616.948637][ T31] [ 616.948645][ T31] dump_stack_lvl+0xe8/0x150 [ 616.948669][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 616.948692][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 616.948718][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 616.948743][ T31] sys_info+0x135/0x170 [ 616.948761][ T31] watchdog+0xf90/0xfe0 [ 616.948783][ T31] ? watchdog+0x209/0xfe0 [ 616.948808][ T31] kthread+0x726/0x8b0 [ 616.948830][ T31] ? __pfx_watchdog+0x10/0x10 [ 616.948847][ T31] ? __pfx_kthread+0x10/0x10 [ 616.948868][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.948891][ T31] ? __pfx_kthread+0x10/0x10 [ 616.948917][ T31] ret_from_fork+0x51b/0xa40 [ 616.948944][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 616.948964][ T31] ? __switch_to+0xc82/0x1410 [ 616.948989][ T31] ? __pfx_kthread+0x10/0x10 [ 616.949009][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.949046][ T31] [ 616.949053][ T31] Sending NMI from CPU 1 to CPUs 0: [ 617.070663][ C0] NMI backtrace for cpu 0 [ 617.070679][ C0] CPU: 0 UID: 0 PID: 565 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 617.070696][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 617.070706][ C0] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 617.070728][ C0] Code: 20 39 07 8c 48 c7 c6 60 39 07 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 c7 96 5b 07 65 8b 0d bc 96 5b 07 f7 c1 ff [ 617.070740][ C0] RSP: 0000:ffffc9001475f570 EFLAGS: 00000282 [ 617.070754][ C0] RAX: ffffffff8236f41b RBX: 0000000000000001 RCX: 0000000000000000 [ 617.070765][ C0] RDX: ffff888024693d00 RSI: ffffffff8c073960 RDI: ffffffff8c073920 [ 617.070777][ C0] RBP: ffffc9001475f6e8 R08: ffffffff8236f3ea R09: ffffffff8e55a360 [ 617.070788][ C0] R10: ffff888024694600 R11: ffffffff81afb170 R12: 0000000000000000 [ 617.070798][ C0] R13: 0000000000000000 R14: ffffffff8236f3ea R15: ffffea0001fa4e00 [ 617.070809][ C0] FS: 00007f1909452c80(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 617.070822][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.070833][ C0] CR2: 00005618d4f042b8 CR3: 00000000a10ae000 CR4: 00000000003526f0 [ 617.070847][ C0] Call Trace: [ 617.070853][ C0] [ 617.070860][ C0] rcu_is_watching+0x15/0xb0 [ 617.070876][ C0] ? __update_page_owner_handle+0x5a/0x570 [ 617.070895][ C0] __update_page_owner_handle+0x94/0x570 [ 617.070920][ C0] __set_page_owner+0x10a/0x4c0 [ 617.070940][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 617.070958][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 617.070977][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 617.070991][ C0] ? bad_range+0x8b/0x2c0 [ 617.071010][ C0] post_alloc_hook+0x228/0x280 [ 617.071025][ C0] get_page_from_freelist+0x24dc/0x2580 [ 617.071044][ C0] ? page_table_check_set+0x148/0x610 [ 617.071065][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 617.071089][ C0] ? prepare_alloc_pages+0x22a/0x650 [ 617.071107][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 617.071125][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 617.071143][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 617.071159][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 617.071180][ C0] alloc_pages_mpol+0x232/0x4a0 [ 617.071204][ C0] vma_alloc_folio_noprof+0xea/0x210 [ 617.071222][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 617.071238][ C0] ? ___pte_offset_map+0x29/0x240 [ 617.071257][ C0] ? ___pte_offset_map+0x29/0x240 [ 617.071276][ C0] do_pte_missing+0x15a4/0x37a0 [ 617.071296][ C0] ? handle_mm_fault+0xee/0x32a0 [ 617.071316][ C0] handle_mm_fault+0x1b8c/0x32a0 [ 617.071340][ C0] ? handle_mm_fault+0xee/0x32a0 [ 617.071361][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 617.071381][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 617.071408][ C0] do_user_addr_fault+0xa73/0x1360 [ 617.071433][ C0] ? rcu_is_watching+0x15/0xb0 [ 617.071447][ C0] ? trace_page_fault_user+0x84/0x1c0 [ 617.071467][ C0] exc_page_fault+0x6a/0xc0 [ 617.071482][ C0] asm_exc_page_fault+0x26/0x30 [ 617.071496][ C0] RIP: 0033:0x7f19095b3d34 [ 617.071509][ C0] Code: 8d 34 19 49 39 d0 49 89 70 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 48 89 cf 4c 89 e6 48 89 4c 24 08 e8 18 c7 ff ff 48 8b [ 617.071520][ C0] RSP: 002b:00007ffdeb9d8e60 EFLAGS: 00010206 [ 617.071533][ C0] RAX: 000000000001fd51 RBX: 00000000000009b0 RCX: 00005618d4f03910 [ 617.071544][ C0] RDX: 00000000000009b1 RSI: 00005618d4f042b0 RDI: 0000000000000000 [ 617.071553][ C0] RBP: ffffffffffffffc0 R08: 00007f19096ecac0 R09: 0000000000000000 [ 617.071564][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000000009a0 [ 617.071573][ C0] R13: 0000000000000000 R14: 0000000000000099 R15: 00007f19096ecb20 [ 617.071592][ C0] [ 617.417646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.461897][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 617.468761][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 617.477867][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 617.487918][ T31] Call Trace: [ 617.491195][ T31] [ 617.494127][ T31] vpanic+0x1e0/0x670 [ 617.498118][ T31] panic+0xc5/0xd0 [ 617.501843][ T31] ? __pfx_panic+0x10/0x10 [ 617.506258][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 617.511628][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 617.517777][ T31] watchdog+0xfda/0xfe0 [ 617.521921][ T31] ? watchdog+0x209/0xfe0 [ 617.526240][ T31] kthread+0x726/0x8b0 [ 617.530299][ T31] ? __pfx_watchdog+0x10/0x10 [ 617.534958][ T31] ? __pfx_kthread+0x10/0x10 [ 617.539535][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.544725][ T31] ? __pfx_kthread+0x10/0x10 [ 617.549303][ T31] ret_from_fork+0x51b/0xa40 [ 617.553884][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 617.558982][ T31] ? __switch_to+0xc82/0x1410 [ 617.563652][ T31] ? __pfx_kthread+0x10/0x10 [ 617.568236][ T31] ret_from_fork_asm+0x1a/0x30 [ 617.573001][ T31] [ 617.576371][ T31] Kernel Offset: disabled [ 617.580678][ T31] Rebooting in 86400 seconds..