last executing test programs: 4m2.774494775s ago: executing program 3 (id=5329): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x6, 0x2, @loopback, @remote, 0x8000, 0x1, 0x7, 0xba7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x6, 0x2, @loopback, @remote, 0x8000, 0x1, 0x7, 0xba7}}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xb, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xb, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000a00}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffe0, 0xffff}, {0x1, 0xc}, {0xffff, 0x8}}, [{0x8, 0xb, 0x8a9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000a00}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffe0, 0xffff}, {0x1, 0xc}, {0xffff, 0x8}}, [{0x8, 0xb, 0x8a9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000fffffd7f0800000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000fffffd7f0800000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1845fde000800000000000000000007e265009c16cb7e826e773c2c5d02c90000000181110ba4d52c0f8a38e90f463253d7993cd434cc4012f092614bf5eec4c7e9dbf3220b771e33b0d08604f6bf01a24e90f430c74efc7115500000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@delqdisc={0x2c0, 0x25, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x9, 0x1}, {0xfa5a1c02dbfdc449, 0xf}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x5, 0x0, 0xfffffff8, 0x897}}, @TCA_CBS_PARMS={0x18, 0x1, {0x92, '\x00', 0x0, 0x1, 0x2e, 0xf}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x2, 0x0, 0x40, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7a, '\x00', 0x0, 0xfffff03a, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x1, 0xff78, 0x6, 0x6}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x6, 0x6, 0x1, 0xb3, 0x7f, 0x3}}, {0xa, 0x2, [0x0, 0xac, 0x800]}}, {{0x1c, 0x1, {0x5, 0x1, 0xf22, 0x5, 0x1, 0x1, 0x8, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x5]}}, {{0x1c, 0x1, {0x6, 0x4, 0xffff, 0x9, 0x2, 0x1, 0x8, 0x9}}, {0x16, 0x2, [0x4, 0x7, 0x4, 0x6, 0x8, 0x6f36, 0xfffe, 0x40, 0x8]}}, {{0x1c, 0x1, {0xf1, 0x1, 0x9, 0x2, 0x2, 0x6, 0x7, 0x5}}, {0xe, 0x2, [0x8, 0x8, 0x0, 0x8, 0x0]}}, {{0x1c, 0x1, {0x4, 0x3, 0x4f7, 0x4, 0x2, 0x8, 0x1ff, 0x6}}, {0x10, 0x2, [0x5d9, 0xfffc, 0xac68, 0x4f9, 0x7ff, 0x2]}}, {{0x1c, 0x1, {0x9, 0x5, 0xffff, 0x4, 0x0, 0xfff, 0x1b, 0x7}}, {0x12, 0x2, [0x3, 0xfffa, 0x3, 0x8, 0x4, 0x7, 0xb0f3]}}, {{0x1c, 0x1, {0x8, 0xe, 0x8ae4, 0x2, 0x0, 0x6, 0x83, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x40, 0x3, 0xf048, 0x1, 0x1, 0x401, 0x2, 0x6}}, {0x10, 0x2, [0x4, 0x1, 0xb2, 0x1, 0x1ff, 0x4]}}, {{0x1c, 0x1, {0xf, 0x6, 0x101, 0xd6, 0x2, 0x4, 0x6, 0x4}}, {0xc, 0x2, [0x47, 0x0, 0x101, 0x9]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x797f93a9, 0x40, 0xc6, 0x3}, 0x4, 0x1, 0xffffffff, 0x8001, 0x2, 0x1e, 0x0, 0xf, 0x6, 0x8, {0x6, 0x7, 0x3, 0x1ff, 0x8f3, 0x1}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x400000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x810}, 0x40000) socket$packet(0x11, 0x2, 0x300) listen(r8, 0x6) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r13 = accept4$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f00000004c0)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000000)={0x10, 0x2, 0xd, 0x8, 0x0, 0x2b, 0x0, 0x4, 0xff, 0x6, 0xd, 0x9, 0x8}, 0xe) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040102000000000000000000000002050001000300000035813db1842afaa9be5f4ff5a4c0d242aaa3ca454eaaca5331a4ea1481"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040102000000000000000000000002050001000300000035813db1842afaa9be5f4ff5a4c0d242aaa3ca454eaaca5331a4ea1481"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m2.542652897s ago: executing program 3 (id=5333): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvfrom$inet6(r1, 0x0, 0x0, 0x6122, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 4m1.042837418s ago: executing program 3 (id=5354): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r4, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x2800000, 0x5, 0x8, 0x52, 0x8000, 0xe7, 0x1, 0x8]}}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x9}]}]}, 0x2c}}, 0xc000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r9, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008844) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r10, 0x0, 0x15, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a62875483efe176d", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r11, 0xffffffffffffffff, 0x500}, 0x57) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0900e600000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020de2b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a899dc4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad0300000067522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x17, 0x1, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) 4m0.787921716s ago: executing program 3 (id=5360): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}, @info_reply={0x10, 0x0, 0x0, 0x8, 0x1414}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x800}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r4, 0x4, 0x30}, &(0x7f0000000180)=0xc) 3m59.871322988s ago: executing program 3 (id=5376): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) 3m59.775393776s ago: executing program 3 (id=5378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x4}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xe, @bearer=@l2={'ib', 0x3a, 'pim6reg\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40080) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 2m52.761923143s ago: executing program 32 (id=5378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x4}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xe, @bearer=@l2={'ib', 0x3a, 'pim6reg\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40080) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 1m13.362881761s ago: executing program 0 (id=6471): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0xbe9f}}], 0x18}}], 0x1, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000740)=[{{&(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) syz_init_net_socket$x25(0x9, 0x2, 0x10) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xffffffff}, 0xffffffffffffff2a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb, 0x1, 0x1, 0x9, 0x3, 0x5}, 0x20) 1m13.334642661s ago: executing program 0 (id=6474): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)=ANY=[@ANYRES64=r0], 0x14}], 0x1, 0x0, 0x0, 0x44}, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0xa, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r4, 0x75fb3000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711002000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1m12.640829812s ago: executing program 0 (id=6478): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xad, &(0x7f0000000a80)=""/173, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xa, 0x0, 0x8}, 0x10}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r0, 0x20, &(0x7f0000000740)={&(0x7f0000000400)=""/237, 0xed, 0x0, &(0x7f0000000680)=""/164, 0xa4}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x1, r8, 0x7, r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000c00)={0x3, 0x1, 0xbb, &(0x7f0000000b40)=""/187}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xc}, {0xf, 0xfff1}, {0x10}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'gretap0\x00', &(0x7f00000009c0)={'erspan0\x00', 0x0, 0x1, 0x78a8, 0x1, 0x9, {{0xb, 0x4, 0x1, 0x28, 0x2c, 0x66, 0x0, 0x10, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast, {[@lsrr={0x83, 0x17, 0xe4, [@dev={0xac, 0x14, 0x14, 0x31}, @broadcast, @broadcast, @remote, @multicast1]}, @noop]}}}}}) 1m12.626811051s ago: executing program 0 (id=6485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x1, 0x2, 0x4}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = syz_open_procfs$namespace(r6, &(0x7f0000001780)='ns/ipc\x00') r10 = getpid() sendmmsg$unix(r5, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r7}}}, @rights={{0x18, 0x1, 0x1, [r9, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e21, 0x2, 0x4e20, 0x0, 0x80595cfa9ad8a234, 0x0, 0x20, 0x6c, r4, r7}, {0x5, 0x3, 0x200, 0x2, 0x6, 0x9, 0x7, 0x81}, {0x1, 0x7fffffffffffffff, 0x3, 0x9}, 0x7f22, 0x0, 0x2, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x3c}, 0xa, @in6=@private0, 0x3502, 0x2, 0x1, 0xb, 0x7, 0x100, 0x5}}, 0xe8) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r11, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r14, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_USERDATA={0x26, 0x7, 0x1, 0x0, "2c3c47484147094c0a134665ccfcedfe203a0377987bc22eda12bb5f678b6113b9eb"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 1m12.625786276s ago: executing program 0 (id=6486): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x800442d2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000600)={0x0, 0x0, 0x1, [0x0, 0x6a1, 0x8, 0x4, 0x9], [0x7, 0x7ff, 0x3, 0xffffffff, 0x6, 0x0, 0x4, 0x8, 0x7, 0x9, 0xfffffffffffffffc, 0xfffffffffffff774, 0x9, 0x7ff, 0x8, 0x4, 0x1, 0x7, 0xe, 0xa937, 0x336, 0xffffffff, 0x3, 0x3, 0xc, 0x5, 0x2, 0x7, 0x80, 0x6c0, 0x8, 0x80000001, 0x21a0, 0x99dc, 0x8, 0xcdefabc, 0x8000000000000001, 0xfd, 0x5, 0xfde, 0x0, 0x7, 0x5980000000000000, 0x1, 0x100000001, 0xbc7e, 0x55c6ee3c, 0x2, 0x7, 0x7, 0x0, 0x9, 0x2, 0x8, 0x1000, 0x200, 0x8, 0x9, 0x8, 0x8, 0x3, 0x49e, 0x6, 0x5d76, 0x5, 0x7f, 0xb29a, 0x2, 0x82, 0x4, 0xb94, 0x10001, 0x1, 0x7fffffff, 0x1, 0x7ff, 0x6, 0x2, 0x2, 0x96d4, 0x3, 0x5, 0x5, 0x10000, 0x6, 0xf, 0x2, 0x9, 0x10001, 0x0, 0x150d, 0x8000000000, 0x8, 0x7, 0x9, 0x7, 0xa, 0x3, 0x8, 0x7fffffffffffffff, 0x1000, 0x2, 0x8, 0x3, 0x6, 0x10001, 0x4, 0x5, 0x0, 0x3, 0xc, 0x7b75, 0xf87, 0x5, 0x7, 0x2, 0x7, 0xff, 0x0, 0x9, 0x2]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a40)={0x0, 0x4, {0x7, @struct={0xb0, 0xfff}, r4, 0x7, 0x9, 0xfffffffffffffffd, 0x3, 0x8000000000000001, 0x88, @struct={0xe8, 0xfffffff8}, 0x101, 0xc, [0x9, 0x8, 0x8, 0x8, 0x9, 0x4396]}, {0x4, @usage=0x1, 0x0, 0x7a2, 0x1c, 0x6, 0x4, 0x0, 0x0, @struct={0x5, 0x20000}, 0x7, 0x4, [0x8, 0xc, 0x5, 0x3, 0x8, 0x9]}, {0x9679, @usage=0x8d, 0x0, 0x3, 0x40, 0x9, 0x3, 0xc9f, 0x400, @struct={0x3, 0xd}, 0x7, 0x5, [0x5, 0x32, 0x1, 0x16e, 0x2, 0x63]}, {0xfffffffffffffff9, 0x9, 0x7fffffff}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}, 0x1, 0x620b}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}]}, @NFTA_RULE_COMPAT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1}}], 0x1, 0x20000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000080)=r9, 0x4) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000085000000610000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, @in=@local, @in=@broadcast}]}, @policy_type={0xa}]}, 0xac}}, 0x0) ioctl$sock_SIOCBRADDBR(r12, 0x89a0, &(0x7f0000000080)='bridge_slave_1\x00') 1m12.478970937s ago: executing program 0 (id=6490): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 57.390288208s ago: executing program 33 (id=6490): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 3.406767197s ago: executing program 2 (id=7061): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r1 = socket$kcm(0xa, 0x3, 0x3a) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) recvmsg(r1, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x20, 0x0, 0x0, 0x0, 0xf000, &(0x7f00000003c0)='ipvlan0\x00', 0x1, 0x0, 0x9}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e23, 0x1000, @private2, 0x4}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x8, @local, 0x40}], 0x68) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005142106fdffffff00000000080001"], 0x20}}, 0x0) (async) recvfrom(r4, &(0x7f00000000c0)=""/158, 0x9e, 0x0, &(0x7f0000000180)=@sco={0x1f, @none}, 0x80) (async, rerun: 64) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) accept4$inet(r5, &(0x7f0000000340)={0x2, 0x0, @private}, &(0x7f0000000380)=0x10, 0x100800) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0x100, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}, @common=@mh={{0x28}, {"df07", 0xfe}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 2.775039746s ago: executing program 2 (id=7065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0857f9ffbff0300000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x2) write$nci(r3, &(0x7f0000000000)=@DATA={0x2, 0x0, 0x0, 0x0, 0x0, "e5f43070a265435b9ac208a3be4f6e5e"}, 0x13) 2.694645322s ago: executing program 1 (id=7067): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r1, &(0x7f0000000000)=""/50, 0x32, 0x2101, &(0x7f0000000140)=@hci={0x1f, 0x3, 0x1}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) 2.681866532s ago: executing program 2 (id=7068): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x18, 0x8}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x11, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x0, 0x1f0, 0xb8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'xfrm0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x100, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xd0, 0x2, {{0x1, [0x0, 0x0, 0x2], 0x0, [0x1, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x8], [0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x81}, {0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0xb92}, {0xc, 0x3, 0x200}]}]}}}]}, 0x100}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104010000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a2c0012801100010062726964676500000000766500000000140005800500190002000000080025000800ff00140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.575619807s ago: executing program 5 (id=7069): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket(0x28, 0x5, 0x0) getsockopt(r1, 0x28, 0x8, 0x0, &(0x7f0000000040)=0x47) (async) close(r0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000300)=0x8) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r2, 0x14, 0x0, @void}, 0x10) 2.311971973s ago: executing program 5 (id=7070): close(0x4) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787", 0x2e}], 0x2}}], 0x1, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x3, 0x0, 0x4, 0x0, 0x44}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x101, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, 0x42013, 0x2020f}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc010}], 0x1, 0x40801) sendmsg$kcm(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000017c0)="7fa77900a9518550599273dea1086241baebe6a82f8ce409791a4f25775a2fdc8370aabd8047977d58bc9ceeee4807377db4d1244dc79781a45503fe4c89070cc156a0a72d846ea58c2542a4141cac501d92a3a325ff9d315da2649ef0d24f4c8498f0e650438659ce49b949a26005e93afb0abbef3a8e0db354a50eafbd94b8d9ee276479cb7e9a86d725e6388a9c3d0e0de482b38b9f54e2db97e2bcaf0025d92c1701c500996ba9921706277f7a23c2643f2a", 0xb4}], 0x1}, 0x25) (async) recvmsg$can_raw(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/179, 0xb3}, {&(0x7f0000000140)=""/206, 0xce}], 0x2}, 0x2000) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x0, 0x0, 0x0, 0xf}}) (async, rerun: 64) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) 2.234640765s ago: executing program 6 (id=7071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x118, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x88c8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4c}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000844}, 0x20040800) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x495) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x25, 0x17, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r4, 0x4) socket$igmp6(0xa, 0x3, 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000580)={0x428, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe78b}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f88}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcdd}]}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "5150f9c079c80302d09541048d68aeacaa802d03b59aae62ec66d385e4f4d9c1cc0b54b244964a7d222b0dc963681d187fd5c16d675527e7af3d349f0fd703e44fa8fffeb0abd3c979c5984632d243aaf3f4a7d02183a49d01dd684852367e8a76c039bbad8fc05d95626297d42d50cb71ce313747d2feabb6bac9d8d0079d4a3c255600b87c"}, @TIPC_NLA_NODE_ID={0x98, 0x3, "0acf37975d3f9205493f6294d392c766783e4176e91539106013793fc6b466f22b7761c3b05ceeadd9fad279848366f7f17bbe8215f1e5e059352b708a3e413bed6745483fcd3c7bbb7b596e3f55c0e4816e79d529989fa4d2299183e1c3084d4e05522b83b760b6c0f425d8ff814c253af266923a7e2444a14b6ea5e985fda84e2ca5015544f32809085e311813c57ba07b37d2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe9f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff9e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x740}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x464}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x29d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x40800}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@fallback=r0, 0x14, 0x0, 0x3b3, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x28c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0xf2, 0x7, 0x1, 0x0, "d6b04aa19bd0d5f6d389636eade636fb1ec7baafd3ad5a76d13a4c747744eb5883f6accd93e273fe7657f2491eac428d4b2ad23b5341ca932bb6696a8bef892c05dc9429c5d7651fd124c92739a67399db4fd0ee49cb3649dfa28057499fead6c6ee5532b3ad8828aa9c49f8261946053e296d9e3f44ff08bdb5f12c3fa190b8bffa0089491164e3f8b6fd24c5037057e14ac7448d5763bf8b082a427cc30a10def448deceeb1377bd294252d81e3e0d966d6bbf7dc88b2906bff6271c7666f2c87cf63f961614efda06547d622edfd6e67dbb18c63b7233e65d76b299bf1fbff58798b5575f4cfd6bd92ba449c2"}, @NFTA_RULE_USERDATA={0x79, 0x7, 0x1, 0x0, "833480811b262bb3555a1c87cb2f34b31c0e1e9fa14379f9256ef24a3e901feea87e57e47ac4dc75ad399ea477abd5b0b79bfa5280540df456118ba3a4289b8e77f2dd7f69dc061d469d43119668ae87e4efc71f8949f64168afaa9b1ae37f81d0d3494a3c5fc6a43915d6668ef42a5745dabea75a"}, @NFTA_RULE_USERDATA={0xfe, 0x7, 0x1, 0x0, "85e3bd86ad538716e9f66d57489806be9a5457932dc2601af072f897dfe10e61906587df07f01449e82206793c200f7537b9089816be653c05d4cfdbcb41c5367859de2967edb8feee020a29f1720bc27805045d20093ede9f2e5fd777a31cc1fdc0a5482fdedea13f5f0b853317faf0dccbeade9b20407ff604fb42f9edc3ac991c959d87b250ded9c56d766427d414ea6a482e91750775f1cfeb9958fe84499f23b4aa601cf9fd511ff084ff546cbb19eb621c44bd8a0aeb36c4d11e29c4d91771e1ae50964bed72feb6d0b225cc323218ae22f388dc8a61b27b9c9ff09013153ed03f6cbc985b36cb6c0c6c39865be6bc7e5057c7a6d3adab"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x28c}, 0x1, 0x0, 0x0, 0xc0}, 0x4090) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001040)=r8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x78, 0xa, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc0}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20040004) connect$llc(r6, &(0x7f00000011c0)={0x1a, 0x304, 0x1, 0x0, 0x4, 0x1, @broadcast}, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048081}, 0x4004004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r12, 0x89e0, &(0x7f0000001380)={'macvlan1\x00', 0x6, 0x9}) 2.078575229s ago: executing program 2 (id=7072): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000034000000030a01010000000000000000010000000900030073797a301b99000008000a40000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x2, {0xa, 0x4e23, 0x7f, @remote, 0x1}}}, 0x32) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f0000000300), 0x4) syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800003f974a2b592886c9fb5000fcffffff0000000000000000611018000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.077872963s ago: executing program 1 (id=7073): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2f30c8307b0a", 0x6}], 0x1) 2.030053691s ago: executing program 6 (id=7074): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x300, 0x70bd2e, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}}, 0x24048800) socket$tipc(0x1e, 0x5, 0x0) 2.01539313s ago: executing program 4 (id=7075): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) 1.867051338s ago: executing program 6 (id=7076): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000001000001c1800018014000200776c616e30000000000000000000000008000c0006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x401, 0x4, 0xffffffff}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c850) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=@newtclass={0x94, 0x28, 0x8, 0x70bd2b, 0xc7ab, {0x0, 0x0, 0x0, r9, {0x7, 0x4}, {0xfff2}, {0x10, 0xa}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_hfsc={{0x9}, {0x54, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x3, 0x5, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0xffffffff, 0xd}}, @TCA_HFSC_USC={0x10, 0x3, {0xed, 0x8, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x8499, 0x70}}, @TCA_HFSC_USC={0x10, 0x3, {0xf19e, 0x0, 0x3}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048010}, 0xc0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x41080}, 0x80) socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r8, 0x0, 0x8000010) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r12, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) close(0x3) 1.866676516s ago: executing program 4 (id=7077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRES8=r3, @ANYBLOB="ee0e477501d335206822e5f8e40a3536146dac74bf756b867bc6e48132fc74ca7b84fd5753c5b95c53148b1df6138725c124edfc3ccb2aeae1c611f696de", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r1, &(0x7f0000000000)='\x9a$:\x80}{/-\\!\x00', 0x301040, &(0x7f0000000040)={@align=0x2, {0x7fff, 0x6, 0x401, 0x2}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x5}, {[0x5, 0x178, 0x9, 0x4]}, 0x0, 0x4a, &(0x7f0000000200)=""/74}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x5, 0xe, 0x4, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x57, 0x40, 0x5f}}) bind$packet(r4, &(0x7f0000000480)={0x11, 0x6, r5, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.792641865s ago: executing program 1 (id=7078): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route(r2, &(0x7f0000000a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0xc004}, 0x379cd3120c9ab6aa) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x48080}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r6, &(0x7f0000000240)=[{0x0}], 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000c40)={{r6, 0x0, 0x32d000, 0x0, 0x8, 0x0, &(0x7f0000000b40)=0x2}, {[0x3, 0x7ff, 0x7, 0x8]}, 0x2000, 0x0, 0x0}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x5, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004807}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 1.721706839s ago: executing program 5 (id=7079): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x0, @random="fa486edc6f6a"}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000806b113b00000000008510000002000000850000000000000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000040)='\x00', 0xa001, &(0x7f00000000c0)={@_ha_fsid={[0x6a624833, 0xc5cc]}, {0xfffa, 0x9, 0x38f2, 0x9}}, 0xfff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x8}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, r3, 0x4, 0x0, 0x4}, 0x50) (rerun: 32) 1.539036433s ago: executing program 5 (id=7080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4}, 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x1f, 0x0, "ef6f9923aee64fd49a6543985ba1f0fc228e1cad4624e121519f431b51e85df50bbf285f39329afe92cdc84b909a695ff8c9eab56ba8e0d22342bce84ec0c72fed4c6faa451173229cc081652f2f5698"}, 0xd8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x3, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000080)=@tcp, 0x1}, 0x20) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "0096b5", 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @local, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0xffd, {[@mptcp=@ack={0x1e, 0xc, 0x4, 0x4, "c0606d1b03f62691"}]}}}}}}}}, 0x0) 1.538663946s ago: executing program 4 (id=7081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x34, 0x9, 0x3, 0xfffffffd, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @pid}]}, 0x1c}}, 0x4000010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0010000304000000000400000000000000", @ANYRES16=0x0, @ANYRESDEC=r2], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 1.159569948s ago: executing program 1 (id=7082): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x43, 0x0, 0x0, 0x2663}, 0x0) 1.153263506s ago: executing program 6 (id=7083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800ca850a9c00000000000000000000063c1c00000031c711ef895c4e29858b8c00009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xa4, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={0x1, &(0x7f0000000580)="a781f00be17a82b0ecf0321e5d61d531a5b09f6fe9294668fe0542f9db551e53d0f667dbfccfb4ae016c07df9f5a7f21d225bdd5b037c8409463318184259cc1052faa082e5b04fec91198712bc8743995de8cb95b7bec83a643126aad1865ab4622c9d44a9559b4818303232f64c6f15c37819c9ecf35d99e14a029ec1e95cd7f5d6dbcfd2d0bb446dc591b206292a3f8fdf7a668eda6cc6b429b39e43dc0e11019e9b4e492b227ad6428c4ab6c5ca20db071af89796013dd8e12e4e1fd88b513367756bebe0011be0da7d28630e2aa2bcba3cc753994bc5edaedabf0fb50b60916936d6a179bd5b2862af200e086ce3701", &(0x7f0000000680)=""/190}, 0x20) connect$packet(r2, &(0x7f00000003c0)={0x11, 0x8, r3, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) socket$inet_sctp(0x2, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800ca850a9c00000000000000000000063c1c00000031c711ef895c4e29858b8c00009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xa4, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={0x1, &(0x7f0000000580)="a781f00be17a82b0ecf0321e5d61d531a5b09f6fe9294668fe0542f9db551e53d0f667dbfccfb4ae016c07df9f5a7f21d225bdd5b037c8409463318184259cc1052faa082e5b04fec91198712bc8743995de8cb95b7bec83a643126aad1865ab4622c9d44a9559b4818303232f64c6f15c37819c9ecf35d99e14a029ec1e95cd7f5d6dbcfd2d0bb446dc591b206292a3f8fdf7a668eda6cc6b429b39e43dc0e11019e9b4e492b227ad6428c4ab6c5ca20db071af89796013dd8e12e4e1fd88b513367756bebe0011be0da7d28630e2aa2bcba3cc753994bc5edaedabf0fb50b60916936d6a179bd5b2862af200e086ce3701", &(0x7f0000000680)=""/190}, 0x20) (async) connect$packet(r2, &(0x7f00000003c0)={0x11, 0x8, r3, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) (async) socket$inet_sctp(0x2, 0x0, 0x84) (async) 1.053027827s ago: executing program 2 (id=7084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) 943.158835ms ago: executing program 5 (id=7085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x2000c050) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 813.21675ms ago: executing program 6 (id=7086): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd631c210115e8d6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 793.10081ms ago: executing program 4 (id=7087): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x9, 0xc}, {0xc, 0xe}, {0x7, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}}, 0x4000010) 728.199154ms ago: executing program 1 (id=7088): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x800, 0x210, 0x4}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x0, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x4}, {0x104, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x118, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x8000, 0x6, 0x0, 0x3672, 0x2, 0x9, 0x6, 0x7, 0x10, 0x0, 0x3, 0x3, 0x6, 0xf, 0x6, 0x4], 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3a8) 727.867234ms ago: executing program 6 (id=7089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYRES32=r0], 0x18}}, 0x10) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0xfffffffffffffd25) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/49, 0x31}], 0x2}, 0x8000}], 0x1, 0x40000101, 0x0) writev(r3, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x0, 0xa6a5f3d5acba5a30, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@gettclass={0x24, 0x2a, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa, 0x1}, {0x2, 0xb}, {0xffff, 0x10}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r7, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) getsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502da9a2c8b7f398086dd0000000010690800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800"/102], 0x0) 660.88563ms ago: executing program 5 (id=7090): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x1, 0x6}, {0x3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000340)) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 630.277024ms ago: executing program 2 (id=7091): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20936553"], 0xfdef) 551.84818ms ago: executing program 4 (id=7092): syz_emit_ethernet(0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd606410a600200001000000000000000009f63cb7a909086893170000ffff0a010100fe8000000000000000000000000000aa0102000000000000c910fe880000000000000000000000000001000000000000"], 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x59c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x6, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x570, 0x2, [@TCA_BPF_ACT={0x56c, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1b8, 0x0, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x0, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf6, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x54, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000, 0x3e54c82e}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x6, 0x6, "16aa"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1dc, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacf, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x8, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2cb, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x22, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd1488925"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x10000006, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x1, 0x6, 0x6a}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xa0}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x13, 0x0, 0x2, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, ';.;S'}]}}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000001c0)={r4, 0x40, 0x8}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@newtclass={0x40, 0x28, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf, 0x10}, {0xfff2}, {0xffff, 0x6}}, [@tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_red={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x9}, 0x800) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x4807, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x78e, 0x5, 0xd8, 0x8001, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10004, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x800, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x2, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x6, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x568, 0x9, 0xc, 0xff, 0x7b6, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0x8000add9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0x10002, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0xffffffff, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x203, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0x800, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x5, 0x103, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x0, 0x1, 0x40, 0x8, 0x3, 0x710, 0x9, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendto$inet6(r11, &(0x7f0000000140)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2d, 0xb, 0x1, 0x0, {0x6}}, 0x14}}, 0x8000) recvmmsg(r11, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 478.00237ms ago: executing program 1 (id=7093): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x114, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0xfffffff8, 0x95, 0x6, {0x9, 0x2, 0x3ff, 0x1, 0x5b40}, {0x9e, 0x0, 0x3, 0x7fff, 0x2, 0xff}, 0x800, 0x0, 0x56db}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 0s ago: executing program 4 (id=7094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0x0, 0x1, 0xfd, 0x1}, [@RTA_TABLE={0x8, 0xf, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cd5323000000000000001f"], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r0) kernel console output (not intermixed with test programs): 'syz.0.5665': attribute type 12 has an invalid length. [ 674.177932][T27258] netlink: 'syz.4.5667': attribute type 1 has an invalid length. [ 674.181434][T20666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.462168][T27272] netlink: 'syz.5.5673': attribute type 83 has an invalid length. [ 674.599553][T27283] IPv6: Can't replace route, no match found [ 674.605800][T27283] IPv6: Can't replace route, no match found [ 674.800869][T27291] __nla_validate_parse: 1 callbacks suppressed [ 674.800888][T27291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5679'. [ 675.017229][T27306] netlink: 'syz.5.5681': attribute type 10 has an invalid length. [ 675.033638][T27306] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5681'. [ 675.066740][T27306] team0: Port device geneve1 added [ 675.078759][T27301] netlink: 'syz.5.5681': attribute type 25 has an invalid length. [ 675.087761][T27301] IPv6: NLM_F_CREATE should be specified when creating new route [ 675.274214][T27318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5686'. [ 676.207304][T27368] netlink: 'syz.5.5699': attribute type 1 has an invalid length. [ 678.011357][T20647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.239836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.248374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.256830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.265256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.063082][T27404] tipc: Enabling of bearer rejected, failed to enable media [ 679.106515][T27405] netlink: 'syz.0.5707': attribute type 12 has an invalid length. [ 679.201581][T27419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5712'. [ 679.246192][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5712'. [ 679.265355][T27424] lo: entered allmulticast mode [ 679.273386][T27424] tunl0: entered allmulticast mode [ 679.281510][T27424] gre0: entered allmulticast mode [ 679.287327][T27424] gretap0: entered allmulticast mode [ 679.296058][T27424] erspan0: left promiscuous mode [ 679.303648][T27424] ip_vti0: entered allmulticast mode [ 679.310695][T27424] ip6_vti0: entered allmulticast mode [ 679.318127][T27424] sit0: entered allmulticast mode [ 679.331953][T27427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5714'. [ 679.345945][T27424] ip6tnl0: entered allmulticast mode [ 679.346397][T27424] ip6gre0: entered allmulticast mode [ 679.348474][T27424] syz_tun: entered allmulticast mode [ 679.859625][T27444] syzkaller0: entered promiscuous mode [ 679.865226][T27444] syzkaller0: entered allmulticast mode [ 679.952357][T27459] netlink: 'syz.1.5725': attribute type 1 has an invalid length. [ 679.983221][T27459] bond12: entered promiscuous mode [ 679.988899][T27459] 8021q: adding VLAN 0 to HW filter on device bond12 [ 680.021599][T20666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.034268][T27459] 8021q: adding VLAN 0 to HW filter on device bond12 [ 680.044312][T27459] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 680.055600][T27459] bond12: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 680.070061][T27459] bond12: (slave ip6gre1): making interface the new active one [ 680.077779][T27459] ip6gre1: entered promiscuous mode [ 680.086526][T27459] bond12: (slave ip6gre1): Enslaving as an active interface with an up link [ 680.275626][T27471] xt_TCPMSS: Only works on TCP SYN packets [ 680.365208][T27467] nbd2: detected capacity change from 0 to 8388608 [ 680.381079][ T1648] block nbd2: Dead connection, failed to find a fallback [ 680.475854][T27482] sit0: Caught tx_queue_len zero misconfig [ 680.592690][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5733'. [ 680.728524][T27487] bond14: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 680.756866][T27488] team0: entered promiscuous mode [ 680.773019][T27488] team_slave_0: entered promiscuous mode [ 680.788307][T27488] team_slave_1: entered promiscuous mode [ 680.819944][T27488] team0: left promiscuous mode [ 680.824878][T27488] team_slave_0: left promiscuous mode [ 680.830515][T27488] team_slave_1: left promiscuous mode [ 680.948185][T27504] netlink: 'syz.2.5735': attribute type 3 has an invalid length. [ 681.045440][T27510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5739'. [ 681.074678][T27511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5737'. [ 681.123445][T27514] veth0: entered promiscuous mode [ 681.166615][T27515] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5738'. [ 681.190367][T27515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5738'. [ 681.200042][T27515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5738'. [ 681.210807][T27515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5738'. [ 681.339786][T27516] veth0: left promiscuous mode [ 681.704577][T27538] netlink: 'syz.4.5745': attribute type 3 has an invalid length. [ 681.810005][T27546] netlink: 'syz.2.5749': attribute type 13 has an invalid length. [ 681.836382][T27546] erspan0: refused to change device tx_queue_len [ 681.854498][T27546] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 682.060295][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5752'. [ 682.111085][T27548] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5749'. [ 682.181134][T27559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.264781][T27564] netlink: 'syz.0.5754': attribute type 1 has an invalid length. [ 682.272587][T27564] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5754'. [ 682.423356][T27567] vlan2: entered allmulticast mode [ 682.428550][T27567] bond0: entered allmulticast mode [ 682.433706][T27567] bond_slave_0: entered allmulticast mode [ 682.439508][T27567] bond_slave_1: entered allmulticast mode [ 682.617980][T27574] x_tables: unsorted underflow at hook 4 [ 682.657814][T27575] vcan1: entered promiscuous mode [ 682.708697][T27575] vcan1: entered allmulticast mode [ 683.077761][T27598] bridge_slave_1: left allmulticast mode [ 683.083832][T27598] bridge_slave_1: left promiscuous mode [ 683.090414][T27598] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.107755][T27598] bridge_slave_0: left allmulticast mode [ 683.117092][T27598] bridge_slave_0: left promiscuous mode [ 683.131841][T27598] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.282558][T27601] syzkaller0: entered promiscuous mode [ 683.288194][T27601] syzkaller0: entered allmulticast mode [ 683.296600][T27601] 0: reclassify loop, rule prio 0, protocol 800 [ 683.436823][T27611] bond1: (slave lo): Releasing backup interface [ 683.444241][T27611] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 683.454942][T27611] bridge_slave_0: left allmulticast mode [ 683.460632][T27611] bridge_slave_0: left promiscuous mode [ 683.466484][T27611] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.525223][T27611] bridge_slave_1: left allmulticast mode [ 683.530922][T27611] bridge_slave_1: left promiscuous mode [ 683.537088][T27611] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.548269][T27611] : (slave veth0_to_bond): Releasing backup interface [ 683.560455][T27611] : (slave bond_slave_0): Releasing backup interface [ 683.604893][T27611] : (slave bond_slave_1): Releasing backup interface [ 683.630622][T27611] team0: Port device team_slave_0 removed [ 683.688147][T27611] team0: Port device team_slave_1 removed [ 683.690091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.702731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.711399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.769870][T20643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.784478][T27611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.791933][T27611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.881310][T27611] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 684.018285][ T42] IPVS: starting estimator thread 0... [ 684.331809][T27632] IPVS: using max 26 ests per chain, 62400 per kthread [ 684.441501][T27646] netlink: 'syz.5.5778': attribute type 21 has an invalid length. [ 684.714074][T27686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 687.266227][T27650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.590700][T27710] __nla_validate_parse: 6 callbacks suppressed [ 687.590719][T27710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5793'. [ 687.629375][T27710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5793'. [ 687.665439][T27710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5793'. [ 687.674639][T27710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5793'. [ 687.728712][T27710] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5793'. [ 687.769464][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5790'. [ 687.797237][T27728] netlink: 'syz.5.5795': attribute type 9 has an invalid length. [ 687.829305][T27720] netlink: 'syz.5.5795': attribute type 9 has an invalid length. [ 688.157728][T27747] erspan0: entered promiscuous mode [ 688.163088][T27747] erspan0: entered allmulticast mode [ 688.334206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.343032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.351660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.360293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.528205][T27758] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5804'. [ 688.632532][T27764] syzkaller0: entered promiscuous mode [ 688.638040][T27764] syzkaller0: entered allmulticast mode [ 688.758108][T27768] netlink: 'syz.5.5808': attribute type 1 has an invalid length. [ 688.801321][T27768] bond1: entered promiscuous mode [ 688.806749][T27768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 688.817788][ T5762] IPVS: starting estimator thread 0... [ 688.833784][T27768] macvtap1: entered allmulticast mode [ 688.872163][T27768] macvtap2: entered allmulticast mode [ 688.908831][T27772] IPVS: using max 31 ests per chain, 74400 per kthread [ 688.970701][T27768] bond1: (slave bridge0): making interface the new active one [ 688.978238][T27768] bridge0: entered promiscuous mode [ 688.985830][T27768] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 689.533961][T20655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.544702][T20646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.602878][T27818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5817'. [ 689.612013][T27818] netlink: 6 bytes leftover after parsing attributes in process `syz.5.5817'. [ 689.702197][T27821] netlink: 'syz.5.5817': attribute type 1 has an invalid length. [ 689.732787][T27821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5817'. [ 690.424944][T27857] netlink: 'syz.5.5834': attribute type 1 has an invalid length. [ 690.487977][T27855] can: request_module (can-proto-0) failed. [ 690.567918][T27868] xt_ecn: cannot match TCP bits for non-tcp packets [ 690.588767][T27861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.598254][T27861] bond2: (slave bond3): making interface the new active one [ 690.606782][T27861] bond2: (slave bond3): Enslaving as an active interface with an up link [ 690.649302][T27865] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 690.672008][T27864] syzkaller1: entered promiscuous mode [ 690.681159][T27864] syzkaller1: entered allmulticast mode [ 691.032496][T27888] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 691.276738][T27906] dvmrp0: entered allmulticast mode [ 691.335660][T27917] ip6gretap0: entered promiscuous mode [ 691.349253][T27919] netlink: 'syz.0.5847': attribute type 2 has an invalid length. [ 691.385567][T27919] netlink: 'syz.0.5847': attribute type 8 has an invalid length. [ 691.416442][T27917] ip6gretap0: left promiscuous mode [ 691.532119][T27925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.737507][T27937] netlink: 'syz.0.5854': attribute type 21 has an invalid length. [ 691.745485][T27937] netlink: 'syz.0.5854': attribute type 1 has an invalid length. [ 691.777088][T27935] syzkaller0: entered promiscuous mode [ 691.782944][T27935] syzkaller0: entered allmulticast mode [ 691.985406][T27949] SET target dimension over the limit! [ 692.108532][T27959] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.115964][T27959] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.359511][T27975] ip6tnl0: Caught tx_queue_len zero misconfig [ 692.542702][T27985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.088066][T28010] __nla_validate_parse: 16 callbacks suppressed [ 693.088087][T28010] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5879'. [ 693.222321][T28019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 693.236708][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5878'. [ 693.266798][T28015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5878'. [ 693.289368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.298028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.386102][T28025] veth1_to_bond: entered allmulticast mode [ 693.437008][T28025] veth1_to_bond: entered promiscuous mode [ 693.473273][T28025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5883'. [ 693.586512][T28025] veth1_to_bond (unregistering): left allmulticast mode [ 693.593595][T28025] veth1_to_bond (unregistering): left promiscuous mode [ 693.906679][T28057] pimreg3: entered allmulticast mode [ 693.926454][T28057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5888'. [ 694.049033][T28065] netlink: 'syz.0.5890': attribute type 1 has an invalid length. [ 694.060366][T28065] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 694.156984][T28070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5892'. [ 694.238847][T28072] bond0: Caught tx_queue_len zero misconfig [ 694.289974][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5892'. [ 694.329921][T28076] netlink: 'syz.5.5894': attribute type 1 has an invalid length. [ 694.345714][T28070] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 694.356869][T28070] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 694.364641][T28070] gretap4: entered promiscuous mode [ 694.369982][T28070] gretap4: entered allmulticast mode [ 694.378755][T28072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5891'. [ 694.397937][T28072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5891'. [ 694.411846][T28072] netlink: 'syz.1.5891': attribute type 12 has an invalid length. [ 694.437113][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5893'. [ 694.442457][T28072] netlink: 'syz.1.5891': attribute type 11 has an invalid length. [ 694.596479][T28081] bond4: (slave bridge1): making interface the new active one [ 694.611617][T28081] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 694.623636][T28084] net_ratelimit: 2 callbacks suppressed [ 694.623656][T28084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.656692][T20655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.815360][T28096] validate_nla: 2 callbacks suppressed [ 694.815380][T28096] netlink: 'syz.4.5900': attribute type 1 has an invalid length. [ 694.831780][T28096] netlink: 'syz.4.5900': attribute type 1 has an invalid length. [ 694.864506][T28096] netlink: 'syz.4.5900': attribute type 1 has an invalid length. [ 694.891951][T28096] netlink: 'syz.4.5900': attribute type 1 has an invalid length. [ 695.067283][T28111] syzkaller0: entered promiscuous mode [ 695.072825][T28111] syzkaller0: entered allmulticast mode [ 695.252043][T28113] openvswitch: netlink: Actions may not be safe on all matching packets [ 695.291243][T20643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.513815][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 695.529242][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 695.537597][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 695.548398][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 695.567541][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.268438][T28150] syzkaller0: entered promiscuous mode [ 696.273976][T28150] syzkaller0: entered allmulticast mode [ 696.306186][T28158] syzkaller1: entered promiscuous mode [ 696.313612][T28158] syzkaller1: entered allmulticast mode [ 696.375447][T28166] netlink: 'syz.4.5917': attribute type 2 has an invalid length. [ 696.394417][T28166] netlink: 'syz.4.5917': attribute type 8 has an invalid length. [ 697.609343][ T5635] Bluetooth: hci5: command tx timeout [ 698.409027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.417833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.426330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.153257][T28212] __nla_validate_parse: 9 callbacks suppressed [ 699.153279][T28212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5927'. [ 699.286026][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5928'. [ 699.395888][T28227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5932'. [ 699.410822][T28227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5932'. [ 699.521775][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5934'. [ 699.689835][ T5635] Bluetooth: hci5: command tx timeout [ 699.856530][T28254] netlink: 'syz.2.5939': attribute type 1 has an invalid length. [ 699.973787][T28254] bond9: (slave geneve3): making interface the new active one [ 699.982707][T28254] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 699.993372][ T9161] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 700.002258][ T9161] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 700.055734][ T9161] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 700.079684][ T9161] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 700.151611][T28268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5946'. [ 700.175619][T28267] mac80211_hwsim hwsim28 wlan0: Caught tx_queue_len zero misconfig [ 700.230498][T28129] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.248184][T28129] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.258022][T28129] bridge_slave_0: entered allmulticast mode [ 700.277519][T28129] bridge_slave_0: entered promiscuous mode [ 700.286708][T20646] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.295497][T20646] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.319284][T28129] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.326656][T28129] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.335182][T28129] bridge_slave_1: entered allmulticast mode [ 700.344078][T28129] bridge_slave_1: entered promiscuous mode [ 700.362664][T20646] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.372637][T20646] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.410045][T20646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.453238][T28129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.468375][T28129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.650878][T28129] team0: Port device team_slave_0 added [ 700.657231][T28288] atomic_op ffff888081c96198 conn xmit_atomic 0000000000000000 [ 700.686379][T28129] team0: Port device team_slave_1 added [ 700.706210][T28292] netlink: 'syz.2.5951': attribute type 9 has an invalid length. [ 700.756525][T28129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.763529][T28129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.792526][T28129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.895244][T28129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.902402][T28129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.928395][T28129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.994409][T28297] dvmrp0: entered allmulticast mode [ 701.000192][T28296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.053267][T20675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.084525][T28291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.149722][T28129] hsr_slave_0: entered promiscuous mode [ 701.156379][T28129] hsr_slave_1: entered promiscuous mode [ 701.162841][T28129] debugfs: 'hsr0' already exists in 'hsr' [ 701.248708][T28129] Cannot create hsr debugfs directory [ 701.345889][T28309] bond0: entered promiscuous mode [ 701.350955][T28309] bond_slave_0: entered promiscuous mode [ 701.356742][T28309] bond_slave_1: entered promiscuous mode [ 701.380374][T28309] batadv0: entered promiscuous mode [ 701.394054][T28309] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 701.470945][T28309] bond0: left promiscuous mode [ 701.475931][T28309] bond_slave_0: left promiscuous mode [ 701.483627][T28309] bond_slave_1: left promiscuous mode [ 701.501288][T28309] batadv0: left promiscuous mode [ 701.592653][T28318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5958'. [ 701.609166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.617896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.742877][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5960'. [ 701.772918][ T5635] Bluetooth: hci5: command tx timeout [ 701.960184][T28129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.055293][T28336] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 702.069508][T28336] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 702.112870][T28337] netlink: 'syz.2.5964': attribute type 1 has an invalid length. [ 702.124763][T28336] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 702.145929][T28336] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 702.259964][T28337] 8021q: adding VLAN 0 to HW filter on device bond10 [ 702.330293][T28129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.563947][T28362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5973'. [ 702.703918][T28129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.762999][T28374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5977'. [ 703.072063][T28129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.239146][T28403] syzkaller0: entered promiscuous mode [ 703.244691][T28403] syzkaller0: entered allmulticast mode [ 703.626688][T28129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 703.644747][T28129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 703.659886][T28129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 703.731359][T28129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 703.762945][T28129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 703.801051][T28129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 703.835404][T28129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 703.848912][ T5635] Bluetooth: hci5: command tx timeout [ 703.871937][T28129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.280362][T28466] netlink: 'syz.0.6002': attribute type 8 has an invalid length. [ 704.304272][T28129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.323048][T28466] __nla_validate_parse: 1 callbacks suppressed [ 704.323065][T28466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 704.394667][T28469] netlink: 'syz.5.6003': attribute type 1 has an invalid length. [ 704.411982][T28462] syzkaller0: entered promiscuous mode [ 704.417498][T28462] syzkaller0: entered allmulticast mode [ 704.475798][T28129] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.514140][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.521358][T20655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.550786][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.558007][T20655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.633744][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6007'. [ 705.449026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.457699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.466309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.089170][T20643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.171213][T20648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.909479][T28129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 706.922424][T28129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.075684][T28496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6011'. [ 707.111460][T28496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6011'. [ 707.122250][T28499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6011'. [ 707.274024][T28510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6014'. [ 707.338512][T28495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6012'. [ 707.384195][T28515] tipc: Enabled bearer , priority 0 [ 707.402793][T28515] tipc: Resetting bearer [ 707.512007][T28529] netlink: 'syz.5.6016': attribute type 11 has an invalid length. [ 708.099222][T28129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.165166][T28129] veth0_vlan: entered promiscuous mode [ 708.205177][T28129] veth1_vlan: entered promiscuous mode [ 708.273711][T28129] veth0_macvtap: entered promiscuous mode [ 708.334544][T28129] veth1_macvtap: entered promiscuous mode [ 708.553203][T28129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.587049][T28129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.646773][T28534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.655604][T28534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.678736][T28534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.687530][T28534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.004577][T28579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6027'. [ 709.034744][T28537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.057032][T28537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.131923][T28579] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20004 [ 709.134443][T28530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.138734][ T5762] IPVS: starting estimator thread 0... [ 709.170732][T28530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.209373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.218055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.226772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.301961][T28583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6028'. [ 709.305137][T28581] IPVS: using max 25 ests per chain, 60000 per kthread [ 709.364457][T28583] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6028'. [ 709.558542][T20681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.566425][T20681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.736903][T28594] can: request_module (can-proto-0) failed. [ 709.767851][T28603] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 709.797032][T28608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6036'. [ 709.806463][T28608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6036'. [ 709.815448][T28608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6036'. [ 709.858043][T28609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6035'. [ 709.881699][T28606] syzkaller0: entered promiscuous mode [ 709.887224][T28606] syzkaller0: entered allmulticast mode [ 710.094909][T28617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6040'. [ 710.105678][T28617] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6040'. [ 711.236622][T28631] netlink: 'syz.2.6045': attribute type 1 has an invalid length. [ 711.299347][T28535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.929876][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.505068][T28631] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 712.645560][T28647] netlink: 'syz.5.6048': attribute type 8 has an invalid length. [ 712.746085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.754732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.864617][T28660] netlink: 'syz.1.6053': attribute type 6 has an invalid length. [ 712.886646][T28657] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6052'. [ 713.009931][T28667] xt_nat: multiple ranges no longer supported [ 713.106032][T28670] IPv6: addrconf: prefix option has invalid lifetime [ 713.500197][T28688] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6064'. [ 713.525323][T28688] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6064'. [ 713.618936][T28691] netlink: 'syz.4.6065': attribute type 83 has an invalid length. [ 713.679665][T28691] syzkaller0: entered promiscuous mode [ 713.698656][T28691] syzkaller0: entered allmulticast mode [ 713.727854][T28694] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.735701][T28694] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.081138][T28712] netlink: 'syz.1.6071': attribute type 1 has an invalid length. [ 714.120483][T28714] netlink: 'syz.1.6071': attribute type 1 has an invalid length. [ 714.670138][ T42] hid-generic 0005:15C2:100F.0001: item fetching failed at offset 0/1 [ 714.737104][ T42] hid-generic 0005:15C2:100F.0001: probe with driver hid-generic failed with error -22 [ 714.981180][T28755] __nla_validate_parse: 32 callbacks suppressed [ 714.981203][T28755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6082'. [ 714.999015][T28755] netlink: 'syz.2.6082': attribute type 1 has an invalid length. [ 715.007802][T28755] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6082'. [ 715.019515][T28755] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6082'. [ 715.103704][T28758] netlink: 'syz.1.6083': attribute type 3 has an invalid length. [ 715.238747][T28767] netlink: 'syz.0.6088': attribute type 2 has an invalid length. [ 715.382005][T28768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6087'. [ 715.435537][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6090'. [ 715.444815][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6090'. [ 715.493603][T28767] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6088'. [ 715.541825][T28787] netlink: 23 bytes leftover after parsing attributes in process `syz.2.6091'. [ 715.554074][T28788] netlink: 23 bytes leftover after parsing attributes in process `syz.2.6091'. [ 715.601692][T28792] netlink: 'syz.1.6093': attribute type 17 has an invalid length. [ 715.741131][T28797] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6095'. [ 715.926418][T28807] bond11: entered promiscuous mode [ 715.948160][T28807] 8021q: adding VLAN 0 to HW filter on device bond11 [ 716.043650][T28807] ipvlan1: entered allmulticast mode [ 716.049012][T28807] bond11: entered allmulticast mode [ 716.406871][T28832] validate_nla: 1 callbacks suppressed [ 716.406889][T28832] netlink: 'syz.5.6103': attribute type 21 has an invalid length. [ 716.421142][T28832] netlink: 'syz.5.6103': attribute type 21 has an invalid length. [ 716.777838][T28851] wg2: Caught tx_queue_len zero misconfig [ 716.807312][T28853] netlink: zone id is out of range [ 716.813324][T28853] netlink: zone id is out of range [ 716.819882][T28853] netlink: zone id is out of range [ 716.825238][T28853] netlink: zone id is out of range [ 716.831152][T28853] netlink: zone id is out of range [ 716.836528][T28853] netlink: zone id is out of range [ 716.842175][T28853] netlink: zone id is out of range [ 716.860459][T28853] netlink: zone id is out of range [ 716.865656][T28853] netlink: zone id is out of range [ 716.891196][T28853] netlink: 'syz.4.6111': attribute type 2 has an invalid length. [ 716.965108][T28853] : entered promiscuous mode [ 716.970110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.093567][T28864] netlink: 'syz.2.6114': attribute type 4 has an invalid length. [ 717.196940][T28868] tipc: Resetting bearer [ 717.291499][T28867] tipc: Resetting bearer [ 717.548480][T28881] netlink: 'syz.1.6120': attribute type 1 has an invalid length. [ 718.188201][T28530] tipc: Resetting bearer [ 718.324947][T28900] veth0: entered promiscuous mode [ 718.383629][T28899] veth0: left promiscuous mode [ 719.256711][T28946] netlink: 'syz.4.6140': attribute type 1 has an invalid length. [ 719.329242][T28946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 719.415647][T28952] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20002 [ 719.527373][T28948] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 721.668582][T28920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.896086][T28967] __nla_validate_parse: 15 callbacks suppressed [ 721.896106][T28967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6149'. [ 721.919497][T28967] sctp: [Deprecated]: syz.4.6149 (pid 28967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 721.919497][T28967] Use struct sctp_sack_info instead [ 722.186874][T28989] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 722.250538][T28989] bridge0: port 1(ipvlan2) entered blocking state [ 722.257765][T28989] bridge0: port 1(ipvlan2) entered disabled state [ 722.274484][T28989] ipvlan2: entered allmulticast mode [ 722.293136][T28989] bridge0: entered allmulticast mode [ 722.310663][T28989] ipvlan2: left allmulticast mode [ 722.318633][T28989] bridge0: left allmulticast mode [ 722.443309][T29007] Cannot find map_set index 135 as target [ 722.535446][T29012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6158'. [ 722.544553][T29009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6159'. [ 722.546155][T29012] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6158'. [ 722.558044][T29014] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6157'. [ 722.730450][T28535] net_ratelimit: 8 callbacks suppressed [ 722.730468][T28535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.811895][T28522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.939275][T29037] netlink: 'syz.0.6166': attribute type 15 has an invalid length. [ 723.000538][T29036] netlink: 'syz.0.6166': attribute type 15 has an invalid length. [ 723.012477][T29036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6166'. [ 723.062173][T29037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6166'. [ 723.164378][T29036] netlink: 'syz.0.6166': attribute type 15 has an invalid length. [ 723.164976][T29037] netlink: 'syz.0.6166': attribute type 15 has an invalid length. [ 723.172328][T29036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6166'. [ 723.224179][T28534] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 723.255741][T29037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6166'. [ 723.256768][T28534] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 723.285349][T28534] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 723.294309][T28534] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 723.328163][T29048] veth1_macvtap: left promiscuous mode [ 723.333694][T29048] macsec0: entered promiscuous mode [ 723.357815][T29049] syzkaller0: entered promiscuous mode [ 723.365607][T29049] syzkaller0: entered allmulticast mode [ 723.401170][T29049] netlink: 'syz.1.6169': attribute type 32 has an invalid length. [ 723.416439][T29049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6169'. [ 723.544043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.552679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.559581][T29049] bond1: option coupled_control: invalid value (141) [ 723.602193][T29049] bond1 (unregistering): Released all slaves [ 723.670008][T29065] netlink: 'syz.4.6173': attribute type 1 has an invalid length. [ 723.843015][T29076] x_tables: unsorted entry at hook 2 [ 723.890463][T29074] tipc: Resetting bearer [ 724.122833][T29092] nbd: illegal input index 65508 [ 724.160705][T29096] netlink: 'syz.4.6184': attribute type 1 has an invalid length. [ 724.525254][T29121] netlink: 'syz.1.6191': attribute type 1 has an invalid length. [ 724.581237][T29121] bond1: entered promiscuous mode [ 724.586707][T29121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 724.731514][T29129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.854056][T29136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.873193][T29136] IPv6: NLM_F_CREATE should be set when creating new route [ 724.880464][T29136] IPv6: NLM_F_CREATE should be set when creating new route [ 724.887701][T29136] IPv6: NLM_F_CREATE should be set when creating new route [ 724.910045][T29136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.930427][T29137] Bluetooth: MGMT ver 1.23 [ 725.374526][T29178] netlink: 'syz.5.6208': attribute type 9 has an invalid length. [ 725.501938][T29185] netlink: 'syz.0.6212': attribute type 10 has an invalid length. [ 725.521322][T29188] batadv1: entered allmulticast mode [ 725.593913][T29185] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 725.942808][T29211] bond5: entered promiscuous mode [ 725.958205][T29211] bond5: entered allmulticast mode [ 726.155396][T29223] ipt_ECN: cannot use operation on non-tcp rule [ 726.162714][T29224] ipt_ECN: cannot use operation on non-tcp rule [ 726.297422][T29231] openvswitch: netlink: Key type 257 is out of range max 32 [ 726.588096][T29253] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 726.689353][T29251] team0: Port device team_slave_0 removed [ 726.844956][T29258] syzkaller1: entered promiscuous mode [ 726.854520][T29258] syzkaller1: entered allmulticast mode [ 726.993322][T29274] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 727.001677][T29274] __nla_validate_parse: 24 callbacks suppressed [ 727.001696][T29274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6238'. [ 727.069746][T29274] bond12: Invalid ad_actor_system MAC address. [ 727.076075][T29274] bond12: option ad_actor_system: invalid value (1) [ 727.084484][T29274] bond12 (unregistering): Released all slaves [ 727.396852][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6244'. [ 727.419379][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6244'. [ 727.615337][T29305] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6246'. [ 727.660932][T29311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6248'. [ 727.670802][T29297] bond4: entered promiscuous mode [ 727.690114][T29297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 727.702872][T29315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.744066][T29302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6247'. [ 727.883527][T29302] syzkaller0: entered promiscuous mode [ 727.889125][T29302] syzkaller0: entered allmulticast mode [ 728.036691][T29329] validate_nla: 3 callbacks suppressed [ 728.036715][T29329] netlink: 'syz.4.6253': attribute type 21 has an invalid length. [ 728.051795][T29329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6253'. [ 728.488988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.497533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.506064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.514756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.568950][T28535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.605931][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.054574][T29373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.079911][T29372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.380049][T29402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6273'. [ 732.737126][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6280'. [ 732.813089][T29419] team0 (unregistering): Port device team_slave_0 removed [ 732.841146][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6279'. [ 732.871788][T29420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6279'. [ 732.897228][T29419] team0 (unregistering): Port device team_slave_1 removed [ 732.908674][T29420] netlink: 'syz.0.6279': attribute type 12 has an invalid length. [ 732.941291][T29420] netlink: 'syz.0.6279': attribute type 11 has an invalid length. [ 732.965307][T29419] team0 (unregistering): Port device geneve1 removed [ 733.117627][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 733.135302][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 733.146410][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 733.155149][T29416] syzkaller0: entered promiscuous mode [ 733.161054][T29416] syzkaller0: entered allmulticast mode [ 733.183102][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 733.210174][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.531104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.539722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.548355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.556948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.889255][T29450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6285'. [ 733.933165][T29450] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6285'. [ 734.368974][T29468] netlink: 5804 bytes leftover after parsing attributes in process `syz.4.6290'. [ 734.419994][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.428633][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.448363][T29468] openvswitch: netlink: Flow key attr not present in new flow. [ 734.598737][T29480] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6294'. [ 734.662731][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6294'. [ 734.671751][T29480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6294'. [ 735.252076][T29499] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 735.291533][ T50] Bluetooth: hci0: command tx timeout [ 735.503792][T29516] netlink: 'syz.4.6303': attribute type 6 has an invalid length. [ 735.547678][T29503] syzkaller0: entered promiscuous mode [ 735.553217][T29503] syzkaller0: entered allmulticast mode [ 735.616689][T29424] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.623857][T29424] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.631105][T29424] bridge_slave_0: entered allmulticast mode [ 735.696779][T29424] bridge_slave_0: entered promiscuous mode [ 737.433185][ T50] Bluetooth: hci0: command tx timeout [ 738.037380][T29424] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.044870][T29424] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.052365][T29424] bridge_slave_1: entered allmulticast mode [ 738.061055][T29424] bridge_slave_1: entered promiscuous mode [ 738.116418][T29537] tipc: Started in network mode [ 738.121468][T29537] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 738.132143][T29537] tipc: Enabled bearer , priority 10 [ 738.199449][T29424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.229239][T29424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.253968][T29550] netlink: 'syz.4.6312': attribute type 11 has an invalid length. [ 738.291255][T29424] team0: Port device team_slave_0 added [ 738.300958][T29424] team0: Port device team_slave_1 added [ 738.352991][T29424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.360683][T29424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.394800][T29424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.408215][T29424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.421737][T29424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.451785][T29424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.529225][T29424] hsr_slave_0: entered promiscuous mode [ 738.536002][T29424] hsr_slave_1: entered promiscuous mode [ 738.542460][T29424] debugfs: 'hsr0' already exists in 'hsr' [ 738.548218][T29424] Cannot create hsr debugfs directory [ 738.655648][T29557] __nla_validate_parse: 3 callbacks suppressed [ 738.655666][T29557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6314'. [ 738.689050][T29557] netlink: 'syz.4.6314': attribute type 22 has an invalid length. [ 738.696928][T29557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6314'. [ 738.809467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.818175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.826712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.835370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.863415][T29424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.873947][T29424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 738.969251][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 739.086277][T29568] vlan0: Caught tx_queue_len zero misconfig [ 739.096037][T29568] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 739.110594][T29557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6314'. [ 739.120925][T29557] netlink: 'syz.4.6314': attribute type 22 has an invalid length. [ 739.130928][T29557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6314'. [ 739.219370][T29570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6319'. [ 739.228255][T29570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6319'. [ 739.279046][T12204] tipc: Node number set to 4269801492 [ 739.449232][ T5635] Bluetooth: hci0: command tx timeout [ 739.502378][T29424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.529039][T29424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 739.795983][T29424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.816123][T29424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 739.867089][T29589] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 739.929952][T29592] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6327'. [ 740.158100][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.166719][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.191971][T29424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.219518][T29424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 740.473651][T29613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 740.821915][T29424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 740.863289][T29424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 740.880034][T29424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 740.902198][T29424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 740.911311][T29424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 740.923553][T29424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.932960][T29424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 740.985944][T29424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.175677][T29424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.252593][T29424] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.299291][T28535] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.306483][T28535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.337720][T28534] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.344988][T28534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.622144][T29654] batadv_slave_0: Caught tx_queue_len zero misconfig [ 741.629468][ T5635] Bluetooth: hci0: command tx timeout [ 742.023208][T29669] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6343'. [ 742.039897][T29670] tipc: New replicast peer: 0.0.0.0 [ 742.046060][T29670] tipc: Enabled bearer , priority 10 [ 742.480564][T29683] syzkaller0: entered promiscuous mode [ 742.486248][T29683] syzkaller0: entered allmulticast mode [ 742.779894][T29424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.918884][T29424] veth0_vlan: entered promiscuous mode [ 742.934925][T29424] veth1_vlan: entered promiscuous mode [ 743.006465][T29424] veth0_macvtap: entered promiscuous mode [ 743.035732][T29424] veth1_macvtap: entered promiscuous mode [ 743.088674][T29696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6350'. [ 743.098691][T29694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6349'. [ 743.139499][T29424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.158082][T29424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.205390][T28530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.214575][T28530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.223303][T28530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.232025][T28530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.453712][T28522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.475624][T28522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.483616][T29705] netlink: 'syz.5.6351': attribute type 1 has an invalid length. [ 743.561370][T29705] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.624533][T29705] bond6: (slave veth5): Enslaving as an active interface with a down link [ 743.710419][T29706] veth1_macvtap: entered promiscuous mode [ 743.756885][T29716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.771833][T29706] bond1: entered allmulticast mode [ 743.777110][T29706] bridge0: entered allmulticast mode [ 743.801468][T29718] __nla_validate_parse: 3 callbacks suppressed [ 743.801488][T29718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6353'. [ 743.818243][T29706] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 743.827730][T29706] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 743.849157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.857793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.866420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.874985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.891097][T29706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.927814][T29706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 743.944561][T29706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 743.982878][T29711] veth0_virt_wifi: entered promiscuous mode [ 744.021409][T29711] bond6: (slave veth0_virt_wifi): making interface the new active one [ 744.039703][T29711] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 744.060716][T29710] bond0: (slave gre0): refused to change device type [ 744.121446][T28534] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 744.179427][T20681] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.205810][T20681] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.216769][T20681] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.223083][T28522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.226047][T20681] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.264294][T28522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.795208][T29741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6362'. [ 744.809811][T29738] netlink: 'syz.1.6360': attribute type 4 has an invalid length. [ 744.812139][T29741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.824881][T29741] IPv6: NLM_F_CREATE should be set when creating new route [ 744.832154][T29741] IPv6: NLM_F_CREATE should be set when creating new route [ 744.909748][T29738] netlink: 'syz.1.6360': attribute type 4 has an invalid length. [ 745.214151][T28537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.490439][T29772] sctp: [Deprecated]: syz.2.6373 (pid 29772) Use of int in maxseg socket option. [ 745.490439][T29772] Use struct sctp_assoc_value instead [ 745.540354][T29774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6372'. [ 745.873839][T20681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.883008][T29788] netlink: 'syz.4.6378': attribute type 1 has an invalid length. [ 745.890780][T29788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6378'. [ 746.129842][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6379'. [ 746.632350][T29817] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6386'. [ 746.662157][T29817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6386'. [ 746.691539][T29817] team0 (unregistering): Port device team_slave_0 removed [ 746.708258][T29817] team0 (unregistering): Port device team_slave_1 removed [ 746.826948][T29814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6385'. [ 746.850715][T29825] xt_hashlimit: size too large, truncated to 1048576 [ 746.858120][T29814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6385'. [ 746.973428][T29829] netlink: 'syz.1.6390': attribute type 3 has an invalid length. [ 747.040742][T29829] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6390'. [ 748.380711][T29831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.456212][T29831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.460810][T29831] bond1: left allmulticast mode [ 749.476069][T29831] bridge0: left allmulticast mode [ 749.790322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.798981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.807567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.882842][ T4994] udevd[4994]: worker [26810] /devices/virtual/block/nbd2 is taking a long time [ 750.090228][T20681] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.099198][T20681] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.131232][T20681] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.140504][T20681] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.163634][T20681] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.208974][T20681] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.217910][T20681] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.245179][T20681] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.280443][T29873] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 750.291540][T29873] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 750.300255][T29873] gretap1: entered promiscuous mode [ 750.305578][T29873] gretap1: entered allmulticast mode [ 750.316549][T29873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6395'. [ 750.336431][T29873] team0: Device ipvlan2 is already an upper device of the team interface [ 750.765290][T29877] bond15: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 750.777730][T29877] bond15 (unregistering): Released all slaves [ 750.847088][T29885] netlink: 'syz.1.6398': attribute type 19 has an invalid length. [ 750.969185][T28536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.982347][T29885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6398'. [ 750.994065][T29885] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6398'. [ 751.232873][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 751.251774][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 751.260136][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.269301][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.277031][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.381389][T29903] netlink: 'syz.1.6404': attribute type 21 has an invalid length. [ 751.391967][T29903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6404'. [ 752.372594][T29897] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.379878][T29897] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.387101][T29897] bridge_slave_0: entered allmulticast mode [ 752.394998][T29897] bridge_slave_0: entered promiscuous mode [ 752.404705][T29897] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.411957][T29897] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.419425][T29897] bridge_slave_1: entered allmulticast mode [ 752.427263][T29897] bridge_slave_1: entered promiscuous mode [ 752.525726][T29897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.554812][T29897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.604711][T29944] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6412'. [ 752.628081][T29897] team0: Port device team_slave_0 added [ 752.634211][T29947] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6412'. [ 752.641692][T29897] team0: Port device team_slave_1 added [ 752.699655][T29897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.706656][T29897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.733225][T29897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.751275][T29897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.758257][T29897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.784161][T29897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.869828][T29897] hsr_slave_0: entered promiscuous mode [ 752.876802][T29897] hsr_slave_1: entered promiscuous mode [ 752.883229][T29897] debugfs: 'hsr0' already exists in 'hsr' [ 752.888992][T29897] Cannot create hsr debugfs directory [ 753.086051][T29897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.096596][T29897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 753.121000][T29958] netlink: 'syz.1.6415': attribute type 12 has an invalid length. [ 753.152896][T29958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6415'. [ 753.316768][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6418'. [ 753.372630][ T50] Bluetooth: hci1: command tx timeout [ 753.408867][T29897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.419199][T29897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 753.454524][T29970] pimreg: entered allmulticast mode [ 753.513626][T29973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6420'. [ 753.623469][T29897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.641735][T29897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 753.733177][T29982] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 753.775748][T29978] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6421'. [ 753.844175][T29897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.860846][T29897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 754.083432][T29998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.551514][T29897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 754.558671][T30010] xt_l2tp: v2 doesn't support IP mode [ 754.599994][T29897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 754.608297][T30009] netlink: 'syz.2.6429': attribute type 1 has an invalid length. [ 754.608524][T29897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 754.660177][T29897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 754.674095][T29897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 754.709698][T29897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 754.717942][T29897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 754.734523][T29897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 754.750962][T30009] macvlan2: entered promiscuous mode [ 754.756308][T30009] macvlan2: entered allmulticast mode [ 754.987395][T29897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.016862][T29897] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.076947][T28540] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.084211][T28540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.121973][T28522] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.129232][T28522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.449578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.458206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.466848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.487831][ T50] Bluetooth: hci1: command tx timeout [ 755.538693][T30052] __nla_validate_parse: 3 callbacks suppressed [ 755.538712][T30052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6437'. [ 755.643847][T30056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6441'. [ 756.126430][T29897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.193313][T30086] netlink: 'syz.1.6447': attribute type 1 has an invalid length. [ 756.240829][T30086] bond2: entered promiscuous mode [ 756.246399][T30086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 756.327354][T30086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 756.337698][T30086] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 756.349638][T30086] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 756.367106][T30086] bond2: (slave ip6gre1): making interface the new active one [ 756.375564][T30086] ip6gre1: entered promiscuous mode [ 756.396256][T30086] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 756.457389][T29897] veth0_vlan: entered promiscuous mode [ 756.504545][T29897] veth1_vlan: entered promiscuous mode [ 756.560462][T29897] veth0_macvtap: entered promiscuous mode [ 756.574934][T29897] veth1_macvtap: entered promiscuous mode [ 756.613973][T29897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.625781][T29897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.659705][T28540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.689965][T28540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.811792][T28540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.827912][T28540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.841319][T28540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.007736][T28537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.035245][T28537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.103117][T30112] netlink: 'syz.1.6451': attribute type 18 has an invalid length. [ 757.127025][T30111] IPVS: length: 77 != 24 [ 757.136757][T28540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.145112][T28540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.189208][T28537] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.213346][T28537] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.241321][T28537] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.273331][T28537] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.359214][T30118] netlink: 'syz.4.6453': attribute type 30 has an invalid length. [ 757.433392][T30124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6455'. [ 757.501545][T30130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6456'. [ 757.530216][ T50] Bluetooth: hci1: command tx timeout [ 757.573724][T30135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6457'. [ 757.583103][T30135] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 757.653834][T30120] tipc: Enabled bearer , priority 0 [ 757.726050][T30139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6457'. [ 757.865090][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6458'. [ 757.949171][T30144] team0 (unregistering): Port device team_slave_1 removed [ 758.115878][T30119] tipc: Disabling bearer [ 758.441212][T30161] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6464'. [ 758.516741][T30163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6465'. [ 758.546624][T30163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6465'. [ 759.291382][T30227] macsec1: entered promiscuous mode [ 759.296663][T30227] bridge0: entered promiscuous mode [ 759.321466][T30227] macsec1: entered allmulticast mode [ 759.326806][T30227] bridge0: entered allmulticast mode [ 759.333425][T30227] bridge0: port 3(macsec1) entered blocking state [ 759.340086][T30227] bridge0: port 3(macsec1) entered disabled state [ 759.351125][T30227] bridge0: left allmulticast mode [ 759.362924][T29860] bridge0: left promiscuous mode [ 759.608653][ T50] Bluetooth: hci1: command tx timeout [ 759.658585][T30237] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.343182][T30260] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.350807][T30260] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.427016][T30267] block nbd5: not configured, cannot reconfigure [ 760.735071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.743805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.752415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.760895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.189161][T30286] ip6gre2: entered allmulticast mode [ 761.482522][T30309] tipc: Started in network mode [ 761.487554][T30309] tipc: Node identity bee0b9f6dd62, cluster identity 4711 [ 761.495510][T30309] tipc: Enabled bearer , priority 0 [ 761.583478][T30309] syzkaller0: entered promiscuous mode [ 761.594506][T30309] syzkaller0: entered allmulticast mode [ 761.605205][T30309] tipc: Resetting bearer [ 761.623848][T30317] tunl0: entered promiscuous mode [ 761.642536][T30317] netlink: 'syz.4.6510': attribute type 4 has an invalid length. [ 761.662309][T30317] __nla_validate_parse: 9 callbacks suppressed [ 761.662326][T30317] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6510'. [ 761.793477][T28522] tipc: Resetting bearer [ 761.966611][T30330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6516'. [ 761.997440][T30332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6516'. [ 762.007940][T30332] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 762.015339][T30337] netlink: 'syz.1.6517': attribute type 1 has an invalid length. [ 762.031372][T30337] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6517'. [ 762.040428][T30337] netlink: 'syz.1.6517': attribute type 1 has an invalid length. [ 762.110714][T30339] nbd: must specify at least one socket [ 762.127782][T30343] gretap1: entered promiscuous mode [ 762.229478][T30350] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6521'. [ 762.305126][T30309] tipc: Resetting bearer [ 762.493000][T28536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.544860][T30360] netlink: 'syz.1.6524': attribute type 1 has an invalid length. [ 762.673499][T30362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6524'. [ 762.682525][T30362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6524'. [ 764.412545][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.652082][T30309] tipc: Disabling bearer [ 764.665567][T29864] tipc: Node number set to 1669511670 [ 764.675976][T30360] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 764.714549][T30369] netlink: 'syz.2.6526': attribute type 12 has an invalid length. [ 764.771123][T30372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6527'. [ 764.817860][T30369] bond1: option primary_reselect: invalid value (255) [ 764.832695][T30369] bond1 (unregistering): Released all slaves [ 764.953291][T30384] netlink: 'syz.5.6530': attribute type 1 has an invalid length. [ 765.000898][T30384] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6530'. [ 765.039566][T30388] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6531'. [ 765.286924][T30407] netlink: 'syz.2.6537': attribute type 1 has an invalid length. [ 765.295845][T30407] netlink: 'syz.2.6537': attribute type 1 has an invalid length. [ 765.571452][T30419] IPv6: NLM_F_CREATE should be specified when creating new route [ 766.329870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.338617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.347258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.355876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.186348][T30527] __nla_validate_parse: 9 callbacks suppressed [ 767.186369][T30527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6575'. [ 767.205352][T30527] netlink: 'syz.4.6575': attribute type 7 has an invalid length. [ 767.225133][T30527] netlink: 'syz.4.6575': attribute type 8 has an invalid length. [ 767.234090][T30527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6575'. [ 767.754278][T30563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6582'. [ 767.763310][T30563] bond0: ARP target 8.4.0.0 is already present [ 767.783334][T30563] bond0: option arp_ip_target: invalid value (1032) [ 767.850689][T30571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6583'. [ 767.862218][T30571] block nbd3: Unsupported socket: should be TCP or UNIX. [ 767.907702][T30571] ip6t_srh: unknown srh match flags 4000 [ 768.080059][T30581] openvswitch: netlink: Message has 7 unknown bytes. [ 768.091613][T30576] can: request_module (can-proto-0) failed. [ 768.254455][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.487169][T30597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.624540][T30599] netlink: 'syz.4.6592': attribute type 21 has an invalid length. [ 768.972628][T30614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6598'. [ 769.038172][T30626] netlink: 'syz.5.6601': attribute type 1 has an invalid length. [ 769.110427][T30626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 769.169316][T30628] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 769.212816][T30626] macvlan2: entered promiscuous mode [ 769.218168][T30626] macvlan2: entered allmulticast mode [ 769.224405][T30626] bond7: entered promiscuous mode [ 769.229468][T30626] veth0_to_bond: entered promiscuous mode [ 769.311291][T30626] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 769.325318][T30626] bond7: left promiscuous mode [ 769.338968][T30626] veth0_to_bond: left promiscuous mode [ 769.545143][T30644] tipc: Enabling of bearer rejected, failed to enable media [ 769.712440][T30650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.117209][T30671] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6610'. [ 770.173563][T28534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.369187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.377709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.386315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.548919][T30674] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6615'. [ 771.573801][T30674] netlink: 'syz.1.6615': attribute type 1 has an invalid length. [ 772.908859][T30658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.102699][T30682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6618'. [ 773.170122][T30681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6617'. [ 773.595381][T30696] netlink: 'syz.4.6622': attribute type 3 has an invalid length. [ 773.605855][T30696] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6622'. [ 773.832667][T30702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6625'. [ 773.968409][T30707] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6627'. [ 774.009953][T28537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.415549][T30720] netlink: 'syz.2.6632': attribute type 1 has an invalid length. [ 774.423359][T30720] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6632'. [ 774.432713][T30720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6632'. [ 774.570207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.578982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.648597][T28533] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.657401][T28533] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.666139][T28533] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.674877][T28533] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.763878][T30731] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 774.887282][T30734] openvswitch: netlink: IP tunnel dst address not specified [ 774.932441][T30734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.058027][T30740] netlink: 'syz.1.6636': attribute type 11 has an invalid length. [ 775.085694][T30740] netlink: 'syz.1.6636': attribute type 4 has an invalid length. [ 775.105333][T30740] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6636'. [ 775.242351][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 775.260715][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 775.297029][T28533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.308918][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 775.317052][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 775.324733][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 776.052160][T30765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6644'. [ 776.071291][T30762] netlink: 'syz.1.6643': attribute type 1 has an invalid length. [ 776.113324][T30765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6644'. [ 776.230198][T30762] bond3: entered promiscuous mode [ 776.246186][T30762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.470860][T30762] bond3: (slave bridge1): making interface the new active one [ 776.493667][T30762] bridge1: entered promiscuous mode [ 776.501515][T30762] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 776.771050][T30779] syzkaller0: entered promiscuous mode [ 776.776584][T30779] syzkaller0: entered allmulticast mode [ 777.045824][T28533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.346714][T30799] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 777.355821][T30799] netlink: 'syz.5.6654': attribute type 7 has an invalid length. [ 777.363936][T30799] netlink: 'syz.5.6654': attribute type 8 has an invalid length. [ 777.372238][ T50] Bluetooth: hci3: command tx timeout [ 777.426764][T28533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.603176][T30811] pim6reg1: entered promiscuous mode [ 777.608541][T30811] pim6reg1: entered allmulticast mode [ 777.723635][T28533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.819548][T30819] lo: entered allmulticast mode [ 777.824968][T30819] tunl0: entered allmulticast mode [ 777.831739][T30819] gre0: entered allmulticast mode [ 777.837609][T30819] gretap0: entered allmulticast mode [ 777.843393][T30819] erspan0: entered allmulticast mode [ 777.850386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.850882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.851346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.898812][T30819] ip_vti0: entered allmulticast mode [ 777.904656][T30819] ip6_vti0: entered allmulticast mode [ 777.910492][T30819] sit0: entered allmulticast mode [ 777.916006][T30819] ip6tnl0: entered allmulticast mode [ 777.921756][T30819] ip6gre0: entered allmulticast mode [ 777.927464][T30819] syz_tun: entered allmulticast mode [ 778.104108][T28533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.196020][T30831] __nla_validate_parse: 2 callbacks suppressed [ 778.196039][T30831] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6663'. [ 778.682750][T30744] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.693307][T30744] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.701163][T30744] bridge_slave_0: entered allmulticast mode [ 778.718400][T30744] bridge_slave_0: entered promiscuous mode [ 778.728022][T30744] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.739900][T30744] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.747227][T30744] bridge_slave_1: entered allmulticast mode [ 778.757234][T30744] bridge_slave_1: entered promiscuous mode [ 778.769038][T28537] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.866746][T28537] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.907803][T30861] netlink: 'syz.4.6669': attribute type 1 has an invalid length. [ 778.944557][T30861] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6669'. [ 779.040348][T30744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.085531][T30865] macvlan1: entered promiscuous mode [ 779.108210][T28522] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.173527][T28537] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.181947][T30864] macvlan1: entered allmulticast mode [ 779.199320][T30744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.448896][ T50] Bluetooth: hci3: command tx timeout [ 779.457224][T28533] bridge_slave_1: left allmulticast mode [ 779.467356][T28533] bridge_slave_1: left promiscuous mode [ 779.475961][T28533] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.492309][T28533] bridge_slave_0: left allmulticast mode [ 779.498001][T28533] bridge_slave_0: left promiscuous mode [ 779.504730][T28533] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.779519][T28540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.799764][T28533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.813882][T28533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.826490][T28533] bond0 (unregistering): Released all slaves [ 779.843483][T30864] macvlan1: left allmulticast mode [ 779.857096][T30864] macvlan1: left promiscuous mode [ 779.955955][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 779.965483][T30744] team0: Port device team_slave_0 added [ 780.014677][T30744] team0: Port device team_slave_1 added [ 780.083180][T30899] macvlan0: entered promiscuous mode [ 780.129728][T30744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.156864][T30744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.216105][T30744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.396591][T30744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.403769][T30744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.432083][T30744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.545561][T30744] hsr_slave_0: entered promiscuous mode [ 780.552561][T30744] hsr_slave_1: entered promiscuous mode [ 780.590095][T30744] debugfs: 'hsr0' already exists in 'hsr' [ 780.595987][T30744] Cannot create hsr debugfs directory [ 781.048912][T28540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.086049][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6683'. [ 781.109395][T30935] netlink: 'syz.2.6685': attribute type 1 has an invalid length. [ 781.117197][T30935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6685'. [ 781.187761][T30939] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6686'. [ 781.597716][ T50] Bluetooth: hci3: command tx timeout [ 781.622593][T30957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6692'. [ 781.735729][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 781.929890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.938585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.947186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.018791][T28533] hsr_slave_0: left promiscuous mode [ 782.136109][T28533] hsr_slave_1: left promiscuous mode [ 782.182436][T28533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.202539][T28533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.227463][T28533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.240975][T28533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.254073][T30968] netlink: 'syz.5.6695': attribute type 1 has an invalid length. [ 782.306972][T28533] veth1_macvtap: left promiscuous mode [ 782.313155][T28533] veth0_macvtap: left promiscuous mode [ 782.322324][T28533] veth1_vlan: left promiscuous mode [ 782.341030][T28533] veth0_vlan: left promiscuous mode [ 783.117584][T28533] team0 (unregistering): Port device team_slave_1 removed [ 783.146741][T28533] team0 (unregistering): Port device team_slave_0 removed [ 783.330605][T30968] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 783.608797][ T50] Bluetooth: hci3: command tx timeout [ 783.690722][T30744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 783.912086][T30744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.965682][T30744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 783.996623][T30744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.043458][T30744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 784.141202][T30744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.215429][T30744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 784.293460][T30744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 784.398400][T31030] Bluetooth: MGMT ver 1.23 [ 784.799083][T31045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6712'. [ 784.816696][T30744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.836733][T31045] netlink: 'syz.4.6712': attribute type 7 has an invalid length. [ 784.863455][T31045] netlink: 'syz.4.6712': attribute type 8 has an invalid length. [ 784.886795][T31045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6712'. [ 784.974230][T30744] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.030095][T28534] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.037345][T28534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.069612][T28534] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.076798][T28534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.170468][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 785.544633][T31071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6715'. [ 785.594107][T28537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.632205][T31074] veth0: entered promiscuous mode [ 785.665819][T31074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6717'. [ 785.718156][T31074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6717'. [ 785.767649][T31073] veth0: left promiscuous mode [ 785.927946][T31093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6721'. [ 785.947016][T31093] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6721'. [ 786.169131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.177865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.186485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.253596][T31109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6724'. [ 786.316702][T31109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6724'. [ 786.360141][T31109] netlink: 'syz.2.6724': attribute type 10 has an invalid length. [ 786.377855][T31109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6724'. [ 786.408034][T31109] geneve2: entered promiscuous mode [ 786.414059][T31109] geneve2: entered allmulticast mode [ 786.510619][T30744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.605981][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 786.908265][T28522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.966644][T31140] netlink: 'syz.4.6730': attribute type 10 has an invalid length. [ 787.033636][T12211] IPVS: starting estimator thread 0... [ 787.040739][T31145] netlink: 'syz.2.6731': attribute type 15 has an invalid length. [ 787.069613][T28537] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 787.079128][T31145] netlink: 'syz.2.6731': attribute type 15 has an invalid length. [ 787.097292][T28537] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 787.133802][T28537] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 787.147457][T31146] IPVS: using max 26 ests per chain, 62400 per kthread [ 787.178280][T28537] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 787.198736][T31151] 0·: renamed from hsr0 (while UP) [ 787.263054][T31151] 0·: entered allmulticast mode [ 787.267981][T31151] hsr_slave_0: entered allmulticast mode [ 787.281653][T31151] hsr_slave_1: entered allmulticast mode [ 787.287919][T31151] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 787.493130][T31165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.577090][T30744] veth0_vlan: entered promiscuous mode [ 787.605230][T30744] veth1_vlan: entered promiscuous mode [ 787.711157][T30744] veth0_macvtap: entered promiscuous mode [ 787.804773][T30744] veth1_macvtap: entered promiscuous mode [ 787.856075][T30744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.863473][ T29] audit: type=1800 audit(1783195971.995:23): pid=31178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6738" name="memory.events" dev="tmpfs" ino=1420 res=0 errno=0 [ 787.926766][T30744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.984638][T28533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.005542][T28533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.069242][T28533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.092659][T28533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.422014][T28537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.428028][ T5289] veth1_vlan: left promiscuous mode [ 788.468982][T28537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.716093][T28533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.755542][T28533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.772606][T31218] x_tables: duplicate underflow at hook 2 [ 788.943501][T31221] gretap3: entered promiscuous mode [ 788.961471][T31221] batman_adv: batadv0: Adding interface: gretap3 [ 788.981282][T31221] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 789.050491][T31221] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 789.267097][T31234] warn_alloc: 1 callbacks suppressed [ 789.267118][T31234] syz.1.6750: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 789.353406][T31222] bond9: entered promiscuous mode [ 789.371427][T31222] bond9: entered allmulticast mode [ 789.381629][T31234] CPU: 1 UID: 0 PID: 31234 Comm: syz.1.6750 Not tainted syzkaller #0 PREEMPT(full) [ 789.381662][T31234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 789.381680][T31234] Call Trace: [ 789.381691][T31234] [ 789.381703][T31234] dump_stack_lvl+0xe8/0x150 [ 789.381753][T31234] warn_alloc+0x24c/0x270 [ 789.381790][T31234] ? stack_depot_save_flags+0x33/0x800 [ 789.381829][T31234] ? __pfx_warn_alloc+0x10/0x10 [ 789.381864][T31234] ? kasan_save_track+0x3e/0x80 [ 789.381895][T31234] ? __kasan_kmalloc+0x93/0xb0 [ 789.381932][T31234] ? xsk_setsockopt+0x52a/0x960 [ 789.381962][T31234] ? do_sock_setsockopt+0x17c/0x1b0 [ 789.382009][T31234] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 789.382041][T31234] ? do_syscall_64+0x174/0x580 [ 789.382075][T31234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.382115][T31234] __vmalloc_node_range_noprof+0x12c/0x1730 [ 789.382192][T31234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 789.382228][T31234] ? __kasan_kmalloc+0x93/0xb0 [ 789.382263][T31234] ? __kmalloc_cache_noprof+0x32d/0x660 [ 789.382295][T31234] ? __kmalloc_cache_noprof+0x150/0x660 [ 789.382331][T31234] vmalloc_user_noprof+0xad/0xe0 [ 789.382363][T31234] ? xskq_create+0xbf/0x170 [ 789.382394][T31234] xskq_create+0xbf/0x170 [ 789.382429][T31234] xsk_init_queue+0x8a/0xe0 [ 789.382462][T31234] xsk_setsockopt+0x52a/0x960 [ 789.382490][T31234] ? __fget_files+0x2a/0x420 [ 789.382529][T31234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 789.382558][T31234] ? __pfx_aa_sk_perm+0x10/0x10 [ 789.382602][T31234] ? aa_sock_opt_perm+0xff/0x1a0 [ 789.382632][T31234] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 789.382658][T31234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 789.382689][T31234] do_sock_setsockopt+0x17c/0x1b0 [ 789.382731][T31234] __x64_sys_setsockopt+0x13d/0x1b0 [ 789.382770][T31234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.382798][T31234] do_syscall_64+0x174/0x580 [ 789.382830][T31234] ? trace_irq_disable+0x3b/0x140 [ 789.382862][T31234] ? clear_bhb_loop+0x40/0x90 [ 789.382894][T31234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.382919][T31234] RIP: 0033:0x7f53ca79de59 [ 789.382942][T31234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.382964][T31234] RSP: 002b:00007f53cb627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 789.382991][T31234] RAX: ffffffffffffffda RBX: 00007f53caa26090 RCX: 00007f53ca79de59 [ 789.383010][T31234] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 789.383025][T31234] RBP: 00007f53ca833e6f R08: 0000000000000004 R09: 0000000000000000 [ 789.383042][T31234] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.383058][T31234] R13: 00007f53caa26128 R14: 00007f53caa26090 R15: 00007ffdba544dd8 [ 789.383100][T31234] [ 789.384416][T31234] Mem-Info: [ 789.580053][T31222] 8021q: adding VLAN 0 to HW filter on device bond9 [ 789.640232][T31234] active_anon:6409 inactive_anon:0 isolated_anon:0 [ 789.640232][T31234] active_file:16 inactive_file:43383 isolated_file:0 [ 789.640232][T31234] unevictable:768 dirty:59 writeback:0 [ 789.640232][T31234] slab_reclaimable:13306 slab_unreclaimable:140110 [ 789.640232][T31234] mapped:29427 shmem:1310 pagetables:3726 [ 789.640232][T31234] sec_pagetables:0 bounce:0 [ 789.640232][T31234] kernel_misc_reclaimable:0 [ 789.640232][T31234] free:1183425 free_pcp:9584 free_cma:0 [ 789.761376][T31234] Node 0 active_anon:25636kB inactive_anon:0kB active_file:64kB inactive_file:173328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117708kB dirty:232kB writeback:0kB shmem:3704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21188kB pagetables:14764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 790.009563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.018229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.044575][T31234] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 790.142737][T31234] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.253207][T31256] __nla_validate_parse: 5 callbacks suppressed [ 790.253317][T31256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6754'. [ 790.299846][T31234] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 790.305791][T31234] Node 0 DMA32 free:775028kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25860kB inactive_anon:0kB active_file:64kB inactive_file:173332kB unevictable:1536kB writepending:240kB zspages:0kB present:3129332kB managed:2548796kB mlocked:0kB bounce:0kB free_pcp:67656kB local_pcp:9800kB free_cma:0kB [ 790.354007][T31263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6757'. [ 790.373469][T31256] netlink: 'syz.5.6754': attribute type 30 has an invalid length. [ 790.424826][T31234] lowmem_reserve[]: 0 0 0 0 0 [ 790.434954][T31234] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.479506][T31262] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 790.492927][T31234] lowmem_reserve[]: 0 0 0 0 0 [ 790.497813][T31234] Node 1 Normal free:3951552kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 790.538356][T31234] lowmem_reserve[]: 0 0 0 0 0 [ 790.543143][T31234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 790.555866][T31234] Node 0 DMA32: 4187*4kB (UME) 522*8kB (UME) 76*16kB (UM) 859*32kB (UME) 608*64kB (UME) 404*128kB (UME) 581*256kB (UME) 218*512kB (UM) 71*1024kB (UME) 13*2048kB (UM) 71*4096kB (UM) = 790748kB [ 790.574983][T31234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 790.586515][T31234] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 7*16kB (UM) 4*32kB (UM) 7*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3951552kB [ 790.608753][T31262] bond1 (unregistering): Released all slaves [ 790.647242][T31234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 790.656943][T31234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 790.666264][T31234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 790.675834][T31234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 790.731876][T31234] 44706 total pagecache pages [ 790.736673][T31234] 0 pages in swap cache [ 790.740861][T31234] Free swap = 124996kB [ 790.853642][T31234] Total swap = 124996kB [ 790.899345][T31234] 2097051 pages RAM [ 790.903302][T31234] 0 pages HighMem/MovableOnly [ 790.908003][T31234] 428171 pages reserved [ 790.912177][T31234] 0 pages cma reserved [ 791.182582][T31280] netlink: 'syz.5.6761': attribute type 27 has an invalid length. [ 791.293299][T31281] syzkaller0: entered promiscuous mode [ 791.299928][T31281] syzkaller0: entered allmulticast mode [ 791.323251][T28540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.837985][T31307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6764'. [ 792.043356][T31309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6759'. [ 792.655721][T28522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.844596][T31322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'. [ 792.901153][T31322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'. [ 792.955573][T31322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'. [ 793.010317][T31322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'. [ 793.088125][T31322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6768'. [ 793.398428][T31340] netlink: 'syz.1.6773': attribute type 12 has an invalid length. [ 793.460455][T31351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6774'. [ 793.514046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.522685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.531287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.360931][T31393] netlink: 'syz.4.6787': attribute type 1 has an invalid length. [ 794.368728][T31393] netlink: 'syz.4.6787': attribute type 2 has an invalid length. [ 794.480705][T31377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.495029][T31377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.633722][T28537] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.642656][T28537] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.652329][T28537] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.708895][T28537] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.720180][T28537] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.729084][T28537] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.737990][T28537] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.746925][T28537] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.203773][T28522] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 795.223763][T28522] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 795.249117][T28522] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 795.271244][T28522] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 795.309397][T31438] netlink: 'syz.2.6800': attribute type 21 has an invalid length. [ 795.647828][T31455] __nla_validate_parse: 4 callbacks suppressed [ 795.647848][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6805'. [ 795.663041][T31455] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6805'. [ 795.700121][T31455] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6805'. [ 795.864497][T31462] bridge_slave_0: left allmulticast mode [ 795.877729][T31462] bridge_slave_0: left promiscuous mode [ 795.886050][T31462] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.926333][T31462] bridge_slave_1: left promiscuous mode [ 795.933139][T31462] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.952365][T31462] bond0: (slave bond_slave_0): Releasing backup interface [ 795.963237][T31462] bond0: (slave bond_slave_1): Releasing backup interface [ 795.974507][T31462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.983115][T31462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.992758][T31462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.000170][T31462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.037291][T31462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 796.226159][T31488] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 796.420226][T31497] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20003 [ 796.441662][T31497] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20003 [ 796.617370][T31502] netlink: 'syz.2.6816': attribute type 1 has an invalid length. [ 796.702053][T31502] netlink: 'syz.2.6816': attribute type 1 has an invalid length. [ 796.831803][T31516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6820'. [ 797.053616][T28534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.104701][T31520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6823'. [ 797.113796][T31520] netlink: 'syz.5.6823': attribute type 7 has an invalid length. [ 797.175504][T31520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6823'. [ 797.423712][T31552] netlink: 'syz.2.6833': attribute type 1 has an invalid length. [ 797.490311][T31552] netlink: 16147 bytes leftover after parsing attributes in process `syz.2.6833'. [ 797.908754][T31572] netlink: 'syz.2.6841': attribute type 10 has an invalid length. [ 797.971322][T31572] openvswitch: netlink: Flow key attr not present in new flow. [ 797.981070][T31570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6838'. [ 797.990059][T31570] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 797.998866][T31572] x_tables: duplicate entry at hook 3 [ 798.068781][T29860] IPVS: starting estimator thread 0... [ 798.230624][T31582] netlink: 'syz.4.6845': attribute type 9 has an invalid length. [ 798.316439][T31582] bond0: (slave bond_slave_1): Releasing backup interface [ 798.329432][T28536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.342770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.352593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.362512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.372879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.414330][T31576] IPVS: using max 28 ests per chain, 67200 per kthread [ 798.503795][T31579] tipc: Enabled bearer , priority 0 [ 798.519562][T31592] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20003 [ 798.846274][T31605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6844'. [ 798.902731][T31579] syzkaller0: entered promiscuous mode [ 798.909543][T31579] syzkaller0: entered allmulticast mode [ 798.917311][T31579] tipc: Resetting bearer [ 798.950760][T31605] hsr_slave_1 (unregistering): left promiscuous mode [ 798.978252][T31612] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.6852'. [ 799.034167][T31604] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 799.146824][T28522] tipc: Resetting bearer [ 799.195344][T31578] tipc: Resetting bearer [ 802.308654][T31578] tipc: Disabling bearer [ 802.350855][T31624] veth3: entered promiscuous mode [ 802.922437][T31653] netlink: 'syz.1.6860': attribute type 7 has an invalid length. [ 803.038146][T28540] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.095904][T31653] netlink: 'syz.1.6860': attribute type 7 has an invalid length. [ 803.190022][T28540] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.219317][T28540] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.263880][T28540] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.325085][T31672] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6863'. [ 803.729000][T31676] syzkaller0: entered promiscuous mode [ 803.735553][T31676] syzkaller0: entered allmulticast mode [ 804.089618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.098331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.106990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.115636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.160324][T28540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.426789][T31702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.400329][T31729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6875'. [ 806.660068][T28536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.879752][T31743] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 807.098340][T31746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6880'. [ 808.333471][T31754] netlink: 'syz.5.6882': attribute type 21 has an invalid length. [ 808.670440][T31775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6886'. [ 808.715943][T31775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6886'. [ 808.857615][T31780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6888'. [ 809.129423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.139416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.149337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.222329][T31792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6891'. [ 809.234639][T31792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6891'. [ 809.417015][T31792] netlink: 'syz.2.6891': attribute type 9 has an invalid length. [ 809.543115][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6892'. [ 809.964575][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.020568][T31820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6897'. [ 810.084240][T31820] syzkaller0: entered promiscuous mode [ 810.089776][T31820] syzkaller0: entered allmulticast mode [ 810.518382][T31835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.791720][T31844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6904'. [ 810.815272][T31848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6906'. [ 810.992456][T31854] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6905'. [ 811.795566][T31884] netlink: 'syz.6.6912': attribute type 21 has an invalid length. [ 811.803464][T31884] IPv6: NLM_F_CREATE should be specified when creating new route [ 811.811420][T31884] netlink: 'syz.6.6912': attribute type 1 has an invalid length. [ 811.973658][T31887] batadv1: entered allmulticast mode [ 812.116390][T31899] netlink: 'syz.6.6912': attribute type 7 has an invalid length. [ 812.140285][T31898] netlink: 'syz.2.6917': attribute type 1 has an invalid length. [ 812.415283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.423934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.447616][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.603552][T31912] xt_policy: too many policy elements [ 812.680449][T31912] syzkaller1: entered promiscuous mode [ 812.685988][T31912] syzkaller1: entered allmulticast mode [ 814.116774][T31966] netlink: 'syz.4.6940': attribute type 2 has an invalid length. [ 814.124560][T31966] __nla_validate_parse: 7 callbacks suppressed [ 814.124577][T31966] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6940'. [ 814.410226][ T50] Bluetooth: hci0: command tx timeout [ 814.583377][T31984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6942'. [ 814.592324][T31984] netlink: 'syz.1.6942': attribute type 8 has an invalid length. [ 814.669820][T31973] batadv0: entered promiscuous mode [ 814.708884][T31986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6945'. [ 814.720641][T31988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6947'. [ 814.730383][T31973] macsec1: entered promiscuous mode [ 814.737380][T31973] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 814.752358][T31973] batadv0: left promiscuous mode [ 815.421884][T31999] bond1: entered promiscuous mode [ 815.429008][T31999] bond1: entered allmulticast mode [ 815.434810][T31999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 815.684873][T20681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.717448][T32028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6955'. [ 815.726382][T32028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6955'. [ 815.917590][T32028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6955'. [ 815.927941][T32028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6955'. [ 816.036027][T32035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6958'. [ 816.278168][T32049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.472485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.481229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.489884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.511234][T32061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6957'. [ 817.535184][T28536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.796929][T32061] hsr_slave_1 (unregistering): left promiscuous mode [ 818.052194][T32105] netlink: 'syz.1.6971': attribute type 1 has an invalid length. [ 818.258159][T32075] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.444629][T32117] syzkaller1: entered promiscuous mode [ 818.450184][T32117] syzkaller1: entered allmulticast mode [ 819.011218][T32075] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.226861][T32144] netlink: 'syz.5.6985': attribute type 1 has an invalid length. [ 819.234739][T32144] __nla_validate_parse: 2 callbacks suppressed [ 819.234755][T32144] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6985'. [ 819.265138][T32144] netlink: 'syz.5.6985': attribute type 1 has an invalid length. [ 819.276647][T32145] SET target dimension over the limit! [ 819.283252][T32146] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6983'. [ 819.322091][T32148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6984'. [ 819.332837][T32148] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 819.349266][T32149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6984'. [ 819.349466][T32075] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.365092][T32149] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 819.553472][T32160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6987'. [ 819.583579][T32075] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.819441][T20681] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.894613][T20681] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.911136][T20681] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.953656][T20681] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.877420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.886088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.894636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.903168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.922294][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 821.368916][T28536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.224438][T32145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.669154][T20681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.962028][T32216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7003'. [ 823.008160][T32219] netlink: zone id is out of range [ 823.013387][T32219] netlink: del zone limit has 4 unknown bytes [ 823.062195][T32222] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7004'. [ 823.188954][T32227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7007'. [ 823.198011][T32227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7007'. [ 823.252014][T32230] netlink: 'syz.5.7004': attribute type 1 has an invalid length. [ 823.259829][T32230] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7004'. [ 823.801814][T32257] netlink: 'syz.1.7014': attribute type 1 has an invalid length. [ 823.851621][T32258] bond2: entered promiscuous mode [ 823.856790][T32258] bond2: entered allmulticast mode [ 823.862439][T32258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 824.474222][T32285] netlink: 'syz.4.7024': attribute type 1 has an invalid length. [ 824.603866][T32285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 824.653443][T32285] __nla_validate_parse: 3 callbacks suppressed [ 824.653464][T32285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7024'. [ 824.668558][T32285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7024'. [ 824.872706][T32300] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7028'. [ 825.050566][T32306] ip6erspan0: entered allmulticast mode [ 826.297570][T32232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.477007][T32320] x_tables: duplicate underflow at hook 1 [ 826.489595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.499538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.509569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.634394][T32320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.646780][T28534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.020567][T32341] netlink: 'syz.6.7041': attribute type 1 has an invalid length. [ 827.429241][T32350] bond3: (slave geneve2): making interface the new active one [ 827.472658][T32350] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 827.513381][T28534] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.522279][T28534] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.530598][T28534] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.546834][T28534] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.555965][T32350] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7041'. [ 827.693957][T32358] ipt_REJECT: TCP_RESET invalid for non-tcp [ 827.870580][T28534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.922926][T32364] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7048'. [ 828.205489][T32380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7051'. [ 828.223300][T32381] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 828.462402][T32393] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7057'. [ 828.600958][T32397] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 828.901984][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7059'. [ 828.925508][T32413] netlink: 'syz.5.7062': attribute type 1 has an invalid length. [ 828.985932][T32413] 8021q: adding VLAN 0 to HW filter on device bond10 [ 829.038169][T32417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7063'. [ 829.048069][T32413] bond10: (slave veth7): Enslaving as an active interface with a down link [ 829.100812][T32413] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 829.107958][T32413] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 829.255651][T32426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7064'. [ 829.858106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.866724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.951057][T32447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.137951][T32447] bond_slave_0: left allmulticast mode [ 830.158135][T32447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.185931][T32447] bond_slave_1: left allmulticast mode [ 830.202416][T32447] bond0 (unregistering): Released all slaves [ 830.383783][T32466] gretap2: entered promiscuous mode [ 830.390652][T32466] batman_adv: batadv0: Adding interface: gretap2 [ 830.398714][T32466] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.454473][T32466] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 830.576746][T32473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 830.815309][T32488] sch_fq: defrate 0 ignored. [ 831.521828][T32511] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 831.730136][T32515] syzkaller0: entered promiscuous mode [ 831.735747][T32515] syzkaller0: entered allmulticast mode [ 831.768896][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.249533][ T30] INFO: task kworker/1:1H:1648 blocked for more than 143 seconds. [ 832.292188][ T30] Not tainted syzkaller #0 [ 832.317425][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.348062][ T30] task:kworker/1:1H state:D stack:26920 pid:1648 tgid:1648 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 832.395077][ T30] Workqueue: kblockd blk_mq_run_work_fn [ 832.400821][ T30] Call Trace: [ 832.404126][ T30] [ 832.407096][ T30] __schedule+0x17d9/0x56c0 [ 832.411641][ T30] ? __lock_acquire+0x683/0x2cf0 [ 832.416688][ T30] ? __pfx___schedule+0x10/0x10 [ 832.421595][ T30] ? schedule+0x90/0x2b0 [ 832.425887][ T30] schedule+0x164/0x2b0 [ 832.430088][ T30] schedule_timeout+0x152/0x2c0 [ 832.435046][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 832.440460][ T30] ? __pfx_process_timeout+0x10/0x10 [ 832.445803][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 832.451649][ T30] ? prepare_to_wait_event+0x436/0x480 [ 832.457195][ T30] nbd_queue_rq+0x889/0x1150 [ 832.461942][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 832.565960][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 832.572131][ T30] blk_mq_dispatch_rq_list+0x499/0x1990 [ 832.578091][ T30] ? sbitmap_get+0x229/0x390 [ 832.600117][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 832.606178][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 832.612084][ T30] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 832.618579][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 832.625395][ T30] ? blk_mq_run_work_fn+0x144/0x300 [ 832.630725][ T30] ? blk_mq_run_work_fn+0x144/0x300 [ 832.638369][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 832.644425][ T30] ? blk_mq_run_work_fn+0x144/0x300 [ 832.649754][ T30] blk_mq_run_work_fn+0x16c/0x300 [ 832.654825][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 832.660632][ T30] process_scheduled_works+0xa8e/0x14e0 [ 832.666255][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 832.672302][ T30] ? assign_work+0x3cf/0x5d0 [ 832.676941][ T30] worker_thread+0xa47/0xfb0 [ 832.681956][ T30] ? __kthread_parkme+0x71/0x1f0 [ 832.686978][ T30] kthread+0x388/0x470 [ 832.691098][ T30] ? __pfx_worker_thread+0x10/0x10 [ 832.712978][ T30] ? __pfx_kthread+0x10/0x10 [ 832.717724][ T30] ret_from_fork+0x514/0xb70 [ 832.722404][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 832.727563][ T30] ? __switch_to+0xc89/0x1420 [ 832.732461][ T30] ? __pfx_kthread+0x10/0x10 [ 832.737117][ T30] ret_from_fork_asm+0x1a/0x30 [ 832.741956][ T30] [ 832.757957][ T30] [ 832.757957][ T30] Showing all locks held in the system: [ 832.765721][ T30] 1 lock held by khungtaskd/30: [ 832.770593][ T30] #0: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 832.780929][ T30] 4 locks held by kworker/1:1H/1648: [ 832.786251][ T30] #0: ffff88801e6e0140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 832.797360][ T30] #1: ffffc900068afc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 832.839509][ T30] #2: ffff88802805c098 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 832.849009][ T30] #3: ffff888028250178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 832.858067][ T30] 2 locks held by getty/5384: [ 832.862803][ T30] #0: ffff888036bcf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 832.872747][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 832.883247][ T30] 3 locks held by kworker/0:8/5762: [ 832.888478][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 832.899554][ T30] #1: ffffc90004bbfc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 832.912239][ T30] #2: ffff88807fe61250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 832.922426][ T30] 3 locks held by kworker/u8:45/20681: [ 832.948921][ T30] #0: ffff8880329c3940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 832.960596][ T30] #1: ffffc9000373fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 832.973480][ T30] #2: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 832.983118][ T30] 1 lock held by udevd/26810: [ 832.987812][ T30] #0: ffff888028157350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 832.997224][ T30] 3 locks held by kworker/u8:58/28534: [ 833.002746][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 833.014485][ T30] #1: ffffc90004f97c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 833.025544][ T30] #2: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 833.034689][ T30] 3 locks held by syz.5.7090/32512: [ 833.039942][ T30] 2 locks held by syz.2.7091/32513: [ 833.060898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.061394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.061838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.088879][ T30] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 833.098058][ T30] #1: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 833.109031][ T30] 1 lock held by syz.6.7089/32516: [ 833.114171][ T30] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 833.123203][ T30] 1 lock held by syz.1.7093/32535: [ 833.128348][ T30] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 833.137388][ T30] 1 lock held by syz.4.7094/32539: [ 833.142547][ T30] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_delroute+0x130/0x330 [ 833.154089][ T30] [ 833.156460][ T30] ============================================= [ 833.156460][ T30] [ 833.194530][ T30] NMI backtrace for cpu 1 [ 833.194548][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 833.194584][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.194604][ T30] Call Trace: [ 833.194616][ T30] [ 833.194628][ T30] dump_stack_lvl+0xe8/0x150 [ 833.194681][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 833.194793][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 833.194835][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 833.194862][ T30] sys_info+0x135/0x170 [ 833.194882][ T30] watchdog+0xfd7/0x1030 [ 833.194933][ T30] ? watchdog+0x1c7/0x1030 [ 833.194966][ T30] kthread+0x388/0x470 [ 833.195015][ T30] ? __pfx_watchdog+0x10/0x10 [ 833.195039][ T30] ? __pfx_kthread+0x10/0x10 [ 833.195071][ T30] ret_from_fork+0x514/0xb70 [ 833.195107][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 833.195139][ T30] ? __switch_to+0xc89/0x1420 [ 833.195170][ T30] ? __pfx_kthread+0x10/0x10 [ 833.195202][ T30] ret_from_fork_asm+0x1a/0x30 [ 833.195242][ T30] [ 833.195374][ T30] Sending NMI from CPU 1 to CPUs 0: [ 833.324030][ C0] NMI backtrace for cpu 0 [ 833.324066][ C0] CPU: 0 UID: 0 PID: 28530 Comm: kworker/u8:56 Not tainted syzkaller #0 PREEMPT(full) [ 833.324088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.324100][ C0] Workqueue: 0x0 (bond13) [ 833.324128][ C0] RIP: 0010:debug_object_deactivate+0x7c/0x250 [ 833.324242][ C0] Code: 44 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 89 e0 48 c1 e8 0c 48 b9 eb 83 b5 80 46 86 c8 61 48 0f af c8 48 c1 e9 2f 83 e1 f8 <4c> 8d 3c c9 49 81 c7 c0 2a 96 9a 48 8d 1c c9 48 81 c3 c8 2a 96 9a [ 833.324259][ C0] RSP: 0018:ffffc9000465fa90 EFLAGS: 00000006 [ 833.324274][ C0] RAX: 000ffff888042bb9 RBX: ffffffff8beb6720 RCX: 0000000000003de8 [ 833.324288][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000465faa8 [ 833.324300][ C0] RBP: dffffc0000000000 R08: ffffc9000465faa7 R09: 0000000000000000 [ 833.324331][ C0] R10: ffffc9000465fa98 R11: fffff520008cbf55 R12: ffff888042bb9378 [ 833.324366][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff888042bb9378 [ 833.324390][ C0] FS: 0000000000000000(0000) GS:ffff888124f5a000(0000) knlGS:0000000000000000 [ 833.324406][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 833.324419][ C0] CR2: 0000200001000000 CR3: 000000000e946000 CR4: 00000000003526f0 [ 833.324437][ C0] Call Trace: [ 833.324445][ C0] [ 833.324459][ C0] process_scheduled_works+0x366/0x14e0 [ 833.324503][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 833.324529][ C0] ? assign_work+0x3cf/0x5d0 [ 833.324553][ C0] worker_thread+0xa47/0xfb0 [ 833.324593][ C0] kthread+0x388/0x470 [ 833.324620][ C0] ? __pfx_worker_thread+0x10/0x10 [ 833.324640][ C0] ? __pfx_kthread+0x10/0x10 [ 833.324667][ C0] ret_from_fork+0x514/0xb70 [ 833.324696][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 833.324723][ C0] ? __switch_to+0xc89/0x1420 [ 833.324748][ C0] ? __pfx_kthread+0x10/0x10 [ 833.324775][ C0] ret_from_fork_asm+0x1a/0x30 [ 833.324805][ C0] [ 833.547458][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 833.554336][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 833.563477][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.573548][ T30] Call Trace: [ 833.576838][ T30] [ 833.579773][ T30] vpanic+0x56c/0xa60 [ 833.583795][ T30] ? __pfx_vpanic+0x10/0x10 [ 833.588320][ T30] ? irqentry_exit+0x218/0x8f0 [ 833.593102][ T30] ? trace_irq_disable+0x3b/0x140 [ 833.598145][ T30] panic+0xc5/0xd0 [ 833.601913][ T30] ? __pfx_panic+0x10/0x10 [ 833.606378][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 833.612546][ T30] watchdog+0x1030/0x1030 [ 833.616927][ T30] ? watchdog+0x1c7/0x1030 [ 833.621393][ T30] kthread+0x388/0x470 [ 833.625510][ T30] ? __pfx_watchdog+0x10/0x10 [ 833.630242][ T30] ? __pfx_kthread+0x10/0x10 [ 833.634949][ T30] ret_from_fork+0x514/0xb70 [ 833.639565][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 833.644697][ T30] ? __switch_to+0xc89/0x1420 [ 833.649396][ T30] ? __pfx_kthread+0x10/0x10 [ 833.654012][ T30] ret_from_fork_asm+0x1a/0x30 [ 833.658840][ T30] [ 833.670216][ T30] Kernel Offset: disabled [ 833.674574][ T30] Rebooting in 86400 seconds..