last executing test programs: 8.432173769s ago: executing program 1 (id=5730): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40841}, 0x40004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0) close(r5) 7.52275463s ago: executing program 1 (id=5736): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000840)={0x30, r3, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001f97edb989d66f7de"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000769000200000000000000000005"], 0x18}}, 0x0) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10002) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r8, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$unix(r4, &(0x7f0000000500)="0bab00b480c02e17e21079274d6a0e0993fd0d1738fed65abb44d19d315bb6f6a79113cdeb9fc74a43a6010c6f09156c5c5cfeb13963a3a4141c2d47147af92dec56097f3e6e3994b7bdb434df96fac9f694fd9df12888a74668b8353e65f377ee080653e0f89aef75111a297639641e6e43237756cd88317812660f5cd540b6b7f952d8a6e11c9aec93d161b9", 0x8d, 0x1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000410000000000000000000000000a54000000060a0b040000000000000000090009ec350be22353b6e59401006d6574610000000014000280080001400000040020000240000000070900010073797a30000000000900020073797a32000000001400000011000100"/124], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) 6.347506065s ago: executing program 1 (id=5748): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000280)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100a908ecff358cb037bc663d27bd7000fedbdf25000000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002dbd7000fddbdf25010000ee14000c00fc00000000000000000000000000000114000c00fc00000000000000000000000000000108000400e000000214000b00ff01400000000000000000000000000105000d0025000000"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/100, 0x64, 0x1, &(0x7f00000000c0)=""/7, 0x7}, &(0x7f0000000100)=0x40) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) 5.39286453s ago: executing program 1 (id=5756): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe0, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0xb9, 0x19, "21cbea3b6436df9c0eab23f8dd6a6aa9d46a159294a073affa55cd1706dda2cc06cb8c688de4c96677cb45e031c453391fee3f944898b8aecda9ec18d7c4c80c4394364d60cca2f9a1afa4c9e0343e0829096923535b0a3348a5645aa45006e1832b38be6f99897d24b6f14693fc728c5fa14db9155dbbda92d6564c34f81e45dac7a05010affc5e6e5386bb03d0f9202da5bde10787b0d8e19371fc0ff664729c0981cd3832d1fede44355acfc1595d25b0ae73fb"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44841}, 0x40098c5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x4e24, 0x199, @empty, 0xffff8b9e}, 0x1c) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x13, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x0, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0x0, 0x1, 'hmac(sha1)\x00'}, @NLBL_MGMT_A_PROTOCOL={0x0, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000011) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 5.179349163s ago: executing program 1 (id=5757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x20, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x20048840) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x11) 4.336220598s ago: executing program 1 (id=5764): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000003, 0xb, 0x4}}}}]}, 0x40}}, 0x0) unshare(0x46000480) 3.804114035s ago: executing program 0 (id=5768): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x17f6, 0x0, 0x0, 0x0, 0xdfd}, {}, {}, [@ldst={0x3, 0x0, 0x3, 0x9, 0x2, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x185164f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x4, 0xb5, &(0x7f0000000300)=""/181, 0x41000, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x3, 0x5}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r1, r0, 0x6e, 0x18, 0x0, @void, @value=r2}, 0x20) 3.316305862s ago: executing program 0 (id=5771): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) (async) close(r0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) (async) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x80, 0x4, 0x21, 0x600000b}}], 0x20, 0x2400e044}, 0x24040840) 3.108570827s ago: executing program 4 (id=5773): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.652040994s ago: executing program 4 (id=5776): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x4040) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x8919, &(0x7f0000000040)="76657468303a3000000000000000000002") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) accept4(r3, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000400)=0x80, 0x800) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f00000069c0)=ANY=[@ANYBLOB="02000000000000000a004e2100000001ff020000000000000000000000000001001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2400000004fc010000000000000000000000000000ffffffff00"/272], 0x110) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r11, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x20090, 0x0, 0x0) 2.564024199s ago: executing program 3 (id=5777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x194, 0x41, 0x107, 0xfffffffe, 0x0, {0xf, 0x7c}, [@nested={0x4, 0x2}, @nested={0x4, 0x131}, @nested={0x178, 0x1, 0x0, 0x1, [@typed={0x5e, 0xc7, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95Xj\n\xde\x92>zj;1\xf0\xdfm\"$\xcf#A\xb9x\xbbd\x06\xa68G\x95Z\x1e5\xa7\x95*;\xb5\x1fuX\x1d2Fw\r\xd9n\xc2d\xa78\xfa3R\xde~\x8fT_\x03\xeb\xf8<\x9d\xbb8S2RF\xc4\xa4\xd37\xc9\xb2U\xb2[\xa0\x0e7['}, @nested={0x114, 0x19, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}, @nested={0x104, 0x83, 0x0, 0x1, [@nested={0xf5, 0x4e, 0x0, 0x1, [@generic="a2a0355e11b76f8d902f2d00ab87cd075b8f976fe8e78620e289aaeb4eb3f337c32261d25b02598554e9fc3f76a6449c5100b29fb0f0bfe48e7998b1234e095525e4c76e6e2d7d4c5e5681621796c4eca727893a266baec5849d78804ce370b8cd64bcd4435d400a4cce87faecde81908634b568a493be29946d2a469573ad799408404c253c4829595e058ad566b7727bd13c0acb7b862a66b63a4ad6f24fc1f49b253a04b5ffa81c35f04d2e32ce97a6e34e30d5f99dd725f33e61113803b4bdb02fe4eb8168d476011db3fd76e8f7ef7523a618ac10682eaf286529e681fe75b1bab044", @nested={0x4, 0x110}, @typed={0x4, 0x69}, @nested={0x4, 0xd3}]}, @typed={0x8, 0x5b, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000fa00000000000000000100008510000006000000180000", @ANYRESOCT=r0, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) 2.452931146s ago: executing program 2 (id=5778): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r0, 0x40049409, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000280)=0x1e) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x20, 0x2c2}, &(0x7f0000000100)=0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) ioctl$FICLONE(r0, 0x40049409, r0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) socket(0xa, 0x3, 0x4) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000280)=0x1e) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x20, 0x2c2}, &(0x7f0000000100)=0xc) (async) 2.389597465s ago: executing program 3 (id=5779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4921}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'bridge_slave_0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="050314fdd3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.148289696s ago: executing program 3 (id=5780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x32000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'vlan0\x00', @broadcast}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x880) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={r4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r4, 0x4, 0x548e95dabb45f617}, &(0x7f00000001c0)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x11a, 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000305010000002000000162fbcb00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001400ffffffff"], 0x3c}}, 0x0) 2.106457533s ago: executing program 2 (id=5781): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000b00)="13000000010203", 0x7}, {&(0x7f0000000040)="6327642f586b16", 0x7}], 0x2) 1.951147887s ago: executing program 0 (id=5782): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r1 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000cf0000ff08000000000008001e00020000000000000000000000220a00"], 0x30}}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f00000002c0)=""/206, 0xce}], 0x2, 0x7, 0x4) 1.664075623s ago: executing program 2 (id=5783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x34, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0xfd}, {}, {}, {}, {0x20}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3, 0x3}, {0x200}, {0x0, 0xa}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {0x0, 0x8a}, {}, {}, {0x6, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x6}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000680)={@private2}, &(0x7f00000006c0)=0x14) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 1.631608355s ago: executing program 3 (id=5784): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0x2400c041) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xfffffffffffffde0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000001c0), 0x12) writev(r2, &(0x7f0000005a80)=[{&(0x7f0000003880)='5', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x9, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x5, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0xfffffffc, 0x4}}}}]}, 0x78}}, 0x0) r9 = socket(0x400000000010, 0x5, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0xb98, 0x2c, 0xd27, 0x170bd2b, 0x5, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xb6c, 0x2, [@TCA_U32_ACT={0x148, 0x7, [@m_ct={0x144, 0x17, 0x0, 0x0, {{0x7}, {0x84, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "59cc3d36bfa27a1957f1aae60f6eed93"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0x9b}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x10}]}, {0x9c, 0x6, "611df3594c2ff8685bfc610424b0b288311930049965c5c74d93ac7c325734d6cd14969732d1972a451e570ddcbf168269effdb4c55d61897652c357c50f8f6c42fd12c5ba5ac6ab7330523ef5589d266762c629ca9702f5a44dd94af7c27aafb705dc91659f10b2af08c8a4db6246277bf12f6bc294b6f2549d0dc9218f3807709e8d2ab4f617a411d0782d76e255ffe4a59f66970de033"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0x6}}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_SEL={0x2d4, 0x5, {0x0, 0x4, 0x0, 0x100, 0x8000, 0xfff, 0xc, 0x5, [{0x10000, 0x3, 0x6124, 0x1c}, {0x5, 0x7, 0x401, 0x8082}, {0x40, 0x0, 0x4, 0x4}, {0xfd7e, 0xffb, 0x400, 0x9}, {0x1, 0xb32, 0x7403, 0x7}, {0x8, 0x4, 0x0, 0x10000}, {0x77b53ae8, 0x5, 0xce, 0x7}, {0x5, 0x2, 0x6, 0x6993}, {0x3, 0x8, 0x2, 0x8}, {0x2, 0x9, 0x5, 0x2}, {0x101, 0x6, 0xf}, {0x400, 0x0, 0x1, 0x11}, {0x7, 0x9, 0x10000, 0x9}, {0xffffffff, 0x3, 0x1}, {0xbd28, 0x8, 0x78, 0x3}, {0x0, 0x9b, 0x4, 0xc0000}, {0x7, 0x4, 0xab0e, 0xc9d3}, {0xf1bb, 0xfd, 0x7fff, 0x9}, {0x7ff, 0xb3, 0x4, 0x7}, {0x7, 0x6, 0x6, 0x4}, {0x7fff, 0x6, 0x2, 0x200}, {0x6, 0x6b, 0x3, 0x8000}, {0x3, 0x2, 0x6, 0x40}, {0x7fffffff, 0x8, 0x2, 0x1000}, {0xd4c, 0x0, 0x28000, 0x61}, {0x1, 0x8001, 0x3}, {0x8, 0x6, 0x10001, 0x8}, {0x6, 0x478, 0x9, 0xffffffff}, {0x0, 0x2, 0x7fffffff, 0x1000}, {0x6, 0xe0000000, 0x7f, 0x9}, {0x0, 0x45, 0x7fffffff}, {0x0, 0xfffffffa, 0x40, 0x4}, {0x3ff, 0x8, 0x228, 0x200}, {0x7ff, 0x5, 0xfffeffff, 0xbc1a}, {0x9, 0x4, 0x8}, {0x3, 0x8000, 0xffffffff, 0x4}, {0x725, 0x22, 0x6, 0x894}, {0x5, 0x80, 0x8}, {0x68f1, 0x4, 0x508, 0xfffffff9}, {0x101, 0x6, 0xd0e, 0x7f}, {0x1, 0xffff217e, 0xf6f5, 0x5}, {0xa34, 0x3, 0x5, 0x9}, {0xffffc50f, 0xfffffc01, 0x800, 0x9}, {0x4, 0x8, 0x6, 0x80000001}]}}, @TCA_U32_HASH={0x8, 0x2, 0x200}, @TCA_U32_SEL={0x724, 0x5, {0x10, 0x8, 0xfc, 0x2, 0x1, 0xde7b, 0x7, 0x5, [{0x4a, 0x9, 0x7f, 0x27}, {0x6214, 0x5, 0x3, 0x6}, {0x2, 0x1, 0x2ef, 0x6}, {0xb4e, 0x800, 0x0, 0x26c}, {0x5, 0x8, 0x6, 0x3}, {0x8, 0x0, 0x0, 0x5}, {0x443, 0x90, 0xffff, 0x1886}, {0x6, 0x1, 0x6, 0x8}, {0x7fffffff, 0x9, 0x4, 0x8}, {0x4, 0x1ff, 0x3f97, 0x4ad8}, {0x200, 0x10000, 0x81, 0x4}, {0x10, 0x0, 0xff, 0x7}, {0x5, 0x1000, 0xfcf5, 0x7fff}, {0x2, 0x0, 0xc, 0x8}, {0x3, 0x0, 0x10, 0x1}, {0x7, 0x5, 0x6, 0x3}, {0x2, 0xd6f5d7e, 0x9, 0x2}, {0x3, 0x3, 0x3}, {0x9, 0x4, 0x8, 0x6}, {0x820e, 0x101, 0x6cfc, 0x1}, {0xfffffff8, 0x1dc2, 0xb, 0x1}, {0x2, 0x2, 0x7ff, 0xfff}, {0xd9e8, 0x40, 0xa, 0x86}, {0x7f, 0x9, 0xffffffff, 0x7}, {0x5fb, 0x32, 0x800, 0xc}, {0x3, 0x80, 0x3d5, 0xff}, {0x4, 0x4, 0x40, 0x800}, {0x5, 0x2, 0x3ff}, {0x3, 0x6, 0x0, 0x1}, {0x3, 0x6, 0x6, 0x8000}, {0x4, 0x5, 0x6, 0x2}, {0x3b21, 0x1cdf, 0x5, 0x4}, {0x0, 0x2, 0x75d, 0xe}, {0x331d, 0x9, 0x80, 0x6}, {0x0, 0x4, 0x9, 0xc}, {0x3c, 0x7, 0x0, 0x5}, {0xb1, 0x9, 0x80000000}, {0xb9d, 0x3, 0x5}, {0x2, 0x4, 0xeff}, {0x7f, 0x1, 0x7, 0x2}, {0x273, 0x22f, 0x100, 0x200}, {0x3, 0xfff, 0x1, 0x1}, {0x7, 0x100, 0x800000, 0x737b805a}, {0xffffff7f, 0x8, 0x3, 0xcd9}, {0x5, 0x7f, 0x8, 0x6}, {0x9, 0x80, 0x6b0, 0x4}, {0x1, 0xd3b, 0x7fffffff, 0x89}, {0xfc0, 0x7fffffff, 0x7, 0x1}, {0xfffffffc, 0xffffb972, 0x4, 0x3}, {0x101, 0x7fff, 0x7, 0x8}, {0x0, 0x7f, 0x1, 0xfffffffc}, {0x0, 0x7fff, 0x120000, 0x2}, {0x79, 0x1ff, 0x3, 0x8a8}, {0xffffffff, 0x6, 0x9}, {0x1, 0x9, 0x1, 0x9}, {0x0, 0x10000, 0x2f, 0x4}, {0x5bc527c1, 0xffffffff, 0x1000, 0x5}, {0x6, 0x9, 0x7ff, 0x8001}, {0x1, 0x1ff, 0xd, 0x8}, {0x3198, 0x3, 0x3, 0x6f}, {0x10000, 0x7, 0x7, 0x1}, {0x3ff, 0xff, 0x8, 0x3f}, {0x5, 0x7, 0x40000, 0xe0d}, {0xdc2, 0x7fffffff, 0x8, 0x4ba26e4d}, {0x3, 0x2, 0x1, 0x3}, {0x3, 0x10, 0x400, 0x40}, {0x9, 0x8, 0x4, 0x4}, {0x6, 0x7fff, 0x7ff, 0xbca}, {0x242, 0x30fe, 0x4, 0x80000001}, {0x0, 0x0, 0x89}, {0x7fff, 0xfffffffd, 0x4, 0x4}, {0x8, 0x3ed, 0x1, 0x3}, {0x5, 0x56, 0x1, 0x830e}, {0x6, 0x80000001, 0x4}, {0x80000000, 0x8, 0xfffffffa, 0x401}, {0x0, 0x8, 0x7}, {0x9, 0x2f22, 0x401, 0x2}, {0x10, 0x8, 0xff, 0x1}, {0xc76, 0xa, 0x2, 0x1}, {0x7, 0x8001, 0x200, 0x5}, {0x0, 0x8000, 0x2, 0x5}, {0x0, 0x4, 0x0, 0x1c3}, {0x6, 0xff, 0x8, 0x7}, {0x4, 0xffffffa9}, {0x7fffffff, 0x7, 0xe, 0xe}, {0x4, 0xb, 0x7ff, 0x5}, {0x7, 0x9, 0x7ff, 0xda4a}, {0x3, 0x4, 0x9, 0x3}, {0x5, 0x1, 0x57dba8ec, 0x9}, {0x5, 0x4, 0x9, 0x4}, {0x3, 0x8, 0x1, 0xa}, {0x9, 0x8001, 0x1, 0x8}, {0x6, 0x6, 0x0, 0x7f}, {0x9, 0x6, 0xf, 0xe0000000}, {0x0, 0x7fffffff, 0x7, 0x5}, {0x400, 0x1ff, 0x7}, {0xa, 0xffff, 0x8, 0x8}, {0x2bc, 0x5, 0x5, 0x8a26}, {0x2, 0xbb10, 0x100, 0x8}, {0x1, 0x4, 0x8, 0x22}, {0x4, 0xe76, 0xcb6, 0x7}, {0x8f6, 0x6, 0x6, 0xfffe0000}, {0xc7, 0x8, 0xffff7ac2, 0x3}, {0x4, 0x45f, 0x8001, 0x70b}, {0x1a, 0x2, 0x0, 0x8}, {0x2, 0x5, 0x1, 0x2}, {0x4, 0xe, 0x2, 0x1}, {0x6, 0x3, 0x3, 0xafc}, {0x2, 0x4, 0x2, 0x3}, {0x4, 0x860, 0x6988ee48, 0xfffffff9}, {0xe, 0xbe, 0x1, 0x80000000}, {0x7, 0x1, 0x6, 0xe8e2}, {0x8, 0x4, 0x0, 0x23}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0xb98}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1.499385067s ago: executing program 4 (id=5785): r0 = socket(0x2, 0x3, 0x67) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f00000000c0), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gretap0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1.428726457s ago: executing program 0 (id=5786): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x41}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x41}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4800, 0x0, {0x3}}, 0x18}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000280)="86621b86be1c9f57434a17e193e2a3acd9f92a01e0914451d2bc14b863c63905c67113b77692e419cd6e7ce08c9869f3e15c5d0cf9"}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c800}, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x8d}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) sendmsg$netlink(r0, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x4c}], 0x1}, 0x0) r6 = socket$inet(0x2, 0x2, 0x43) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000300000000000100ffffffff000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000300000000000100ffffffff000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100003000010028bd7000fbdbdf25040117800c00160006ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x0) 1.232082674s ago: executing program 4 (id=5787): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x7e, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x38, 0xfefffff6, 0x2, 0x9, 0xbcaf, 0x8}}, {0x14, 0x2, [0x1, 0x2, 0x971, 0x3, 0x2, 0x180, 0x400, 0x401]}}]}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@getchain={0x5c, 0x66, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1, 0xfff2}, {0xc37cffe66ae0ae90, 0x7}, {0xe, 0x6}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x89b}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x7fff}]}, 0x5c}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delqdisc={0x60, 0x25, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xfff1}, {0xc, 0xe}, {0xffe0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x8}]}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x48000000}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.127892277s ago: executing program 0 (id=5788): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x48, 0xe3, 0x0, 0x1, {0x44, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xf}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x4}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9d05}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}]}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x81) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x15, 0x300, 0x70bd28, 0x25dfdbfb, {0x1f, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "61f8"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "3700fa22b5979888ce5ef32185da3263e1a90764eb79bc004f0a1f8e467abf33376628e17d511f3969ec34b1a08257855780eaca8c8fe82c7aec2f6d907b1f73a0aedadce1f34f65a0670d459c67e9ef861680"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xad7}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8004) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0x1, 0x2}, {0xe}, {0xa, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x58, 0x2e, 0x30, 0x61]}}, &(0x7f0000000800), 0x4d, 0x0, 0x0, 0xcc24, 0x10000}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000900)=@raw=[@jmp={0x5, 0x0, 0x6, 0x3, 0x1, 0x2, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}}, @alu={0x4, 0x0, 0x7, 0x9, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000980)='GPL\x00', 0x2, 0x1, &(0x7f00000009c0)=""/1, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000000a40)=[{0x4, 0x4, 0xd, 0x9}], 0x10, 0x7}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000b40)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x23, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x6, 0xa, 0x3, 0x40, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000640)='syzkaller\x00', 0x81, 0xfd, &(0x7f0000000680)=""/253, 0x41000, 0x5, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000880)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x8, 0x9ce9}, 0x10, 0x26bb6, r6, 0x0, &(0x7f0000000bc0)=[r7], 0x0, 0x10, 0x28}, 0x94) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r8, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1ca8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x5c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000f40)={0x2b0, 0x7, 0x1, 0x5, 0xa, 0x0, [{0x2, 0x90, 0xf59, '\x00', 0x200}, {0x6, 0x6, 0x7, '\x00', 0x300}, {0x9, 0x80, 0x3, '\x00', 0x2003}, {0x555c, 0x27cc, 0x1, '\x00', 0x1000}, {0x6, 0x8000000000000001, 0x9, '\x00', 0x800}, {0x3, 0x0, 0xb30, '\x00', 0xc02}, {0xe, 0x4, 0x4, '\x00', 0x100}, {0x8, 0x1, 0x52, '\x00', 0x1000}, {0x54, 0x4, 0x9, '\x00', 0x1800}, {0x9, 0x0, 0x8, '\x00', 0x80}]}) openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x82400, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x50, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xff11}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040084}, 0x4100) sendmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001380)="a3be4baad61c4f7737c0ff2c3de5f6b42bd268d7faaffb44538523dad6c5807f998176b0631c23c692b044935dd94261395ca18805f811907507854d6af1220ba9eb0ebb31260305c8599ffbc1d43b815d9eabb44e18378deb1d3f23bc2c1bf88912e7a008d782823256952e2537f72135a593c886fd34ac12df434f8eb6f16030b0e14e9b6501538146d90b439424c481746b17100c7058eb819b", 0x9b}, {&(0x7f0000001440)="affd3f7863cb81b87db6a14e8081ac3d5dcbe37e70a0004b86d8c4f6c242d6ff8832605704ca6c073d63c88f907f27da04ca85a5f4a377f311668ec617989b5c930b62dc6414adfe980d44f384ad91bebbcd7e9b477776b35ed103d0ec6a1bc2a01ef15da2cfdbb79fb07e38899f", 0x6e}], 0x2}}], 0x1, 0x4001) ioctl$TUNSETLINK(r7, 0x400454cd, 0xf) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'wg0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000001580)={0x0, 0x4, 0x6, 0x0, @vifc_lcl_ifindex=r10, @rand_addr=0x64010100}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x50, 0x1405, 0x1, 0x70bd25, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x10) connect(r0, &(0x7f0000001700)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80) epoll_pwait(0xffffffffffffffff, &(0x7f0000001780)=[{}, {}, {}], 0x3, 0x400, &(0x7f00000017c0)={[0x9]}, 0x8) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x88, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x15}, 0x80) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x8, 0x7, 0x3, 0x6, 0x40000, r3, 0xeb2, '\x00', r10, r7, 0x1, 0x0, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x0, 0x6, 0xd, 0x80c0, r11, 0x8, '\x00', r10, r2, 0x1, 0x5, 0x1, 0xd, @value=r7}, 0x50) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000001c80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x144, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "9b4890d56cca5957625202ad54ab2c5117b8012b1ff438beebaf2d1164d6df05"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x12e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf3c6}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.052283326s ago: executing program 2 (id=5789): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x1, 0x9, @te1=&(0x7f0000000000)={0x40, 0xffffffff, 0x7, 0x8}}}) 992.941765ms ago: executing program 4 (id=5790): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000000104000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001000"/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\'\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001740)={{r1, &(0x7f0000000640)='^@\'+-)^\x00', 0xd03241, &(0x7f0000000680)={@_ha_fsid={[0xd0, 0x1]}, {0x4, 0x200, 0x1000}}, 0x2, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x4f0e}, {[0x2, 0x4, 0x101, 0xa]}, 0x7, 0x1000, &(0x7f0000000740)=""/4096}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x9}}, @enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0x7, 0x2}, {0xa, 0x3}, {0x5, 0x80000001}, {0x1, 0x5}, {0x2, 0x1}]}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x2, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x22, 0x0, 0x1e, 0x1}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0xa, 0x1}, {0x4, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x2e, 0x61, 0x2e, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000540)=""/161, 0xcf, 0xa1, 0x1, 0x4, 0x10000, @value=r4}, 0x28) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r3) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) 894.686577ms ago: executing program 2 (id=5791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x1, 0x4) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000180)='*\xc7\'[\x00', 0x2c0002, &(0x7f00000001c0)={@_ha_fsid={[0x7fffffff, 0x8001]}, {0x9, 0x6, 0x7f, 0x8}}, 0x8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x6}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x59, 0xc}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x21, 0x2, 0xfff, 0x0, 0x20438, 0x1, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x11, 0x400, 0x6, 0x0, 0x8000, 0x1, 0xe96, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0xc, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x26, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, [@map_fd={0x18, 0xb, 0x1, 0x0, r2}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1ff}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}]}, &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r6, r7, 0x1, r8, r10, r11, r12, r13, r14], &(0x7f0000000900)=[{0x1, 0x4, 0xa, 0x4}, {0x1, 0x4, 0x4, 0x3}, {0x0, 0x2, 0x9, 0x7}, {0x2, 0x1, 0xa, 0x5}, {0x5, 0x5, 0x3}], 0x10, 0x7}, 0x94) r15 = socket(0x0, 0x8, 0x7fff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d40)={&(0x7f0000000a40)="59b4e25a3a14118b5b3f3d53f67956b34a005e288bb32d085a4548bfe677cb3454e9cd751aad03a42565b6219f7e9fff87d41ee4779404d754c2f07107f1cd8f3283ce8606ff729ccc2b3ac99adc73ddf6eed9b044b8bbe9cc48a707d4070e264c4c342c6c666847159ba5c21b71322c79210f89ee5c5502507f7d803e75fe1c098ec1c59d32f4e40b2298fa2a5f3bf28bd3ffe1312012bc1addced8ba9d16c8754dd553092b51ac6c2cd8388cb8d0a7f24c40c75c03b7c50d159d497a6a8984dff9a22743ff4f000758771c0d13267b066244ddbc2469b84a22ac0210bccd4fe38dd39813e45725630efb89c690617ab0ae3bd28d32abecec78ff", &(0x7f0000000b40)=""/147, &(0x7f0000000c00)="f4cb0e7e2846780ad8da5af5e183749f947dcdab8b909820fcbf5028db16a9f7a5e7b8286d60dbd9da81a3079f30117b6d7d540347b0221ca48a0d746e0617d857e0", &(0x7f0000000c80)="5afd74b1270b9f23813881e716bd976d14d8d70165671fba459d87284bf353ad9f56ddfd49d4483a7625a51302b2ec15f304c2b84971c4663671c6de54094f466b844aad8526b3a245d179144d95a65df0681e5652a860ef29b6320ce830e37eab2c581fca9046f23197672b69e796f328c0e2384ed808852de8b105244cc658f44dc436739380e50d3b29d88f4064992c", 0x4, 0x1, 0x4}, 0x38) ioctl$BTRFS_IOC_SNAP_CREATE(r15, 0x50009401, &(0x7f0000000d80)={{r7}, "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"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d80)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x300000, '\x00', 0x0, r9, 0x0, 0x4}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000001e40)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x190, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000001e00), {[{{@ip={@loopback, @broadcast, 0xffffffff, 0xffffffff, 'ip6gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x16, 0x2, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'wlan1\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x1, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x8, 0xa2c5, 0xeef, 0x7fffffff, 0x6}}, @common=@ttl={{0x28}, {0x3, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x3, 0x5, 0x4}}}, @common=@inet=@set3={{0x50}, {{0x4}, {0xb, 0x7fff}, {0x7}, 0xa678}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa121, 0x2, 0x7, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000002200)={'batadv_slave_1\x00', 0x0}) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x905, 0x40000, r14, 0x5, '\x00', r16, r9, 0x0, 0x0, 0x4, 0x3}, 0x50) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002580)=@o_path={&(0x7f0000002540)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002640)={0x11, 0x17, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe6}, [@map_idx_val={0x18, 0x27550d3d2758952e, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6fb1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x2, 0x2, 0x1, 0x5, 0x8, 0x10}]}, &(0x7f0000002300)='syzkaller\x00', 0x8, 0xda, &(0x7f0000002340)=""/218, 0x40f00, 0x8a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002440)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002480)={0x9, 0x8, 0x1000, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000025c0)=[r10, r17, r10, r14, r10, r18], &(0x7f0000002600)=[{0x1, 0x1, 0xe, 0x4}], 0x10, 0x6}, 0x94) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r15) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x5c, r19, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x21}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x30}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x160}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x24004015) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002cc0)={0x0, 0x2, 0x8, 0x1}) 770.73972ms ago: executing program 4 (id=5792): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82b7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae3e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 770.23229ms ago: executing program 0 (id=5793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020603000000000000006511000000000d0003006861dca73a6e65740000000005010400000000000900020073797a31000000000c00078008001340000017e505000500020000000500010006000000"], 0x54}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) sendto$l2tp6(r5, &(0x7f0000000000)="fd", 0x1, 0x88c0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004080) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r6, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) 296.026322ms ago: executing program 2 (id=5794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYBLOB="4df7a1d24c48e55ceae317148623ca9c7eaf1e50ee7938e0b4b7b4f55fd217d74bdc3b9ff5e8bea3ea00389ee3454a446bd81c019a2c98c6f2342b5983bdaab8103c0415dd926dc55a0c8c4ae4a25f868def53bdbd848b1b2b436da78b1e3ad50f223d7a735bd3ff708a54272e1223e17560a29530155b1a21350aae35e67c01b93a1fc6a2aea5e8d26a272c7013339deb137dd42dd6b8f58be4"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8c10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r1, 0x1, 0x3, 0x80000000}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) shutdown(0xffffffffffffffff, 0x0) close(0x3) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r10, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r7, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 178.262419ms ago: executing program 3 (id=5795): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 0s ago: executing program 3 (id=5796): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x0, 0xff, 0x7, 0x6, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)=@newchain={0x60, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x60}}, 0x4044004) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r7, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x400c800) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x832295b3f1703efb}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x80) ioctl(r2, 0x8b32, &(0x7f0000000040)) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x0, 0xff, 0x7, 0x6, 0xffff}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)=@newchain={0x60, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x60}}, 0x4044004) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r7, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x400c800) (async) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x832295b3f1703efb}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x80) (async) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) (async) kernel console output (not intermixed with test programs): k: Missing valid actions attribute. [ 579.244808][T20601] syzkaller0: entered promiscuous mode [ 579.299631][T20601] syzkaller0: entered allmulticast mode [ 579.883030][ T29] audit: type=1804 audit(1787353131.060:9): pid=20627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3926" name="/newroot/221/cgroup.controllers" dev="tmpfs" ino=1146 res=1 errno=0 [ 579.915324][T20628] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 579.994591][ T29] audit: type=1800 audit(1787353131.060:10): pid=20627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3926" name="cgroup.controllers" dev="tmpfs" ino=1146 res=0 errno=0 [ 580.080641][T20628] netlink: 'syz.1.3925': attribute type 5 has an invalid length. [ 580.122335][T20628] geneve2: entered promiscuous mode [ 580.137976][T20628] geneve2: entered allmulticast mode [ 580.256211][T20640] gretap0: entered promiscuous mode [ 580.367861][ T1154] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 580.438471][T20650] xt_ecn: cannot match TCP bits for non-tcp packets [ 580.460265][ T139] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 580.475631][T20651] xt_time: unknown flags 0xf4 [ 580.487862][T20642] 0ªî{X¹¦: renamed from gretap0 [ 580.567347][T20642] 0ªî{X¹¦: left promiscuous mode [ 580.615591][T20642] 0ªî{X¹¦: entered allmulticast mode [ 580.811735][T20664] __nla_validate_parse: 5 callbacks suppressed [ 580.811755][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3935'. [ 580.860540][ T6282] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 580.953358][T20667] netlink: 'syz.2.3937': attribute type 1 has an invalid length. [ 581.342753][ T6281] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 581.647811][T20689] net_ratelimit: 13 callbacks suppressed [ 581.647832][T20689] ip_tables: iptables: counters copy to user failed while replacing table [ 581.710761][T20686] netlink: 'syz.0.3944': attribute type 10 has an invalid length. [ 581.742898][T20696] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x1 [ 581.838209][T20702] openvswitch: netlink: IPv4 tun info is not correct [ 581.896211][T20686] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.919101][T20686] bond0: (slave team0): Enslaving as an active interface with an up link [ 582.013080][T20695] wireguard0: entered promiscuous mode [ 582.305454][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.327791][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.370567][T20719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3951'. [ 582.700865][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.709423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.748360][T20719] bond4: entered promiscuous mode [ 582.773132][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'. [ 582.783246][T20719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.795105][T20737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3954'. [ 582.805455][T20737] geneve1: default FDB implementation only supports local addresses [ 583.451739][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.461414][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.571323][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.216981][T20722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.938922][T20778] syz_tun: entered promiscuous mode [ 585.966449][T20785] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3965'. [ 585.992332][T20785] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3965'. [ 586.010576][T20785] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3965'. [ 586.212062][T20793] netlink: 'syz.1.3968': attribute type 11 has an invalid length. [ 586.641098][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3970'. [ 586.682572][T20808] bridge0: port 3(gretap0) entered blocking state [ 586.706044][T20807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3970'. [ 586.732472][T20808] bridge0: port 3(gretap0) entered disabled state [ 586.766949][T20808] gretap0: entered allmulticast mode [ 586.811199][ T6281] net_ratelimit: 6 callbacks suppressed [ 586.811220][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.820422][T20818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3972'. [ 586.858479][T20808] gretap0: entered promiscuous mode [ 586.868812][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.902676][T20808] bridge0: port 3(gretap0) entered blocking state [ 586.911140][T20808] bridge0: port 3(gretap0) entered forwarding state [ 587.784023][T20838] xt_hashlimit: size too large, truncated to 1048576 [ 587.887907][T20842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3978'. [ 588.036432][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.078644][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.288993][T20857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3983'. [ 588.431264][T20859] ip_tables: iptables: counters copy to user failed while replacing table [ 588.455624][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.464168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.756203][T20870] xt_l2tp: v2 doesn't support IP mode [ 589.263623][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.325992][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.361092][T20892] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3992'. [ 589.392007][T20893] syzkaller1: entered promiscuous mode [ 589.410313][T20894] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 589.418148][T20893] syzkaller1: entered allmulticast mode [ 589.855561][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3996'. [ 590.346921][T20932] netlink: 'syz.0.4003': attribute type 83 has an invalid length. [ 590.646300][T20939] bond8: Removing last ns target with arp_interval on [ 590.817738][T20952] team0: Device gtp1 is up. Set it down before adding it as a team port [ 590.916098][T20963] netlink: 'syz.1.4006': attribute type 10 has an invalid length. [ 591.010171][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 591.019068][T19278] Bluetooth: hci4: link tx timeout [ 591.028501][T19278] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.192075][T20966] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 591.223265][T20963] team0: Port device dummy0 added [ 591.413047][T19278] Bluetooth: hci4: link tx timeout [ 591.419403][T19278] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.474141][T19278] Bluetooth: hci4: link tx timeout [ 591.479416][T19278] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.498622][T20979] netlink: 'syz.1.4013': attribute type 21 has an invalid length. [ 591.516134][T20972] netlink: 'syz.2.4012': attribute type 2 has an invalid length. [ 592.213234][T19278] Bluetooth: hci4: link tx timeout [ 592.218662][T19278] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 592.364568][T19278] Bluetooth: hci4: link tx timeout [ 592.372589][T19278] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 592.547103][T21006] __nla_validate_parse: 1 callbacks suppressed [ 592.547125][T21006] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4020'. [ 592.630486][T21010] syzkaller1: entered promiscuous mode [ 592.715838][ T1154] net_ratelimit: 8 callbacks suppressed [ 592.715859][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.737019][T21010] syzkaller1: entered allmulticast mode [ 592.842973][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.987626][T21024] batman_adv: batadv0: Adding interface: gretap1 [ 593.035335][T21024] batman_adv: batadv0: The MTU of interface gretap1 is too small (1410) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.115463][T19278] Bluetooth: hci4: command 0x0406 tx timeout [ 593.122068][T21024] batman_adv: batadv0: Interface activated: gretap1 [ 594.031974][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.129794][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.215016][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.223767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.281652][T21061] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4032'. [ 594.319598][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4031'. [ 594.404908][T21066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'. [ 594.497360][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4034'. [ 594.518675][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4032'. [ 595.004809][T21052] netlink: 'syz.4.4030': attribute type 4 has an invalid length. [ 595.054704][T21090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4039'. [ 595.124358][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4036'. [ 595.160685][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4036'. [ 595.311108][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.344006][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.499082][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.507613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.236903][T21130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4049'. [ 598.557449][T21179] __nla_validate_parse: 2 callbacks suppressed [ 598.557470][T21179] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4067'. [ 598.685936][T21186] netlink: 'syz.4.4068': attribute type 61 has an invalid length. [ 598.721499][ T139] net_ratelimit: 6 callbacks suppressed [ 598.721517][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.791814][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.930657][ T5619] Bluetooth: hci4: command 0x0406 tx timeout [ 599.065140][T21192] veth0: entered promiscuous mode [ 599.114936][T21191] veth0: left promiscuous mode [ 599.491037][T21209] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4077'. [ 599.715073][T21218] tipc: Enabling of bearer rejected, already enabled [ 599.747645][T21213] netlink: 'syz.0.4078': attribute type 178 has an invalid length. [ 599.887283][T21224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4083'. [ 599.958941][T21224] netlink: 'syz.4.4083': attribute type 21 has an invalid length. [ 599.980459][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.989067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.009826][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.038313][T21226] netlink: 'syz.4.4083': attribute type 1 has an invalid length. [ 600.048672][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.077092][T21224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4083'. [ 600.199258][T21234] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 600.338001][T21226] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.444363][T21240] sch_fq: defrate 0 ignored. [ 600.709237][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057b8bc00: rx timeout, send abort [ 600.760766][T21245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4088'. [ 600.775661][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 601.209505][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057b8ac00: rx timeout, send abort [ 601.218285][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057b8bc00: abort rx timeout. Force session deactivation [ 601.242451][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.242998][ C0] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888057b8ac00: connection exists (fe ff). last cmd: 20 [ 601.257242][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.288247][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.297044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.492745][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057b8b000: rx timeout, send abort [ 601.602152][T21278] xt_hashlimit: size too large, truncated to 1048576 [ 601.710878][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801c2ebc00: rx timeout, send abort [ 601.729885][T21284] veth5: entered allmulticast mode [ 602.001238][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057b8b000: abort rx timeout. Force session deactivation [ 602.219318][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801c2ebc00: abort rx timeout. Force session deactivation [ 602.418827][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4105'. [ 603.034538][T21336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4112'. [ 603.122274][T21338] bond0: entered promiscuous mode [ 603.127385][T21338] bond_slave_0: entered promiscuous mode [ 603.163300][T21338] bond_slave_1: entered promiscuous mode [ 603.187549][T21338] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 603.198524][T21341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'. [ 603.251812][T21338] bond3: entered promiscuous mode [ 603.302020][T21338] batadv0: entered promiscuous mode [ 603.330393][T21338] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 603.668581][T21357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4118'. [ 603.705258][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4120'. [ 603.745595][T21356] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4118'. [ 603.761142][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4118'. [ 604.249732][T21379] macvlan0: entered promiscuous mode [ 604.414185][T21385] bridge0: port 1(ipvlan2) entered blocking state [ 604.477034][T21385] bridge0: port 1(ipvlan2) entered disabled state [ 604.505605][T21385] ipvlan2: entered allmulticast mode [ 604.519825][T21391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4128'. [ 604.544279][T21385] bridge0: entered allmulticast mode [ 604.568495][T21385] ipvlan2: left allmulticast mode [ 604.610941][ T6282] net_ratelimit: 4 callbacks suppressed [ 604.610963][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.625456][T21385] bridge0: left allmulticast mode [ 604.654111][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.874993][T21400] netlink: 'syz.4.4131': attribute type 2 has an invalid length. [ 605.054061][T21400] : entered promiscuous mode [ 605.177872][T21408] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4133'. [ 605.265603][T21408] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4133'. [ 605.358017][T21411] syzkaller0: entered promiscuous mode [ 605.384409][T21411] syzkaller0: entered allmulticast mode [ 605.717994][T21388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 605.740484][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.748967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.783895][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.810006][T21388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4127'. [ 605.833014][T21432] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4138'. [ 605.846494][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.080115][ T1160] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.014306][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.023484][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.031965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.057039][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.062824][T21470] netlink: 'syz.2.4146': attribute type 1 has an invalid length. [ 607.862258][T21514] netlink: 'syz.2.4156': attribute type 2 has an invalid length. [ 610.306591][T21594] netlink: 'syz.2.4176': attribute type 10 has an invalid length. [ 610.411473][ T12] net_ratelimit: 7 callbacks suppressed [ 610.411493][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.466502][T21594] team0: Port device dummy0 added [ 610.491212][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.861667][T21611] xt_hashlimit: size too large, truncated to 1048576 [ 611.492562][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.501090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.615235][T21628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 611.641913][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.669323][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.745379][T21628] bond0: (slave bond2): Enslaving as an active interface with an up link [ 612.774347][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.782749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.853580][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.873007][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.190199][ T711] net_ratelimit: 4 callbacks suppressed [ 616.190222][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.208773][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.251495][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.260019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.321166][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.332865][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.891619][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.900084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.451478][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.459994][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.770745][ T6282] net_ratelimit: 4 callbacks suppressed [ 621.770767][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.786693][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.901014][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.912433][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.014789][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.023589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.658494][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.666908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.022193][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.040177][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.290674][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.302028][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.350280][ T6282] net_ratelimit: 4 callbacks suppressed [ 627.350302][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.367784][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.470330][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.482696][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.775189][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.783667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.416594][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.425232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.590338][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.599721][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.910277][ T12] net_ratelimit: 4 callbacks suppressed [ 632.910300][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.929628][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.823432][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.833053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.964968][T21722] __nla_validate_parse: 10 callbacks suppressed [ 633.964988][T21722] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4191'. [ 634.061783][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.075226][T21723] bond1: Unable to set up delay as MII monitoring is disabled [ 634.097103][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.174483][T21723] bond1 (unregistering): Released all slaves [ 634.757924][T21750] SET target dimension over the limit! [ 635.175491][T21765] netlink: 'syz.0.4202': attribute type 8 has an invalid length. [ 635.230498][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.273740][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.674124][T21777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4206'. [ 636.142515][T21787] netlink: 'syz.1.4209': attribute type 4 has an invalid length. [ 636.156947][T21786] netlink: 'syz.1.4209': attribute type 4 has an invalid length. [ 636.414070][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.470351][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.688510][T21801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4212'. [ 636.778836][T21801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4212'. [ 637.355598][T21825] netlink: 'syz.0.4217': attribute type 1 has an invalid length. [ 637.413632][T21825] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4217'. [ 637.735712][T21842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4223'. [ 637.894235][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'. [ 638.285203][T21860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4229'. [ 638.667987][T21870] syzkaller0: entered promiscuous mode [ 638.678312][T21874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4231'. [ 638.704653][T21870] syzkaller0: entered allmulticast mode [ 638.748824][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4233'. [ 638.786895][ T6282] net_ratelimit: 5 callbacks suppressed [ 638.786914][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.812620][T21873] netlink: 'syz.3.4233': attribute type 10 has an invalid length. [ 638.824199][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.212746][T21892] __nla_validate_parse: 1 callbacks suppressed [ 639.212767][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 639.271296][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 639.309543][T21894] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4237'. [ 639.666090][T21911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4241'. [ 639.808532][T21918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.858432][T21917] IPv4: Oversized IP packet from 127.202.26.0 [ 639.921776][T21921] bridge1: entered promiscuous mode [ 639.936302][T21921] bridge1: entered allmulticast mode [ 639.947470][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.981571][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.191093][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.231793][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.801058][T21966] team0: No ports can be present during mode change [ 641.951766][T21972] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4256'. [ 642.211338][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.219828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.847897][T21997] IPv6: sit1: Disabled Multicast RS [ 643.345028][T22014] siw: device registration error -23 [ 643.658351][T22026] netlink: 'syz.0.4271': attribute type 4 has an invalid length. [ 643.700574][T22026] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4271'. [ 643.713133][T22019] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 643.789409][T22019] bond9: option packets_per_slave: allowed values 0 - 65535 [ 643.859152][T22019] bond9 (unregistering): Released all slaves [ 643.915669][T22024] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4271'. [ 643.938200][T22024] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4271'. [ 644.033254][T22036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4273'. [ 644.057252][T22026] net_ratelimit: 16 callbacks suppressed [ 644.057273][T22026] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 644.123001][T22040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4273'. [ 644.640150][T22057] netlink: 'syz.0.4281': attribute type 10 has an invalid length. [ 644.676459][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.711144][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.873215][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'. [ 645.018836][T22057] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 645.117299][T22073] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 645.155685][T22071] syzkaller0: entered promiscuous mode [ 645.193964][T22071] syzkaller0: entered allmulticast mode [ 645.324140][T22071] netlink: 'syz.2.4283': attribute type 1 has an invalid length. [ 645.373212][T22071] netlink: 'syz.2.4283': attribute type 1 has an invalid length. [ 645.432903][T22079] veth1_macvtap: entered promiscuous mode [ 645.457800][T22079] macsec1: entered promiscuous mode [ 645.563918][T22079] veth1_macvtap: left promiscuous mode [ 645.761165][T22074] bridge0: port 1(veth0) entered blocking state [ 645.771816][T22074] bridge0: port 1(veth0) entered disabled state [ 645.778450][T22074] veth0: entered allmulticast mode [ 645.789053][T22074] veth0: entered promiscuous mode [ 645.796070][T22074] bridge0: port 1(veth0) entered blocking state [ 645.802564][T22074] bridge0: port 1(veth0) entered forwarding state [ 645.844178][T22095] x_tables: duplicate underflow at hook 1 [ 645.851947][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.868718][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.086684][T22103] netlink: 'syz.1.4290': attribute type 1 has an invalid length. [ 646.116416][T22103] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4290'. [ 646.352288][T22109] Cannot find set identified by id 0 to match [ 647.000224][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.030191][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.981708][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.990078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.627512][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'. [ 648.862309][T22128] 0ªî{X¹¦: entered promiscuous mode [ 648.912841][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4291'. [ 648.996583][T22128] 0ªî{X¹¦: left promiscuous mode [ 649.161837][T22138] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4295'. [ 649.378249][ T1160] net_ratelimit: 4 callbacks suppressed [ 649.378268][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.424325][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.433201][T22147] netlink: 'syz.2.4299': attribute type 1 has an invalid length. [ 649.477675][T22140] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 649.494121][T22141] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 649.513173][T22141] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 649.713694][T22147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 649.834821][T22151] bond3: (slave veth0_to_bond): making interface the new active one [ 649.884333][T22151] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 650.540806][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.590247][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.017929][T22189] netlink: 'syz.0.4310': attribute type 10 has an invalid length. [ 651.303896][T22198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4315'. [ 651.734426][T22218] netlink: 'syz.3.4320': attribute type 1 has an invalid length. [ 651.780488][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.807315][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.247631][T22231] openvswitch: netlink: Duplicate key (type 0). [ 652.286760][T22232] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4324'. [ 652.318594][T22231] openvswitch: netlink: Duplicate key (type 0). [ 652.373729][T22231] openvswitch: netlink: Duplicate key (type 0). [ 652.385516][T22231] openvswitch: netlink: Duplicate key (type 0). [ 652.506887][T22235] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 652.579128][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4315'. [ 653.005607][T22245] tipc: Can't bind to reserved service type 0 [ 653.107575][T22249] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 653.134158][T22249] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.767223][T22270] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.4338'. [ 654.261015][T22291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4343'. [ 654.619672][T22309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4347'. [ 655.094065][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4354'. [ 655.201582][ T6686] net_ratelimit: 69 callbacks suppressed [ 655.201602][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.271435][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.409163][T22351] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4357'. [ 655.669021][T22357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4359'. [ 655.726209][T22360] xt_hashlimit: size too large, truncated to 1048576 [ 655.735642][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4361'. [ 656.440410][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.524063][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.673831][T22381] netlink: 'syz.2.4367': attribute type 2 has an invalid length. [ 656.813562][ T50] Bluetooth: hci4: link tx timeout [ 656.818989][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 656.855891][T22390] netlink: Conntrack attr has 4 unknown bytes [ 656.874238][T22390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.960100][T22390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.985222][T22381] : entered promiscuous mode [ 657.071650][T22393] netlink: 'syz.0.4368': attribute type 5 has an invalid length. [ 657.574860][T22407] netlink: 'syz.2.4373': attribute type 32 has an invalid length. [ 657.609960][T22407] __nla_validate_parse: 1 callbacks suppressed [ 657.609980][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4373'. [ 657.639151][T22420] netlink: 'syz.2.4373': attribute type 1 has an invalid length. [ 657.674380][ T50] Bluetooth: hci4: link tx timeout [ 657.680421][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 657.710085][T22420] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4373'. [ 657.731088][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.776353][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.895275][T22407] bond4: Setting coupled_control to off (0) [ 658.106901][T22426] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4376'. [ 658.141503][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.170303][T22428] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4376'. [ 658.190830][T22438] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 658.219123][T22426] gretap0: entered promiscuous mode [ 658.435025][T22428] 0ªî{X¹¦: renamed from gretap0 [ 658.526637][T22428] 0ªî{X¹¦: left promiscuous mode [ 658.555240][T22428] 0ªî{X¹¦: entered allmulticast mode [ 658.698846][T22452] xt_l2tp: v2 sid > 0xffff: 1114112 [ 658.862771][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 659.138865][T22456] atomic_op ffff88804c2911e0 conn xmit_atomic 0000000000000000 [ 659.181250][T22463] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4387'. [ 659.426370][T22463] bond6 (unregistering): Released all slaves [ 659.600355][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4385'. [ 659.669476][T22456] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.126910][T22489] netlink: 'syz.1.4391': attribute type 24 has an invalid length. [ 660.135364][T22490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4393'. [ 660.137407][T22490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4393'. [ 660.348268][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4394'. [ 660.636523][T22503] gre2: entered promiscuous mode [ 660.677415][T22503] gre2: entered allmulticast mode [ 661.176725][T22519] syzkaller0: entered promiscuous mode [ 661.193434][ T711] net_ratelimit: 11 callbacks suppressed [ 661.193451][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.216216][T22519] syzkaller0: entered allmulticast mode [ 661.243388][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.713015][T22547] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 661.736526][T22547] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿ [ 662.367562][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.378667][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.259439][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.268026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.480671][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.494034][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.620797][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.639401][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.891132][T22555] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 665.239708][T22572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4410'. [ 665.359972][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4410'. [ 665.388692][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4410'. [ 665.627772][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4411'. [ 666.126508][T22604] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4415'. [ 666.381291][T22584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.736240][T22617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4418'. [ 666.882977][ T13] net_ratelimit: 5 callbacks suppressed [ 666.882996][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.955577][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.278284][T22632] Bluetooth: hci0: unsupported parameter 5134 [ 667.306028][T22632] Bluetooth: hci0: unsupported parameter 8192 [ 667.336907][T22632] Bluetooth: hci0: unsupported parameter 5134 [ 667.379433][T22632] Bluetooth: hci0: unsupported parameter 8192 [ 667.456393][T22636] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 667.544685][T22636] bond5 (unregistering): Released all slaves [ 667.850208][T22650] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 667.969719][T22660] SET target dimension over the limit! [ 668.161883][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.213605][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.479761][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.488256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.530460][T22683] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 669.236427][T22701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4441'. [ 669.400946][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.466782][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.525799][T22714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4443'. [ 669.689788][T22723] : renamed from bond0 (while UP) [ 670.383901][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.449671][T22755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4454'. [ 670.958184][T22777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4459'. [ 671.119623][T22776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4460'. [ 671.353106][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4465'. [ 672.059117][T22821] bridge4: entered promiscuous mode [ 672.085777][T22821] bridge4: entered allmulticast mode [ 672.398931][T22829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4473'. [ 672.773027][T22846] netlink: 'syz.1.4478': attribute type 10 has an invalid length. [ 672.852502][ T12] net_ratelimit: 6 callbacks suppressed [ 672.852521][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.914762][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.210633][T22845] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4476'. [ 673.570991][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.579477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.015564][T22873] xt_nfacct: accounting object `' does not exist [ 674.088309][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.120279][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.242628][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.289799][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.427477][T22927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4498'. [ 675.454661][T22922] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4495'. [ 675.486247][T22922] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4495'. [ 675.527236][T22927] netlink: 'syz.0.4498': attribute type 2 has an invalid length. [ 675.656265][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4495'. [ 675.805170][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4496'. [ 676.133018][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.141578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.285883][T22963] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4505'. [ 677.016005][T22980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4509'. [ 677.298895][ T29] audit: type=1804 audit(1787353228.470:11): pid=22994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4512" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1758 res=1 errno=0 [ 677.401814][ T29] audit: type=1800 audit(1787353228.470:12): pid=22994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4512" name="cgroup.controllers" dev="tmpfs" ino=1758 res=0 errno=0 [ 677.472591][T22998] netlink: 'syz.4.4513': attribute type 1 has an invalid length. [ 678.731278][ T12] net_ratelimit: 4 callbacks suppressed [ 678.731297][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.815397][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.011026][T23044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4522'. [ 679.334590][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.343148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.934701][T23089] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4534'. [ 679.974793][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.025416][T23089] openvswitch: netlink: Message has 512 unknown bytes. [ 680.048684][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.118086][T23092] syzkaller1: entered promiscuous mode [ 680.175853][T23092] syzkaller1: entered allmulticast mode [ 680.543357][T23103] team0 (unregistering): Port device team_slave_0 removed [ 680.705923][T23103] team0 (unregistering): Port device team_slave_1 removed [ 680.903174][T23112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4538'. [ 680.957037][T23117] netlink: 'syz.2.4539': attribute type 1 has an invalid length. [ 681.006318][T23119] netlink: 'syz.2.4539': attribute type 1 has an invalid length. [ 681.046114][T23117] netlink: 'syz.2.4539': attribute type 2 has an invalid length. [ 681.075512][T23120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4540'. [ 681.139821][T23122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4540'. [ 681.153875][T23119] netlink: 'syz.2.4539': attribute type 2 has an invalid length. [ 681.201397][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.247551][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.449352][T23131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4542'. [ 681.499197][T23131] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 681.775646][T23146] SÌ”: renamed from team0 (while UP) [ 681.897673][T23150] netlink: 'syz.2.4547': attribute type 1 has an invalid length. [ 682.258569][T23153] bond5: (slave geneve2): making interface the new active one [ 682.290917][T23153] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 682.360031][ T1154] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 682.372422][ T1154] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 682.472707][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 682.524683][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 683.170636][T23185] netlink: 'syz.4.4560': attribute type 12 has an invalid length. [ 683.198610][T23177] lo speed is unknown, defaulting to 1000 [ 683.250665][T23186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4562'. [ 683.322105][T23191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4562'. [ 683.421261][T23185] bond9: option primary_reselect: invalid value (255) [ 683.476820][T23185] bond9 (unregistering): Released all slaves [ 683.627351][T23186] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4562'. [ 683.670603][T23177] wg1 speed is unknown, defaulting to 1000 [ 683.732152][T23205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4566'. [ 683.844058][T23210] net_ratelimit: 9 callbacks suppressed [ 683.844078][T23210] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 684.019824][T23215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4567'. [ 684.033538][T23206] bond2: entered allmulticast mode [ 684.074213][T23206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 684.133816][T23217] netlink: 'syz.3.4568': attribute type 1 has an invalid length. [ 684.614364][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.663425][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.709848][T23221] bond0: (slave gretap0): making interface the new active one [ 684.792245][T23221] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 684.936466][T23239] 8021q: VLANs not supported on gre0 [ 684.960373][T23238] Cannot find del_set index 4 as target [ 685.028115][T23236] 8021q: VLANs not supported on gre0 [ 685.093403][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.101995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.219868][ T711] IPVS: starting estimator thread 0... [ 685.322829][T23243] IPVS: using max 25 ests per chain, 60000 per kthread [ 685.619505][T23251] 8021q: VLANs not supported on ip6_vti0 [ 685.742195][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.820197][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.840384][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.253093][T23268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.408033][T23268] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4584'. [ 686.970271][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.992063][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.866924][T23303] syzkaller0: entered promiscuous mode [ 687.887928][T23303] syzkaller0: entered allmulticast mode [ 688.022031][T23313] netlink: 'syz.3.4593': attribute type 1 has an invalid length. [ 688.137514][T23313] 8021q: adding VLAN 0 to HW filter on device bond9 [ 688.330064][T23326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4595'. [ 688.926271][T23351] net_ratelimit: 4 callbacks suppressed [ 688.926291][T23351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.993154][T23351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.231935][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.264789][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.774530][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4607'. [ 689.818603][ T6684] wlan1: Trigger new scan to find an IBSS to join [ 690.099192][T23391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4609'. [ 690.164152][T23391] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 690.322787][T23395] pimreg: entered allmulticast mode [ 690.354996][T23399] v: renamed from veth0_vlan (while UP) [ 690.401501][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.426902][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.443590][T23404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4615'. [ 690.540445][T23404] netlink: 'syz.2.4615': attribute type 62 has an invalid length. [ 690.687000][T23415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4618'. [ 690.850499][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 690.867901][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.876669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.885155][T23415] 8021q: adding VLAN 0 to HW filter on device bond9 [ 690.918961][T23426] netlink: 'syz.2.4621': attribute type 2 has an invalid length. [ 690.969782][T23426] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4621'. [ 691.012429][T23425] netlink: 'syz.2.4621': attribute type 2 has an invalid length. [ 691.094057][T23425] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4621'. [ 691.185918][T23433] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4622'. [ 691.562338][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.588170][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.721474][T23530] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4642'. [ 694.132877][T23534] team0: Port device dummy0 removed [ 694.524351][T23554] netlink: 'syz.3.4651': attribute type 4 has an invalid length. [ 694.815945][T23556] syzkaller1: entered promiscuous mode [ 694.848650][T23556] syzkaller1: entered allmulticast mode [ 694.863106][ T6684] wlan1: Trigger new scan to find an IBSS to join [ 694.925344][T23565] netlink: 'syz.3.4655': attribute type 1 has an invalid length. [ 694.950857][ T6686] net_ratelimit: 7 callbacks suppressed [ 694.950878][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.019410][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.236681][T23565] 8021q: adding VLAN 0 to HW filter on device bond10 [ 695.678831][T23586] gtp2: entered promiscuous mode [ 695.710317][T23586] gtp2: entered allmulticast mode [ 696.033064][T23602] netlink: 'syz.2.4664': attribute type 3 has an invalid length. [ 696.075176][T23602] netlink: 'syz.2.4664': attribute type 3 has an invalid length. [ 696.094306][T23604] netlink: 'syz.4.4665': attribute type 1 has an invalid length. [ 696.115054][T23604] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4665'. [ 696.148870][T23604] NCSI netlink: No device for ifindex 0 [ 696.158260][T23611] netlink: 808 bytes leftover after parsing attributes in process `syz.4.4665'. [ 696.222188][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.250214][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.611137][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.619511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.635417][T23620] netlink: 'syz.4.4672': attribute type 1 has an invalid length. [ 696.685327][T23625] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 696.914814][T23634] netlink: 'syz.3.4676': attribute type 1 has an invalid length. [ 697.198194][T23634] bond11: entered promiscuous mode [ 697.226583][T23634] 8021q: adding VLAN 0 to HW filter on device bond11 [ 697.261208][T23643] netlink: 'syz.2.4678': attribute type 24 has an invalid length. [ 697.287776][ T54] wlan1: Creating new IBSS network, BSSID 82:e4:2f:57:78:37 [ 697.313362][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'. [ 697.441222][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.507343][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.733754][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.742315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.854993][T23661] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4684'. [ 698.058803][T23669] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 698.601170][T23686] netlink: 'syz.4.4692': attribute type 8 has an invalid length. [ 698.692473][T23689] netlink: 'syz.3.4693': attribute type 2 has an invalid length. [ 698.715751][T23689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4693'. [ 698.872301][T23689] : entered promiscuous mode [ 699.081982][T23698] lo: entered promiscuous mode [ 699.155166][T23698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4696'. [ 699.235520][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4697'. [ 699.398297][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4701'. [ 699.637175][T23700] team0: Port device team_slave_0 removed [ 699.715288][T23708] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 699.743779][T23720] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 699.772485][T23720] gretap1: entered promiscuous mode [ 699.786514][T23720] gretap1: entered allmulticast mode [ 700.179481][T23734] tipc: Started in network mode [ 700.198204][T23734] tipc: Node identity ac14142f, cluster identity 4711 [ 700.223157][T23734] tipc: Enabling of bearer rejected, failed to enable media [ 700.245542][T23738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4709'. [ 700.256696][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'. [ 700.272488][T23738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4709'. [ 700.300238][T23738] net_ratelimit: 5 callbacks suppressed [ 700.300257][T23738] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 700.436539][T23746] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4711'. [ 700.489226][T23746] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4711'. [ 700.498906][T23746] validate_nla: 1 callbacks suppressed [ 700.498922][T23746] netlink: 'syz.0.4711': attribute type 6 has an invalid length. [ 700.529778][T23746] netlink: 'syz.0.4711': attribute type 5 has an invalid length. [ 700.572772][T23753] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4712'. [ 700.587876][T23746] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4711'. [ 700.862111][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.896295][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.051418][T23769] syzkaller0: entered promiscuous mode [ 701.079776][T23769] syzkaller0: entered allmulticast mode [ 702.017256][T23798] ip_tables: iptables: counters copy to user failed while replacing table [ 702.035199][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.075860][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.374318][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.382839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.652935][T23819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.959753][T23827] veth3: entered promiscuous mode [ 703.011678][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.966173][T23847] netlink: 'syz.2.4740': attribute type 2 has an invalid length. [ 703.997504][T23847] netlink: 'syz.2.4740': attribute type 11 has an invalid length. [ 704.962246][T23889] syzkaller1: entered promiscuous mode [ 704.981021][T23889] syzkaller1: entered allmulticast mode [ 705.470952][ T1144] net_ratelimit: 6 callbacks suppressed [ 705.470972][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.521774][T23914] __nla_validate_parse: 9 callbacks suppressed [ 705.521794][T23914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4758'. [ 705.538200][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.716655][T23913] 8021q: adding VLAN 0 to HW filter on device bond12 [ 705.765415][T23913] bridge0: port 1(bond12) entered blocking state [ 705.772792][T23913] bridge0: port 1(bond12) entered disabled state [ 705.779581][T23913] bond12: entered allmulticast mode [ 705.793052][T23913] bond12: entered promiscuous mode [ 705.801336][T23913] bridge0: port 1(bond12) entered blocking state [ 705.807806][T23913] bridge0: port 1(bond12) entered forwarding state [ 705.849157][ T1160] bridge0: port 1(bond12) entered disabled state [ 706.377578][T23937] syz_tun: left allmulticast mode [ 706.553749][T23947] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 706.606582][T23949] bond0: (slave syz_tun): Releasing backup interface [ 706.661269][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.682373][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.708989][T23949] bond0: (slave SÌ”): Releasing backup interface [ 706.776905][T23949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 707.383655][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 707.398240][T23972] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 707.610926][T23976] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4778'. [ 707.660584][T23976] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4778'. [ 707.688251][T23980] netlink: 'syz.2.4780': attribute type 61 has an invalid length. [ 707.725034][T23981] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4778'. [ 707.803258][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.829449][T23984] syzkaller1: entered promiscuous mode [ 707.845649][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.862146][T23984] syzkaller1: entered allmulticast mode [ 708.143211][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.151617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.389970][T24006] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4787'. [ 708.442402][T24006] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4787'. [ 708.802789][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.261927][T24030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4795'. [ 709.738708][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4797'. [ 710.192599][T24049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4799'. [ 710.633966][T24061] bond1: (slave vlan3): making interface the new active one [ 710.767274][T24061] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 710.891824][T24073] net_ratelimit: 5 callbacks suppressed [ 710.891847][T24073] openvswitch: netlink: IP tunnel dst address not specified [ 711.371766][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.428288][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.701432][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4812'. [ 711.855376][T24106] SET target dimension over the limit! [ 712.088483][T24114] 8021q: VLANs not supported on syzkaller0 [ 712.621094][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.662656][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.957433][T24147] netlink: NAT attribute has 8 unknown bytes [ 713.008207][T24147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.049666][T24158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4827'. [ 713.058205][T24155] netlink: 'syz.3.4829': attribute type 1 has an invalid length. [ 713.267172][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.275649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.521015][T24171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4832'. [ 713.563561][T24155] bond13: entered promiscuous mode [ 713.584057][T24155] 8021q: adding VLAN 0 to HW filter on device bond13 [ 713.796076][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.957764][T24180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4833'. [ 713.977566][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4834'. [ 714.014376][T24187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4836'. [ 714.172722][T24189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4836'. [ 714.297763][T24191] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 714.689714][T24197] netlink: 'syz.4.4839': attribute type 4 has an invalid length. [ 714.967721][T24207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4843'. [ 715.038167][T24211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4844'. [ 715.631566][T24233] syzkaller1: entered promiscuous mode [ 715.653041][T24233] syzkaller1: entered allmulticast mode [ 715.909388][T24250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4855'. [ 716.009488][T24258] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.081088][ T6683] net_ratelimit: 5 callbacks suppressed [ 716.081106][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.118772][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.665401][T24265] bond2: entered promiscuous mode [ 716.711369][T24265] bond2: entered allmulticast mode [ 716.752848][T24265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 717.206218][T24294] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4867'. [ 717.272220][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.326828][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.637696][T24313] syzkaller0: entered promiscuous mode [ 717.667881][T24313] syzkaller0: entered allmulticast mode [ 717.731981][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 717.753614][T24319] netlink: 'syz.0.4873': attribute type 11 has an invalid length. [ 718.371632][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.380071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.440514][T24332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.511900][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.544952][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.809132][T24346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4881'. [ 718.848160][T24346] netlink: 'syz.3.4881': attribute type 10 has an invalid length. [ 718.881664][T24351] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 718.886049][T24346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4881'. [ 718.944806][T24354] bond1: option mode: invalid value (10) [ 719.211747][T24364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4885'. [ 719.347178][T24370] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 719.416750][T24370] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 719.705392][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.739393][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.754738][T24389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4893'. [ 719.778164][T24386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4892'. [ 719.814157][T24389] hsr_slave_0: left promiscuous mode [ 719.878945][T24389] hsr_slave_1: left promiscuous mode [ 719.899339][T24393] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 720.038188][T24411] netlink: 'syz.1.4895': attribute type 1 has an invalid length. [ 720.418112][T24415] batadv0: entered promiscuous mode [ 720.424182][T24415] macsec1: entered promiscuous mode [ 720.432365][T24415] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 720.443470][T24415] batadv0: left promiscuous mode [ 720.520507][T24416] batadv0: entered promiscuous mode [ 720.526274][T24416] macsec1: entered promiscuous mode [ 720.538168][T24416] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 720.548147][T24416] batadv0: left promiscuous mode [ 720.672249][T24421] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 720.730908][T24421] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 720.795635][T24436] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 721.438567][T24447] syzkaller0: entered promiscuous mode [ 721.455552][T24447] syzkaller0: entered allmulticast mode [ 721.655821][T24465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4908'. [ 721.784872][T24469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4910'. [ 721.858773][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4910'. [ 721.982692][ T1160] net_ratelimit: 7 callbacks suppressed [ 721.982710][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.035925][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.335997][T24492] IPVS: set_ctl: invalid protocol: 59660 127.0.0.1:7 [ 722.632599][T24503] ip_tables: iptables: counters copy to user failed while replacing table [ 722.643510][T24507] ip_tables: iptables: counters copy to user failed while replacing table [ 722.699153][T24501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.932332][T24511] syzkaller0: entered promiscuous mode [ 722.989128][T24511] syzkaller0: entered allmulticast mode [ 723.172928][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.240081][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.303495][T24528] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4927'. [ 723.422897][T24528] openvswitch: netlink: Duplicate or invalid key (type 0). [ 724.131070][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.139451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.157700][ T1160] IPVS: starting estimator thread 0... [ 724.271006][T24570] IPVS: using max 25 ests per chain, 60000 per kthread [ 724.698861][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4940'. [ 724.807119][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4940'. [ 725.550158][T24606] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 725.598922][T24606] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 726.075718][T24639] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4957'. [ 726.178789][T24641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4957'. [ 726.265925][T24645] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4961'. [ 726.277487][T24645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4961'. [ 726.414475][T24643] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 726.564568][T24651] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4962'. [ 727.333037][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4969'. [ 727.364318][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4970'. [ 727.731886][ T1154] net_ratelimit: 8 callbacks suppressed [ 727.731903][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.791549][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.312374][T24727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4983'. [ 728.441717][T24730] 8021q: adding VLAN 0 to HW filter on device bond14 [ 728.479558][T24730] bridge0: port 2(bond14) entered blocking state [ 728.526671][T24730] bridge0: port 2(bond14) entered disabled state [ 728.605197][T24730] bond14: entered allmulticast mode [ 728.649286][T24730] bond14: entered promiscuous mode [ 728.676419][T24730] bridge0: port 2(bond14) entered blocking state [ 728.682976][T24730] bridge0: port 2(bond14) entered forwarding state [ 728.799480][ T6281] bridge0: port 2(bond14) entered disabled state [ 728.879291][T24743] IPv6: NLM_F_CREATE should be specified when creating new route [ 728.898029][T24743] netlink: 'syz.1.4987': attribute type 1 has an invalid length. [ 728.959713][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.993389][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.231184][T24767] syzkaller0: entered promiscuous mode [ 729.246209][T24767] syzkaller0: entered allmulticast mode [ 729.873566][T24789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4998'. [ 729.897497][ T1144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 729.915957][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.924839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.188810][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.220255][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.381537][T24802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5001'. [ 730.709261][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5004'. [ 731.129744][T24844] netlink: 'syz.3.5010': attribute type 1 has an invalid length. [ 731.360270][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.405326][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.507202][T24847] veth7: entered allmulticast mode [ 731.587884][T24853] netlink: 'syz.2.5012': attribute type 2 has an invalid length. [ 731.627242][T24847] bond15: (slave veth7): Enslaving as an active interface with a down link [ 731.777103][T24844] bond6: (slave veth0_to_bond): Releasing active interface [ 731.843700][T24844] veth0_to_bond: left promiscuous mode [ 731.868556][T24844] veth0_to_bond: left allmulticast mode [ 731.899246][T24844] bond15: (slave veth0_to_bond): making interface the new active one [ 731.922884][T24844] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 732.634095][T24888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5023'. [ 732.716110][T24891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5025'. [ 732.793842][T24888] netlink: 'syz.2.5023': attribute type 12 has an invalid length. [ 733.225337][T24913] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5027'. [ 733.423703][T24919] net_ratelimit: 4 callbacks suppressed [ 733.423721][T24919] openvswitch: netlink: IP tunnel dst address not specified [ 733.778098][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.824748][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.899284][T24934] netlink: 'syz.2.5036': attribute type 1 has an invalid length. [ 734.146844][T24934] 8021q: adding VLAN 0 to HW filter on device bond6 [ 734.684535][T24965] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5044'. [ 734.774852][T24965] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5044'. [ 734.925492][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5044'. [ 734.962494][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.986817][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.467419][T24955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5041'. [ 735.499758][T24955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5041'. [ 735.651989][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.660392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.867820][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5051'. [ 735.893624][T24995] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 735.927165][T24995] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5051'. [ 736.113085][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.163812][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.630347][T25020] batadv_slave_0: entered promiscuous mode [ 736.726392][T25020] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 736.745198][T25025] xt_TCPMSS: Only works on TCP SYN packets [ 736.827920][T25019] batadv_slave_0: left promiscuous mode [ 736.854255][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.232481][T25037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.322545][T25048] netlink: 'syz.0.5063': attribute type 9 has an invalid length. [ 737.535248][T25029] erspan0: entered promiscuous mode [ 737.577869][T25055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5065'. [ 737.594918][T25029] erspan0: entered allmulticast mode [ 737.631138][T25036] netlink: 'syz.3.5058': attribute type 1 has an invalid length. [ 737.708644][T25055] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 737.753336][T25055] gretap1: entered promiscuous mode [ 737.767525][T25055] gretap1: entered allmulticast mode [ 738.050497][T25071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5071'. [ 738.092006][T25071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5071'. [ 738.449088][T25077] bond0: entered promiscuous mode [ 738.482033][T25077] bond_slave_0: entered promiscuous mode [ 738.518459][T25077] bond_slave_1: entered promiscuous mode [ 738.598647][T25077] batadv0: entered promiscuous mode [ 738.669334][T25077] debugfs: 'hsr1' already exists in 'hsr' [ 738.708416][T25077] Cannot create hsr debugfs directory [ 738.721811][T25077] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 738.740974][T25092] xt_hashlimit: size too large, truncated to 1048576 [ 738.794945][T25077] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 739.194675][T25104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.565482][T25120] 8021q: VLANs not supported on wg0 [ 739.572219][T23583] net_ratelimit: 6 callbacks suppressed [ 739.572237][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.630704][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.745137][T25118] __nla_validate_parse: 2 callbacks suppressed [ 739.745158][T25118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5084'. [ 740.018616][T25140] syzkaller0: entered promiscuous mode [ 740.048355][T25140] syzkaller0: entered allmulticast mode [ 740.515953][T25158] ip6gre2: entered promiscuous mode [ 740.538157][T25158] ip6gre2: entered allmulticast mode [ 740.752389][T25163] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5096'. [ 740.781893][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.826618][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.859185][T25168] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5096'. [ 741.244652][T23583] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 741.410963][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.419434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.650027][T25193] sctp: [Deprecated]: syz.4.5104 (pid 25193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 741.650027][T25193] Use struct sctp_sack_info instead [ 741.990192][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.009652][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.693130][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.702151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.099760][T25176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.738702][T25234] net_ratelimit: 4 callbacks suppressed [ 744.738722][T25234] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 744.815474][T25237] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5116'. [ 744.879455][T25238] netlink: 'syz.4.5117': attribute type 29 has an invalid length. [ 744.947708][T25239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5118'. [ 745.007866][T25239] netlink: 'syz.2.5118': attribute type 7 has an invalid length. [ 745.085905][T25239] netlink: 'syz.2.5118': attribute type 8 has an invalid length. [ 745.137322][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5118'. [ 745.222698][T25239] ip6gretap0: entered promiscuous mode [ 745.248989][T25239] syz_tun: entered promiscuous mode [ 745.283085][T25255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5123'. [ 745.298114][T25239] gretap0: entered promiscuous mode [ 745.340951][T25239] debugfs: 'hsr1' already exists in 'hsr' [ 745.362014][T25239] Cannot create hsr debugfs directory [ 745.373793][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.393245][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.408319][T25262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5123'. [ 745.794928][T25265] bond0: invalid NS target ff00:: specified for addition [ 745.849929][T25265] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 746.225959][T25291] netlink: 'syz.3.5133': attribute type 2 has an invalid length. [ 746.326984][T25294] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5134'. [ 746.405605][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5134'. [ 746.414921][T25294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5134'. [ 746.463747][T25298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5134'. [ 746.476572][T25300] netlink: 'syz.3.5136': attribute type 13 has an invalid length. [ 746.550125][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.568993][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.093325][ T1160] IPVS: starting estimator thread 0... [ 747.123982][T25316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'. [ 747.134759][T25316] netlink: 'syz.1.5139': attribute type 10 has an invalid length. [ 747.179029][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.211427][T25319] IPVS: using max 25 ests per chain, 60000 per kthread [ 747.261732][T25316] geneve3: entered promiscuous mode [ 747.271653][T25316] geneve3: entered allmulticast mode [ 747.281142][T25320] ªªªªª»: renamed from dummy0 (while UP) [ 747.703397][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.745352][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.452546][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.461101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.470339][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.810877][T25384] sit0: Caught tx_queue_len zero misconfig [ 749.059766][T25394] xt_hashlimit: size too large, truncated to 1048576 [ 750.011618][ T1154] net_ratelimit: 3 callbacks suppressed [ 750.011637][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.092549][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.103075][ T5273] veth1_vlan: left promiscuous mode [ 750.499173][T25436] SET target dimension over the limit! [ 750.939707][T25449] batman_adv: batadv0: Adding interface: gretap0 [ 751.009085][T25449] batman_adv: batadv0: The MTU of interface gretap0 is too small (1438) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1462. [ 751.186697][T25449] batman_adv: batadv0: Interface activated: gretap0 [ 751.263167][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.308322][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.369564][T25475] syzkaller0: left promiscuous mode [ 751.411232][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 751.436329][T25475] syzkaller0: left allmulticast mode [ 751.450572][T25478] netlink: 'syz.3.5180': attribute type 10 has an invalid length. [ 751.797865][T25494] __nla_validate_parse: 3 callbacks suppressed [ 751.797885][T25494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5184'. [ 752.153706][T25501] netlink: 'syz.0.5185': attribute type 3 has an invalid length. [ 752.265336][T25513] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 752.521152][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.607286][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.472712][T25557] netlink: 'syz.2.5196': attribute type 1 has an invalid length. [ 753.500872][T25555] netlink: 'syz.4.5195': attribute type 12 has an invalid length. [ 753.545109][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'. [ 753.590728][T25557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 753.661949][T25562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5197'. [ 753.743043][T25557] bond7: (slave geneve3): making interface the new active one [ 753.760615][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.791925][T25557] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 753.804881][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.149134][T25578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5200'. [ 754.182460][T25578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5200'. [ 754.214087][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.222488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.253850][T25583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5200'. [ 754.337146][T25583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5200'. [ 754.551461][T25596] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5204'. [ 754.583347][T25595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5203'. [ 754.611485][T25595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5203'. [ 755.780675][T25619] netlink: 'syz.2.5209': attribute type 1 has an invalid length. [ 756.065091][ T1160] net_ratelimit: 2 callbacks suppressed [ 756.065112][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.105010][T25621] bond8: (slave gretap2): making interface the new active one [ 756.123008][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.193286][T25621] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 756.466440][T25639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.650560][T25639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.721613][T25645] netlink: 'syz.0.5216': attribute type 1 has an invalid length. [ 757.123286][T25645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 757.280249][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.315505][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.385237][T25648] bond4: (slave geneve4): making interface the new active one [ 757.472899][T25648] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 757.554369][T25657] __nla_validate_parse: 5 callbacks suppressed [ 757.554388][T25657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5220'. [ 757.954765][T25671] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 758.055846][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.064525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.190110][T25681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5225'. [ 758.458666][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.500195][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.629747][T25688] Bluetooth: hci0: unsupported parameter 5135 [ 758.664594][T25688] Bluetooth: hci0: unsupported parameter 1297 [ 758.684042][T25691] netlink: 'syz.1.5228': attribute type 3 has an invalid length. [ 758.697922][T25688] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 758.812349][T25696] : renamed from bond0 (while UP) [ 758.962193][T25697] netlink: 592 bytes leftover after parsing attributes in process `syz.0.5230'. [ 759.073697][T25705] netlink: 'syz.1.5233': attribute type 11 has an invalid length. [ 759.109240][T25705] netlink: 'syz.1.5233': attribute type 4 has an invalid length. [ 759.149802][T25705] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5233'. [ 759.559594][T25717] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 759.642077][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.655995][T25720] geneve5: entered promiscuous mode [ 759.706914][T25720] geneve5: entered allmulticast mode [ 759.755201][T25721] netlink: 'syz.0.5235': attribute type 4 has an invalid length. [ 760.108434][T25736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.141945][T25734] netlink: 'syz.4.5239': attribute type 1 has an invalid length. [ 760.173733][T25734] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5239'. [ 760.509321][T25748] xt_l2tp: invalid flags combination: 0 [ 760.542901][T25753] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5244'. [ 760.565637][T25748] tipc: Enabling of bearer rejected, failed to enable media [ 760.905817][T25763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5247'. [ 761.374780][T25772] bridge4: entered allmulticast mode [ 761.446857][T25771] netlink: 'syz.4.5249': attribute type 2 has an invalid length. [ 761.987244][T23584] net_ratelimit: 8 callbacks suppressed [ 761.987266][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.041432][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.530483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.183286][ T1160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 763.195035][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.217739][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.821051][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.829544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.340583][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.360989][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.013904][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.701501][ T1160] net_ratelimit: 5 callbacks suppressed [ 767.701523][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.734074][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.860165][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.869795][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.571135][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.579605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.970461][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.979013][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.210679][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.219058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.311198][ T1144] net_ratelimit: 4 callbacks suppressed [ 773.311220][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.327244][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.430871][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.444670][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.331625][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.340035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.349890][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.358859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.581548][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.590786][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.901124][ T1160] net_ratelimit: 4 callbacks suppressed [ 778.901145][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.918707][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.020163][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.028687][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.453815][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.462297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.091416][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.099922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.131658][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.143788][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.388987][T25839] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5259'. [ 784.432117][T25839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5259'. [ 784.454513][ T1144] net_ratelimit: 4 callbacks suppressed [ 784.454533][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.504115][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.602473][T19278] block nbd6: Receive control failed (result -107) [ 785.630928][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.659111][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.690806][T25879] netlink: 'syz.2.5269': attribute type 16 has an invalid length. [ 785.704422][T25879] netlink: 'syz.2.5269': attribute type 2 has an invalid length. [ 785.767042][T25879] netlink: 64110 bytes leftover after parsing attributes in process `syz.2.5269'. [ 785.777834][T25876] lo speed is unknown, defaulting to 1000 [ 785.799094][T25876] wg1 speed is unknown, defaulting to 1000 [ 786.023975][T25885] xt_SECMARK: invalid mode: 9 [ 786.030476][T25887] x_tables: duplicate underflow at hook 2 [ 786.045372][T25885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 786.214903][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.223403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.822279][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.858934][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.868011][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.876230][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.587243][T25957] tipc: Enabling of bearer rejected, already enabled [ 788.717458][T25960] xt_hashlimit: size too large, truncated to 1048576 [ 788.899564][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5297'. [ 788.965508][T25972] netlink: 'syz.1.5297': attribute type 16 has an invalid length. [ 789.266705][T25976] ipt_rpfilter: unknown options [ 790.312137][ T6686] net_ratelimit: 4 callbacks suppressed [ 790.312156][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.329179][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.430266][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.439724][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.973590][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.982077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.094868][T25987] bridge0: port 1(vlan3) entered blocking state [ 792.129633][T25987] bridge0: port 1(vlan3) entered disabled state [ 792.159479][T25987] vlan3: entered allmulticast mode [ 792.182386][T25987] geneve0: entered allmulticast mode [ 792.446766][T25997] bond3 (unregistering): Released all slaves [ 792.478343][T26004] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5305'. [ 792.551714][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.577842][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.627957][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.637011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.288081][T26035] syzkaller0: entered promiscuous mode [ 793.305697][T26035] syzkaller0: entered allmulticast mode [ 793.799741][T26060] netlink: 'syz.1.5319': attribute type 10 has an invalid length. [ 793.968056][T26060] veth0_to_bond: entered promiscuous mode [ 794.724463][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 794.905743][T26103] netlink: 'syz.4.5331': attribute type 49 has an invalid length. [ 795.033210][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 795.048617][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 795.062901][T26107] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 795.077949][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 795.103179][T26107] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 795.108247][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 795.150291][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 795.204005][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 795.259826][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 795.312022][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5328'. [ 795.686842][T26126] net_ratelimit: 4 callbacks suppressed [ 795.686862][T26126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.820851][ T6281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 795.940957][T26133] bridge0: port 4(veth1_to_bridge) entered blocking state [ 795.948900][T26133] bridge0: port 4(veth1_to_bridge) entered disabled state [ 795.965152][T26133] veth1_to_bridge: entered allmulticast mode [ 795.974891][T26133] veth1_to_bridge: entered promiscuous mode [ 795.991653][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.017109][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.429991][T26142] syzkaller0: Caught tx_queue_len zero misconfig [ 797.150415][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.167419][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.630268][T26160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.730778][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.739181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.759461][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.768205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.949763][T26175] __nla_validate_parse: 29 callbacks suppressed [ 797.949785][T26175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5353'. [ 797.967981][ T1160] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.999959][ T6686] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.037140][ T6686] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.071231][T26175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5353'. [ 798.078085][ T6686] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.323703][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.523063][T26196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5359'. [ 798.822280][T26201] netlink: 'syz.3.5362': attribute type 22 has an invalid length. [ 798.850326][T19278] Bluetooth: hci4: command 0x0406 tx timeout [ 798.871584][T26206] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5363'. [ 798.887269][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5362'. [ 798.909778][T26202] Bluetooth: MGMT ver 1.23 [ 798.961680][T26201] netlink: 'syz.3.5362': attribute type 22 has an invalid length. [ 799.056963][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5362'. [ 799.119240][T26213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5364'. [ 799.511172][T26226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5368'. [ 799.515893][T26220] can: request_module (can-proto-0) failed. [ 799.551547][T26224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5369'. [ 799.888150][T26240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5374'. [ 800.062115][T26246] x_tables: duplicate underflow at hook 3 [ 800.249245][T26251] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 800.320803][T26248] nbd: socks must be embedded in a SOCK_ITEM attr [ 800.337533][T26257] netlink: 'syz.1.5377': attribute type 21 has an invalid length. [ 800.509137][T26251] vlan4: entered promiscuous mode [ 800.541950][T26251] geneve1: entered promiscuous mode [ 800.587518][T26251] vlan4: entered allmulticast mode [ 800.627030][T26251] geneve1: entered allmulticast mode [ 800.772675][T26279] net_ratelimit: 6 callbacks suppressed [ 800.772695][T26279] openvswitch: netlink: IP tunnel dst address not specified [ 800.937064][T26285] x_tables: duplicate entry at hook 3 [ 801.222397][T26292] netlink: 'syz.1.5387': attribute type 1 has an invalid length. [ 801.673491][T26305] xt_ct_set_helper: 1 callbacks suppressed [ 801.673512][T26305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 801.725862][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.783373][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.837640][T26301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 801.953293][T26301] veth0_macvtap: entered promiscuous mode [ 801.993458][T26301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 802.045746][T26301] 8021q: adding VLAN 0 to HW filter on device bond5 [ 802.115597][T26301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 802.133638][ T8313] wg1 speed is unknown, defaulting to 1000 [ 802.421136][T26320] netlink: 'syz.3.5395': attribute type 1 has an invalid length. [ 802.902799][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.960594][T26347] __nla_validate_parse: 5 callbacks suppressed [ 802.960613][T26347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5402'. [ 803.060264][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.496057][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.504581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.523981][T26363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5407'. [ 803.559359][T26363] netlink: 'syz.0.5407': attribute type 8 has an invalid length. [ 803.604426][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.612800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.852187][T26371] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5409'. [ 804.209985][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.230411][T26385] x_tables: duplicate underflow at hook 2 [ 804.523425][T26397] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5418'. [ 805.041052][T26419] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5425'. [ 805.213716][T26427] netlink: 'syz.0.5428': attribute type 1 has an invalid length. [ 805.237887][T26419] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5425'. [ 805.252448][T26427] netlink: 'syz.0.5428': attribute type 2 has an invalid length. [ 805.275188][T26429] netlink: 'syz.0.5428': attribute type 1 has an invalid length. [ 805.348829][T26429] netlink: 'syz.0.5428': attribute type 2 has an invalid length. [ 805.398332][T26431] netlink: 'syz.0.5428': attribute type 1 has an invalid length. [ 805.460029][T26431] netlink: 'syz.0.5428': attribute type 2 has an invalid length. [ 805.602062][T26434] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5429'. [ 805.679822][T26434] atomic_op ffff888069c8a9e0 conn xmit_atomic 0000000000000000 [ 806.069258][T26453] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5434'. [ 806.109798][T26449] netlink: 'syz.4.5433': attribute type 11 has an invalid length. [ 806.508601][T26459] netlink: 'syz.4.5436': attribute type 12 has an invalid length. [ 806.535606][ T1154] net_ratelimit: 5 callbacks suppressed [ 806.535627][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.592491][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.818612][T26459] bond10: option primary_reselect: invalid value (255) [ 806.867864][T26459] bond10 (unregistering): Released all slaves [ 806.955395][T26468] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 807.191929][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5441'. [ 807.264049][T26477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5441'. [ 807.294264][T26478] openvswitch: netlink: IPv4 tunnel dst address is zero [ 807.309318][T26478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.362864][T26478] netlink: 'syz.4.5442': attribute type 4 has an invalid length. [ 807.479342][T26474] syzkaller1: entered promiscuous mode [ 807.492960][T26474] syzkaller1: entered allmulticast mode [ 807.752151][T26490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.766179][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.804962][T26493] netlink: 'syz.4.5447': attribute type 2 has an invalid length. [ 807.822449][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.218298][T26508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 808.616746][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.984946][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.035885][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.128977][T26538] __nla_validate_parse: 3 callbacks suppressed [ 809.128999][T26538] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5458'. [ 809.367965][T26543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5460'. [ 809.405931][T26543] bridge: RTM_NEWNEIGH with invalid ether address [ 809.593799][T26552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5459'. [ 809.641161][T26546] bond10 (unregistering): Released all slaves [ 809.828537][T26559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5464'. [ 810.506982][T26582] siw: device registration error -23 [ 810.635675][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5468'. [ 810.932873][T26591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5468'. [ 810.973168][T26595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5471'. [ 811.013569][T26595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5471'. [ 811.229341][T26603] Bluetooth: ISO socket layer initialized [ 811.275818][T26606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5473'. [ 811.767449][T26621] validate_nla: 1 callbacks suppressed [ 811.767471][T26621] netlink: 'syz.4.5479': attribute type 1 has an invalid length. [ 811.925577][T26624] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5478'. [ 812.295908][T26635] netlink: 'syz.1.5482': attribute type 11 has an invalid length. [ 812.421661][ T6281] net_ratelimit: 8 callbacks suppressed [ 812.421681][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.463010][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.994986][T26657] netlink: 'syz.4.5488': attribute type 1 has an invalid length. [ 813.355982][T26657] bond10: entered promiscuous mode [ 813.395880][T26657] 8021q: adding VLAN 0 to HW filter on device bond10 [ 813.595306][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.629333][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.872882][T26685] netlink: 'syz.2.5497': attribute type 7 has an invalid length. [ 813.995222][T26689] netlink: 'syz.1.5498': attribute type 1 has an invalid length. [ 814.728777][T26702] netlink: 'syz.2.5500': attribute type 21 has an invalid length. [ 814.783179][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.792606][T26702] netlink: 'syz.2.5500': attribute type 22 has an invalid length. [ 814.848622][T26702] netlink: 'syz.2.5500': attribute type 23 has an invalid length. [ 814.894308][T26712] syzkaller0: entered promiscuous mode [ 814.918154][T26702] netlink: 'syz.2.5500': attribute type 25 has an invalid length. [ 814.953516][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.968702][T26712] syzkaller0: entered allmulticast mode [ 815.022010][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.030904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.040765][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.049061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.088308][T26702] __nla_validate_parse: 10 callbacks suppressed [ 815.088329][T26702] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5500'. [ 815.701247][T26740] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 815.733590][T26741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5507'. [ 815.765824][T26740] netlink: 'syz.0.5508': attribute type 7 has an invalid length. [ 815.782096][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5507'. [ 815.818992][T26743] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5509'. [ 815.862470][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5510'. [ 815.872456][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5510'. [ 815.932769][T26741] erspan0: entered promiscuous mode [ 816.002024][T26741] erspan0: left promiscuous mode [ 816.152378][T26753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5512'. [ 816.344782][T26764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5516'. [ 816.360589][T26764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5516'. [ 816.428852][T26764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5516'. [ 817.038113][T26785] validate_nla: 4 callbacks suppressed [ 817.038134][T26785] netlink: 'syz.3.5522': attribute type 1 has an invalid length. [ 817.168291][T26790] netlink: 'syz.3.5522': attribute type 1 has an invalid length. [ 817.180293][T26785] netlink: 'syz.3.5522': attribute type 2 has an invalid length. [ 817.219512][T26790] netlink: 'syz.3.5522': attribute type 2 has an invalid length. [ 817.459400][T26793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.512971][T26805] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 817.617512][T26811] netlink: 'syz.0.5524': attribute type 1 has an invalid length. [ 818.332798][T23583] net_ratelimit: 24 callbacks suppressed [ 818.332817][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.437053][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.718064][T26848] xt_hashlimit: size too large, truncated to 1048576 [ 818.850132][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 819.032503][T26861] tipc: MTU too low for tipc bearer [ 819.639528][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.676081][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.848590][T26875] bond17: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 819.934336][T26875] bond17 (unregistering): Released all slaves [ 820.091414][T26896] __nla_validate_parse: 11 callbacks suppressed [ 820.092767][T26896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5549'. [ 820.771689][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.780308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.813553][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.822114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.832144][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.880178][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.542149][T26935] netlink: 'syz.4.5562': attribute type 1 has an invalid length. [ 821.647554][T26935] bond11: entered promiscuous mode [ 821.654926][T26935] 8021q: adding VLAN 0 to HW filter on device bond11 [ 821.699764][T26945] bond11: (slave bridge7): making interface the new active one [ 821.715465][T26945] bridge7: entered promiscuous mode [ 821.722894][T26945] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 822.306133][T26961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5568'. [ 822.593053][T26963] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 822.656757][T26963] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 822.690938][T26975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5571'. [ 822.720559][T26975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5571'. [ 823.092911][T26983] IPVS: Unknown mcast interface: vcan0 [ 823.186174][T26989] dvmrp0: entered allmulticast mode [ 823.436380][T26997] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5576'. [ 823.524312][T26997] unsupported nlmsg_type 40 [ 824.029550][T26971] netlink: 'syz.1.5570': attribute type 10 has an invalid length. [ 824.291112][ T1144] net_ratelimit: 4 callbacks suppressed [ 824.291131][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.354772][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.527097][T27016] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5581'. [ 824.979005][T27034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5584'. [ 825.167490][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5584'. [ 825.721013][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.768577][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.001677][T27055] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 826.539061][T23583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.547532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.562061][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.570685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.708656][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5599'. [ 826.753132][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5599'. [ 826.917101][T27086] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5600'. [ 826.962507][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.992186][T27088] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5600'. [ 827.685893][T27108] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 827.720257][T27108] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 827.849296][T27115] xt_l2tp: invalid flags combination: 8 [ 828.277050][T27131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5614'. [ 828.395044][T27136] netlink: 'syz.1.5613': attribute type 1 has an invalid length. [ 828.479615][T27136] netlink: 'syz.1.5613': attribute type 3 has an invalid length. [ 828.543111][T27136] netlink: 'syz.1.5613': attribute type 3 has an invalid length. [ 828.631406][T27131] macvtap1: entered promiscuous mode [ 828.637006][T27131] vlan0: entered promiscuous mode [ 828.643876][T27131] macvtap1: entered allmulticast mode [ 828.649506][T27131] vlan0: entered allmulticast mode [ 828.655519][T27131] veth0_vlan: entered allmulticast mode [ 829.105592][ T6282] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 829.455224][T27165] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5624'. [ 829.766885][T27178] netlink: 'syz.1.5627': attribute type 16 has an invalid length. [ 829.775059][T27177] netlink: 'syz.1.5627': attribute type 16 has an invalid length. [ 829.827646][T27178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5627'. [ 829.872836][T27177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5627'. [ 830.023821][T27191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5631'. [ 830.227693][T27205] net_ratelimit: 5 callbacks suppressed [ 830.227716][T27205] openvswitch: netlink: IPv4 tunnel dst address is zero [ 830.355749][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.396266][T27207] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 830.406540][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.447098][T27207] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 830.505524][T27212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5636'. [ 830.559619][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5634'. [ 830.594847][T27217] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5637'. [ 830.664312][T27226] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5637'. [ 831.343697][T27245] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5642'. [ 831.540716][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.603382][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.186872][T27260] lo: Caught tx_queue_len zero misconfig [ 832.294694][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.303213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.316521][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.325479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.361443][T27265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5649'. [ 832.804083][ T6683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.098812][T27281] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 833.128835][T27294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5657'. [ 833.150341][T27281] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 833.215228][T27284] tipc: Enabled bearer , priority 0 [ 833.319608][T27304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5659'. [ 833.520464][T27284] tipc: Resetting bearer [ 834.323765][T27340] Bluetooth: hci0: unsupported parameter 5135 [ 834.354233][T27340] Bluetooth: hci0: unsupported parameter 8192 [ 834.362242][T27340] Bluetooth: hci0: unsupported parameter 5135 [ 834.368751][T27340] Bluetooth: hci0: unsupported parameter 8192 [ 834.657227][T27353] x_tables: duplicate underflow at hook 2 [ 835.202064][T27371] xt_TCPMSS: Only works on TCP SYN packets [ 835.486981][T27384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5681'. [ 836.161256][T27421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5693'. [ 836.216624][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5693'. [ 836.235045][ T6282] net_ratelimit: 5 callbacks suppressed [ 836.235063][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.298063][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.575103][T27432] bridge4: entered promiscuous mode [ 836.620521][T27432] bridge4: entered allmulticast mode [ 837.211173][T27453] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.269702][T27458] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.325883][T27453] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.385099][T27457] veth5: entered allmulticast mode [ 837.394194][T27462] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.429128][T27458] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.461443][T27453] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.520788][T27453] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.542398][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.565502][T27468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5710'. [ 837.575997][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.586052][T27458] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.626636][T27458] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 837.678268][T27453] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 838.053157][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.061690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.069869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.078333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.092772][T27485] netlink: 'syz.2.5716': attribute type 10 has an invalid length. [ 838.289281][T27485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.315988][T27499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5717'. [ 838.337255][T27485] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 838.710254][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.747115][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.424198][T27535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5728'. [ 840.775346][T27580] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5736'. [ 841.154267][T27591] IPVS: length: 239 != 24 [ 841.927652][T27612] bond4: option resend_igmp: invalid value (32767) [ 841.949087][T27612] bond4: option resend_igmp: allowed values 0 - 255 [ 842.107400][T27612] bond4 (unregistering): Released all slaves [ 842.165255][T27627] netlink: 'syz.4.5752': attribute type 7 has an invalid length. [ 842.174289][T27627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5752'. [ 842.211531][T27627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5752'. [ 842.281390][ T6282] net_ratelimit: 4 callbacks suppressed [ 842.281411][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.338948][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.639321][T27630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5753'. [ 842.674641][T27630] netlink: 548 bytes leftover after parsing attributes in process `syz.2.5753'. [ 843.048831][T27646] xt_policy: output policy not valid in PREROUTING and INPUT [ 843.172449][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.181351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.467282][T27658] xt_hashlimit: size too large, truncated to 1048576 [ 843.482624][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.522141][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.819812][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.828821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.972390][T27675] x_tables: duplicate underflow at hook 3 [ 844.101381][T27675] x_tables: duplicate underflow at hook 1 [ 844.148857][T27671] lo speed is unknown, defaulting to 1000 [ 844.165582][T27670] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5765'. [ 844.171284][T27675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5766'. [ 844.281619][T27670] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.315983][T27671] wg1 speed is unknown, defaulting to 1000 [ 844.405210][T27680] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 844.690612][T23584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.792822][T27691] netlink: 'syz.2.5769': attribute type 1 has an invalid length. [ 845.064805][T27691] bond9: entered promiscuous mode [ 845.125691][T27691] 8021q: adding VLAN 0 to HW filter on device bond9 [ 845.158195][T27702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5774'. [ 845.463340][T27714] tipc: Enabling of bearer rejected, failed to enable media [ 846.038262][T27728] bond17: option packets_per_slave: invalid value (18446744073709551615) [ 846.075688][T27728] bond17: option packets_per_slave: allowed values 0 - 65535 [ 846.087572][T27728] bond17 (unregistering): Released all slaves [ 846.114820][T27736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5782'. [ 846.495307][T27740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 847.369749][T27767] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5793'. [ 848.012967][T27780] netlink: 'syz.3.5796': attribute type 9 has an invalid length. [ 848.032071][T27780] netlink: 'syz.3.5796': attribute type 4 has an invalid length. [ 848.083548][ C0] ================================================================== [ 848.091702][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.099728][ C0] Read of size 2 at addr ffff888157579db4 by task syz.2.5794/27778 [ 848.107652][ C0] [ 848.110010][ C0] CPU: 0 UID: 0 PID: 27778 Comm: syz.2.5794 Not tainted syzkaller #0 PREEMPT(full) [ 848.110047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.110079][ C0] Call Trace: [ 848.110090][ C0] [ 848.110100][ C0] dump_stack_lvl+0xe8/0x150 [ 848.110139][ C0] print_address_description+0x55/0x1e0 [ 848.110173][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.110198][ C0] print_report+0x58/0x70 [ 848.110226][ C0] kasan_report+0x117/0x150 [ 848.110262][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.110292][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.110325][ C0] __dev_queue_xmit+0x27f/0x3820 [ 848.110348][ C0] ? do_softirq+0x77/0xd0 [ 848.110374][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 848.110402][ C0] ? vfs_write+0x612/0xba0 [ 848.110438][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.110474][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 848.110510][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 848.110555][ C0] ? __asan_memcpy+0x40/0x70 [ 848.110590][ C0] ? __skb_clone+0x5c/0x6c0 [ 848.110628][ C0] ? __skb_clone+0x449/0x6c0 [ 848.110668][ C0] ? skb_clone+0x246/0x3a0 [ 848.110687][ C0] ? prp_get_untagged_frame+0x45/0x1d0 [ 848.110716][ C0] hsr_forward_skb+0x1701/0x2b70 [ 848.110746][ C0] ? hsr_forward_skb+0xb9/0x2b70 [ 848.110773][ C0] ? lock_acquire+0x106/0x350 [ 848.110806][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 848.110839][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 848.110868][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 848.110900][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 848.110931][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 848.110964][ C0] ? hsr_addr_is_self+0x2e2/0x3e0 [ 848.110995][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 848.111030][ C0] hsr_handle_frame+0x6ba/0xa50 [ 848.111057][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 848.111082][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 848.111119][ C0] ? unwind_next_frame+0x8f/0x2550 [ 848.111142][ C0] ? lock_acquire+0x106/0x350 [ 848.111176][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 848.111206][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 848.111243][ C0] ? lock_acquire+0x106/0x350 [ 848.111288][ C0] ? __lock_acquire+0x683/0x2cf0 [ 848.111325][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 848.111363][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 848.111412][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 848.111456][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 848.111494][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 848.111548][ C0] ? dev_gro_receive+0x1097/0x2380 [ 848.111612][ C0] napi_complete_done+0x299/0x730 [ 848.111653][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 848.111687][ C0] ? gro_cell_poll+0x18a/0x630 [ 848.111726][ C0] gro_cell_poll+0x5ff/0x630 [ 848.111762][ C0] ? gro_cell_poll+0x18a/0x630 [ 848.111794][ C0] __napi_poll+0xaa/0x330 [ 848.111823][ C0] net_rx_action+0x61d/0xf50 [ 848.111861][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 848.111890][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 848.111922][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 848.111954][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 848.111978][ C0] ? sched_clock+0x41/0x60 [ 848.112014][ C0] handle_softirqs+0x226/0x860 [ 848.112044][ C0] ? do_softirq+0x77/0xd0 [ 848.112072][ C0] ? tun_rx_batched+0x185/0x790 [ 848.112105][ C0] do_softirq+0x77/0xd0 [ 848.112131][ C0] [ 848.112139][ C0] [ 848.112148][ C0] __local_bh_enable_ip+0x100/0x140 [ 848.112174][ C0] ? tun_rx_batched+0x185/0x790 [ 848.112206][ C0] tun_rx_batched+0x616/0x790 [ 848.112241][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 848.112273][ C0] ? tun_get_user+0x27b0/0x44d0 [ 848.112305][ C0] ? tun_get_user+0x27b0/0x44d0 [ 848.112337][ C0] ? tun_get_user+0x23ba/0x44d0 [ 848.112368][ C0] ? tun_get_user+0x23ba/0x44d0 [ 848.112399][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 848.112426][ C0] ? tun_get_user+0x27b0/0x44d0 [ 848.112458][ C0] tun_get_user+0x2be0/0x44d0 [ 848.112497][ C0] ? tun_get_user+0x27b0/0x44d0 [ 848.112528][ C0] ? aa_file_perm+0x18b/0x15f0 [ 848.112561][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 848.112585][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 848.112617][ C0] ? __lock_acquire+0x683/0x2cf0 [ 848.112652][ C0] ? __pfx___futex_wait+0x10/0x10 [ 848.112684][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 848.112709][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 848.112731][ C0] ? tun_get+0x1c/0x2f0 [ 848.112762][ C0] ? tun_get+0x1c/0x2f0 [ 848.112795][ C0] ? tun_get+0x1c/0x2f0 [ 848.112825][ C0] ? tun_get+0x1c/0x2f0 [ 848.112858][ C0] tun_chr_write_iter+0x113/0x200 [ 848.112891][ C0] vfs_write+0x612/0xba0 [ 848.112929][ C0] ? __pfx_vfs_write+0x10/0x10 [ 848.112969][ C0] ? __fget_files+0x2a/0x420 [ 848.113006][ C0] ksys_write+0x150/0x270 [ 848.113041][ C0] ? __pfx_ksys_write+0x10/0x10 [ 848.113081][ C0] do_syscall_64+0x166/0x520 [ 848.113110][ C0] ? trace_irq_disable+0x3b/0x140 [ 848.113140][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.113164][ C0] ? clear_bhb_loop+0x70/0xc0 [ 848.113191][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.113215][ C0] RIP: 0033:0x7f218399e0d9 [ 848.113236][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.113258][ C0] RSP: 002b:00007f2181bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 848.113283][ C0] RAX: ffffffffffffffda RBX: 00007f2183c26090 RCX: 00007f218399e0d9 [ 848.113301][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000007 [ 848.113317][ C0] RBP: 00007f2183a35024 R08: 0000000000000000 R09: 0000000000000000 [ 848.113332][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.113346][ C0] R13: 00007f2183c26128 R14: 00007f2183c26090 R15: 00007fffa45090d8 [ 848.113375][ C0] [ 848.113383][ C0] [ 848.692764][ C0] The buggy address belongs to the physical page: [ 848.699198][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x157579 [ 848.708076][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 848.715294][ C0] raw: 057ff00000000000 ffffea00055d5e48 ffffea00055d5e48 0000000000000000 [ 848.723896][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 848.732494][ C0] page dumped because: kasan: bad access detected [ 848.738923][ C0] page_owner info is not present (never set?) [ 848.744998][ C0] [ 848.747333][ C0] Memory state around the buggy address: [ 848.752969][ C0] ffff888157579c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 848.761141][ C0] ffff888157579d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 848.769226][ C0] >ffff888157579d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 848.777297][ C0] ^ [ 848.782942][ C0] ffff888157579e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 848.791038][ C0] ffff888157579e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 848.799112][ C0] ================================================================== [ 848.807326][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 848.814562][ C0] CPU: 0 UID: 0 PID: 27778 Comm: syz.2.5794 Not tainted syzkaller #0 PREEMPT(full) [ 848.823992][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.834098][ C0] Call Trace: [ 848.837403][ C0] [ 848.840272][ C0] vpanic+0x56d/0xa60 [ 848.844317][ C0] ? __pfx_vpanic+0x10/0x10 [ 848.848876][ C0] panic+0xc5/0xd0 [ 848.852639][ C0] ? __pfx_panic+0x10/0x10 [ 848.857101][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.862791][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.868480][ C0] check_panic_on_warn+0x89/0xb0 [ 848.873484][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.879156][ C0] end_report+0x73/0x170 [ 848.883462][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.889146][ C0] kasan_report+0x128/0x150 [ 848.893694][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.899367][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 848.904864][ C0] __dev_queue_xmit+0x27f/0x3820 [ 848.909835][ C0] ? do_softirq+0x77/0xd0 [ 848.914199][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 848.919606][ C0] ? vfs_write+0x612/0xba0 [ 848.924063][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.930169][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 848.935582][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 848.940651][ C0] ? __asan_memcpy+0x40/0x70 [ 848.945280][ C0] ? __skb_clone+0x5c/0x6c0 [ 848.949831][ C0] ? __skb_clone+0x449/0x6c0 [ 848.954464][ C0] ? skb_clone+0x246/0x3a0 [ 848.958909][ C0] ? prp_get_untagged_frame+0x45/0x1d0 [ 848.964509][ C0] hsr_forward_skb+0x1701/0x2b70 [ 848.969479][ C0] ? hsr_forward_skb+0xb9/0x2b70 [ 848.974453][ C0] ? lock_acquire+0x106/0x350 [ 848.979188][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 848.984173][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 848.989498][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 848.994485][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 848.999480][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 849.004452][ C0] ? hsr_addr_is_self+0x2e2/0x3e0 [ 849.009517][ C0] ? hsr_addr_is_self+0x26/0x3e0 [ 849.014497][ C0] hsr_handle_frame+0x6ba/0xa50 [ 849.019384][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 849.024788][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 849.030463][ C0] ? unwind_next_frame+0x8f/0x2550 [ 849.035611][ C0] ? lock_acquire+0x106/0x350 [ 849.040351][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 849.046508][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 849.051780][ C0] ? lock_acquire+0x106/0x350 [ 849.056527][ C0] ? __lock_acquire+0x683/0x2cf0 [ 849.061696][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 849.067734][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 849.074293][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 849.080499][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 849.086870][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 849.093611][ C0] ? dev_gro_receive+0x1097/0x2380 [ 849.098802][ C0] napi_complete_done+0x299/0x730 [ 849.103878][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 849.109470][ C0] ? gro_cell_poll+0x18a/0x630 [ 849.114277][ C0] gro_cell_poll+0x5ff/0x630 [ 849.118920][ C0] ? gro_cell_poll+0x18a/0x630 [ 849.123743][ C0] __napi_poll+0xaa/0x330 [ 849.128111][ C0] net_rx_action+0x61d/0xf50 [ 849.132758][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 849.137905][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 849.143151][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 849.148493][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 849.153737][ C0] ? sched_clock+0x41/0x60 [ 849.158212][ C0] handle_softirqs+0x226/0x860 [ 849.163042][ C0] ? do_softirq+0x77/0xd0 [ 849.167421][ C0] ? tun_rx_batched+0x185/0x790 [ 849.172341][ C0] do_softirq+0x77/0xd0 [ 849.176572][ C0] [ 849.179544][ C0] [ 849.182509][ C0] __local_bh_enable_ip+0x100/0x140 [ 849.187758][ C0] ? tun_rx_batched+0x185/0x790 [ 849.192654][ C0] tun_rx_batched+0x616/0x790 [ 849.197375][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 849.202644][ C0] ? tun_get_user+0x27b0/0x44d0 [ 849.207554][ C0] ? tun_get_user+0x27b0/0x44d0 [ 849.212450][ C0] ? tun_get_user+0x23ba/0x44d0 [ 849.217352][ C0] ? tun_get_user+0x23ba/0x44d0 [ 849.222250][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 849.227571][ C0] ? tun_get_user+0x27b0/0x44d0 [ 849.232461][ C0] tun_get_user+0x2be0/0x44d0 [ 849.237194][ C0] ? tun_get_user+0x27b0/0x44d0 [ 849.242084][ C0] ? aa_file_perm+0x18b/0x15f0 [ 849.246886][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 849.251686][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 849.256759][ C0] ? __lock_acquire+0x683/0x2cf0 [ 849.261743][ C0] ? __pfx___futex_wait+0x10/0x10 [ 849.266831][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 849.271979][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 849.277497][ C0] ? tun_get+0x1c/0x2f0 [ 849.281693][ C0] ? tun_get+0x1c/0x2f0 [ 849.285892][ C0] ? tun_get+0x1c/0x2f0 [ 849.290093][ C0] ? tun_get+0x1c/0x2f0 [ 849.294306][ C0] tun_chr_write_iter+0x113/0x200 [ 849.299714][ C0] vfs_write+0x612/0xba0 [ 849.304031][ C0] ? __pfx_vfs_write+0x10/0x10 [ 849.308860][ C0] ? __fget_files+0x2a/0x420 [ 849.313621][ C0] ksys_write+0x150/0x270 [ 849.318023][ C0] ? __pfx_ksys_write+0x10/0x10 [ 849.322930][ C0] do_syscall_64+0x166/0x520 [ 849.327561][ C0] ? trace_irq_disable+0x3b/0x140 [ 849.332624][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.338731][ C0] ? clear_bhb_loop+0x70/0xc0 [ 849.343454][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.349417][ C0] RIP: 0033:0x7f218399e0d9 [ 849.353866][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.373511][ C0] RSP: 002b:00007f2181bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 849.381962][ C0] RAX: ffffffffffffffda RBX: 00007f2183c26090 RCX: 00007f218399e0d9 [ 849.389964][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000007 [ 849.397964][ C0] RBP: 00007f2183a35024 R08: 0000000000000000 R09: 0000000000000000 [ 849.405965][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.413968][ C0] R13: 00007f2183c26128 R14: 00007f2183c26090 R15: 00007fffa45090d8 [ 849.421982][ C0] [ 849.425651][ C0] Kernel Offset: disabled [ 849.429982][ C0] Rebooting in 86400 seconds..