last executing test programs: 3.863529422s ago: executing program 0 (id=2228): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000007fff0000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.598409258s ago: executing program 1 (id=2231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x4e23, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@local, 0x0, 0x5, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000021000100000000000000e0ff00000000000000000000000000000000ffffffff000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac1414aaffffffff0000000000000011fe8000000000000000000000000000aae0000001000000000000000000000000fe8000000000000000000000000000bb3c05"], 0xa0}, 0x1, 0x0, 0xfffd, 0x800}, 0x0) 3.307633767s ago: executing program 1 (id=2232): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x6a040000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000040c0)={'ip6_vti0\x00', &(0x7f0000004040)={'ip6tnl0\x00', 0x0, 0x29, 0x77, 0x5, 0x2, 0x8, @remote, @local, 0x80, 0x10, 0x3, 0x10}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000004840)={'ip6tnl0\x00', 0x0}) (async) sendmmsg$inet(r0, 0x0, 0x0, 0x40000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0xffff, 0x363, 0x9}) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000100)={0x5, 0x8, 0x9, 0x4, 0xfffffff8}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x4, 0xfa, 0x1, 0x10, @remote, @local, 0x1, 0x40, 0xedd, 0xfff7f001}}) 3.223008093s ago: executing program 0 (id=2233): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004800010329bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="f9ffffff08000200fdffffff140001000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x4000040) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50) close(0x3) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r6, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x90, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4a}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x84}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb88, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r3) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f00000005c0)={0x8, 0x3, 0x2}) 3.211394168s ago: executing program 2 (id=2235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711201000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept(r0, &(0x7f0000000dc0)=@qipcrtr, &(0x7f0000000e40)=0x80) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000e80), 0x3) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xd38, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xc68, 0xffffffff, 0xffffffff, 0xc68, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x2}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x6}, {[{0x2, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x200}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x9, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x207}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x6, 0x1000, 0x4, 0x1, 'syz0\x00', 0x6}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xd98) sendto(r3, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c22007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a4000000000090002007379995dba4400000900010073797a3000000000080005400000002f24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000007ff0800034000000106"], 0xe4}}, 0x20050800) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)=ANY=[@ANYBLOB="34000000420020000000000000000000038700009e000000120001000011223344551b8e98c34b8b285f126545c6e6363c476677"], 0x34}}, 0x60091) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000040)={0x7, 0x2, 0x3, 0x672, 0x9}) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.018079455s ago: executing program 4 (id=2236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400cc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0x6}, {0xfff8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000051}, 0x4004000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x61, 0x2e, 0xbc543e878757aa89]}}, 0x0, 0x1e, 0x0, 0x0, 0x1c16}, 0x28) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x9bd}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r11, 0x6}, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x94, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6df}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1aa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4000}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbf, 0x0, 0x0, 0x0, 0x6a1b0a75}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r13}, &(0x7f0000000280), &(0x7f0000000200)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000ff3f000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000001852000004000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7030000000000008500000000000000b700000000000000850000007d0000001859000005000000000000000000000095000000000000009d3b3fceeb062628b114b8b6ccf02e0242a836f18426e2d0bdc5d91625339807b1df65d56160aba06bbf995fd514fd36f8a1c065b6583fc0e1c8e694515e64fd06a417bae5bcff5adf94d988230d8a0da6503fa1bc6cf39e90d8624a897992e9f290aad7e91492a1a59f6203d27341a3d6d3f0a2706b1c505951683e756f4ee948bd7705edd1ce2a039a16a092b79b8d6a04fd11eafc7ee9"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r14}, 0xc) sendmsg$nl_generic(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 2.672680479s ago: executing program 3 (id=2237): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x9}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000390400000800000000000000000060f219ec4b37040000002edac4aba6259becc4d133980f5f84ae7261c6664d5b623b7385cd1d6afc6338164dae8fa0b8e06b377a45c6b1730c1823811258ae82f843b540dc065deee670be826b4e3dcbcdc1a30c4bfa7f35a2a4cabdaab389298e8f", @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 2.671200706s ago: executing program 0 (id=2238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) 2.669585766s ago: executing program 2 (id=2239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, 0x0, 0x20000000}, 0x20) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x3, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) 2.34702125s ago: executing program 0 (id=2240): r0 = socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0xbf, 0x4c}]}]}, 0xfc}}, 0x0) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4084}, 0x4000841) (async) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6e22, 0xfffffffc, @remote, 0x7}, 0x80, 0x0}, 0x20000000) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), 0x0}, 0x20) (async, rerun: 64) r8 = socket(0x22, 0x3, 0x1) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r3) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff030}, {0x4d, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) 2.297339719s ago: executing program 2 (id=2241): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x0, 0xfff1}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x9, 0xbf1, 0x2}, {0x7f, 0x2, 0x7, 0x81, 0x81, 0xffffffff}, 0x62, 0x9a8f, 0x219c}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0x0, 0x0, 0xe, 0xfffffffe, 0x9, 0xffffff32, 0x5, 0x400f, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x8, 0x4, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x4, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0xe, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffa, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x3, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0xfffffff6, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x1, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x4, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcda, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x9, 0xf30, 0x10006, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0xfffffffe, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0x9, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2793, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x2, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x28b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x8000004]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delvlan={0x3c, 0x71, 0x1, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r6 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x0, 0x26, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0xa}, {0xe, 0xe}, {0x2, 0xa}}, [{}, {}, {}, {}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040801}, 0x40) 2.204529113s ago: executing program 3 (id=2242): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}}], 0x2, 0x801) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 1.995060269s ago: executing program 4 (id=2243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xb3}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @qdisc_kind_options]}, 0xc4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) 1.924946872s ago: executing program 1 (id=2244): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@empty, @in6=@mcast2}}, {{@in=@private}, 0x0, @in=@private}}, &(0x7f0000000540)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.904062092s ago: executing program 3 (id=2245): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet(0x2, 0xa, 0x262) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000800)={r0, &(0x7f0000000840)='l2tp\x00', 0xa04400, &(0x7f0000000a80)={@align=0x4, {0x40, 0x6, 0xc, 0x5}}, 0x8, &(0x7f0000000980), &(0x7f00000009c0)=0x8000}) openat$cgroup(r2, &(0x7f0000000a40)='syz1\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @dev}, {0x1}, 0x4, {0x2, 0x0, @multicast1}}) r3 = socket$kcm(0x10, 0x2, 0x10) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000880)=""/74, 0x33e000, 0x1000, 0x0, 0x2}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x28a11, 0x4) (async) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x0, r5}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000080) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x20c, 0x24, 0x8, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xe, 0x4, 0x20000000, 0x1, 0x1, 0x200, 0x5}}, {0xe, 0x2, [0xb, 0x8, 0xb81, 0x7, 0x208]}}, {{0x1c, 0x1, {0x1, 0xb8, 0xfff0, 0x27fd, 0x1, 0xfbe, 0x6, 0x7}}, {0x12, 0x2, [0xd, 0x0, 0x4390, 0xb, 0x8, 0x4, 0x3]}}, {{0x1c, 0x1, {0x0, 0xb, 0x3fe, 0x101, 0x1, 0x6, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0xa3, 0x95a]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd2c9}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x1, 0x1, 0x9, 0x2, 0x444a, 0xc, 0x3}}, {0xa, 0x2, [0x1ff0, 0x84fa, 0x3]}}, {{0x1c, 0x1, {0x5, 0x4, 0xb5, 0x1, 0x2, 0x1, 0xd, 0x2}}, {0x8, 0x2, [0x7f, 0xffff]}}, {{0x1c, 0x1, {0x7, 0x2, 0x9, 0x0, 0x1, 0x9, 0x0, 0x4}}, {0xc, 0x2, [0x2, 0xfff9, 0x4, 0x4]}}, {{0x1c, 0x1, {0x5, 0x10, 0x4ba, 0x47c, 0x2, 0x6, 0x100, 0x3}}, {0xa, 0x2, [0x3, 0x4, 0x401]}}, {{0x1c, 0x1, {0x9, 0x10, 0x6, 0x1, 0x1, 0x100000, 0x0, 0x8}}, {0x14, 0x2, [0x3, 0x400, 0x8, 0x50, 0x400, 0x5, 0x4, 0x9]}}, {{0x1c, 0x1, {0x0, 0x82, 0x4, 0xb, 0x1, 0x9, 0x5, 0x6}}, {0x10, 0x2, [0xef6, 0x0, 0xcb30, 0xb57a, 0xfffb, 0x9]}}, {{0x1c, 0x1, {0x7f, 0x8c, 0xfff7, 0x1, 0x2, 0x9784, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x3, 0x0, 0x33a, 0x0, 0x40, 0x81, 0x4}}, {0xc, 0x2, [0x6, 0x1, 0x4, 0xf800]}}]}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x40001fd, @empty, 0x8}, 0x1c) (async) sendto$inet6(r7, 0x0, 0x0, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x400d}, 0x1c) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000007c0)={0x0, 0x2000, 0x800}, 0x20) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000940), &(0x7f0000000ac0)=0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) shutdown(r7, 0x1) setsockopt$inet6_tcp_TLS_RX(r7, 0x11a, 0x2, &(0x7f0000000b00)=@ccm_128={{0x303}, "d678a0fd277a2ba1", "fe64fccf0c5455885cfde7f38ccd665e", "1fa5fb22", "43fd772651e1018c"}, 0x28) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000001812000000000000002738a9edc26317e0b6cdc38bdf338369d31519bba09d6a403f955051405f17362a9f6aa91eca070a6d76509c4920f26f2289f7864a295dd8b24349543e759bbb93ce14efeb542437216693525135aa48230d711c515c7ef0fbf02dd9833ba114b1b525bfc48518bdeae7213c310ffaa57677302a7e358d962c7417619c4e5104c4d1e90e887982ac751ab1820bb52f2719fcbe3729e97d55450af208b4633c3fc6ef26789d9d1a13cf982dba197f75c74ddc326ab303e1fac2ede94fe7f1c8258ddde5f31195ee7c28d9fdab1845d9adefed97b0fdabed0cd4568a0ac9a33f96e60ab1c0d99b07db8640c40b1872f5f35a3d457728280bb265e9382d3f1c734b253dab4b9829a2ae570205e489ae50b19d3245d9625dc7fbea649d66a7", @ANYRES32, @ANYRESHEX=r0], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.831049689s ago: executing program 2 (id=2246): socket$packet(0x11, 0x2, 0x300) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000006800010000000000000000000a0000000000000004000b000c00088005000800000000000800010000d72b71435201f40b6c97111601812add3ea7"], 0x30}}, 0x0) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x3}, 0x1e) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="440000002c00010000000000fcdbdf253400f2800c001900"], 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@gettaction={0x160, 0x32, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc44d63d}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x160}, 0x1, 0x0, 0x0, 0x22004868}, 0x20044044) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20000041}, 0x8811) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021140011800a0001006d617463680000000400001000010000000000000000000000000a0000000000"], 0x98}}, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x3}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="1a", 0x1}, 0x1, 0x0, 0x0, 0x2004c8c6}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 1.604383771s ago: executing program 1 (id=2247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xe1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7", 0x7d}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1", 0x53}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913e", 0x5}], 0x1}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x66, 0x0, 0xf2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x78, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x12, "8475b8675de6a70a8594d409dc75e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xc, "c8f46976e79ea788f03d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xb, [@restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @float={0x5, 0x0, 0x0, 0x10, 0xc}, @restrict={0x2}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x1}, @fwd={0xe}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x2e, 0x61, 0x7b93ada82f9c06dd, 0x9f54f08d80af946e, 0x5f]}}, &(0x7f0000000240), 0x7b}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000700000048000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000010400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0xa, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x50) 1.421662935s ago: executing program 4 (id=2248): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x40104) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) setsockopt$sock_int(r10, 0x1, 0x76, &(0x7f00000004c0)=0x8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x9, 0x3, 0x3, 0xc024, r7, 0x5, '\x00', r8, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @value=r9}, 0x50) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 919.448795ms ago: executing program 2 (id=2249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000b200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r1, &(0x7f0000000380), &(0x7f0000000600)=""/72}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r1, &(0x7f0000000380), &(0x7f0000000600)=""/72}, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="eeff105e0000", @ANYRES16=r2, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000005c00028014000100000000000000000000000000000000010600020050000000080003000300000008000400000000000800050000000000080006000000000006000e004e2000001400010064010100"/126], 0x84}}, 0x0) 811.673958ms ago: executing program 4 (id=2250): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) 800.591123ms ago: executing program 0 (id=2251): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001800010000000000000000000ae0"], 0x50}}, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 727.063574ms ago: executing program 3 (id=2252): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000100feffffff000100006401010000000000000000000000000020010000000000000000000000000001000107164e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x80) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x400040, &(0x7f0000000080)={@_ha_fsid={[0xfffffff7, 0x1]}, {0x6, 0x4, 0x5, 0x4}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xa}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x60004}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88000000a634cbb8d5c77f60ae7b8df62f5da7f9bf654583327796a3d78b467709b6cb80f2ad68f28afc0080c8b0013f72b7716ca8f38a7d1b7704b925eba98588a034cd514d6dc242b1d935f42b7aa2f6be16df10bf926dc59455f0f0fd22f7117fa77db7d64f80c3432ecaa9f05f37c8b353a90650580464504b54f6fb98", @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf250400000014000400050000000b0000000400000000000080050005000000000008000300090000001400010000000000000000000000ffffffffffff050006000800000010000400010000000900000000000000140001002001000000000000000000000000000205000500050000000500060008000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x1, 0x9, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x1, 0x8e}}) 609.826329ms ago: executing program 2 (id=2253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="6400aa2a", @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000040)=0x84) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r3, 0x5, 0x20}, &(0x7f0000000080)=0xc) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f00000000c0)="cd1babb05916039c082d5dd251b1114f9db65fb2ab43943c478d4a41e4a6e9ffb1d7157cc7ace584ec12a963d03fe8d6c89df63cee010960e4c4dab1c5e50806c047b21ef8b9e79a04c4009ab82100704485aef055bc5add3a139ab505b14d86dcf4ddb07764f36bbda15a0195600b5ba7e05c3be442d36b5fc138efa2b7c77d6fd38d767523ff190977e1f963adb9cd14") 604.541151ms ago: executing program 3 (id=2254): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000480)={0xb4, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x88, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "e63d5c1dde5eca0d68f2c6c4b3f3544ecb036e6d1c50feeb4f59a3d6cf5b626f89d59fbd8a4482809067f8023d5b240e4acfcd576605ebf4f1dbcd9e1f7b83a566ef6c945f6fbc0e8082681b959b95a541d3ad54ee14982fa6a3afdf0958f383196b2804fc465b9e0f962c3d68ad960e06"}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0xb4}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000140)={r8, 0x1}, 0x8) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x4000000000}, {0x800}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7}}, 0xe8) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xa}, 0x2) r12 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r12, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x48010) 485.293645ms ago: executing program 4 (id=2255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x19c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x160, 0x1, [@m_tunnel_key={0x15c, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x12c, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4e21, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_emit_ethernet(0x73, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4048811}, 0x2000c040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x294, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x275, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @random="e0274bb58176", {0xc, 0x7}, "", @void, @value=@ver_80211n={0x0, 0x7, 0x0, 0x1, 0x0, 0x3}}, @random="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"}}]}, 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 351.064307ms ago: executing program 1 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) 346.78067ms ago: executing program 4 (id=2257): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x50, 0x1, [@m_bpf={0x4c, 0xb, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x19, 0x6, "8c5e889680ea699f0286c6926deecbcf795b716b0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x64}}, 0x20040000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="080001"], 0x90}}, 0x0) 172.593001ms ago: executing program 3 (id=2258): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xb6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) recvmmsg(r2, &(0x7f0000004280)=[{{&(0x7f0000000300)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/87, 0x57}], 0x1, &(0x7f0000000680)=""/126, 0x7e}, 0x8}, {{&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/163, 0xa3}, {&(0x7f0000000900)=""/10, 0xa}, {&(0x7f0000000940)=""/13, 0xd}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/95, 0x5f}, {&(0x7f0000001a40)=""/59, 0x3b}], 0x7, &(0x7f0000001b00)=""/254, 0xfe}, 0xc}, {{&(0x7f0000001c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001c80)=""/133, 0x85}, {&(0x7f0000001d40)=""/57, 0x39}, {&(0x7f0000001d80)=""/231, 0xe7}, {&(0x7f0000001e80)=""/216, 0xd8}, {&(0x7f0000001f80)=""/198, 0xc6}, {&(0x7f0000002080)=""/82, 0x52}], 0x6}, 0x80000000}, {{&(0x7f0000002180)=@phonet, 0x80, &(0x7f0000002780)=[{&(0x7f0000002200)=""/18, 0x12}, {&(0x7f0000002240)=""/234, 0xea}, {&(0x7f0000002340)=""/238, 0xee}, {&(0x7f0000002440)=""/2, 0x2}, {&(0x7f0000002480)=""/140, 0x8c}, {&(0x7f0000002540)=""/39, 0x27}, {&(0x7f0000002580)=""/244, 0xf4}, {&(0x7f0000002680)=""/209, 0xd1}], 0x8, &(0x7f0000002800)=""/63, 0x3f}}, {{&(0x7f0000002840)=@nfc_llcp, 0x80, &(0x7f0000003f80)=[{&(0x7f00000028c0)=""/24, 0x18}, {&(0x7f0000002900)=""/89, 0x59}, {&(0x7f0000002980)=""/201, 0xc9}, {&(0x7f0000002a80)=""/231, 0xe7}, {&(0x7f0000002b80)=""/233, 0xe9}, {&(0x7f0000002c80)=""/150, 0x96}, {&(0x7f0000002d40)=""/213, 0xd5}, {&(0x7f0000002e40)=""/157, 0x9d}, {&(0x7f0000002f00)=""/110, 0x6e}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0xa, &(0x7f0000004040)=""/187, 0xbb}, 0x14a}, {{&(0x7f0000004100)=@un=@abs, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/17, 0x11}], 0x1, &(0x7f0000004200)=""/73, 0x49}, 0xf}], 0x6, 0x2, &(0x7f0000004400)={0x0, 0x3938700}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r6, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/223, 0xdf, 0x0, &(0x7f00000005c0)=""/30, 0x1e}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r9, 0x0, 0xffffffff000) 127.754302ms ago: executing program 0 (id=2259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {0x1e}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r6}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x3b, 0x20, 0x70bd28, 0x25dfdbfe, {0x15}, [@typed={0x8, 0x12c, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40848}, 0x80) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cad7000000001000a0000001400040000000000000000000000ffffac1414aa"], 0x34}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="df4800000000fdd9df250c0000000c00038004eeda430385ed486f11522d4723c9ee", @ANYRES32=r13, @ANYBLOB], 0x2c}}, 0x0) 0s ago: executing program 1 (id=2260): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) kernel console output (not intermixed with test programs): ributes in process `syz.3.429'. [ 135.627008][ T7575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.627027][ T7575] IPv6: NLM_F_CREATE should be set when creating new route [ 135.921395][ T7580] syz_tun: entered allmulticast mode [ 136.015349][ T7580] dvmrp8: entered allmulticast mode [ 136.057500][ T7579] syz_tun: left allmulticast mode [ 136.189617][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 136.457926][ T7621] ip_tables: iptables: counters copy to user failed while replacing table [ 136.509602][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 136.576461][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 136.609931][ T7618] netlink: 9 bytes leftover after parsing attributes in process `syz.2.449'. [ 136.622243][ T7618] gretap0: entered promiscuous mode [ 136.796924][ T7632] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 136.800977][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.805057][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.859548][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.859682][ T7632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.861652][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.861832][ T7632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.887534][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 136.930027][ T7632] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.930560][ T7628] syzkaller0: entered promiscuous mode [ 136.930581][ T7628] syzkaller0: entered allmulticast mode [ 136.964688][ T7633] bridge_slave_1: left allmulticast mode [ 136.964719][ T7633] bridge_slave_1: left promiscuous mode [ 136.965007][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.002419][ T7633] bridge_slave_0: left allmulticast mode [ 137.002448][ T7633] bridge_slave_0: left promiscuous mode [ 137.006529][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.087340][ T7633] bond0: (slave bridge0): Releasing backup interface [ 137.107479][ T7639] netlink: 'syz.2.454': attribute type 11 has an invalid length. [ 137.173805][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 137.260253][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 137.482369][ T7647] netlink: 'syz.1.456': attribute type 21 has an invalid length. [ 137.487518][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 137.604455][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.459'. [ 137.656864][ T7647] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 137.678526][ T7660] netlink: 'syz.3.458': attribute type 9 has an invalid length. [ 137.678544][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 137.730372][ T7660] netlink: 'syz.3.458': attribute type 9 has an invalid length. [ 137.735426][ T6292] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.738926][ T6642] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.739040][ T6642] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.739134][ T6642] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.966222][ T7674] netlink: 'syz.3.463': attribute type 39 has an invalid length. [ 138.142110][ T6292] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.142495][ T6291] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.142539][ T6291] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.142578][ T6291] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.501494][ T7692] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 138.820559][ T7705] x_tables: duplicate underflow at hook 2 [ 138.918536][ T7705] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20002 [ 139.488276][ T7736] netlink: Invalid conntrack timeout [ 139.488309][ T7736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.781187][ T7755] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 139.813359][ T7754] bond0: (slave team0): Releasing backup interface [ 139.848180][ T7754] bridge_slave_0: left allmulticast mode [ 139.848211][ T7754] bridge_slave_0: left promiscuous mode [ 139.848565][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.869094][ T7754] bridge_slave_1: left allmulticast mode [ 139.869169][ T7754] bridge_slave_1: left promiscuous mode [ 139.869990][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.914520][ T7754] bond0: (slave bond_slave_0): Releasing backup interface [ 139.946193][ T7754] bond0: (slave bond_slave_1): Releasing backup interface [ 140.009787][ T7754] team0: Port device team_slave_0 removed [ 140.052401][ T7754] team0: Port device team_slave_1 removed [ 140.053405][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.053430][ T7754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.097738][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.097769][ T7754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.100838][ T7754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.254185][ T7755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.479266][ T7784] ip_tables: iptables: counters copy to user failed while replacing table [ 140.524412][ T7762] bond1: (slave veth0_to_bond): making interface the new active one [ 140.526274][ T7762] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 140.901781][ T7794] xfrm1: entered promiscuous mode [ 140.901806][ T7794] xfrm1: entered allmulticast mode [ 141.201887][ T7823] xt_hashlimit: size too large, truncated to 1048576 [ 141.402446][ T7827] netlink: 'syz.2.501': attribute type 7 has an invalid length. [ 141.438439][ T7827] netlink: 'syz.2.501': attribute type 64 has an invalid length. [ 141.466681][ T7829] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 141.635091][ T7839] __nla_validate_parse: 10 callbacks suppressed [ 141.635114][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 141.635133][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 141.700741][ T7837] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 141.722446][ T7837] bond2 (unregistering): Released all slaves [ 141.780002][ T7848] IPv6: addrconf: prefix option has invalid lifetime [ 141.810253][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.506'. [ 141.945549][ T5628] Bluetooth: hci1: ACL packet too small [ 141.994766][ T7859] ip_tables: iptables: counters copy to user failed while replacing table [ 142.016945][ T7858] ip_tables: iptables: counters copy to user failed while replacing table [ 142.226716][ T7861] syzkaller0: entered promiscuous mode [ 142.226736][ T7861] syzkaller0: entered allmulticast mode [ 142.246658][ T7866] netlink: 'syz.2.514': attribute type 9 has an invalid length. [ 142.251222][ T7868] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 142.251243][ T7868] netlink: 'syz.3.513': attribute type 3 has an invalid length. [ 142.251257][ T7868] netlink: 224 bytes leftover after parsing attributes in process `syz.3.513'. [ 142.360464][ T5628] Bluetooth: hci4: unexpected cc 0x2003 length: 0 < 9 [ 142.360499][ T5628] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 142.361883][ T7870] xt_socket: unknown flags 0xc [ 142.451142][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.553520][ T7875] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 143.099089][ T7904] netlink: 48 bytes leftover after parsing attributes in process `syz.4.519'. [ 143.112181][ T7904] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 143.284745][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.520'. [ 144.236547][ T7875] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 144.295333][ T7933] vlan2: entered allmulticast mode [ 144.295357][ T7933] veth1_virt_wifi: entered allmulticast mode [ 144.575918][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 144.649086][ T7960] Bluetooth: hci0: unsupported parameter 5135 [ 144.649145][ T7960] Bluetooth: hci0: unsupported parameter 8192 [ 144.649160][ T7960] Bluetooth: hci0: unsupported parameter 5135 [ 144.649174][ T7960] Bluetooth: hci0: unsupported parameter 8192 [ 144.823478][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 144.933907][ T7975] batadv_slave_0: entered promiscuous mode [ 144.934052][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.119666][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.624234][ T8001] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.735934][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 145.910479][ T8012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.560063][ T8049] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 146.743547][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'. [ 146.858831][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 146.911921][ T8058] netlink: 'syz.4.547': attribute type 3 has an invalid length. [ 146.999445][ T8056] Bluetooth: hci0: unsupported parameter 5134 [ 146.999471][ T8056] Bluetooth: hci0: unsupported parameter 8192 [ 146.999486][ T8056] Bluetooth: hci0: unsupported parameter 5134 [ 146.999499][ T8056] Bluetooth: hci0: unsupported parameter 8192 [ 147.229080][ T8073] dvmrp0: entered allmulticast mode [ 147.308670][ T8078] syzkaller1: entered promiscuous mode [ 147.308695][ T8078] syzkaller1: entered allmulticast mode [ 148.526096][ T8128] netlink: 52 bytes leftover after parsing attributes in process `syz.3.561'. [ 148.667029][ T8123] geneve3: entered promiscuous mode [ 148.667054][ T8123] geneve3: entered allmulticast mode [ 148.682787][ T7806] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 148.682837][ T7806] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 148.682875][ T7806] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 148.682919][ T7806] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 149.052630][ T8145] bond6 (unregistering): Released all slaves [ 149.133151][ T5628] Bluetooth: hci4: unexpected event 0x0e length: 257 > 255 [ 149.133187][ T5628] Bluetooth: hci4: unexpected event for opcode 0x1924 [ 149.215382][ T8153] netlink: 18 bytes leftover after parsing attributes in process `syz.3.573'. [ 149.864376][ T8189] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 150.031577][ T8189] bridge3: entered promiscuous mode [ 150.050034][ T8189] bond1: (slave bridge3): making interface the new active one [ 150.050536][ T8189] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 150.111968][ T8183] bridge4: entered promiscuous mode [ 150.122672][ T8183] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 150.153358][ T8183] syz.4.583 (8183) used greatest stack depth: 18088 bytes left [ 150.271779][ T8201] netlink: 240 bytes leftover after parsing attributes in process `syz.4.586'. [ 150.510053][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 150.510433][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 150.510456][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 150.510526][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 150.553742][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 150.587514][ T8210] syzkaller0: entered promiscuous mode [ 150.587541][ T8210] syzkaller0: entered allmulticast mode [ 153.165839][ T8232] syzkaller0: entered promiscuous mode [ 153.165859][ T8232] syzkaller0: entered allmulticast mode [ 153.167789][ T8233] lo speed is unknown, defaulting to 1000 [ 153.199327][ T8240] lo: entered promiscuous mode [ 153.199484][ T8240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.358395][ T8233] lo speed is unknown, defaulting to 1000 [ 153.393038][ T8233] lo speed is unknown, defaulting to 1000 [ 153.394141][ T8233] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 153.394176][ T8233] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 153.394220][ T8233] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 153.480831][ T8256] __nla_validate_parse: 4 callbacks suppressed [ 153.480853][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.598'. [ 153.537133][ T8233] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.622615][ T8233] lo speed is unknown, defaulting to 1000 [ 153.625022][ T8233] lo speed is unknown, defaulting to 1000 [ 153.628246][ T8233] lo speed is unknown, defaulting to 1000 [ 153.630093][ T8233] lo speed is unknown, defaulting to 1000 [ 153.660413][ T8233] lo speed is unknown, defaulting to 1000 [ 153.961618][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 153.990190][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 154.096318][ T8258] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 154.259899][ T8277] netlink: 'syz.4.608': attribute type 21 has an invalid length. [ 154.259925][ T8277] netlink: 128 bytes leftover after parsing attributes in process `syz.4.608'. [ 154.260005][ T8277] netlink: 'syz.4.608': attribute type 5 has an invalid length. [ 154.260020][ T8277] netlink: 3 bytes leftover after parsing attributes in process `syz.4.608'. [ 154.346539][ T8286] netlink: 14 bytes leftover after parsing attributes in process `syz.0.609'. [ 154.710782][ T8302] netlink: 'syz.4.615': attribute type 10 has an invalid length. [ 154.886621][ T8311] netlink: 'syz.4.615': attribute type 1 has an invalid length. [ 155.046847][ T8322] sctp: [Deprecated]: syz.0.617 (pid 8322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.046847][ T8322] Use struct sctp_sack_info instead [ 155.422368][ T8314] team0: Port device dummy0 removed [ 155.445341][ T8322] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 155.488864][ T8328] netlink: 'syz.1.618': attribute type 12 has an invalid length. [ 155.488892][ T8328] netlink: 248 bytes leftover after parsing attributes in process `syz.1.618'. [ 155.489469][ T8329] netlink: 'syz.1.618': attribute type 12 has an invalid length. [ 155.489487][ T8329] netlink: 248 bytes leftover after parsing attributes in process `syz.1.618'. [ 155.933727][ T8348] batadv_slave_0: entered promiscuous mode [ 155.934502][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 155.934908][ T8348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.987905][ T8344] ieee802154 phy1 wpan1: encryption failed: -22 [ 155.990824][ T8348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.038692][ T8352] netlink: 'syz.3.624': attribute type 18 has an invalid length. [ 156.038709][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 156.038889][ T8352] netlink: 'syz.3.624': attribute type 18 has an invalid length. [ 156.224561][ T8353] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 156.557020][ T8372] hsr0: entered allmulticast mode [ 156.557044][ T8372] hsr_slave_0: entered allmulticast mode [ 156.557062][ T8372] hsr_slave_1: entered allmulticast mode [ 156.776848][ T8384] netlink: 'syz.4.636': attribute type 9 has an invalid length. [ 157.296264][ T8401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.297035][ T8403] bond1: option mode: unable to set because the bond device is up [ 157.688917][ T8432] Cannot find set identified by id 65534 to match [ 158.019768][ T8457] 8021q: VLANs not supported on dvmrp0 [ 158.199488][ T8464] gretap0: entered promiscuous mode [ 158.208805][ T8464] vlan2: entered promiscuous mode [ 158.643410][ T8483] __nla_validate_parse: 8 callbacks suppressed [ 158.643431][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 158.661564][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 158.779101][ T8489] ip6t_hbh: unknown flags 38 [ 158.946100][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 159.184346][ T8518] netlink: 64 bytes leftover after parsing attributes in process `syz.3.666'. [ 159.406069][ T8519] syzkaller1: entered promiscuous mode [ 159.406094][ T8519] syzkaller1: entered allmulticast mode [ 159.591064][ T8537] netlink: 80 bytes leftover after parsing attributes in process `syz.4.670'. [ 159.596058][ T8537] netlink: 64 bytes leftover after parsing attributes in process `syz.4.670'. [ 159.638302][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.662742][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 159.663142][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 159.663643][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 159.664110][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 159.743912][ T8538] validate_nla: 3 callbacks suppressed [ 159.743935][ T8538] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 159.744787][ T8538] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 159.875088][ T8538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.055257][ T8551] bond3: Unable to set up delay as MII monitoring is disabled [ 160.113947][ T8551] bond3 (unregistering): Released all slaves [ 160.446454][ T8530] workqueue: Failed to create a rescuer kthread for wq "nfc21_nci_rx_wq": -EINTR [ 160.750957][ T8636] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 160.866926][ T8636] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 160.933980][ T8636] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 160.934565][ T8632] syzkaller1: entered allmulticast mode [ 161.178035][ T8649] netlink: 'syz.2.678': attribute type 4 has an invalid length. [ 161.644856][ T8670] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.694850][ T8668] GUP no longer grows the stack in syz.3.685 (8668): 200000003000-20000000a000 (200000001000) [ 161.694883][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.3.685 Not tainted syzkaller #0 PREEMPT(full) [ 161.694912][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.694924][ T8668] Call Trace: [ 161.694933][ T8668] [ 161.694941][ T8668] dump_stack_lvl+0xe8/0x150 [ 161.694978][ T8668] __get_user_pages+0x23b6/0x2750 [ 161.695008][ T8668] ? lock_acquire+0x115/0x350 [ 161.695043][ T8668] ? __gup_longterm_locked+0xc3b/0x15c0 [ 161.695078][ T8668] __gup_longterm_locked+0xd52/0x15c0 [ 161.695108][ T8668] ? lock_acquire+0x115/0x350 [ 161.695144][ T8668] gup_fast_fallback+0x1d92/0x20e0 [ 161.695202][ T8668] ? __pfx_gup_fast_fallback+0x10/0x10 [ 161.695235][ T8668] ? lock_acquire+0x115/0x350 [ 161.695254][ T8668] ? is_valid_gup_args+0x11f/0x200 [ 161.695285][ T8668] ? get_user_pages_fast+0x4d/0xb0 [ 161.695316][ T8668] __iov_iter_get_pages_alloc+0x378/0xa40 [ 161.695346][ T8668] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 161.695369][ T8668] iov_iter_get_pages2+0x5e/0xa0 [ 161.695399][ T8668] __se_sys_vmsplice+0x7b5/0x1660 [ 161.695454][ T8668] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 161.695486][ T8668] ? __pfx_futex_wait+0x10/0x10 [ 161.695599][ T8668] do_syscall_64+0x166/0x520 [ 161.695630][ T8668] ? trace_irq_disable+0x3b/0x140 [ 161.695653][ T8668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.695682][ T8668] ? clear_bhb_loop+0x70/0xc0 [ 161.695712][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.695734][ T8668] RIP: 0033:0x7fac36b9e159 [ 161.695755][ T8668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.695775][ T8668] RSP: 002b:00007fac34df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 161.695802][ T8668] RAX: ffffffffffffffda RBX: 00007fac36e25fa0 RCX: 00007fac36b9e159 [ 161.695819][ T8668] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 161.695834][ T8668] RBP: 00007fac36c3506b R08: 0000000000000000 R09: 0000000000000000 [ 161.695849][ T8668] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 161.695863][ T8668] R13: 00007fac36e26038 R14: 00007fac36e25fa0 R15: 00007ffcdb93dba8 [ 161.695909][ T8668] [ 161.853219][ T8670] syzkaller0: entered promiscuous mode [ 161.853275][ T8670] syzkaller0: entered allmulticast mode [ 162.172002][ T8685] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 162.320142][ T8687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.391881][ T8698] veth0: left allmulticast mode [ 162.391909][ T8698] veth0: left promiscuous mode [ 162.392159][ T8698] bridge0: port 3(veth0) entered disabled state [ 162.421258][ T8698] bridge_slave_1: left promiscuous mode [ 162.421518][ T8698] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.430727][ T8698] bridge_slave_0: left allmulticast mode [ 162.430754][ T8698] bridge_slave_0: left promiscuous mode [ 162.462119][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.963922][ T5628] Bluetooth: hci3: connection err: -111 [ 162.981217][ T8721] netlink: 'syz.1.695': attribute type 61 has an invalid length. [ 162.999418][ T8715] syzkaller0: entered promiscuous mode [ 162.999444][ T8715] syzkaller0: entered allmulticast mode [ 164.222184][ T1366] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 164.673734][ T8724] __nla_validate_parse: 18 callbacks suppressed [ 164.673755][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 164.836580][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 165.015897][ T8676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.523714][ T8755] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 165.640276][ T8764] netlink: 144 bytes leftover after parsing attributes in process `syz.1.709'. [ 165.660745][ T8765] netlink: 144 bytes leftover after parsing attributes in process `syz.1.709'. [ 165.699045][ T8763] netlink: 'syz.3.710': attribute type 2 has an invalid length. [ 165.723289][ T8769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.711'. [ 165.767530][ T8763] netlink: 'syz.3.710': attribute type 2 has an invalid length. [ 165.767554][ T8763] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.710'. [ 165.939087][ T8779] block nbd0: not configured, cannot reconfigure [ 165.959082][ T8783] block nbd0: not configured, cannot reconfigure [ 166.050197][ T8789] nbd: couldn't find device at index 15663104 [ 166.067506][ T8789] syzkaller1: entered promiscuous mode [ 166.067531][ T8789] syzkaller1: entered allmulticast mode [ 166.268298][ T8794] netlink: 'syz.0.718': attribute type 21 has an invalid length. [ 166.387346][ T8794] Cannot find set identified by id 65534 to match [ 166.451269][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 166.596669][ T8814] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 166.706331][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.720'. [ 166.788211][ T8823] netlink: 13 bytes leftover after parsing attributes in process `syz.1.723'. [ 166.819771][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.724'. [ 166.959925][ T7443] lo speed is unknown, defaulting to 1000 [ 167.144767][ T8841] sctp: [Deprecated]: syz.2.725 (pid 8841) Use of int in max_burst socket option deprecated. [ 167.144767][ T8841] Use struct sctp_assoc_value instead [ 167.176638][ T8845] ip_tables: iptables: counters copy to user failed while replacing table [ 167.517419][ T8860] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 167.711564][ T8872] bridge_slave_0: left allmulticast mode [ 167.711594][ T8872] bridge_slave_0: left promiscuous mode [ 167.712644][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.753720][ T8872] bridge_slave_1: left allmulticast mode [ 167.753750][ T8872] bridge_slave_1: left promiscuous mode [ 167.754024][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.806935][ T8872] bond0: (slave bond_slave_0): Releasing backup interface [ 167.828873][ T8872] bond0: (slave bond_slave_1): Releasing backup interface [ 167.870266][ T8872] team0: Port device team_slave_0 removed [ 167.909191][ T8872] team0: Port device team_slave_1 removed [ 167.920076][ T8872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.932882][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.954722][ T8872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.954748][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.989108][ T8872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.547835][ T8902] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 168.548938][ T8902] batman_adv: batadv0: Adding interface: gretap1 [ 168.548953][ T8902] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.548984][ T8902] batman_adv: batadv0: Interface activated: gretap1 [ 168.607991][ T31] audit: type=1800 audit(1790206878.469:4): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.741" name="memory.events" dev="tmpfs" ino=732 res=0 errno=0 [ 168.609325][ T31] audit: type=1804 audit(1790206878.469:5): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.741" name="/newroot/140/memory.events" dev="tmpfs" ino=732 res=1 errno=0 [ 168.622055][ T31] audit: type=1804 audit(1790206878.479:6): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.741" name="/newroot/140/memory.events" dev="tmpfs" ino=732 res=1 errno=0 [ 168.633455][ T31] audit: type=1800 audit(1790206878.479:7): pid=8904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.741" name="memory.events" dev="tmpfs" ino=732 res=0 errno=0 [ 168.851702][ T6291] wlan1: Trigger new scan to find an IBSS to join [ 169.080230][ T8921] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 169.273740][ T8927] Bluetooth: MGMT ver 1.23 [ 169.596088][ T8946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.616813][ T8946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.685489][ T8950] __nla_validate_parse: 11 callbacks suppressed [ 169.685513][ T8950] netlink: 32 bytes leftover after parsing attributes in process `syz.4.755'. [ 169.899201][ T8922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.003280][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'. [ 170.036663][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'. [ 170.161909][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 170.325716][ T8987] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 170.445546][ T8996] netlink: 'syz.2.765': attribute type 64 has an invalid length. [ 170.580367][ T9008] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.767'. [ 170.591987][ T9006] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.767'. [ 170.767985][ T9016] vlan3: entered promiscuous mode [ 170.768010][ T9016] bridge0: entered promiscuous mode [ 170.769587][ T9016] vlan3: entered allmulticast mode [ 170.769605][ T9016] bridge0: entered allmulticast mode [ 171.089022][ T9029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.772'. [ 171.463963][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 171.598578][ T9050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.780'. [ 171.654949][ T5812] hid-generic 0005:15C2:0009.0001: item fetching failed at offset 0/1 [ 171.658841][ T5812] hid-generic 0005:15C2:0009.0001: probe with driver hid-generic failed with error -22 [ 171.696329][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 171.870811][ T9060] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 171.888241][ T9061] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 171.899583][ T970] wlan1: Trigger new scan to find an IBSS to join [ 172.337209][ T9089] tipc: Started in network mode [ 172.337233][ T9089] tipc: Node identity 4, cluster identity 4711 [ 172.337246][ T9089] tipc: Node number set to 4 [ 172.432205][ T9095] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 172.556945][ T9095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.608093][ T9099] bond4: (slave veth5): Enslaving as an active interface with a down link [ 172.639945][ T9095] bond4: (slave dummy0): making interface the new active one [ 172.657520][ T9095] dummy0: entered promiscuous mode [ 172.658044][ T9095] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 172.812617][ T9108] ip6t_rt: unknown flags 36 [ 173.313662][ T9132] netlink: 'syz.4.803': attribute type 10 has an invalid length. [ 173.438652][ T9142] lo: left promiscuous mode [ 173.483915][ T9146] ip_tables: iptables: counters copy to user failed while replacing table [ 173.662114][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.811624][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.817484][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.826759][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.830746][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.126751][ T9178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.127356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.541579][ T9194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.719651][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.773459][ T9213] __nla_validate_parse: 11 callbacks suppressed [ 174.773483][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.824'. [ 174.870428][ T9221] netlink: 'syz.4.825': attribute type 3 has an invalid length. [ 174.931514][ T970] wlan1: Trigger new scan to find an IBSS to join [ 174.943449][ T9218] netlink: 'syz.4.825': attribute type 10 has an invalid length. [ 174.997477][ T9218] team0: Device veth0_macvtap failed to register rx_handler [ 175.014900][ T6291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.123775][ T9231] netlink: 104 bytes leftover after parsing attributes in process `syz.0.826'. [ 175.277225][ T9233] netlink: 'syz.2.828': attribute type 10 has an invalid length. [ 175.294367][ T9233] team0: Port device vxcan1 added [ 175.309590][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 175.856493][ T1407] wlan1: Creating new IBSS network, BSSID c2:73:42:1b:4d:bd [ 175.873518][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 175.957994][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 176.010562][ T9271] netlink: 224 bytes leftover after parsing attributes in process `syz.3.838'. [ 176.139193][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.4.839'. [ 176.171757][ T9277] netlink: 'syz.3.841': attribute type 2 has an invalid length. [ 176.176899][ T9277] netlink: 'syz.3.841': attribute type 2 has an invalid length. [ 176.176922][ T9277] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.841'. [ 176.858596][ T1366] IPVS: starting estimator thread 0... [ 176.942028][ T9315] IPVS: using max 25 ests per chain, 60000 per kthread [ 176.967914][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 177.005031][ T9313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.051471][ T7430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.075715][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 177.263620][ T9330] ip6gre2: entered promiscuous mode [ 177.263646][ T9330] ip6gre2: entered allmulticast mode [ 177.438992][ T9336] tipc: Enabled bearer , priority 0 [ 177.530453][ T9336] syzkaller0: entered promiscuous mode [ 177.530481][ T9336] syzkaller0: entered allmulticast mode [ 177.543926][ T9336] tipc: Resetting bearer [ 177.578882][ T9335] tipc: Resetting bearer [ 177.765909][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 177.897063][ T7430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.860050][ T5812] net_ratelimit: 12 callbacks suppressed [ 178.860074][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.677284][ T9335] tipc: Disabling bearer [ 179.899290][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 179.939397][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.964501][ T9399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.878'. [ 180.066706][ T9397] netlink: 'syz.0.877': attribute type 2 has an invalid length. [ 180.066732][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 180.338533][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 180.341950][ T9414] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 180.342002][ T9414] netlink: 'syz.1.884': attribute type 3 has an invalid length. [ 180.342041][ T9414] netlink: 224 bytes leftover after parsing attributes in process `syz.1.884'. [ 180.361568][ T9411] netlink: 17 bytes leftover after parsing attributes in process `syz.3.883'. [ 180.380765][ T9411] netlink: 17 bytes leftover after parsing attributes in process `syz.3.883'. [ 180.458977][ T9406] netlink: 48 bytes leftover after parsing attributes in process `syz.0.881'. [ 180.589800][ T9419] veth0: mtu less than device minimum [ 180.662377][ T9426] veth0: mtu less than device minimum [ 181.028750][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.172452][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.172665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.296092][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 181.378164][ T9460] syzkaller1: entered promiscuous mode [ 181.378186][ T9460] syzkaller1: entered allmulticast mode [ 181.411122][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 181.757495][ T9480] netlink: zone id is out of range [ 181.757514][ T9480] netlink: zone id is out of range [ 181.757524][ T9480] netlink: zone id is out of range [ 182.007019][ T9480] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 182.007048][ T9480] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 182.226447][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 183.199860][ T9537] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 183.225393][ T31] audit: type=1804 audit(1790206893.089:8): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.917" name="/newroot/173/cgroup.controllers" dev="tmpfs" ino=900 res=1 errno=0 [ 183.227233][ T31] audit: type=1800 audit(1790206893.089:9): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.917" name="cgroup.controllers" dev="tmpfs" ino=900 res=0 errno=0 [ 183.257161][ T9535] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 183.742569][ T1407] dummy0: left promiscuous mode [ 183.818866][ T9553] netlink: 'syz.4.924': attribute type 12 has an invalid length. [ 184.153969][ T5812] net_ratelimit: 509 callbacks suppressed [ 184.153991][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.214403][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.214608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.370037][ T9576] team0: Port device vxcan1 removed [ 184.392979][ T9584] netlink: 'syz.0.931': attribute type 4 has an invalid length. [ 184.512019][ T9595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.077442][ T9614] __nla_validate_parse: 26 callbacks suppressed [ 185.077466][ T9614] netlink: 6 bytes leftover after parsing attributes in process `syz.4.935'. [ 185.113458][ T9614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.156566][ T9619] netlink: 2 bytes leftover after parsing attributes in process `syz.4.935'. [ 185.195295][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.430516][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 185.841027][ T9644] netlink: 193 bytes leftover after parsing attributes in process `syz.4.943'. [ 186.217076][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.253364][ T9660] netlink: 52 bytes leftover after parsing attributes in process `syz.3.947'. [ 186.709834][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 186.796490][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 186.956380][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.954'. [ 186.956405][ T9685] netlink: 13 bytes leftover after parsing attributes in process `syz.2.954'. [ 187.166717][ T9685] veth7: entered promiscuous mode [ 187.252147][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.252356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.258101][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.429958][ T9695] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 187.430769][ T9695] veth0: entered promiscuous mode [ 187.479351][ T9696] veth0: left promiscuous mode [ 187.616964][ T9704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.958'. [ 187.929589][ T9716] bond7: entered allmulticast mode [ 187.930113][ T9716] 8021q: adding VLAN 0 to HW filter on device bond7 [ 188.013534][ T9722] wireguard0: entered promiscuous mode [ 189.279968][ T9787] smc: net device team0 applied user defined pnetid SYZ2 [ 189.353102][ T5614] net_ratelimit: 1 callbacks suppressed [ 189.353125][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.811814][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.877410][ T9812] IPVS: Error connecting to the multicast addr [ 189.912887][ T9809] tipc: Enabling of bearer rejected, media not registered [ 190.261374][ T9831] __nla_validate_parse: 7 callbacks suppressed [ 190.261397][ T9831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.995'. [ 190.261443][ T9831] netlink: 43 bytes leftover after parsing attributes in process `syz.1.995'. [ 190.261460][ T9831] netlink: 'syz.1.995': attribute type 6 has an invalid length. [ 190.261474][ T9831] netlink: 'syz.1.995': attribute type 5 has an invalid length. [ 190.261487][ T9831] netlink: 43 bytes leftover after parsing attributes in process `syz.1.995'. [ 190.296112][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.296322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.358270][ T9834] blkio.reset_stats is deprecated [ 190.369260][ T9834] netlink: 'syz.3.997': attribute type 12 has an invalid length. [ 190.399196][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.451140][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 190.630138][ T9846] ip_tables: iptables: counters copy to user failed while replacing table [ 190.642224][ T9846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.642522][ T9846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.716571][ T9851] netlink: 224 bytes leftover after parsing attributes in process `syz.2.999'. [ 190.753614][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 190.773723][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 190.773766][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 191.097429][ T9868] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1004'. [ 191.346529][ T9886] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1009'. [ 191.436710][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.442675][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 191.658389][ T9901] netlink: 'syz.1.1014': attribute type 8 has an invalid length. [ 191.658606][ T9901] sch_fq: defrate 0 ignored. [ 191.916263][ T9912] netlink: 'syz.4.1018': attribute type 1 has an invalid length. [ 191.916290][ T9912] netlink: 'syz.4.1018': attribute type 1 has an invalid length. [ 192.420389][ T9930] netlink: 'syz.3.1026': attribute type 5 has an invalid length. [ 192.488898][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.880431][ T9953] macvlan0: entered promiscuous mode [ 192.890612][ T9953] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 192.902623][ T9953] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 193.267560][ T9977] syzkaller0: entered promiscuous mode [ 193.267586][ T9977] syzkaller0: entered allmulticast mode [ 194.167271][T10025] Bluetooth: hci0: unsupported parameter 5134 [ 194.169073][T10025] Bluetooth: hci0: unsupported parameter 8192 [ 194.169095][T10025] Bluetooth: hci0: unsupported parameter 5134 [ 194.169110][T10025] Bluetooth: hci0: unsupported parameter 8192 [ 194.293151][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.547197][ T5812] net_ratelimit: 9 callbacks suppressed [ 194.547218][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.851566][ T6291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.576053][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.211326][ T1407] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 196.371476][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.371855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.615635][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.926844][T10016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.235386][ T60] IPVS: starting estimator thread 0... [ 197.288793][T10050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.333185][T10046] IPVS: using max 29 ests per chain, 69600 per kthread [ 197.680504][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.872411][T10071] __nla_validate_parse: 11 callbacks suppressed [ 197.872433][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1063'. [ 198.018825][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 198.132856][ T1407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.133175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.412733][T10107] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1070'. [ 198.429274][T10109] ip6tnl3: entered promiscuous mode [ 198.429342][T10109] ip6tnl3: entered allmulticast mode [ 198.446897][T10108] syzkaller0: entered promiscuous mode [ 198.446922][T10108] syzkaller0: entered allmulticast mode [ 198.547640][T10116] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1072'. [ 199.486039][T10160] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 199.718243][T10176] net_ratelimit: 5 callbacks suppressed [ 199.718264][T10176] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 199.736950][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.784261][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 199.784286][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1086'. [ 199.787321][T10170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.844613][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.873353][T10181] bond5: (slave bond0): making interface the new active one [ 199.876505][T10181] bond5: (slave bond0): Enslaving as an active interface with an up link [ 199.982895][T10183] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 200.053726][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.103077][T10183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.145089][T10187] bond4: (slave gretap2): making interface the new active one [ 200.146755][T10187] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 200.793869][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.906306][T10224] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 201.205316][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 201.406843][T10252] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 201.427661][T10252] netlink: 'syz.1.1112': attribute type 1 has an invalid length. [ 201.500114][T10252] bond2: entered promiscuous mode [ 201.500560][T10252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.614024][T10252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.614521][T10252] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 201.614543][T10252] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 201.656285][T10252] bond2: (slave ip6gre1): making interface the new active one [ 201.656314][T10252] ip6gre1: entered promiscuous mode [ 201.658205][T10252] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 201.701269][T10257] veth0_macvtap: left promiscuous mode [ 201.701497][T10257] macvtap0: entered allmulticast mode [ 201.816681][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.944563][T10270] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 201.944588][T10270] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1115'. [ 202.343160][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1119'. [ 202.389446][T10277] netlink: 'syz.1.1118': attribute type 4 has an invalid length. [ 202.451302][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.451538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.613929][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.614819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.879650][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.095162][T10324] netlink: 'syz.3.1128': attribute type 1 has an invalid length. [ 203.228619][T10324] bond6: entered promiscuous mode [ 203.239590][T10324] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.457765][T10334] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.487325][T10334] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 203.487352][T10334] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 203.524100][T10334] bond6: (slave ip6gre1): making interface the new active one [ 203.524127][T10334] ip6gre1: entered promiscuous mode [ 203.529297][T10334] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 203.750804][T10354] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1134'. [ 203.850636][T10359] vcan0: tx address claim with broadcast sa [ 203.936525][ T5622] block nbd0: Receive control failed (result -32) [ 203.937391][ T5628] block nbd0: Receive control failed (result -32) [ 204.026326][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1139'. [ 204.225237][T10371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1140'. [ 204.296011][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 204.409234][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 204.866885][T10401] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 204.940977][ T5614] net_ratelimit: 3 callbacks suppressed [ 204.940998][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.056269][T10411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'. [ 205.191720][T10408] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1151'. [ 205.191749][T10408] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1151'. [ 205.384398][T10420] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 205.388292][T10420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.449452][T10427] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1159'. [ 205.449479][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1159'. [ 205.501400][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.501718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.547297][T10434] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 205.556144][T10432] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 205.726466][T10434] 8021q: adding VLAN 0 to HW filter on device bond8 [ 205.813782][ T1366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.889431][T10442] bond8: (slave geneve3): making interface the new active one [ 205.913142][T10442] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 205.983789][T10461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.984740][T10461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.985372][T10461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.986118][T10461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.986516][T10461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.150384][T10469] atomic_op ffff888078adf9e0 conn xmit_atomic 0000000000000000 [ 206.287979][T10473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 206.303328][T10473] batman_adv: batadv0: Adding interface: gretap1 [ 206.303349][T10473] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.331868][T10473] batman_adv: batadv0: Interface activated: gretap1 [ 206.624289][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 206.624334][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 206.624364][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 206.930178][T10498] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 207.142978][T10498] 8021q: adding VLAN 0 to HW filter on device bond9 [ 207.216297][T10504] bond9: (slave geneve4): making interface the new active one [ 207.244538][T10504] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 207.329996][ T52] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 207.409180][T10515] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 207.409279][T10515] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 207.731096][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.070081][T10551] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 208.229427][T10557] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 208.429182][T10557] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.495354][T10562] bond7: (slave geneve2): making interface the new active one [ 208.499051][T10562] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 208.528532][T10565] hsr_slave_0: left promiscuous mode [ 208.540854][T10565] hsr_slave_1: left promiscuous mode [ 209.412656][T10615] netlink: 'syz.2.1207': attribute type 8 has an invalid length. [ 209.724250][T10627] __nla_validate_parse: 27 callbacks suppressed [ 209.724274][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 209.834366][T10628] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 210.070270][T10628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.236397][T10635] bond3: (slave geneve2): making interface the new active one [ 210.252847][ T5734] net_ratelimit: 11 callbacks suppressed [ 210.252870][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.289281][T10635] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 210.820197][T10667] veth1_macvtap: left promiscuous mode [ 210.896616][T10670] netlink: 'syz.1.1219': attribute type 1 has an invalid length. [ 210.896641][T10670] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1219'. [ 210.897611][T10670] netlink: 'syz.1.1219': attribute type 3 has an invalid length. [ 210.897630][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 210.939916][ T1366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.117114][T10678] netlink: 'syz.3.1222': attribute type 21 has an invalid length. [ 211.117139][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 211.117538][T10678] netlink: 'syz.3.1222': attribute type 21 has an invalid length. [ 211.117557][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 211.210538][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 211.331687][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.404377][T10691] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 211.483532][T10692] tunl0: entered promiscuous mode [ 211.488118][T10692] netlink: 'syz.1.1226': attribute type 3 has an invalid length. [ 211.488141][T10692] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1226'. [ 211.488235][T10686] netlink: 'syz.1.1226': attribute type 3 has an invalid length. [ 211.488250][T10686] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1226'. [ 211.549700][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 211.584266][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.585943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.657111][T10691] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.671400][T10702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1230'. [ 211.690447][T10693] bond6: (slave geneve2): making interface the new active one [ 211.698822][T10693] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 211.747971][T10696] vcan1: entered allmulticast mode [ 211.778440][T10697] hsr_slave_0: left promiscuous mode [ 211.808223][T10697] hsr_slave_1: left promiscuous mode [ 211.989357][T10707] netlink: 'syz.3.1232': attribute type 16 has an invalid length. [ 212.219556][ T7430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.219807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.374151][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.522903][T10737] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 212.589465][T10741] rdma_rxe: rxe_newlink: failed to add wg1 [ 212.660238][T10737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.699101][T10743] bond3: (slave geneve4): making interface the new active one [ 212.700672][T10743] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 212.896267][T10756] netlink: 'syz.1.1247': attribute type 17 has an invalid length. [ 213.017232][T10765] C: renamed from lo [ 213.020358][T10765] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.036535][T10765] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 214.142547][T10792] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 214.145098][T10773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.147625][T10792] xt_hashlimit: size too large, truncated to 1048576 [ 214.273818][T10794] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.390238][T10798] bond8: (slave geneve3): making interface the new active one [ 214.444432][T10798] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 214.556741][T10809] sctp: [Deprecated]: syz.3.1260 (pid 10809) Use of int in max_burst socket option. [ 214.556741][T10809] Use struct sctp_assoc_value instead [ 215.366227][T10840] __nla_validate_parse: 15 callbacks suppressed [ 215.366248][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 215.366264][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 215.462726][T10836] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.492542][ T5812] net_ratelimit: 293 callbacks suppressed [ 215.492562][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.521952][T10842] bond7: (slave geneve3): making interface the new active one [ 215.530258][T10842] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 215.861462][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 215.922114][T10849] bond10: entered promiscuous mode [ 215.929497][T10849] 8021q: adding VLAN 0 to HW filter on device bond10 [ 216.035668][T10853] bond10: (slave bridge5): making interface the new active one [ 216.035697][T10853] bridge5: entered promiscuous mode [ 216.037061][T10853] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 216.084361][T10875] xt_ecn: cannot match TCP bits for non-tcp packets [ 216.178402][T10874] veth7: entered allmulticast mode [ 216.428522][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 216.539916][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.562444][T10900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1284'. [ 216.566503][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 216.644371][T10903] validate_nla: 9 callbacks suppressed [ 216.644394][T10903] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 216.694996][ T1374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.753165][T10903] 8021q: adding VLAN 0 to HW filter on device bond8 [ 216.825987][T10907] bond8: (slave geneve4): making interface the new active one [ 216.829580][T10907] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 216.857312][T10906] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1289'. [ 216.926295][T10918] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1291'. [ 216.997294][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1292'. [ 217.076816][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 217.218418][T10931] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 217.580664][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.753426][T10952] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 217.811229][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.811428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.895470][T10631] wlan1: Trigger new scan to find an IBSS to join [ 217.920121][T10952] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.048533][T10955] bond4: (slave geneve3): making interface the new active one [ 218.074178][T10955] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 218.583050][T10982] netlink: 'syz.3.1313': attribute type 5 has an invalid length. [ 218.589753][T10983] netlink: 'syz.3.1313': attribute type 5 has an invalid length. [ 218.611930][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.006612][T10990] ip_tables: iptables: counters copy to user failed while replacing table [ 219.060857][T10993] openvswitch: netlink: Tunnel attr 4364 out of range max 16 [ 219.172963][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.287849][T11005] netlink: 'syz.2.1321': attribute type 12 has an invalid length. [ 219.320483][T11005] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 219.427243][T11010] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 219.646893][T11010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.661585][T11015] netlink: 'syz.4.1323': attribute type 17 has an invalid length. [ 219.753999][T11011] bond4: (slave geneve5): making interface the new active one [ 219.772821][T11011] bond4: (slave geneve5): Enslaving as an active interface with an up link [ 219.857394][T11011] syz.1.1322 (11011) used greatest stack depth: 16448 bytes left [ 220.414412][T11047] __nla_validate_parse: 13 callbacks suppressed [ 220.414443][T11047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 220.460304][T11047] veth8: entered promiscuous mode [ 220.460332][T11047] veth8: entered allmulticast mode [ 220.556033][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 220.556057][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 220.590585][T11052] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 220.636200][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 220.636226][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 220.637005][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 220.637025][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 220.693309][ T988] net_ratelimit: 6 callbacks suppressed [ 220.693331][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.734103][T11062] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 220.775793][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.793130][T11063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1336'. [ 220.851347][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.851587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.853831][ T1366] wlan1: Trigger new scan to find an IBSS to join [ 220.857017][ T1366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.904215][T11062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.919262][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.949728][T11069] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 221.060713][T11069] 8021q: adding VLAN 0 to HW filter on device bond11 [ 221.103506][T11071] bond11: (slave geneve5): making interface the new active one [ 221.106038][T11071] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 221.257867][T11073] openvswitch: netlink: Duplicate or invalid key (type 0). [ 221.359256][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 221.653456][T11091] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 221.731245][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.750040][ T1366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.763625][ T1374] wlan1: Creating new IBSS network, BSSID 96:c6:c2:1d:f5:d7 [ 221.826994][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.886435][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1350'. [ 222.389134][T11119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.389155][T11119] IPv6: NLM_F_CREATE should be set when creating new route [ 222.943546][T11143] netlink: 'syz.0.1360': attribute type 1 has an invalid length. [ 223.196830][T11148] FAULT_INJECTION: forcing a failure. [ 223.196830][T11148] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 223.196867][T11148] CPU: 0 UID: 0 PID: 11148 Comm: syz.4.1362 Not tainted syzkaller #0 PREEMPT(full) [ 223.196892][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 223.196907][T11148] Call Trace: [ 223.196919][T11148] [ 223.196930][T11148] dump_stack_lvl+0xe8/0x150 [ 223.196968][T11148] should_fail_ex+0x410/0x560 [ 223.197000][T11148] _copy_to_user+0x31/0xb0 [ 223.197031][T11148] simple_read_from_buffer+0xe1/0x170 [ 223.197070][T11148] proc_fail_nth_read+0x1bb/0x230 [ 223.197105][T11148] ? common_file_perm+0x20e/0x2b0 [ 223.197137][T11148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.197176][T11148] ? rw_verify_area+0x24a/0x4c0 [ 223.197212][T11148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.197248][T11148] vfs_read+0x213/0xa80 [ 223.197287][T11148] ? __pfx___mutex_lock+0x10/0x10 [ 223.197318][T11148] ? __pfx_vfs_read+0x10/0x10 [ 223.197354][T11148] ? __fget_files+0x2a/0x420 [ 223.197390][T11148] ? __fget_files+0x3a2/0x420 [ 223.197420][T11148] ? __fget_files+0x2a/0x420 [ 223.197461][T11148] ksys_read+0x150/0x270 [ 223.197498][T11148] ? __pfx_ksys_read+0x10/0x10 [ 223.197544][T11148] do_syscall_64+0x166/0x520 [ 223.197571][T11148] ? trace_irq_disable+0x3b/0x140 [ 223.197602][T11148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.197626][T11148] ? clear_bhb_loop+0x70/0xc0 [ 223.197654][T11148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.197677][T11148] RIP: 0033:0x7f248f35e98e [ 223.197698][T11148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.197717][T11148] RSP: 002b:00007f2490344fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.197742][T11148] RAX: ffffffffffffffda RBX: 00007f24903456c0 RCX: 00007f248f35e98e [ 223.197759][T11148] RDX: 000000000000000f RSI: 00007f24903450a0 RDI: 0000000000000005 [ 223.197774][T11148] RBP: 00007f2490345090 R08: 0000000000000000 R09: 0000000000000000 [ 223.197788][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.197802][T11148] R13: 00007f248f626038 R14: 00007f248f625fa0 R15: 00007fffe2789408 [ 223.197839][T11148] [ 223.740084][T11173] tipc: Enabled bearer , priority 10 [ 223.751907][T11173] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 224.003675][T11176] bond12 (unregistering): Released all slaves [ 225.390369][T11241] Cannot find add_set index 2 as target [ 225.626293][T11261] __nla_validate_parse: 12 callbacks suppressed [ 225.626317][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 225.685918][T11263] lo: entered promiscuous mode [ 225.686140][T11263] netlink: 'syz.0.1395': attribute type 2 has an invalid length. [ 225.739024][T11265] net_ratelimit: 18 callbacks suppressed [ 225.739047][T11265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.861813][T11265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1394'. [ 225.892402][ T5812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.033924][T11287] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 226.210263][T11291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.233050][T11291] team0: Port device bond5 added [ 226.378599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.407645][ T1366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.621835][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 226.656025][T11310] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 226.931744][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.935220][ T7443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.935424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.938505][ T1366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.178244][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 227.178273][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 227.178327][T11331] netlink: 'syz.1.1413': attribute type 3 has an invalid length. [ 227.386813][T11334] ip6tnl1: entered promiscuous mode [ 227.386840][T11334] ip6tnl1: entered allmulticast mode [ 227.577357][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.579247][T11337] lo speed is unknown, defaulting to 1000 [ 227.688965][T11347] ipt_REJECT: ECHOREPLY no longer supported. [ 227.919819][T11360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1421'. [ 228.507898][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 228.740420][T11374] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1426'. [ 229.139712][T11407] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 229.139795][T11407] gretap1: entered promiscuous mode [ 229.139813][T11407] gretap1: entered allmulticast mode [ 229.488076][T11419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 229.637366][T11423] erspan0: entered promiscuous mode [ 229.787853][T11433] netlink: 'syz.2.1443': attribute type 21 has an invalid length. [ 229.787948][T11433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1443'. [ 230.034359][T11443] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 230.589908][T11470] 8021q: adding VLAN 0 to HW filter on device bond9 [ 230.659275][T11479] sctp: [Deprecated]: syz.4.1455 (pid 11479) Use of int in max_burst socket option. [ 230.659275][T11479] Use struct sctp_assoc_value instead [ 230.726936][T11483] __nla_validate_parse: 1 callbacks suppressed [ 230.726958][T11483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1454'. [ 230.791259][ T970] net_ratelimit: 9 callbacks suppressed [ 230.791280][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.927657][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.963405][T10631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.989026][T11492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.070381][T11492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.096708][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.159601][T11492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.177338][T11492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.178072][T11492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.208976][T11489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.338269][T11497] nbd1: detected capacity change from 0 to 63 [ 231.349193][ T52] block nbd1: Receive control failed (result -32) [ 231.364639][ T26] block nbd1: Dead connection, failed to find a fallback [ 231.364675][ T26] block nbd1: shutting down sockets [ 231.364783][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.365402][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.370735][ T26] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.370768][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 231.371156][ T26] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.371186][ T26] Buffer I/O error on dev nbd1, logical block 2, async page read [ 231.437757][ T26] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.437797][ T26] Buffer I/O error on dev nbd1, logical block 3, async page read [ 231.438286][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.439407][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.439551][ T26] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.439581][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 231.439704][ T26] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.439818][ T26] Buffer I/O error on dev nbd1, logical block 2, async page read [ 231.439940][ T26] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.439968][ T26] Buffer I/O error on dev nbd1, logical block 3, async page read [ 231.440090][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.440117][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.440216][ T26] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.440258][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 231.485516][ T7967] ldm_validate_partition_table(): Disk read failed. [ 231.529441][ T7967] Dev nbd1: unable to read RDB block 0 [ 231.548825][ T7967] nbd1: unable to read partition table [ 231.657085][ T7967] ldm_validate_partition_table(): Disk read failed. [ 231.659364][ T7967] Dev nbd1: unable to read RDB block 0 [ 231.672856][ T7967] nbd1: unable to read partition table [ 231.891740][T11508] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1464'. [ 232.066127][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 232.066166][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1469'. [ 232.068115][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 232.068147][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1469'. [ 232.448860][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 232.601537][T11550] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1477'. [ 232.907518][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 233.249671][T11573] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1482'. [ 234.594623][T11647] syzkaller1: entered promiscuous mode [ 234.594652][T11647] syzkaller1: entered allmulticast mode [ 235.893812][T10632] net_ratelimit: 16 callbacks suppressed [ 235.893835][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.894027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.113809][T11679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.146694][T11710] __nla_validate_parse: 7 callbacks suppressed [ 236.146722][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1514'. [ 236.155765][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 236.296597][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.534552][ T1366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.557634][T11724] netlink: 'syz.3.1518': attribute type 4 has an invalid length. [ 236.632757][ T1366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.659087][T11724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.847735][T11736] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 236.849517][T11736] team0: Device ipvlan2 is already an upper device of the team interface [ 237.092748][T10631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.185715][T11741] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1523'. [ 237.215188][T11758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1527'. [ 237.333518][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.758263][T10631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.840542][T11785] ip_tables: iptables: counters copy to user failed while replacing table [ 237.856464][T11785] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1536'. [ 238.020542][T11796] sctp: [Deprecated]: syz.0.1537 (pid 11796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.020542][T11796] Use struct sctp_sack_info instead [ 238.421594][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 238.422767][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 238.422812][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 238.509503][T11817] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 238.936235][T11840] netlink: 'syz.4.1550': attribute type 11 has an invalid length. [ 238.936260][T11840] netlink: 'syz.4.1550': attribute type 4 has an invalid length. [ 238.936276][T11840] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1550'. [ 239.304457][T11849] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 239.611889][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'. [ 239.703267][T11876] sctp: [Deprecated]: syz.1.1559 (pid 11876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.703267][T11876] Use struct sctp_sack_info instead [ 240.011463][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 3484 [ 240.122051][T11895] netlink: 'syz.4.1565': attribute type 3 has an invalid length. [ 240.122076][T11895] netlink: 'syz.4.1565': attribute type 2 has an invalid length. [ 240.373282][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.758992][T11927] geneve5: entered promiscuous mode [ 240.891340][T10631] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 60227 - 0 [ 240.892549][ T1366] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 60227 - 0 [ 240.892623][ T1366] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 60227 - 0 [ 240.892754][ T1366] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 60227 - 0 [ 241.114708][ T6290] net_ratelimit: 10 callbacks suppressed [ 241.114730][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.169628][T11946] __nla_validate_parse: 5 callbacks suppressed [ 241.169650][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 241.505571][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.575535][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.663532][ T1374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.663742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.763376][T11973] netlink: 'syz.2.1583': attribute type 21 has an invalid length. [ 241.959197][T11987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1589'. [ 242.214090][T10631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.291170][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.538330][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.545416][T12013] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 242.556617][T12011] syzkaller1: entered promiscuous mode [ 242.556688][T12011] syzkaller1: entered allmulticast mode [ 242.889386][T12013] 8021q: adding VLAN 0 to HW filter on device bond10 [ 242.935406][ T1374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.016338][T12017] bond11: Unable to set up delay as MII monitoring is disabled [ 243.020235][T12017] bond11 (unregistering): Released all slaves [ 243.128028][T12027] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1600'. [ 243.313182][ T1374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.352916][T12017] bond11: Unable to set up delay as MII monitoring is disabled [ 243.361331][T12017] bond11 (unregistering): Released all slaves [ 243.460468][T12052] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1605'. [ 243.612054][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.163767][T12078] netlink: 'syz.0.1612': attribute type 10 has an invalid length. [ 244.597168][T12099] netlink: 1748 bytes leftover after parsing attributes in process `syz.0.1618'. [ 244.745093][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1621'. [ 245.006943][T12118] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1625'. [ 245.008710][T12118] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1625'. [ 245.230817][T12125] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1626'. [ 245.678702][T12147] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 245.915734][T12152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1635'. [ 245.936763][T12151] netlink: 'syz.4.1636': attribute type 8 has an invalid length. [ 245.936790][T12151] sch_fq: defrate 0 ignored. [ 246.229271][T12168] net_ratelimit: 6 callbacks suppressed [ 246.229292][T12168] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.652642][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.750556][T12192] __nla_validate_parse: 2 callbacks suppressed [ 246.750577][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'. [ 246.769567][T12190] netlink: 'syz.4.1647': attribute type 3 has an invalid length. [ 246.779302][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.791944][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'. [ 247.133506][T12212] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:128 [ 247.149643][T12213] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1658'. [ 247.168452][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 247.237199][T12215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1657'. [ 247.413817][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.414063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.414234][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.520656][T12231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1661'. [ 247.715560][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 247.738663][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 247.768367][T12237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 247.781693][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.811976][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.907467][T12240] block nbd0: Unsupported socket: should be TCP or UNIX. [ 247.912958][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.932729][T12240] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 247.979043][T12251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1670'. [ 247.983097][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.521410][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.800598][T12296] syzkaller1: entered promiscuous mode [ 248.800623][T12296] syzkaller1: entered allmulticast mode [ 250.384893][T12346] tipc: Enabled bearer , priority 0 [ 250.559035][T12340] ieee80211 phy32: Failed to add default virtual iface [ 250.617598][T12372] syzkaller0: entered promiscuous mode [ 250.617629][T12372] syzkaller0: entered allmulticast mode [ 250.618489][T12372] tipc: Resetting bearer [ 250.822725][T12345] tipc: Resetting bearer [ 251.200210][T12390] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.251276][ T6631] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.458774][T12406] netlink: 'syz.4.1708': attribute type 83 has an invalid length. [ 251.976684][ T5734] net_ratelimit: 9 callbacks suppressed [ 251.976707][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.224831][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.455143][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.461638][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.461861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.016354][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.174110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.190212][ T6631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.281277][T12345] tipc: Disabling bearer [ 253.285844][T12383] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 253.345291][T10631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.406668][ T7443] tipc: Node number set to 3978483335 [ 254.047789][T12439] __nla_validate_parse: 23 callbacks suppressed [ 254.047814][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1721'. [ 254.074649][T12443] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1719'. [ 254.127171][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'. [ 254.190455][T12454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'. [ 254.203595][T12460] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1719'. [ 254.452823][ T6644] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.795506][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 254.963657][T12490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 255.386607][T12512] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 255.406178][T12516] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 255.497705][T12519] netlink: 'syz.0.1742': attribute type 12 has an invalid length. [ 255.512073][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 255.625496][T12529] netlink: 'syz.3.1743': attribute type 1 has an invalid length. [ 255.629308][T12512] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.679480][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 255.727551][T12513] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 255.745576][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.838542][T12534] ipt_REJECT: TCP_RESET invalid for non-tcp [ 255.968959][T12538] netlink: 'syz.4.1748': attribute type 2 has an invalid length. [ 256.087917][T12538] : entered promiscuous mode [ 256.131500][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 256.358671][T12555] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 256.359574][T12556] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 256.488106][T12555] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.516853][T12553] syzkaller0: entered promiscuous mode [ 256.516882][T12553] syzkaller0: entered allmulticast mode [ 256.768931][T12573] xt_recent: Unsupported userspace flags (000000b1) [ 257.171738][ T988] net_ratelimit: 10 callbacks suppressed [ 257.171761][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.182347][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1759'. [ 257.403338][T12605] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 257.652339][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.654062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.655159][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.736670][T12613] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 257.749835][T12613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.777048][T12617] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 257.790317][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.902027][T12613] bond11 (unregistering): Released all slaves [ 258.212737][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.334420][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.416609][ T1374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.416839][ T1374] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.443102][ T5711] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.445611][T12645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.763258][T12654] ip_tables: iptables: counters copy to user failed while replacing table [ 258.785739][ T5711] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.078098][T12666] __nla_validate_parse: 7 callbacks suppressed [ 259.078121][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 259.102889][T12666] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1779'. [ 259.197077][T12677] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 259.261157][ T7443] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.330206][T12680] Bluetooth: hci0: unsupported parameter 5161 [ 259.330229][T12680] Bluetooth: hci0: unsupported parameter 8192 [ 259.330244][T12680] Bluetooth: hci0: unsupported parameter 5161 [ 259.330258][T12680] Bluetooth: hci0: unsupported parameter 8192 [ 259.418232][T12677] 8021q: adding VLAN 0 to HW filter on device bond11 [ 259.418858][T12681] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 259.451967][T12681] bond11: entered allmulticast mode [ 259.481442][T12683] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 259.803275][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1787'. [ 260.159007][T12720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1793'. [ 260.187251][T12722] netlink: 'syz.1.1794': attribute type 1 has an invalid length. [ 260.248063][T12722] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.305427][T12729] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 260.354592][T12726] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20004 [ 260.363832][T12722] bond7: (slave geneve6): making interface the new active one [ 260.379471][T12722] bond7: (slave geneve6): Enslaving as an active interface with an up link [ 260.417476][T12732] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 260.604936][T12742] Bluetooth: hci0: unsupported parameter 5135 [ 260.604961][T12742] Bluetooth: hci0: unsupported parameter 8192 [ 260.604975][T12742] Bluetooth: hci0: unsupported parameter 5135 [ 260.604989][T12742] Bluetooth: hci0: unsupported parameter 8192 [ 260.663819][T12744] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1803'. [ 260.739262][T12732] 8021q: adding VLAN 0 to HW filter on device bond8 [ 260.759827][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 260.773154][T12735] bond8: (slave geneve4): making interface the new active one [ 260.775082][T12735] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 260.810786][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 260.840176][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 260.943390][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 262.211129][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.213361][ T5614] net_ratelimit: 17 callbacks suppressed [ 262.213378][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.214647][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.374142][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.561692][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.861688][ T988] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec [ 263.312811][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.411961][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.411995][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.412589][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.412988][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.413167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.047534][T12765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.325025][T12816] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 264.396725][T12822] netlink: 'syz.4.1819': attribute type 2 has an invalid length. [ 264.488249][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1820'. [ 264.544507][T12816] 8021q: adding VLAN 0 to HW filter on device bond14 [ 264.622886][T12821] bond14: (slave geneve6): making interface the new active one [ 264.629692][T12821] bond14: (slave geneve6): Enslaving as an active interface with an up link [ 264.737777][T12838] netlink: 'syz.3.1821': attribute type 49 has an invalid length. [ 264.764191][T12824] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 265.055147][T12838] ip6gretap0: entered promiscuous mode [ 265.055172][T12838] ip6gretap0: entered allmulticast mode [ 265.381568][T12861] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 265.472768][ T988] lo speed is unknown, defaulting to 1000 [ 265.472814][ T988] syz2: Port: 1 Link DOWN [ 265.991196][T12892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1833'. [ 266.151593][T12900] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 266.276530][T12905] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 266.350520][T12905] netlink: 'syz.3.1838': attribute type 21 has an invalid length. [ 266.350550][T12905] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.350650][T12905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.350662][T12905] IPv6: NLM_F_CREATE should be set when creating new route [ 266.350709][T12905] IPv6: NLM_F_CREATE should be set when creating new route [ 266.350732][T12905] IPv6: NLM_F_CREATE should be set when creating new route [ 266.378692][T12905] netlink: 'syz.3.1838': attribute type 7 has an invalid length. [ 266.378759][T12905] netlink: 'syz.3.1838': attribute type 8 has an invalid length. [ 266.427948][T12911] batadv_slave_1: entered promiscuous mode [ 266.450709][T12908] batadv_slave_1: left promiscuous mode [ 266.736348][ T5622] block nbd2: Receive control failed (result -32) [ 266.738559][ T52] block nbd2: Receive control failed (result -32) [ 266.884637][T12931] netlink: 'syz.1.1845': attribute type 64 has an invalid length. [ 266.888743][T12931] netlink: 'syz.1.1845': attribute type 64 has an invalid length. [ 267.326934][T12941] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 267.360247][T12941] bond10 (unregistering): Released all slaves [ 267.415695][T12959] netlink: 'syz.2.1852': attribute type 16 has an invalid length. [ 267.415720][T12959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1852'. [ 267.587564][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'. [ 267.587588][T12946] tc_dump_action: action bad kind [ 267.587767][T12949] ipvlan0: left allmulticast mode [ 267.587788][T12949] veth0_vlan: left allmulticast mode [ 267.643737][T12949] team0: Device ipvlan0 failed to register rx_handler [ 267.659179][ T5734] net_ratelimit: 18 callbacks suppressed [ 267.659233][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.758882][T12968] netlink: 'syz.1.1857': attribute type 2 has an invalid length. [ 267.768052][ T6290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.954017][T12974] bond9: entered promiscuous mode [ 267.954455][T12974] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.006944][T12981] bond9: (slave bridge1): making interface the new active one [ 268.006973][T12981] bridge1: entered promiscuous mode [ 268.007746][T12981] bond9: (slave bridge1): Enslaving as an active interface with an up link [ 268.053662][T12986] syzkaller0: entered promiscuous mode [ 268.053689][T12986] syzkaller0: entered allmulticast mode [ 268.194657][T12983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1860'. [ 268.194695][T12983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1860'. [ 268.460521][T13005] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 268.539441][T13012] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 268.566216][T13012] IPVS: set_ctl: invalid protocol: 135 172.30.1.3:20003 [ 268.842961][T13017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.911063][T13024] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1870'. [ 269.020640][T13017] veth1_macvtap: entered promiscuous mode [ 269.033557][T13017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.036560][T13017] veth1_vlan: entered promiscuous mode [ 269.057747][T13017] veth0_to_team: entered promiscuous mode [ 269.067369][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'. [ 269.095554][T13017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.097780][T13017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.124165][T13017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.163279][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1870'. [ 269.811169][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.866924][T13057] validate_nla: 3 callbacks suppressed [ 269.866949][T13057] netlink: 'syz.4.1880': attribute type 1 has an invalid length. [ 269.866965][T13057] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1880'. [ 269.924331][T13059] tipc: Enabling of bearer rejected, failed to enable media [ 269.930454][T13059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.104428][T13069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1888'. [ 270.168548][T13077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1887'. [ 270.258496][T13079] bond0: option ad_select: unable to set because the bond device is up [ 270.367173][T13074] ip_tables: iptables: counters copy to user failed while replacing table [ 270.788603][T13103] netlink: 'syz.2.1898': attribute type 1 has an invalid length. [ 270.788632][T13103] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1898'. [ 270.918401][T13109] syzkaller0: left promiscuous mode [ 270.918427][T13109] syzkaller0: left allmulticast mode [ 271.829242][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 272.559340][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 272.559710][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 272.830650][T13193] nbd: must specify at least one socket [ 272.853598][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 273.133812][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'. [ 273.383570][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 273.423493][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 273.578081][T13228] netlink: 'syz.2.1931': attribute type 1 has an invalid length. [ 273.974628][T13248] xt_CONNSECMARK: invalid mode: 0 [ 274.589542][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589571][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589586][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589600][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589614][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589628][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589642][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589656][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589670][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589684][T13280] tc action pedit unable to extract header offset for header type (0x5) [ 274.589712][T13280] 0: reclassify loop, rule prio 0, protocol 800 [ 274.918031][T13288] netlink: 'syz.0.1949': attribute type 1 has an invalid length. [ 274.918058][T13288] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.1949'. [ 274.942091][T13290] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 275.127732][T13292] pim6reg: entered allmulticast mode [ 275.167796][T13292] openvswitch: netlink: Message has 8 unknown bytes. [ 275.463446][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'. [ 275.738375][T13332] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 275.738399][T13332] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1958'. [ 275.761039][T13330] sctp: [Deprecated]: syz.4.1958 (pid 13330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.761039][T13330] Use struct sctp_sack_info instead [ 276.289844][T13341] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1961'. [ 276.289874][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'. [ 276.289892][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'. [ 276.746395][T13347] bond12 (unregistering): Released all slaves [ 276.926492][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'. [ 276.928169][T13361] netlink: 'syz.2.1966': attribute type 2 has an invalid length. [ 277.125394][T13361] : entered promiscuous mode [ 277.317775][T13374] syzkaller0: entered promiscuous mode [ 277.317802][T13374] syzkaller0: entered allmulticast mode [ 277.939100][T13414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.939124][T13414] IPv6: NLM_F_CREATE should be set when creating new route [ 278.290210][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1983'. [ 278.438620][T13429] netlink: 'syz.0.1985': attribute type 32 has an invalid length. [ 278.438646][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 278.513495][T13438] netlink: 'syz.0.1985': attribute type 32 has an invalid length. [ 278.513519][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 278.519185][T13429] bond10: option coupled_control: invalid value (192) [ 278.554787][T13429] bond10 (unregistering): Released all slaves [ 278.887255][T13438] bond10: option coupled_control: invalid value (192) [ 278.901663][T13438] bond10 (unregistering): Released all slaves [ 278.935368][T13440] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 279.311753][T13468] netlink: 'syz.4.1992': attribute type 2 has an invalid length. [ 279.532666][T13472] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 279.797509][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.959240][T13483] __nla_validate_parse: 4 callbacks suppressed [ 279.959263][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 279.959281][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'. [ 279.968867][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 279.968981][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.156123][T13498] Cannot find del_set index 2 as target [ 280.540576][T13512] x_tables: duplicate underflow at hook 1 [ 280.658827][T13517] bond2: (slave ip6gre1): Releasing backup interface [ 280.658858][T13517] ip6gre1: left promiscuous mode [ 280.703109][T13517] batman_adv: batadv0: Interface deactivated: gretap1 [ 280.703136][T13517] batman_adv: batadv0: Removing interface: gretap1 [ 280.740710][T13517] bond3: (slave geneve4): Releasing active interface [ 280.767820][T13524] ip_tables: iptables: counters copy to user failed while replacing table [ 280.769352][T13517] bond4: (slave geneve5): Releasing active interface [ 280.806938][T13517] bond6: (slave veth7): Releasing backup interface [ 280.823909][T13517] bond7: (slave geneve6): Releasing active interface [ 280.842801][T13523] syzkaller0: entered promiscuous mode [ 280.842827][T13523] syzkaller0: entered allmulticast mode [ 281.091195][T13537] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2012'. [ 281.294070][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2016'. [ 281.295839][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2015'. [ 281.359750][T13545] netlink: 'syz.2.2015': attribute type 2 has an invalid length. [ 281.359774][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2015'. [ 281.518222][T13555] raw_sendmsg: syz.3.2017 forgot to set AF_INET. Fix it! [ 281.986553][T13574] syzkaller1: entered promiscuous mode [ 281.986579][T13574] syzkaller1: entered allmulticast mode [ 282.133114][T13590] xt_l2tp: v2 doesn't support IP mode [ 282.214228][T13593] netlink: 'syz.3.2029': attribute type 1 has an invalid length. [ 282.302237][T13599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.307336][T13596] netlink: 'syz.4.2031': attribute type 4 has an invalid length. [ 282.449318][T13604] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2033'. [ 282.521235][T13606] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 282.687115][T13606] 8021q: adding VLAN 0 to HW filter on device bond10 [ 282.745583][T13619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2037'. [ 282.745622][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2037'. [ 282.826596][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.864956][T13622] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 282.864988][T13622] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 282.909643][T13602] syzkaller0: entered promiscuous mode [ 282.909670][T13602] syzkaller0: entered allmulticast mode [ 283.258961][ T1374] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.489213][T13640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.828884][T13650] openvswitch: netlink: Flow key attr not present in new flow. [ 283.889837][T13656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.181095][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.926716][T13675] __nla_validate_parse: 1 callbacks suppressed [ 285.926740][T13675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2049'. [ 285.989846][T13673] Bluetooth: hci0: unsupported parameter 5161 [ 285.989871][T13673] Bluetooth: hci0: unsupported parameter 8192 [ 285.989885][T13673] Bluetooth: hci0: unsupported parameter 5161 [ 285.989899][T13673] Bluetooth: hci0: unsupported parameter 8192 [ 285.996969][T13672] Bluetooth: hci0: unsupported parameter 5161 [ 285.997032][T13672] Bluetooth: hci0: unsupported parameter 8192 [ 285.997073][T13672] Bluetooth: hci0: unsupported parameter 5161 [ 285.997100][T13672] Bluetooth: hci0: unsupported parameter 8192 [ 286.115899][T13682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2053'. [ 286.399425][T13696] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2055'. [ 286.464311][ T1374] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.501854][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 286.503595][T13704] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2058'. [ 286.571209][T13706] netlink: 'syz.1.2061': attribute type 2 has an invalid length. [ 286.800555][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2064'. [ 286.829953][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 287.457169][T13759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2073'. [ 287.746180][T13768] IPv6: addrconf: prefix option has invalid lifetime [ 287.948365][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 288.124095][T13785] tun0: tun_chr_ioctl cmd 1074025675 [ 288.124122][T13785] tun0: persist enabled [ 288.155704][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2079'. [ 288.607050][T13802] veth9: entered promiscuous mode [ 288.607077][T13802] veth9: entered allmulticast mode [ 288.685478][T13811] veth11: entered promiscuous mode [ 288.685504][T13811] veth11: entered allmulticast mode [ 289.278371][T13848] macvlan0: entered promiscuous mode [ 289.509546][T13856] vlan2: entered promiscuous mode [ 289.593631][T13858] Cannot find add_set index 4 as target [ 289.618957][T13860] netlink: 'syz.1.2099': attribute type 24 has an invalid length. [ 292.067440][T13836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.337308][T13905] __nla_validate_parse: 1 callbacks suppressed [ 292.337331][T13905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2110'. [ 292.339309][T13905] netlink: 'syz.3.2110': attribute type 97 has an invalid length. [ 292.339328][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 292.339345][T13905] netlink: 'syz.3.2110': attribute type 97 has an invalid length. [ 292.339359][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 292.408224][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2111'. [ 292.408250][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2111'. [ 292.408265][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2111'. [ 292.408280][T13907] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2111'. [ 292.408296][T13907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2111'. [ 292.707761][T13921] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2114'. [ 292.730082][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 292.956697][T13930] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 293.062254][T13930] 8021q: adding VLAN 0 to HW filter on device bond11 [ 293.097847][T13934] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 293.106519][T13934] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 293.166381][T13935] bond11: (slave geneve6): making interface the new active one [ 293.168884][T13935] bond11: (slave geneve6): Enslaving as an active interface with an up link [ 293.304075][T13934] bond12: entered promiscuous mode [ 293.304629][T13934] 8021q: adding VLAN 0 to HW filter on device bond12 [ 294.327966][T13989] netlink: 'syz.3.2129': attribute type 1 has an invalid length. [ 296.578820][T14014] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 296.672770][T14014] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.694974][T14017] bond12: (slave geneve7): making interface the new active one [ 296.699033][T14017] bond12: (slave geneve7): Enslaving as an active interface with an up link [ 296.857842][T14025] tipc: Enabling of bearer rejected, failed to enable media [ 296.879672][T14029] tipc: Enabling of bearer rejected, failed to enable media [ 297.248456][T14046] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 297.474967][T14053] __nla_validate_parse: 7 callbacks suppressed [ 297.474992][T14053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2146'. [ 297.475014][T14053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2146'. [ 297.789761][T14067] netlink: 'syz.3.2151': attribute type 1 has an invalid length. [ 297.879142][T14067] 8021q: adding VLAN 0 to HW filter on device bond13 [ 297.936552][T14071] bond13: (slave geneve8): making interface the new active one [ 297.939319][T14071] bond13: (slave geneve8): Enslaving as an active interface with an up link [ 298.069765][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 298.404101][T14088] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 298.497101][T14088] bond8: entered promiscuous mode [ 298.497574][T14088] 8021q: adding VLAN 0 to HW filter on device bond8 [ 298.574667][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 298.609224][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 298.797202][T14113] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 298.892119][T14113] 8021q: adding VLAN 0 to HW filter on device bond10 [ 299.003343][T14120] bond10: (slave geneve5): making interface the new active one [ 299.090113][T14120] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 299.409649][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 299.409690][T14132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 299.529539][T14131] IPVS: ip_vs_add_dest(): server weight less than zero [ 299.616401][T14142] IPVS: ip_vs_add_dest(): server weight less than zero [ 300.132745][T14154] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2175'. [ 301.211596][T14180] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 301.347387][T14180] 8021q: adding VLAN 0 to HW filter on device bond16 [ 301.390797][T14184] bond16: (slave geneve7): making interface the new active one [ 301.402000][T14184] bond16: (slave geneve7): Enslaving as an active interface with an up link [ 301.447679][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 301.654841][T14193] ip6t_srh: unknown srh match flags 5F28 [ 301.659801][T14193] netlink: 'syz.2.2184': attribute type 1 has an invalid length. [ 302.042490][T14193] block nbd296: server does not support multiple connections per device. [ 302.069815][T14193] block nbd296: shutting down sockets [ 302.152195][T14207] netlink: 'syz.0.2188': attribute type 13 has an invalid length. [ 302.242974][T14209] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.931405][T14228] netlink: 'syz.2.2193': attribute type 10 has an invalid length. [ 303.041985][T14231] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 303.190318][T14228] team0: Port device dummy0 added [ 303.233051][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 303.364531][T14231] 8021q: adding VLAN 0 to HW filter on device bond14 [ 303.510693][T14238] bond14: (slave geneve9): making interface the new active one [ 303.533912][T14238] bond14: (slave geneve9): Enslaving as an active interface with an up link [ 304.116903][T14271] syzkaller0: left promiscuous mode [ 304.116931][T14271] syzkaller0: left allmulticast mode [ 304.260656][T14274] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2203'. [ 304.280709][T14274] xt_TCPMSS: Only works on TCP SYN packets [ 304.287105][T14271] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 304.378436][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'. [ 304.461580][T14280] netlink: 'syz.4.2204': attribute type 16 has an invalid length. [ 304.461633][T14280] netlink: 'syz.4.2204': attribute type 17 has an invalid length. [ 304.488858][T14281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2205'. [ 304.490435][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2205'. [ 304.642780][T14276] 8021q: adding VLAN 0 to HW filter on device team1 [ 304.820104][T14280] bridge_slave_1: left allmulticast mode [ 304.888298][T14280] hsr0: left allmulticast mode [ 304.888322][T14280] hsr_slave_0: left allmulticast mode [ 304.888339][T14280] hsr_slave_1: left allmulticast mode [ 304.923864][T14280] macvlan0: left promiscuous mode [ 304.957956][T14280] vlan2: left allmulticast mode [ 304.957988][T14280] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 304.978981][T14280] veth0_to_team: entered promiscuous mode [ 304.990083][T14280] gretap1: left promiscuous mode [ 304.990107][T14280] gretap1: left allmulticast mode [ 305.007708][T14280] veth3: left allmulticast mode [ 305.008627][T14280] xfrm1: left promiscuous mode [ 305.008643][T14280] xfrm1: left allmulticast mode [ 305.030079][T14280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.079599][T14280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.108824][T14280] bridge3: left promiscuous mode [ 305.185182][T14280] bridge4: left promiscuous mode [ 305.263688][T14280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.335269][T14301] netlink: 'syz.1.2213': attribute type 1 has an invalid length. [ 305.373401][T14280] ip6tnl3: left promiscuous mode [ 305.373430][T14280] ip6tnl3: left allmulticast mode [ 305.483247][T14280] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.537702][T14280] bond11: left allmulticast mode [ 305.541234][T14280] 8021q: adding VLAN 0 to HW filter on device bond11 [ 305.595833][T14280] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 305.597796][ T5711] lo speed is unknown, defaulting to 1000 [ 305.597866][ T5711] syz2: Port: 1 Link ACTIVE [ 305.798827][T14301] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.939654][T14302] bond9: (slave geneve7): making interface the new active one [ 305.961555][T14302] bond9: (slave geneve7): Enslaving as an active interface with an up link [ 306.060535][ T3017] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.060779][ T3017] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.081965][ T5711] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.082871][ T3017] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.085039][ T3017] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 306.151124][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.205512][ T12] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.226118][ T12] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.226159][ T12] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.331383][ T13] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.331419][ T13] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.351675][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.441039][ T12] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.471913][ T12] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.579256][T14324] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2219'. [ 307.111096][T14330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2222'. [ 307.132400][T14333] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2224'. [ 307.132431][T14333] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2224'. [ 307.132449][T14333] netlink: 'syz.2.2224': attribute type 6 has an invalid length. [ 307.132464][T14333] netlink: 'syz.2.2224': attribute type 5 has an invalid length. [ 307.132478][T14333] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2224'. [ 307.166218][T14330] vcan0: tx address claim with different name [ 307.230146][T14334] team0: Cannot enslave team device to itself [ 307.253315][ T13] net_ratelimit: 17 callbacks suppressed [ 307.253340][ T13] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.272499][T10632] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.297956][T10632] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.297982][T10632] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 307.353200][T14340] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 307.402216][T10632] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.421157][ T1374] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.444535][T10632] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.451645][T14344] x_tables: unsorted underflow at hook 3 [ 307.465973][ T13] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.483105][T10632] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.502230][ T6631] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.687800][T14345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.707929][T14345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.713676][T14348] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 307.868609][T14348] 8021q: adding VLAN 0 to HW filter on device bond11 [ 307.964897][T14354] bond11: (slave geneve6): making interface the new active one [ 307.984709][T14354] bond11: (slave geneve6): Enslaving as an active interface with an up link [ 308.289068][T14369] ip6t_srh: unknown srh match flags 4000 [ 308.402957][T14372] __nla_validate_parse: 2 callbacks suppressed [ 308.402978][T14372] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2233'. [ 308.458270][T14375] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2234'. [ 308.485484][T14376] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2234'. [ 308.509023][T14365] lo speed is unknown, defaulting to 1000 [ 308.922119][T14388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2237'. [ 309.772545][T14409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2243'. [ 310.301034][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 310.326705][T14417] xt_CT: No such helper "netbios-ns" [ 310.698392][T14453] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2251'. [ 311.180113][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2256'. [ 311.233564][T14474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2257'. [ 311.233602][T14474] netlink: 'syz.4.2257': attribute type 8 has an invalid length. [ 311.233617][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2257'. [ 311.426399][T14479] [ 311.429663][T14479] ============================= [ 311.435079][T14479] WARNING: suspicious RCU usage [ 311.440631][T14479] syzkaller #0 Not tainted [ 311.445625][T14479] ----------------------------- [ 311.450560][T14479] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 311.459201][T14479] [ 311.459201][T14479] other info that might help us debug this: [ 311.459201][T14479] [ 311.469932][T14479] [ 311.469932][T14479] rcu_scheduler_active = 2, debug_locks = 1 [ 311.478110][T14479] locks held by syz.3.2258/14479: 1, last CPU#1: [ 311.484556][T14479] #0: ffffffff8ed5cad8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: __bpf_prog_test_run_raw_tp+0x1d3/0xa60 [ 311.497056][T14479] [ 311.497056][T14479] stack backtrace: [ 311.503096][T14479] CPU: 1 UID: 0 PID: 14479 Comm: syz.3.2258 Not tainted syzkaller #0 PREEMPT(full) [ 311.512515][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.524647][T14479] Call Trace: [ 311.527968][T14479] [ 311.530938][T14479] dump_stack_lvl+0xe8/0x150 [ 311.535590][T14479] lockdep_rcu_suspicious+0x140/0x1d0 [ 311.541014][T14479] get_callchain_entry+0x2b7/0x3c0 [ 311.546182][T14479] get_perf_callchain+0xd5/0x880 [ 311.551173][T14479] ? __pfx_get_perf_callchain+0x10/0x10 [ 311.556763][T14479] ? irqentry_exit+0x218/0x910 [ 311.561579][T14479] __bpf_get_stack+0x375/0xae0 [ 311.566400][T14479] ? __pfx___bpf_get_stack+0x10/0x10 [ 311.571730][T14479] ? 0xffffffffa0406c5c [ 311.575939][T14479] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 311.581619][T14479] bpf_get_stack_raw_tp+0x1a4/0x210 [ 311.586877][T14479] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 311.592380][T14479] __bpf_prog_test_run_raw_tp+0x421/0xa60 [ 311.598159][T14479] ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10 [ 311.604462][T14479] bpf_prog_test_run_raw_tp+0x579/0x840 [ 311.610074][T14479] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 311.616204][T14479] ? __fget_files+0x2a/0x420 [ 311.620856][T14479] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 311.626999][T14479] bpf_prog_test_run+0x2c5/0x340 [ 311.631995][T14479] __sys_bpf+0xa22/0xd90 [ 311.636294][T14479] ? __pfx___sys_bpf+0x10/0x10 [ 311.641102][T14479] ? __schedule+0x17f1/0x58f0 [ 311.645838][T14479] ? do_futex+0x458/0x4e0 [ 311.650252][T14479] ? rcu_is_watching+0x16/0xb0 [ 311.655075][T14479] __x64_sys_bpf+0xba/0xd0 [ 311.659545][T14479] do_syscall_64+0x166/0x520 [ 311.664185][T14479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.670336][T14479] ? clear_bhb_loop+0x70/0xc0 [ 311.675059][T14479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.681001][T14479] RIP: 0033:0x7fac36b9e159 [ 311.685455][T14479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.705092][T14479] RSP: 002b:00007fac34df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.713558][T14479] RAX: ffffffffffffffda RBX: 00007fac36e25fa0 RCX: 00007fac36b9e159 [ 311.721582][T14479] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 311.729599][T14479] RBP: 00007fac36c3506b R08: 0000000000000000 R09: 0000000000000000 [ 311.737618][T14479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.745632][T14479] R13: 00007fac36e26038 R14: 00007fac36e25fa0 R15: 00007ffcdb93dba8 [ 311.753675][T14479] [ 311.804782][T14482] netlink: 'syz.0.2259': attribute type 4 has an invalid length. [ 311.804807][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2259'. [ 311.862086][T14482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.009233][T14482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.311824][ T6638] net_ratelimit: 150 callbacks suppressed [ 312.311848][ T6638] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.311873][ T6638] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 312.422393][ T3017] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.422430][ T3017] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 312.531833][ T13] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.531870][ T13] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 312.644060][ T1374] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.644095][ T1374] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 312.752047][ T3017] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.752082][ T3017] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 315.251161][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 315.252583][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.172633][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.401443][ T38] net_ratelimit: 82 callbacks suppressed [ 317.401469][ T38] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.401493][ T38] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 317.522075][ T6638] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.522110][ T6638] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 317.632933][ T3017] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.632970][ T3017] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 317.741859][ T6638] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.741894][ T6638] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 317.853018][ T38] bond11: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.853055][ T38] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 318.451553][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.101590][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!