last executing test programs: 2.159794146s ago: executing program 0 (id=3518): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010003fe06ca2c9c7a4099be8cf010000000000000000000500000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0xf5, 0x2, 0xff}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="7e35c279463839b2c1de2f34152e70489b82518be409d192714a53f938afdd", 0x1f}], 0x1, &(0x7f0000001080)=[{0x1010, 0x107, 0x3, "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"}, {0x18, 0x29, 0x5, "d8a10a108b90fc"}, {0x58, 0x29, 0x5, "889104a529d3fd5d986c536d73c909e7e67eb5ae3c5e5855afc6e0380e570d78f0610b03ed3072f42dd88b6742848863f9117d8d697481e8990766a7404eeb0b413061"}], 0x1080}, 0x2048050) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r2, 0x107, 0x15, 0x0, &(0x7f0000001040)) close(0x4) 1.917216816s ago: executing program 0 (id=3523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x1) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xa0}}, 0x0) 1.79419285s ago: executing program 0 (id=3525): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) 1.668773105s ago: executing program 1 (id=3529): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r1, 0x50dc85624ea6cf59, 0x70bd2d, 0xfffffffd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0x0) 1.51689483s ago: executing program 1 (id=3531): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) connect(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x3, 0x4, 0x3, 0x1}}, 0x80) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0xfffffffffffffffe, &(0x7f0000000100)) 1.422711335s ago: executing program 4 (id=3533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0x931, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xb}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$inet(r8, &(0x7f0000000740)={&(0x7f0000000540)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="6c267bc28e7954ba73fbe3c1d77a15338dfb6c04faf7076e68a5072b30762a61d282a17da33ac4ded9ce611d4ba5accd26a999ab1b00ddc624b814f85f9cfd2e31f1729291952ba071e153b0f577e2141abf11f3709d1dc0adcc1ff628191cbfff", 0x61}, {&(0x7f0000000600)="c235bd25213af98e736fc2898721d3426bdd4aa48baa5546b4ea120cbb7a325646b5a40b157c12f0cde7cfa53ccc4f1f7363327aa9c53d81c7f5cc445149bd6c21cf10962e4da3cedeb0781a029c10a0f84523e0d0cbc57724f30eeb33d0fff538f2fbf0323bb6feb5214d147b8a148854698b4157520e4b722ee8ab3b6fc070c2d83f52ef2de171a02e22f5afd8ad619b5e76035eb017102cb8e3513bbc3925e0d7c6", 0xa3}, {&(0x7f00000006c0)="98c5144118682082afbce9f16010d478c817c00472d8f00e695169", 0x1b}], 0x3}, 0x4814) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f00000000000000000c00020001000000040004070077cda65c327abae9cb528f4a6a57c4201546ec10c62feef2b07ed4fa796e88819b3cec4dc08704778b325f00800000860800000000000000327d082c6dbcabcb8bce831991b4f1f4ac73f3e6c7895935000000", @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.332233435s ago: executing program 1 (id=3535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) (async) 1.11254672s ago: executing program 0 (id=3538): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0xd34, 0x0, 0x9, 0xb3b8, 0x6, 0x6, 0x2, 0x3, 0x6, 0x3, 0x2, 0x10, 0x0, 0x9}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{r1, 0x2, 0x0, 0xf, 0xfffffffffffffffe, 0x40000, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x28, 0x6, 0x1, 0x80}}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e23, 0x5, @loopback, 0x7fffffff}}, [0x101, 0x8d1, 0x3, 0x1, 0xc219, 0x7f, 0x0, 0x8, 0x6ba9, 0xfffffffffffffffe, 0x800, 0x1, 0x6, 0xfffffffffffffffc, 0x10]}, &(0x7f0000000200)=0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0xd34, 0x0, 0x9, 0xb3b8, 0x6, 0x6, 0x2, 0x3, 0x6, 0x3, 0x2, 0x10, 0x0, 0x9}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{r1, 0x2, 0x0, 0xf, 0xfffffffffffffffe, 0x40000, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x28, 0x6, 0x1, 0x80}}) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x9}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e23, 0x5, @loopback, 0x7fffffff}}, [0x101, 0x8d1, 0x3, 0x1, 0xc219, 0x7f, 0x0, 0x8, 0x6ba9, 0xfffffffffffffffe, 0x800, 0x1, 0x6, 0xfffffffffffffffc, 0x10]}, &(0x7f0000000200)=0x100) (async) 1.066368369s ago: executing program 2 (id=3539): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbe}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x83d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x8801) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003535b3d215ee0169395f"], 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0) 1.046006349s ago: executing program 1 (id=3540): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000004c0)={0x1d, r8}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r9, r11, 0x25, 0x0, @void}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @private}, &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x5, 0x2, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x68, 0x0, 0x80, 0x29, 0x0, @remote, @multicast2, {[@end, @ssrr={0x89, 0x7, 0xdf, [@loopback]}, @noop, @rr={0x7, 0xf, 0xf2, [@empty, @private=0xa010100, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd4, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@bridge_getvlan={0x18, 0x68, 0x1}, 0x18}}, 0x0) 953.014701ms ago: executing program 2 (id=3542): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) 949.573179ms ago: executing program 0 (id=3543): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000380)={0x1, 0x1, "ab47eb", 0x2, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b2a, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x480e0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448d4, &(0x7f0000000000)={0x1, 0x2, '\x00', 0x0, 0xfd}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r9 = accept4(r8, 0x0, 0x0, 0x800) writev(r9, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 949.177926ms ago: executing program 4 (id=3544): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x23, 0x6}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/27, 0x2b, 0x1b, 0x0, 0xc}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x8, 0x2000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x50) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x4000000) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) 878.542835ms ago: executing program 3 (id=3545): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r1, 0x1) socket(0x2, 0x3, 0xff) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x41, 0x4, 0x700000, 0x7, 0x7]}, &(0x7f0000000140)=0x54) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 878.029296ms ago: executing program 1 (id=3546): close(0x3) (async) close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) (async) accept$netrom(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) (async) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) close(0x3) (async) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000040000066b9fcc87e51c2010000000000000000030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 807.275285ms ago: executing program 2 (id=3547): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r4, @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 756.598007ms ago: executing program 4 (id=3548): r0 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc1}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4, r4}, 0x20) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}, {&(0x7f0000000280)="95dc62f38ebcabc687fa027ba9823f475aaa0107f82095c7f6b4435f68af03d223d606f0b8e403e67914399de14ee19d381c236169d9857573", 0x39}, {&(0x7f00000002c0)="a55b45b7f46d1eee2e3200f92f6b9ad2b630a3d8377c2760800fe29d488753af17ae9825a31b135055873795691946f870b208e7a3e69629fc15540a4803379876f3660d87e8f70163a83ea549267bd6cd56fd2c7142963f9f99333caf8aaf", 0x5f}, {&(0x7f0000000340)="3f2aa0bb0234d7b4e8781b99079fc12efac31a749bf81ccc", 0x18}, {&(0x7f0000000380)="81a45c9924de7e7652453d5bf268691dad68e0b3fe", 0x15}, {&(0x7f00000003c0)="899d4a5793b4072dc3e69e1a7322ef54d28aa93b7c15d0df0c696f53078ef92e7e19850b9d3e3c9d1a3245456ac2f32704bed21eac9b1b2a6ab020149b06a5decf06bcd206d65560b6c7af4a95476e4e967c0574bbfe38d375a4b443cae96b38250812c0e422a24e9d5ff84b520942a5319ce5145612f8b0acde378d6c0a217f1ecc384e03", 0x85}], 0x6}, 0x20004000) (async) close(0x3) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x2, 0x3e, 0x1}) (rerun: 64) sendmsg$802154_raw(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)="3f78573f97cfb9e44619f1cb1776d39ccf27db9e747b1321b80fd4b82bebc4851313da63e89d1dc0666a64fd01ab6e4e9899b2846b47254012067bb4af810621c596bc77e05600188f16bbf57bcdc6e1759808e2002ce97e6190c9e8f9cfc2a94ad2aa8950c07551e2a15208c13d5d78d7b39a092effa87c10a9a3c245b489b5fcbeb73f3c0943e3cf85b2b5c5995228", 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) 732.485865ms ago: executing program 2 (id=3549): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1}, 0x2) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r4 = socket$kcm(0xa, 0x2, 0x0) sendfile(r4, r4, &(0x7f0000000040)=0x8001, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3a, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) socket$kcm(0x2, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800", 0x2}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) (async) listen(r7, 0x1) 713.427403ms ago: executing program 4 (id=3550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48) unshare(0x22020400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x7ffd, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x9df}, 0x1c) 649.221347ms ago: executing program 1 (id=3551): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x5}}]}}]}, 0x48}}, 0x4010804) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30feffffffffdbdf25017c001e040042805a942f1ae6f40c00018006000e00800a00000c0002800800"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfd, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004015}, 0x4041) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 519.105124ms ago: executing program 3 (id=3552): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x11) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x2, r4, 0x29, r2}, 0x10) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x5, r4, 0x29, r5}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRESHEX=r3], 0x34}, 0x1, 0x0, 0x0, 0x6000895}, 0xa60c080c0212273) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000280)) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r14, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r8, @ANYRESOCT=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', r4, 0x8000, 0x1, 0x3, 0xf, {{0x29, 0x4, 0x2, 0x1, 0xa4, 0x66, 0x0, 0x87, 0x0, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x2c, 0xf2, 0x1, 0x6, [{@empty, 0x7f}, {@loopback, 0x9}, {@loopback, 0x7}, {@multicast2, 0x4}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x52, 0x0, 0x0, [0x7]}, @generic={0x89, 0x7, "e7d6e1ea8c"}, @generic={0x82, 0x11, "c94e0b47acec656f6c4ccdcde291f8"}, @end, @generic={0x88, 0x2}, @end, @timestamp_addr={0x44, 0x3c, 0xac, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x56b0000}, {@local, 0xe7}, {@private=0xa010102, 0x7}, {@empty, 0x5}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@multicast1, 0x8}]}, @noop]}}}}}) (async, rerun: 64) r16 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r16, &(0x7f0000000640)={0x1d, r17, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRESHEX=r11, @ANYBLOB="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", @ANYRES8=r15], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6}, 0x94) 382.714185ms ago: executing program 3 (id=3553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x28, r2, 0x1, 0x70bd28, 0x1, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008051}, 0x24000880) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)={0x28, r2, 0x1, 0x70bd28, 0x1, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008051}, 0x24000880) (async) 325.001509ms ago: executing program 2 (id=3554): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x581, 0x5, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40494}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40494}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000002) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r12) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r17 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) ioctl$SIOCSIFMTU(r17, 0x8922, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x10000000}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x114, r15, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x81, 0x25}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5d3389d388fde56d7ab638881f786e7ce1e4c2d88a266590"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5a877e6f24f391326371a537648747518f8d7d4722ab8858"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d3416eacadff42d2522daf812c5db5f21760c8337e6185b2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bc8dc9d87ca7562a0c6533e2ca2ec72ceab2c934cfe2e89a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "457ed9fae392d7d474d59e7d223c6f4d3c88049901dd0fdd"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "97523496d397519c44bcade30d2561f474ac48324b4919c0"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x0) 291.384484ms ago: executing program 3 (id=3555): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 286.490145ms ago: executing program 4 (id=3556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 136.850125ms ago: executing program 3 (id=3557): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x7) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400007fdf81a98493b47e79d18112e9a535ddf6accb1c4063f81a8aed38f9fe8f143d46b4abff908524e04197dae623f0c13e61ec335ea85146b0a22c59c329f4c5ba05cd77aebb5d5ae852de543caee7dab988acd47e74ce5ee627bfaf18db9a0762942e52c4c523dd4aaa79b5bc19928e137e66d97469bd40f988f461980a3044e5edf23558783e201dc83f4e880c4dbc76a363", @ANYRES16=r1, @ANYBLOB="0100fdffffff0000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 127.328802ms ago: executing program 4 (id=3558): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (fail_nth: 6) 86.735261ms ago: executing program 3 (id=3559): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000440), &(0x7f00000001c0)=0x8) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069004f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 33.296686ms ago: executing program 2 (id=3560): socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200300, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0xffff, 0xffff}, {0x8, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0a9}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=3561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @private0, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000003bc0), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) shutdown(r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70fd2e, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x34}}, 0x20000010) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6fa188f4}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xcc}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) kernel console output (not intermixed with test programs): 3] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1929'. [ 191.532126][T12367] bond0: (slave netdevsim0): Releasing backup interface [ 191.541783][T12367] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 191.553709][T12367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.564876][T12367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.587550][T12426] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1929'. [ 191.597223][T12422] veth0_to_team: left allmulticast mode [ 191.744108][ T1001] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.753141][ T1001] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.769945][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 191.893197][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 191.897633][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'. [ 191.914297][ T1158] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.926154][ T1158] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.031890][ T1158] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.041691][ T1158] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.060758][T12455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1939'. [ 192.088707][ T1158] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.097952][ T1158] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.107807][T12457] xt_l2tp: v2 doesn't support IP mode [ 192.114538][T12457] netlink: 'syz.2.1940': attribute type 21 has an invalid length. [ 192.123194][T12457] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1940'. [ 192.318922][T12470] lo speed is unknown, defaulting to 1000 [ 192.326774][T12472] netlink: 'syz.4.1947': attribute type 1 has an invalid length. [ 192.328754][T12470] lo speed is unknown, defaulting to 1000 [ 192.342876][T12472] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1947'. [ 192.348119][T12470] lo speed is unknown, defaulting to 1000 [ 192.352780][T12472] NCSI netlink: No device for ifindex 0 [ 192.847784][ T5970] lo speed is unknown, defaulting to 1000 [ 192.855165][T12470] infiniband sz1: set down [ 192.860109][T12470] infiniband sz1: added lo [ 192.941679][T12495] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 192.947068][T12470] RDS/IB: sz1: added [ 192.953772][T12470] smc: adding ib device sz1 with port count 1 [ 192.960271][T12470] smc: ib device sz1 port 1 has no pnetid [ 192.970894][ T24] lo speed is unknown, defaulting to 1000 [ 192.982152][T12470] lo speed is unknown, defaulting to 1000 [ 193.278529][T12470] lo speed is unknown, defaulting to 1000 [ 193.495533][T12507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.654445][T12515] sctp: [Deprecated]: syz.3.1959 (pid 12515) Use of int in max_burst socket option deprecated. [ 193.654445][T12515] Use struct sctp_assoc_value instead [ 193.731688][T12470] lo speed is unknown, defaulting to 1000 [ 193.879387][T12526] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 193.887928][T12527] netlink: 'syz.2.1963': attribute type 5 has an invalid length. [ 193.912758][T12527] openvswitch: netlink: IP tunnel dst address not specified [ 194.194549][T12470] lo speed is unknown, defaulting to 1000 [ 194.468698][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.475154][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.559707][T12470] lo speed is unknown, defaulting to 1000 [ 195.082048][T12583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.553277][T12622] syzkaller0: entered promiscuous mode [ 195.558954][T12622] syzkaller0: entered allmulticast mode [ 195.591004][T12622] tipc: Enabled bearer , priority 0 [ 195.626467][T12615] tipc: Resetting bearer [ 195.689454][T12615] tipc: Disabling bearer [ 195.706759][T12631] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 195.834433][T12641] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 195.896595][T12641] bond8: entered promiscuous mode [ 195.902178][T12641] 8021q: adding VLAN 0 to HW filter on device bond8 [ 195.913632][T12641] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 196.088563][T12641] bond8: (slave bridge11): making interface the new active one [ 196.112365][T12641] bridge11: entered promiscuous mode [ 196.131811][T12641] bridge11: left promiscuous mode [ 196.406858][T12685] __nla_validate_parse: 15 callbacks suppressed [ 196.406877][T12685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2015'. [ 196.445160][T12688] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2016'. [ 196.520040][T12696] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2017'. [ 196.534433][T12693] syz.2.2014 (12693) used obsolete PPPIOCDETACH ioctl [ 196.541763][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 196.541811][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 196.548087][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.548167][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.637732][T12702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2017'. [ 196.675100][T12702] netlink: 'syz.1.2017': attribute type 17 has an invalid length. [ 196.716118][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 196.745820][T12702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2017'. [ 197.181568][T12722] pim6reg1: entered promiscuous mode [ 197.196100][T12722] pim6reg1: entered allmulticast mode [ 197.378414][T12736] ip6gretap0: Device is already in use. [ 197.526299][T12744] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2028'. [ 197.660609][T12753] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 197.686195][T12753] dummy0: entered promiscuous mode [ 197.692965][T12753] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 197.715263][T12757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2031'. [ 197.878977][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2035'. [ 197.888399][T12763] netlink: 'syz.2.2035': attribute type 7 has an invalid length. [ 197.896862][T12763] netlink: 'syz.2.2035': attribute type 8 has an invalid length. [ 197.905129][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 197.940629][T12763] gretap0: entered promiscuous mode [ 197.947410][T12763] batadv_slave_1: entered promiscuous mode [ 197.954588][T12763] batadv_slave_1: left promiscuous mode [ 197.961861][T12763] gretap0: left promiscuous mode [ 198.325101][T12790] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 198.471351][T12797] bond7: option miimon: invalid value (18446744073709551585) [ 198.479122][T12797] bond7: option miimon: allowed values 0 - 2147483647 [ 198.489806][T12797] bond7 (unregistering): Released all slaves [ 198.590720][T12805] dvmrp8: entered allmulticast mode [ 198.714140][T12815] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 198.737006][T12815] sctp: [Deprecated]: syz.4.2052 (pid 12815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.737006][T12815] Use struct sctp_sack_info instead [ 198.814560][T12818] netlink: 'syz.3.2054': attribute type 14 has an invalid length. [ 198.822820][T12818] netlink: 'syz.3.2054': attribute type 13 has an invalid length. [ 198.951495][T12832] netlink: 'syz.3.2058': attribute type 5 has an invalid length. [ 198.961889][T12832] netlink: 'syz.3.2058': attribute type 6 has an invalid length. [ 199.540030][T12874] netlink: 'syz.1.2063': attribute type 13 has an invalid length. [ 199.597372][T12874] gretap0: refused to change device tx_queue_len [ 199.633047][T12874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.673132][T12884] netlink: 'syz.2.2068': attribute type 142 has an invalid length. [ 199.681332][ T24] lo speed is unknown, defaulting to 1000 [ 199.699215][ T24] sz1: Port: 1 Link ACTIVE [ 199.724600][ T5893] lo speed is unknown, defaulting to 1000 [ 200.191685][T12918] wlan0 speed is unknown, defaulting to 1000 [ 200.236737][T12918] lo speed is unknown, defaulting to 1000 [ 200.564332][T12945] nbd: couldn't find a device at index 0 [ 200.707428][T12952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.914115][T12968] netlink: 'syz.4.2090': attribute type 1 has an invalid length. [ 200.953095][T12911] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 201.055452][T12979] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 201.071505][T12979] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 201.085349][T12979] bond6: (slave xfrm1): making interface the new active one [ 201.093775][T12979] bond6: (slave xfrm1): Enslaving as an active interface with an up link [ 201.103107][T12985] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.307343][T13002] netlink: 'syz.3.2096': attribute type 1 has an invalid length. [ 201.349600][T12999] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 201.390060][T13002] bond9: entered promiscuous mode [ 201.396949][T13002] 8021q: adding VLAN 0 to HW filter on device bond9 [ 201.444146][T12999] netlink: 'syz.1.2097': attribute type 2 has an invalid length. [ 201.461934][T13011] team0: Caught tx_queue_len zero misconfig [ 201.835499][T13036] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 201.874405][T13040] __nla_validate_parse: 28 callbacks suppressed [ 201.874426][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 201.900892][T13040] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 201.913148][T13040] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 202.000678][T13046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2107'. [ 202.481097][T13065] netlink: 'syz.1.2111': attribute type 10 has an invalid length. [ 202.491958][T13065] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.501263][T13065] team0: entered promiscuous mode [ 202.506909][T13065] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.656173][T13071] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2115'. [ 202.768599][T13077] netlink: 210232 bytes leftover after parsing attributes in process `syz.2.2114'. [ 202.807534][T13077] netlink: 'syz.2.2114': attribute type 29 has an invalid length. [ 202.816168][T13077] netlink: 'syz.2.2114': attribute type 29 has an invalid length. [ 202.871850][T13080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.887276][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 202.996388][T13091] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 203.055375][T13097] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2123'. [ 203.550108][T13118] tipc: Enabled bearer , priority 0 [ 203.581030][T13118] syzkaller0: entered promiscuous mode [ 203.591781][T13118] syzkaller0: entered allmulticast mode [ 203.613898][T13118] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 203.678202][T13118] tipc: Resetting bearer [ 203.684352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.723258][T13114] tipc: Resetting bearer [ 203.766701][T13114] tipc: Disabling bearer [ 203.783594][T13128] syzkaller0: entered promiscuous mode [ 203.795074][T13128] syzkaller0: entered allmulticast mode [ 203.953191][T13137] validate_nla: 7 callbacks suppressed [ 203.953208][T13137] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 203.983288][T13137] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2137'. [ 204.036479][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 204.058146][T13149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2141'. [ 204.077979][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 204.779628][T13203] netlink: 'syz.3.2158': attribute type 9 has an invalid length. [ 205.120580][ T183] wlan0 speed is unknown, defaulting to 1000 [ 205.131940][ T183] syz0: Port: 1 Link DOWN [ 205.510957][T13246] openvswitch: netlink: Flow actions attr not present in new flow. [ 205.636629][T13258] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 205.727427][T13263] netlink: 'syz.3.2181': attribute type 2 has an invalid length. [ 205.774686][T13263] 9: entered promiscuous mode [ 206.021163][T13281] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 206.055717][T13281] netlink: 'syz.3.2185': attribute type 3 has an invalid length. [ 206.072820][T13277] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 206.153408][T13292] IPVS: set_ctl: invalid protocol: 137 172.30.1.1:20001 [ 206.343034][T13306] xt_hashlimit: overflow, try lower: 3/0 [ 206.438202][T13316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.553021][T13325] x_tables: duplicate underflow at hook 1 [ 206.898023][T13352] netlink: 'syz.0.2209': attribute type 12 has an invalid length. [ 206.935907][T13354] __nla_validate_parse: 20 callbacks suppressed [ 206.935927][T13354] netlink: 696 bytes leftover after parsing attributes in process `syz.1.2210'. [ 207.016307][T13360] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2210'. [ 207.169910][T13371] syzkaller1: entered promiscuous mode [ 207.184650][T13373] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 207.184657][T13371] syzkaller1: entered allmulticast mode [ 207.253296][T13375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2219'. [ 207.675859][T13402] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 207.689379][T13402] bond10 (unregistering): Released all slaves [ 207.871164][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 208.111727][T13437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2239'. [ 208.302592][T13446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2242'. [ 208.346067][T13450] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 208.369649][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 208.793250][T13473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2252'. [ 208.817960][T13476] wg2: entered promiscuous mode [ 208.896903][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2256'. [ 209.084209][T13497] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 209.115404][T13497] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 209.335066][T13515] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 209.346747][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 209.414443][T13515] 8021q: adding VLAN 0 to HW filter on device bond6 [ 209.430968][T13521] bond6: (slave geneve2): making interface the new active one [ 209.462155][T13521] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 209.488216][T13528] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 209.577100][T13530] bond7: option xmit_hash_policy: invalid value (64) [ 209.596564][T13530] bond7 (unregistering): Released all slaves [ 209.712656][T13538] macsec3: entered promiscuous mode [ 209.717604][T13546] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 209.717903][T13538] bridge0: entered promiscuous mode [ 209.745949][T13538] macsec3: entered allmulticast mode [ 209.751303][T13538] bridge0: entered allmulticast mode [ 210.484170][T13570] sit3: entered promiscuous mode [ 210.489436][T13570] sit3: entered allmulticast mode [ 210.614327][T13573] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 210.721183][T13579] bond9: (slave ip6gretap1): making interface the new active one [ 210.729149][T13573] block nbd2: not configured, cannot reconfigure [ 210.813005][T13579] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.821178][T13579] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.836829][T13579] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 211.190493][T13629] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 211.224229][T13629] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 211.234240][T13628] netlink: 'syz.1.2302': attribute type 1 has an invalid length. [ 211.244127][T13629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 211.260831][T13628] netlink: 'syz.1.2302': attribute type 2 has an invalid length. [ 211.275070][T13634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.978458][T13680] veth0: entered promiscuous mode [ 211.994102][T13680] __nla_validate_parse: 9 callbacks suppressed [ 211.994121][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 212.018846][T13677] veth0: left promiscuous mode [ 212.371161][T13703] syzkaller1: entered promiscuous mode [ 212.400258][T13703] syzkaller1: entered allmulticast mode [ 212.412541][T13705] SET target dimension over the limit! [ 212.431377][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 212.690569][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'. [ 212.890985][T13727] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 214.804299][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2338'. [ 214.894424][T13769] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2342'. [ 214.927265][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2342'. [ 214.937773][T13774] netlink: 'syz.0.2344': attribute type 25 has an invalid length. [ 214.950563][T13769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2342'. [ 214.975656][T13771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 214.986781][T13769] netlink: 'syz.3.2342': attribute type 1 has an invalid length. [ 215.002796][T13769] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2342'. [ 215.128824][T13784] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 215.141492][T13784] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 215.306611][T13798] bond0: (slave dummy0): Releasing backup interface [ 215.316930][T13798] dummy0: left promiscuous mode [ 215.331168][T13798] batman_adv: batadv0: Adding interface: dummy0 [ 215.338782][T13798] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.366449][T13798] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 215.384443][T13800] IPv6: sit3: Disabled Multicast RS [ 215.390883][T13800] sit3: entered allmulticast mode [ 215.724269][T13830] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 216.079845][T13840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2367'. [ 216.474270][T13834] netlink: 'syz.0.2365': attribute type 11 has an invalid length. [ 216.663549][T13867] xt_limit: Overflow, try lower: 271964/0 [ 216.705545][T13873] nbd: must specify at least one socket [ 216.946027][T13894] nbd: couldn't find device at index 0 [ 217.024620][T13894] __nla_validate_parse: 54 callbacks suppressed [ 217.024638][T13894] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2383'. [ 217.061157][T13902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2389'. [ 217.197657][T13913] netlink: 'syz.3.2391': attribute type 1 has an invalid length. [ 217.273729][T13921] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2394'. [ 217.354126][T13928] FAULT_INJECTION: forcing a failure. [ 217.354126][T13928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.367950][T13928] CPU: 1 UID: 0 PID: 13928 Comm: syz.1.2396 Not tainted syzkaller #0 PREEMPT(full) [ 217.367975][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.367986][T13928] Call Trace: [ 217.367993][T13928] [ 217.368001][T13928] dump_stack_lvl+0x189/0x250 [ 217.368031][T13928] ? __pfx____ratelimit+0x10/0x10 [ 217.368051][T13928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.368069][T13928] ? __pfx__printk+0x10/0x10 [ 217.368091][T13928] ? __might_fault+0xb0/0x130 [ 217.368118][T13928] should_fail_ex+0x414/0x560 [ 217.368141][T13928] _copy_from_iter+0x1cd/0x1630 [ 217.368160][T13928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.368189][T13928] ? policy_nodemask+0x27c/0x720 [ 217.368210][T13928] ? __pfx__copy_from_iter+0x10/0x10 [ 217.368235][T13928] ? set_page_refcounted+0xa0/0x1e0 [ 217.368256][T13928] ? page_copy_sane+0x4e/0x280 [ 217.368277][T13928] copy_page_from_iter+0xdd/0x170 [ 217.368299][T13928] tun_get_user+0x1d40/0x3dc0 [ 217.368325][T13928] ? tun_get_user+0x6fc/0x3dc0 [ 217.368357][T13928] ? aa_file_perm+0x44c/0x1530 [ 217.368375][T13928] ? __pfx_tun_get_user+0x10/0x10 [ 217.368400][T13928] ? __lock_acquire+0x6b6/0x2cf0 [ 217.368418][T13928] ? kstrtoull+0x12f/0x1d0 [ 217.368442][T13928] ? ref_tracker_alloc+0x318/0x460 [ 217.368463][T13928] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.368486][T13928] ? tun_get+0x1c/0x2f0 [ 217.368513][T13928] ? tun_get+0x1c/0x2f0 [ 217.368534][T13928] ? tun_get+0x1c/0x2f0 [ 217.368559][T13928] tun_chr_write_iter+0x113/0x200 [ 217.368583][T13928] vfs_write+0x5c9/0xb30 [ 217.368608][T13928] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 217.368631][T13928] ? __pfx_vfs_write+0x10/0x10 [ 217.368658][T13928] ? __fget_files+0x2a/0x420 [ 217.368683][T13928] ksys_write+0x145/0x250 [ 217.368704][T13928] ? __pfx_ksys_write+0x10/0x10 [ 217.368726][T13928] ? do_syscall_64+0xbe/0xf80 [ 217.368750][T13928] do_syscall_64+0xfa/0xf80 [ 217.368773][T13928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.368796][T13928] ? clear_bhb_loop+0x60/0xb0 [ 217.368814][T13928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.368829][T13928] RIP: 0033:0x7f571f38e1ff [ 217.368848][T13928] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 217.368860][T13928] RSP: 002b:00007f57201e6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 217.368880][T13928] RAX: ffffffffffffffda RBX: 00007f571f5e5fa0 RCX: 00007f571f38e1ff [ 217.368889][T13928] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8 [ 217.368897][T13928] RBP: 00007f57201e6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.368904][T13928] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 217.368911][T13928] R13: 00007f571f5e6038 R14: 00007f571f5e5fa0 R15: 00007ffd5aebe378 [ 217.368933][T13928] [ 217.369062][T13929] ipt_REJECT: ECHOREPLY no longer supported. [ 217.483062][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'. [ 217.544842][T13932] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 217.549340][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'. [ 217.587873][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 217.819272][T13949] syzkaller0: entered promiscuous mode [ 217.829915][T13949] syzkaller0: entered allmulticast mode [ 217.907976][T13955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2404'. [ 217.925209][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'. [ 217.929069][T13955] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 217.935654][T13957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'. [ 218.047492][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 218.064753][T13963] netlink: 'syz.1.2405': attribute type 12 has an invalid length. [ 218.254028][T13975] IPVS: set_ctl: invalid protocol: 33 172.30.1.3:20004 [ 218.271414][T13973] netlink: 'syz.4.2411': attribute type 11 has an invalid length. [ 218.568727][T14004] FAULT_INJECTION: forcing a failure. [ 218.568727][T14004] name failslab, interval 1, probability 0, space 0, times 0 [ 218.581460][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.4.2419 Not tainted syzkaller #0 PREEMPT(full) [ 218.581485][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.581496][T14004] Call Trace: [ 218.581504][T14004] [ 218.581511][T14004] dump_stack_lvl+0x189/0x250 [ 218.581534][T14004] ? __pfx____ratelimit+0x10/0x10 [ 218.581555][T14004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.581573][T14004] ? __pfx__printk+0x10/0x10 [ 218.581608][T14004] should_fail_ex+0x414/0x560 [ 218.581632][T14004] should_failslab+0xa8/0x100 [ 218.581658][T14004] kmem_cache_alloc_noprof+0x74/0x6f0 [ 218.581679][T14004] ? skb_ext_add+0x148/0x8f0 [ 218.581712][T14004] skb_ext_add+0x148/0x8f0 [ 218.581743][T14004] br_nf_pre_routing+0xc41/0x1470 [ 218.581776][T14004] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 218.581797][T14004] br_handle_frame+0x96e/0x14f0 [ 218.581830][T14004] ? __pfx_br_handle_frame+0x10/0x10 [ 218.581851][T14004] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 218.581876][T14004] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 218.581897][T14004] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 218.581926][T14004] ? __pfx_br_handle_frame+0x10/0x10 [ 218.581948][T14004] __netif_receive_skb_core+0x95f/0x2f90 [ 218.581973][T14004] ? __pfx___skb_flow_dissect+0x10/0x10 [ 218.581997][T14004] ? __kernel_text_address+0xd/0x40 [ 218.582020][T14004] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 218.582043][T14004] ? arch_stack_walk+0xfc/0x150 [ 218.582072][T14004] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 218.582093][T14004] ? __pfx_stack_trace_save+0x10/0x10 [ 218.582118][T14004] ? stack_depot_save_flags+0x40/0x850 [ 218.582151][T14004] ? netif_receive_skb+0x105/0x750 [ 218.582172][T14004] ? netif_receive_skb+0x105/0x750 [ 218.582194][T14004] __netif_receive_skb+0x72/0x380 [ 218.582222][T14004] ? netif_receive_skb+0x105/0x750 [ 218.582239][T14004] netif_receive_skb+0x1bb/0x750 [ 218.582256][T14004] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 218.582271][T14004] ? __pfx_netif_receive_skb+0x10/0x10 [ 218.582293][T14004] ? tun_rx_batched+0x160/0x730 [ 218.582318][T14004] tun_rx_batched+0x1b9/0x730 [ 218.582345][T14004] ? __pfx_tun_rx_batched+0x10/0x10 [ 218.582368][T14004] ? tun_get_user+0x266d/0x3dc0 [ 218.582397][T14004] ? tun_get_user+0x266d/0x3dc0 [ 218.582419][T14004] tun_get_user+0x2aa3/0x3dc0 [ 218.582445][T14004] ? tun_get_user+0x6fc/0x3dc0 [ 218.582479][T14004] ? aa_file_perm+0x44c/0x1530 [ 218.582497][T14004] ? __pfx_tun_get_user+0x10/0x10 [ 218.582522][T14004] ? __lock_acquire+0x6b6/0x2cf0 [ 218.582553][T14004] ? ref_tracker_alloc+0x318/0x460 [ 218.582571][T14004] ? arch_irq_work_raise+0x6d/0x80 [ 218.582591][T14004] ? __irq_work_queue_local+0x1d7/0x530 [ 218.582613][T14004] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 218.582639][T14004] ? tun_get+0x1c/0x2f0 [ 218.582666][T14004] ? tun_get+0x1c/0x2f0 [ 218.582687][T14004] ? tun_get+0x1c/0x2f0 [ 218.582720][T14004] tun_chr_write_iter+0x113/0x200 [ 218.582746][T14004] vfs_write+0x5c9/0xb30 [ 218.582771][T14004] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 218.582795][T14004] ? __pfx_vfs_write+0x10/0x10 [ 218.582826][T14004] ? __fget_files+0x2a/0x420 [ 218.582850][T14004] ksys_write+0x145/0x250 [ 218.582872][T14004] ? __pfx_ksys_write+0x10/0x10 [ 218.582903][T14004] do_syscall_64+0xfa/0xf80 [ 218.582925][T14004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.582941][T14004] ? clear_bhb_loop+0x60/0xb0 [ 218.582962][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.582978][T14004] RIP: 0033:0x7f84feb8e1ff [ 218.582994][T14004] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 218.583009][T14004] RSP: 002b:00007f84ff95e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 218.583027][T14004] RAX: ffffffffffffffda RBX: 00007f84fede5fa0 RCX: 00007f84feb8e1ff [ 218.583039][T14004] RDX: 0000000000000036 RSI: 0000200000000000 RDI: 00000000000000c8 [ 218.583050][T14004] RBP: 00007f84ff95e090 R08: 0000000000000000 R09: 0000000000000000 [ 218.583060][T14004] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 218.583070][T14004] R13: 00007f84fede6038 R14: 00007f84fede5fa0 R15: 00007fff6b020558 [ 218.583101][T14004] [ 219.048507][T14008] netlink: 'syz.0.2423': attribute type 3 has an invalid length. [ 219.140613][T14019] ipt_REJECT: ECHOREPLY no longer supported. [ 219.319599][T14035] bond0: (slave wg1): refused to change device type [ 219.408197][T14044] FAULT_INJECTION: forcing a failure. [ 219.408197][T14044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.421995][T14044] CPU: 0 UID: 0 PID: 14044 Comm: syz.0.2435 Not tainted syzkaller #0 PREEMPT(full) [ 219.422018][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.422027][T14044] Call Trace: [ 219.422034][T14044] [ 219.422042][T14044] dump_stack_lvl+0x189/0x250 [ 219.422065][T14044] ? __pfx____ratelimit+0x10/0x10 [ 219.422086][T14044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.422103][T14044] ? __pfx__printk+0x10/0x10 [ 219.422124][T14044] ? __might_fault+0xb0/0x130 [ 219.422155][T14044] should_fail_ex+0x414/0x560 [ 219.422178][T14044] _copy_from_user+0x2d/0xb0 [ 219.422199][T14044] kstrtouint_from_user+0xc4/0x170 [ 219.422224][T14044] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 219.422255][T14044] proc_fail_nth_write+0x88/0x200 [ 219.422275][T14044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 219.422297][T14044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 219.422318][T14044] vfs_write+0x27e/0xb30 [ 219.422347][T14044] ? __pfx_vfs_write+0x10/0x10 [ 219.422366][T14044] ? __fget_files+0x2a/0x420 [ 219.422383][T14044] ? __fget_files+0x3a0/0x420 [ 219.422397][T14044] ? __fget_files+0x2a/0x420 [ 219.422428][T14044] ksys_write+0x145/0x250 [ 219.422450][T14044] ? __pfx_ksys_write+0x10/0x10 [ 219.422471][T14044] ? do_syscall_64+0xbe/0xf80 [ 219.422495][T14044] do_syscall_64+0xfa/0xf80 [ 219.422515][T14044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.422530][T14044] ? clear_bhb_loop+0x60/0xb0 [ 219.422550][T14044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.422564][T14044] RIP: 0033:0x7fda22d8e1ff [ 219.422580][T14044] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 219.422593][T14044] RSP: 002b:00007fda23cb6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 219.422611][T14044] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda22d8e1ff [ 219.422622][T14044] RDX: 0000000000000001 RSI: 00007fda23cb60a0 RDI: 0000000000000005 [ 219.422632][T14044] RBP: 00007fda23cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.422642][T14044] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 219.422651][T14044] R13: 00007fda22fe6038 R14: 00007fda22fe5fa0 R15: 00007ffd42354498 [ 219.422681][T14044] [ 220.039510][T14077] netlink: 'syz.2.2441': attribute type 3 has an invalid length. [ 220.101614][T14072] netlink: 'syz.1.2442': attribute type 19 has an invalid length. [ 220.128117][T14072] netlink: 'syz.1.2442': attribute type 19 has an invalid length. [ 220.178645][T14079] netlink: 'syz.0.2445': attribute type 10 has an invalid length. [ 220.233248][T14085] netlink: 'syz.0.2445': attribute type 10 has an invalid length. [ 220.255835][T14079] team0: Port device dummy0 added [ 220.285651][T14079] netlink: 'syz.0.2445': attribute type 9 has an invalid length. [ 220.380899][T14085] team0: Port device dummy0 removed [ 220.400432][T14085] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 220.666144][T14102] IPVS: set_ctl: invalid protocol: 9 172.20.20.11:21 [ 220.767505][T14104] sctp: [Deprecated]: syz.1.2451 (pid 14104) Use of int in max_burst socket option deprecated. [ 220.767505][T14104] Use struct sctp_assoc_value instead [ 222.226079][T14114] tipc: New replicast peer: 255.255.255.255 [ 222.246188][T14114] tipc: Enabled bearer , priority 10 [ 222.261142][T14116] __nla_validate_parse: 14 callbacks suppressed [ 222.261368][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2453'. [ 222.366153][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 222.437126][T14132] netlink: 'syz.4.2459': attribute type 23 has an invalid length. [ 222.492397][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2460'. [ 222.571217][T14131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.626471][T14146] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 222.696367][T14148] netlink: 808 bytes leftover after parsing attributes in process `syz.3.2464'. [ 222.713316][T14151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2466'. [ 222.965497][T14171] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 223.106950][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2473'. [ 223.262669][T14202] netlink: 'syz.4.2476': attribute type 9 has an invalid length. [ 223.441587][T14215] netlink: 'syz.0.2481': attribute type 23 has an invalid length. [ 223.472328][T14217] netlink: 'syz.2.2482': attribute type 1 has an invalid length. [ 223.485470][T14215] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2481'. [ 223.546493][T14224] netlink: 536 bytes leftover after parsing attributes in process `syz.3.2484'. [ 223.613258][T14217] bond10: (slave gretap3): making interface the new active one [ 223.624566][T14217] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 224.094549][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2496'. [ 224.136101][T14265] : renamed from hsr0 (while UP) [ 224.244715][T14274] tipc: Enabling of bearer rejected, already enabled [ 224.463501][T14292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2507'. [ 224.473267][T14292] openvswitch: netlink: Flow key attr not present in new flow. [ 224.504399][T14292] openvswitch: netlink: Flow key attr not present in new flow. [ 225.300347][T14348] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 225.326061][T14352] validate_nla: 3 callbacks suppressed [ 225.326078][T14352] netlink: 'syz.3.2527': attribute type 21 has an invalid length. [ 225.385083][T14352] bond10: option mode: invalid value (133) [ 225.393363][T14352] bond10 (unregistering): Released all slaves [ 225.990160][T14397] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 226.123829][T14404] macvlan3: entered promiscuous mode [ 226.184223][T14406] macvlan4: entered promiscuous mode [ 226.193829][T14414] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 226.356449][T14430] tipc: Enabled bearer , priority 0 [ 226.465499][T14430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.516375][T14436] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20000 [ 226.558331][T14440] tipc: Resetting bearer [ 226.836459][T14447] netlink: 'syz.2.2553': attribute type 3 has an invalid length. [ 226.917518][T14456] nbd: must specify at least one socket [ 226.941392][T14457] nbd: must specify at least one socket [ 227.023135][T14465] netlink: 'syz.1.2558': attribute type 12 has an invalid length. [ 227.110690][T14472] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 227.275139][T14485] netlink: 'syz.2.2565': attribute type 21 has an invalid length. [ 227.287246][T14485] __nla_validate_parse: 18 callbacks suppressed [ 227.287263][T14485] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2565'. [ 227.303315][T14485] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2565'. [ 227.421010][T14491] xfrm2: entered allmulticast mode [ 227.436156][T14493] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 227.446526][T14493] netlink: 'syz.0.2567': attribute type 4 has an invalid length. [ 227.454639][T14493] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2567'. [ 227.546244][T14497] xt_recent: Unsupported userspace flags (000000b1) [ 227.825003][T14507] netlink: 'syz.0.2573': attribute type 1 has an invalid length. [ 227.871536][T14507] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.914165][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 228.044877][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'. [ 228.054962][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'. [ 228.066116][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2575'. [ 228.075488][T14520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2575'. [ 228.087289][T14520] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2575'. [ 228.140787][T14527] netlink: 'syz.0.2576': attribute type 12 has an invalid length. [ 228.184774][T14530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2577'. [ 228.200480][T14530] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 228.236830][T14530] gretap4: entered promiscuous mode [ 228.269518][T14530] gretap4: entered allmulticast mode [ 228.463331][T14556] openvswitch: netlink: Flow key attr not present in new flow. [ 228.578497][T14561] netlink: 'syz.0.2586': attribute type 30 has an invalid length. [ 228.804609][ T1001] bond0: (slave bridge_slave_1): interface is now up [ 228.913049][T14561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.934104][T14561] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.954539][T14561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.043982][T14585] bridge0: entered allmulticast mode [ 229.166343][T14594] hsr_slave_0: left promiscuous mode [ 229.192532][T14594] hsr_slave_1: left promiscuous mode [ 229.421863][T14611] NCSI netlink: No device for ifindex 813332851 [ 229.511625][T14616] ip6t_rpfilter: unknown options [ 229.568620][T14619] bridge0: port 3(team0) entered blocking state [ 229.599756][T14619] bridge0: port 3(team0) entered disabled state [ 229.612779][T14619] team0: entered allmulticast mode [ 229.617940][T14619] team_slave_0: entered allmulticast mode [ 229.633607][T14619] team_slave_1: entered allmulticast mode [ 229.639374][T14619] dummy0: entered allmulticast mode [ 229.648643][T14619] team0: entered promiscuous mode [ 229.657655][T14619] team_slave_0: entered promiscuous mode [ 229.668080][T14619] team_slave_1: entered promiscuous mode [ 229.677555][T14619] dummy0: entered promiscuous mode [ 229.688009][T14619] bridge0: port 3(team0) entered blocking state [ 229.694445][T14619] bridge0: port 3(team0) entered forwarding state [ 229.751086][T14626] syzkaller0: entered promiscuous mode [ 229.756857][T14626] syzkaller0: entered allmulticast mode [ 229.867850][T14636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.017718][T14645] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 230.944749][T14662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.113640][T14693] veth0: entered promiscuous mode [ 231.238732][T14707] validate_nla: 7 callbacks suppressed [ 231.238750][T14707] netlink: 'syz.3.2632': attribute type 7 has an invalid length. [ 231.268981][T14707] bridge0: port 1(vlan2) entered blocking state [ 231.276062][T14707] bridge0: port 1(vlan2) entered disabled state [ 231.285451][T14707] vlan2: entered allmulticast mode [ 231.290868][T14707] bridge0: entered allmulticast mode [ 231.304030][T14707] vlan2: left allmulticast mode [ 231.309109][T14707] bridge0: left allmulticast mode [ 231.341352][T14708] veth9: entered allmulticast mode [ 231.346956][T14711] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.355824][T14691] veth0: left promiscuous mode [ 231.375607][T14713] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 231.866347][T14738] bond11: entered allmulticast mode [ 232.336738][T14779] bond7: entered allmulticast mode [ 232.342760][T14779] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.456696][T14792] __nla_validate_parse: 20 callbacks suppressed [ 232.456714][T14792] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2659'. [ 232.570953][T14802] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2664'. [ 232.739457][T14806] SET target dimension over the limit! [ 232.815843][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2669'. [ 233.068243][T14842] openvswitch: netlink: EtherType 50a is less than min 600 [ 233.239856][T14849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2675'. [ 233.260532][T14853] netlink: 'syz.4.2676': attribute type 10 has an invalid length. [ 233.286922][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2678'. [ 233.310465][T14853] wlan1: mtu greater than device maximum [ 233.333149][T14853] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 233.384870][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2681'. [ 233.694943][T14877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2685'. [ 233.844694][T14882] syzkaller1: entered promiscuous mode [ 233.850216][T14882] syzkaller1: entered allmulticast mode [ 233.856883][T14889] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 233.864792][T14882] tipc: New replicast peer: 172.30.1.4 [ 233.954408][T14894] 8021q: VLANs not supported on gre0 [ 233.974479][T14899] netlink: 'syz.0.2692': attribute type 2 has an invalid length. [ 233.991498][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2692'. [ 234.208348][T14908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 234.246584][T14915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.256707][T14914] tipc: Enabled bearer , priority 0 [ 234.284546][T14914] syzkaller0: entered promiscuous mode [ 234.290266][T14914] syzkaller0: entered allmulticast mode [ 234.317633][T14921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'. [ 234.348519][T14914] tipc: Resetting bearer [ 234.380306][T14912] tipc: Resetting bearer [ 234.442053][T14912] tipc: Disabling bearer [ 234.919994][T14949] xt_hashlimit: size too large, truncated to 1048576 [ 235.031656][T14961] SET target dimension over the limit! [ 235.188036][T14974] netlink: 'syz.1.2715': attribute type 1 has an invalid length. [ 235.215377][T14974] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 235.222770][T14974] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 235.269737][T14981] netlink: 'syz.4.2717': attribute type 83 has an invalid length. [ 235.721068][T15023] ip6gre0: Master is either lo or non-ether device [ 236.048734][T15053] netlink: 'syz.2.2740': attribute type 1 has an invalid length. [ 236.276893][T15062] netlink: 'syz.1.2742': attribute type 2 has an invalid length. [ 236.412122][T15073] netlink: 'syz.2.2743': attribute type 1 has an invalid length. [ 236.442503][T15073] netlink: 'syz.2.2743': attribute type 4 has an invalid length. [ 236.953502][T15101] netlink: 'syz.3.2753': attribute type 12 has an invalid length. [ 237.180778][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.202820][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.212750][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.221682][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.231505][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.322410][T15115] netlink: 'syz.4.2757': attribute type 9 has an invalid length. [ 237.400089][T15120] netlink: 'syz.3.2760': attribute type 8 has an invalid length. [ 237.483732][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.496405][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.537100][T15106] wlan0 speed is unknown, defaulting to 1000 [ 237.583436][T15106] lo speed is unknown, defaulting to 1000 [ 237.657902][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.692527][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.807780][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.838122][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.978180][ T1158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.034399][ T1158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.075362][T15155] tipc: Enabling of bearer rejected, already enabled [ 238.500415][T15175] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 238.556978][T15175] __nla_validate_parse: 9 callbacks suppressed [ 238.556996][T15175] netlink: 55946 bytes leftover after parsing attributes in process `syz.4.2771'. [ 238.595431][T15181] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2772'. [ 238.981011][ T1158] bond2 (unregistering): (slave gretap1): Releasing active interface [ 239.001190][ T1158] bond3 (unregistering): (slave gretap2): Releasing active interface [ 239.081509][ T1158] bond6 (unregistering): (slave geneve2): Releasing active interface [ 239.252771][ T52] Bluetooth: hci5: command tx timeout [ 239.269291][ T1158] bond2 (unregistering): (slave bridge2): Releasing active interface [ 239.592664][ T1158] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 239.603776][ T1158] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 239.617092][ T1158] bond0 (unregistering): Released all slaves [ 239.630592][ T1158] bond1 (unregistering): Released all slaves [ 239.644582][ T1158] bond2 (unregistering): Released all slaves [ 239.659382][ T1158] bond3 (unregistering): Released all slaves [ 239.671488][ T1158] bond4 (unregistering): Released all slaves [ 239.688064][ T1158] bond5 (unregistering): Released all slaves [ 239.775658][ T1158] bond6 (unregistering): Released all slaves [ 239.860059][ T1158] bond7 (unregistering): Released all slaves [ 240.083539][T15106] chnl_net:caif_netlink_parms(): no params data found [ 240.119952][ T1158] tipc: Left network mode [ 240.186443][T15209] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2779'. [ 240.350266][T15211] bond12: up delay (21) is not a multiple of miimon (4), value rounded to 20 ms [ 240.366169][T15222] ip6t_srh: unknown srh match flags 5F28 [ 240.391016][T15215] bond0: (slave wg1): refused to change device type [ 240.462507][T15219] xt_l2tp: v2 tid > 0xffff: 1114244 [ 240.464324][T15228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.493114][T15234] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2782'. [ 240.554509][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2786'. [ 240.604343][T15232] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2787'. [ 240.615477][T15232] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2787'. [ 240.616811][T15106] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.635847][T15106] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.646606][T15106] bridge_slave_0: entered allmulticast mode [ 240.654738][T15106] bridge_slave_0: entered promiscuous mode [ 240.662964][T15237] IPVS: Unknown mcast interface: vcan0 [ 240.673699][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2788'. [ 240.691270][T15106] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.725076][T15106] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.742996][T15106] bridge_slave_1: entered allmulticast mode [ 240.764813][T15106] bridge_slave_1: entered promiscuous mode [ 240.794314][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 240.805302][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2789'. [ 241.117592][T15106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.157321][T15106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.258483][T15281] netlink: 'syz.4.2802': attribute type 21 has an invalid length. [ 241.332651][ T52] Bluetooth: hci5: command tx timeout [ 241.431389][T15106] team0: Port device team_slave_0 added [ 241.476180][T15106] team0: Port device team_slave_1 added [ 241.624911][ T1158] hsr_slave_0: left promiscuous mode [ 241.631876][ T1158] hsr_slave_1: left promiscuous mode [ 241.645254][ T1158] veth1_macvtap: left promiscuous mode [ 241.778716][T15304] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.423570][T15320] tipc: Enabling of bearer rejected, failed to enable media [ 242.455688][T15106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.464020][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.492091][T15106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.553170][T15106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.564154][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.609318][T15106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.755740][T15106] hsr_slave_0: entered promiscuous mode [ 242.787892][T15106] hsr_slave_1: entered promiscuous mode [ 242.979356][ T1158] IPVS: stop unused estimator thread 0... [ 243.028286][T15352] !: renamed from bond_slave_0 (while UP) [ 243.071796][T15359] netlink: 'syz.3.2821': attribute type 1 has an invalid length. [ 243.079899][T15359] NCSI netlink: No device for ifindex 0 [ 243.081383][T15347] wlan0 speed is unknown, defaulting to 1000 [ 243.148775][T15347] lo speed is unknown, defaulting to 1000 [ 243.167861][T15362] netlink: 'syz.3.2823': attribute type 1 has an invalid length. [ 243.184668][T15363] ieee802154 phy1 wpan1: encryption failed: -126 [ 243.412876][ T52] Bluetooth: hci5: command tx timeout [ 243.839496][T15389] syzkaller0: entered promiscuous mode [ 243.840252][T15381] __nla_validate_parse: 13 callbacks suppressed [ 243.840266][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 243.847542][T15389] syzkaller0: entered allmulticast mode [ 243.891535][T15388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2827'. [ 243.918318][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 243.936663][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 244.098552][T15106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.108656][T15106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.118381][T15106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.129665][T15106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.250963][T15106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.270926][T15106] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.284374][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.291471][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.309474][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.316679][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.459576][T15106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.496475][T15106] veth0_vlan: entered promiscuous mode [ 244.508044][T15106] veth1_vlan: entered promiscuous mode [ 244.533535][T15106] veth0_macvtap: entered promiscuous mode [ 244.543260][T15106] veth1_macvtap: entered promiscuous mode [ 244.561110][T15106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.574831][T15106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.588060][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.597226][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.608279][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.618953][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.677068][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.685926][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.707774][ T4849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.719212][ T4849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.766254][T15406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2751'. [ 245.492424][ T52] Bluetooth: hci5: command tx timeout [ 247.572739][ T52] Bluetooth: hci5: command tx timeout [ 255.895175][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.392660][T15419] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2838'. [ 314.747573][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2844'. [ 314.873302][T15453] sctp: [Deprecated]: syz.0.2849 (pid 15453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.873302][T15453] Use struct sctp_sack_info instead [ 314.963775][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 314.998238][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 315.035398][T15462] netlink: 'syz.2.2851': attribute type 24 has an invalid length. [ 315.078476][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2855'. [ 315.103396][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2855'. [ 315.147561][T15472] openvswitch: netlink: Multiple metadata blocks provided [ 315.169767][T15474] netlink: 'syz.1.2857': attribute type 9 has an invalid length. [ 315.187374][T15476] bond0: option ad_select: unable to set because the bond device is up [ 315.296460][T15481] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 315.308767][T15481] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 315.324095][T15484] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 315.394968][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 315.418050][T15496] netlink: 'syz.1.2865': attribute type 6 has an invalid length. [ 315.464655][T15496] netlink: 'syz.1.2865': attribute type 6 has an invalid length. [ 315.628613][T15509] netlink: 'syz.3.2870': attribute type 1 has an invalid length. [ 316.400884][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 316.458625][T15538] openvswitch: netlink: Missing valid actions attribute. [ 316.466155][T15538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.479127][T15538] openvswitch: netlink: Missing valid actions attribute. [ 316.486708][T15538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.336138][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.453993][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2881'. [ 317.639564][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 317.767385][T15571] IPv6: sit1: Disabled Multicast RS [ 317.784174][T15571] sit1: entered allmulticast mode [ 317.901270][T15579] tc_dump_action: action bad kind [ 318.771184][T15649] netlink: 'syz.4.2914': attribute type 18 has an invalid length. [ 318.877248][T15658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.057299][T15671] syzkaller1: entered promiscuous mode [ 319.067981][T15671] syzkaller1: entered allmulticast mode [ 319.078047][T15676] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 319.157488][T15678] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 319.215807][T15678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.571600][T15710] __nla_validate_parse: 33 callbacks suppressed [ 319.571618][T15710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2933'. [ 319.579999][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2934'. [ 319.663607][T15707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.703056][ T4849] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 319.731103][T15726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2937'. [ 319.750416][T15728] netlink: 'syz.0.2938': attribute type 2 has an invalid length. [ 319.752000][T15729] netlink: 'syz.0.2938': attribute type 2 has an invalid length. [ 319.928957][T15736] 8021q: adding VLAN 0 to HW filter on device bond9 [ 320.069547][T15750] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2944'. [ 320.113579][T15740] syzkaller0: entered promiscuous mode [ 320.131465][T15740] syzkaller0: entered allmulticast mode [ 320.273321][T15743] dvmrp0: entered allmulticast mode [ 320.734199][T15770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2949'. [ 321.878417][T15782] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2953'. [ 321.897220][T15782] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2953'. [ 321.914504][T15785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2954'. [ 322.408709][T15816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2966'. [ 322.446658][T15815] xt_l2tp: invalid flags combination: 0 [ 322.549356][T15825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2969'. [ 322.566177][T15830] netlink: 'syz.3.2971': attribute type 3 has an invalid length. [ 323.304247][T15869] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 323.403621][T15865] netlink: 'syz.4.2984': attribute type 1 has an invalid length. [ 323.432466][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.444199][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.455117][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.463417][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.471216][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.595093][T15879] wlan0 speed is unknown, defaulting to 1000 [ 323.614085][T15879] lo speed is unknown, defaulting to 1000 [ 323.699573][T15896] netlink: 'syz.2.2989': attribute type 21 has an invalid length. [ 323.724001][T15888] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 323.747097][T15888] bond8: option packets_per_slave: allowed values 0 - 65535 [ 323.800691][T15888] bond8 (unregistering): Released all slaves [ 323.847303][T15901] netlink: 'syz.0.2990': attribute type 4 has an invalid length. [ 324.462865][T15879] chnl_net:caif_netlink_parms(): no params data found [ 324.715697][T15879] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.723448][T15879] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.730885][T15879] bridge_slave_0: entered allmulticast mode [ 324.739222][T15879] bridge_slave_0: entered promiscuous mode [ 324.748708][T15879] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.757117][T15879] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.764648][T15879] bridge_slave_1: entered allmulticast mode [ 324.765947][T15962] __nla_validate_parse: 5 callbacks suppressed [ 324.765961][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3002'. [ 324.773394][T15879] bridge_slave_1: entered promiscuous mode [ 324.855031][T15966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3005'. [ 324.877820][T15879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.914449][T15879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.029151][T15879] team0: Port device team_slave_0 added [ 325.065667][T15879] team0: Port device team_slave_1 added [ 325.141369][T15879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.162284][T15879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.206812][T15879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.222075][T15879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.229461][T15879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.256935][T15990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3013'. [ 325.266932][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3013'. [ 325.278424][T15879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.495586][ T5845] Bluetooth: hci2: command tx timeout [ 325.497532][T15879] hsr_slave_0: entered promiscuous mode [ 325.533608][T15879] hsr_slave_1: entered promiscuous mode [ 325.536291][T16003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3018'. [ 325.550128][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3018'. [ 325.553995][T15879] debugfs: 'hsr0' already exists in 'hsr' [ 325.573415][T15879] Cannot create hsr debugfs directory [ 325.595724][T16003] netlink: 'syz.0.3018': attribute type 24 has an invalid length. [ 325.988096][T16029] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 325.995436][T16029] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 326.019950][T15879] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 326.077054][T16036] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3027'. [ 326.164061][T16042] netlink: 'syz.0.3027': attribute type 13 has an invalid length. [ 326.180974][T15879] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 326.188273][T16042] netlink: 'syz.0.3027': attribute type 17 has an invalid length. [ 326.300397][T16042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.333360][T15879] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 326.366716][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3031'. [ 326.409771][T15879] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 326.677248][T16070] sch_tbf: peakrate 1925155479 is lower than or equals to rate 12576448645190041864 ! [ 326.701714][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3036'. [ 326.780195][T16077] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3037'. [ 326.796385][T16075] syzkaller0: entered promiscuous mode [ 326.802003][T16075] syzkaller0: entered allmulticast mode [ 327.586680][ T5845] Bluetooth: hci2: command tx timeout [ 328.267520][T15879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.297754][T15879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.367903][T15879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.379119][T16092] veth1_macvtap: left promiscuous mode [ 328.392439][T16092] macsec0: entered promiscuous mode [ 328.398643][T16092] macsec0: entered allmulticast mode [ 328.418860][T15879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.527862][T16110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.689323][T16116] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 328.806400][T15879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.859232][T15879] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.899219][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.906443][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.947716][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.954925][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.203546][ T10] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 329.620325][T15879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.631721][T16185] netlink: 'syz.2.3065': attribute type 12 has an invalid length. [ 329.653195][ T5845] Bluetooth: hci2: command tx timeout [ 329.677827][T16185] netlink: 'syz.2.3065': attribute type 11 has an invalid length. [ 329.746198][T15879] veth0_vlan: entered promiscuous mode [ 329.785841][T15879] veth1_vlan: entered promiscuous mode [ 329.833253][T16195] netlink: 'syz.2.3068': attribute type 12 has an invalid length. [ 329.859964][T16195] __nla_validate_parse: 6 callbacks suppressed [ 329.859981][T16195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3068'. [ 329.861757][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3069'. [ 329.881936][T15879] veth0_macvtap: entered promiscuous mode [ 329.902516][T16196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3067'. [ 329.916859][T16201] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 329.921047][T16196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3067'. [ 329.969599][T15879] veth1_macvtap: entered promiscuous mode [ 329.994022][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 330.013018][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 330.023158][T15879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.075509][T15879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.123278][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.215458][ T10] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 330.227845][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.243688][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.255662][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3074'. [ 330.271777][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.288239][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3073'. [ 330.312714][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'. [ 330.405385][ T4118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.422461][ T4118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.453972][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.465229][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.480506][T16226] tipc: Started in network mode [ 330.480952][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.485742][T16226] tipc: Node identity 6ad1968b77b1, cluster identity 4711 [ 330.501164][T16226] tipc: Enabled bearer , priority 0 [ 330.515672][T16226] syzkaller0: entered allmulticast mode [ 330.553116][T16225] tipc: Resetting bearer [ 330.607660][T16225] tipc: Disabling bearer [ 330.893553][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'. [ 330.933298][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.060589][T16251] vlan1: entered allmulticast mode [ 331.092551][T16251] gretap0: entered allmulticast mode [ 331.379459][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.400602][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.409591][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.418904][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.426723][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.498162][T16278] bridge0: entered promiscuous mode [ 331.504047][T16278] macsec1: entered promiscuous mode [ 331.509422][T16278] macsec1: entered allmulticast mode [ 331.515926][T16278] bridge0: port 3(macsec1) entered blocking state [ 331.522862][T16278] bridge0: port 3(macsec1) entered disabled state [ 331.539094][T16278] bridge0: left promiscuous mode [ 331.608694][T16273] wlan0 speed is unknown, defaulting to 1000 [ 331.639696][T16273] lo speed is unknown, defaulting to 1000 [ 331.733547][ T5845] Bluetooth: hci2: command tx timeout [ 331.809340][T16297] bridge0: Caught tx_queue_len zero misconfig [ 331.976939][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.294116][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.373984][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.408767][T16332] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 332.708706][T16273] chnl_net:caif_netlink_parms(): no params data found [ 332.809779][T16357] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 332.824833][T16357] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 332.842279][T16357] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 332.850071][T16357] netlink: 'syz.2.3114': attribute type 2 has an invalid length. [ 333.012935][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.049502][T16273] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.057114][T16273] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.065358][T16273] bridge_slave_0: entered allmulticast mode [ 333.073733][T16273] bridge_slave_0: entered promiscuous mode [ 333.088349][T16273] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.099113][T16273] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.109779][T16273] bridge_slave_1: entered allmulticast mode [ 333.117878][T16273] bridge_slave_1: entered promiscuous mode [ 333.265441][T16273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.285102][T16273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.336431][T16388] dvmrp0: entered allmulticast mode [ 333.398780][T16273] team0: Port device team_slave_0 added [ 333.411939][T16273] team0: Port device team_slave_1 added [ 333.420171][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.428328][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.467897][T16390] netlink: 'syz.4.3123': attribute type 12 has an invalid length. [ 333.493289][ T5845] Bluetooth: hci1: command tx timeout [ 333.504768][T16273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.521831][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.533858][T16398] net_ratelimit: 1 callbacks suppressed [ 333.533877][T16398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.551198][T16273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.554810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.575004][T16273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.612762][T16273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.640199][T16273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.670180][T16400] tipc: Enabling of bearer rejected, already enabled [ 333.681579][T16400] netlink: 'syz.4.3127': attribute type 11 has an invalid length. [ 333.759108][T16273] hsr_slave_0: entered promiscuous mode [ 333.766315][T16273] hsr_slave_1: entered promiscuous mode [ 333.773486][T16273] debugfs: 'hsr0' already exists in 'hsr' [ 333.782307][T16273] Cannot create hsr debugfs directory [ 333.812426][ T5845] Bluetooth: hci2: command tx timeout [ 333.973160][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.036208][T16423] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 334.050113][T16423] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 334.072988][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.083622][T16273] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.101069][T16273] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.160253][T16423] bond13: entered promiscuous mode [ 334.166089][T16423] 8021q: adding VLAN 0 to HW filter on device bond13 [ 334.216411][T16273] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.242649][T16273] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.293975][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.377895][T16439] bond13: (slave bridge9): making interface the new active one [ 334.391983][T16439] bridge9: entered promiscuous mode [ 334.413279][T16439] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 334.424741][T16441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.456363][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.466667][T16273] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.484500][T16273] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.575354][T16273] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.612680][T16273] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.733340][T16455] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 334.744819][ T5970] IPVS: starting estimator thread 0... [ 334.765786][T16455] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 334.863790][T16457] IPVS: using max 27 ests per chain, 64800 per kthread [ 334.924748][T16465] veth1_macvtap: left promiscuous mode [ 334.932972][T16465] macsec0: entered promiscuous mode [ 334.938404][T16465] macsec0: entered allmulticast mode [ 334.965005][T16273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.985547][T16465] veth1_macvtap: entered promiscuous mode [ 334.992025][T16469] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 334.993106][T16465] veth1_macvtap: entered allmulticast mode [ 335.010407][T16465] macsec0: left promiscuous mode [ 335.015838][T16465] macsec0: left allmulticast mode [ 335.021011][T16465] veth1_macvtap: left allmulticast mode [ 335.034869][T16273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.050706][T16273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 335.094100][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.108401][T16273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.279236][T16273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.302919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.329016][T16273] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.349283][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.356708][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.376016][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.383270][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.576020][ T5845] Bluetooth: hci1: command tx timeout [ 335.675346][T16502] veth0_to_team: entered promiscuous mode [ 335.748892][T16273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.803115][T16510] __nla_validate_parse: 21 callbacks suppressed [ 335.803134][T16510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3162'. [ 335.856444][T16273] veth0_vlan: entered promiscuous mode [ 335.897141][T16273] veth1_vlan: entered promiscuous mode [ 335.972008][T16273] veth0_macvtap: entered promiscuous mode [ 335.998210][T16273] veth1_macvtap: entered promiscuous mode [ 336.022954][T16273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.047945][T16273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.072140][ T1001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.097387][ T1001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.112027][ T1001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.128308][ T1001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.356213][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'. [ 336.366270][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 336.377794][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.386109][T16541] netlink: 'syz.2.3170': attribute type 5 has an invalid length. [ 336.388320][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.405459][T16541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3170'. [ 336.453630][T16541] geneve2: entered promiscuous mode [ 336.458952][T16541] geneve2: entered allmulticast mode [ 336.475055][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 336.514636][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 336.548463][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 336.584191][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 336.606263][T16549] sctp: [Deprecated]: syz.4.3174 (pid 16549) Use of int in maxseg socket option. [ 336.606263][T16549] Use struct sctp_assoc_value instead [ 336.621563][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.650617][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.716903][T16555] netlink: 'syz.4.3174': attribute type 1 has an invalid length. [ 336.740583][T16555] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3174'. [ 336.851651][T16558] : renamed from veth1_vlan (while UP) [ 336.978689][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3179'. [ 337.416929][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 337.478538][T16579] netlink: 'syz.4.3184': attribute type 13 has an invalid length. [ 337.503884][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.510021][T16579] netlink: 'syz.4.3184': attribute type 17 has an invalid length. [ 337.531436][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.540892][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.541320][T16581] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 337.559428][T16581] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 337.571992][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.580774][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.655473][ T5845] Bluetooth: hci1: command tx timeout [ 337.693355][T16579] bridge0: left allmulticast mode [ 337.907980][T16606] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 337.990826][T16612] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3192'. [ 338.001068][T16582] wlan0 speed is unknown, defaulting to 1000 [ 338.001893][T16612] x_tables: duplicate underflow at hook 1 [ 338.013960][T16582] lo speed is unknown, defaulting to 1000 [ 338.051661][T16614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3193'. [ 338.101443][T16616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3195'. [ 338.471556][T16620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.486001][T16620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.496990][T16620] bond0 (unregistering): Released all slaves [ 338.624167][ T183] net_ratelimit: 13 callbacks suppressed [ 338.624185][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.685086][T16638] netlink: 'syz.4.3198': attribute type 12 has an invalid length. [ 338.850935][T16582] chnl_net:caif_netlink_parms(): no params data found [ 338.989722][T16661] bridge0: port 3(team0) entered disabled state [ 338.996490][T16661] bridge0: port 2(syz_tun) entered disabled state [ 339.025897][T16661] netlink: 'syz.4.3204': attribute type 4 has an invalid length. [ 339.038436][T16664] nbd: must specify an index to disconnect [ 339.254188][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.266677][T16582] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.282740][T16582] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.290125][T16582] bridge_slave_0: entered allmulticast mode [ 339.299641][T16582] bridge_slave_0: entered promiscuous mode [ 339.329939][T16582] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.351650][T16582] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.380297][T16582] bridge_slave_1: entered allmulticast mode [ 339.403808][T16582] bridge_slave_1: entered promiscuous mode [ 339.560313][T16582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.573694][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.586611][T16582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.657602][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.668773][ T5845] Bluetooth: hci4: command tx timeout [ 339.709045][T16705] netlink: 'syz.4.3214': attribute type 13 has an invalid length. [ 339.725827][T16708] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 339.743390][ T5845] Bluetooth: hci1: command tx timeout [ 339.750520][T16582] team0: Port device team_slave_0 added [ 339.999410][T16582] team0: Port device team_slave_1 added [ 340.039304][T16728] tipc: Enabling of bearer rejected, failed to enable media [ 340.084260][T16582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.091878][T16582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.125355][T16582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.141850][T16721] wlan0 speed is unknown, defaulting to 1000 [ 340.150184][T16582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.162854][T16582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.192655][ T24] IPVS: starting estimator thread 0... [ 340.195735][T16731] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20000 [ 340.222321][T16582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.279709][T16721] lo speed is unknown, defaulting to 1000 [ 340.295665][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.295871][T16734] IPVS: using max 35 ests per chain, 84000 per kthread [ 340.340689][T16582] hsr_slave_0: entered promiscuous mode [ 340.354924][T16582] hsr_slave_1: entered promiscuous mode [ 340.364779][T16582] debugfs: 'hsr0' already exists in 'hsr' [ 340.370547][T16582] Cannot create hsr debugfs directory [ 340.379108][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.388038][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.693429][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.749225][T16756] openvswitch: netlink: Duplicate key (type 1). [ 340.776723][T16582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.790124][T16582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.801628][T16582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 340.852664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.955247][T16582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.972281][T16582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.992610][T16582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 341.040337][T16768] __nla_validate_parse: 8 callbacks suppressed [ 341.040354][T16768] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3235'. [ 341.124206][T16582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.135563][T16582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.147666][T16582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 341.169798][T16770] netlink: 'syz.1.3236': attribute type 1 has an invalid length. [ 341.286836][T16582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.307711][T16582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.328804][T16582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 341.418407][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3239'. [ 341.435396][T16782] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 341.473889][T16782] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 341.704996][T16582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.736460][ T5845] Bluetooth: hci4: command tx timeout [ 341.754698][T16582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.773427][T16582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.856533][T16813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3248'. [ 341.870436][T16802] ip6gre1: entered allmulticast mode [ 341.893319][T16582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.923974][T16815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3249'. [ 341.963954][T16818] netlink: 'syz.1.3250': attribute type 1 has an invalid length. [ 342.194427][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3255'. [ 342.245865][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3256'. [ 342.254858][T16582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.339446][T16582] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.384520][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.391729][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.406795][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.414035][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.586360][T16859] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3259'. [ 342.617300][T16859] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3259'. [ 342.794816][T16875] netlink: 'syz.0.3264': attribute type 12 has an invalid length. [ 342.933333][ C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 342.967950][T16582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.096290][T16582] veth0_vlan: entered promiscuous mode [ 343.110232][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3267'. [ 343.128915][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3267'. [ 343.143166][T16582] veth1_vlan: entered promiscuous mode [ 343.205210][T16582] veth0_macvtap: entered promiscuous mode [ 343.242182][T16582] veth1_macvtap: entered promiscuous mode [ 343.306671][T16582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.331787][T16582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.331963][T16895] delete_channel: no stack [ 343.355994][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.369762][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.394148][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.413255][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.563045][ T5845] block nbd2: Receive control failed (result -32) [ 343.646738][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.686096][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.813520][ T5845] Bluetooth: hci4: command tx timeout [ 343.819443][ T5970] net_ratelimit: 16 callbacks suppressed [ 343.819459][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.833532][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.890485][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.991569][T16928] netlink: 'syz.0.3280': attribute type 5 has an invalid length. [ 344.013933][T16931] netlink: 'syz.4.3282': attribute type 11 has an invalid length. [ 344.021649][T16928] geneve2: entered promiscuous mode [ 344.047850][T16934] netlink: 'syz.3.3283': attribute type 6 has an invalid length. [ 344.067456][T16928] geneve2: entered allmulticast mode [ 344.095754][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 344.170073][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 344.205201][ T1001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.216012][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.240055][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 344.305318][T16945] syzkaller1: entered promiscuous mode [ 344.310823][T16945] syzkaller1: entered allmulticast mode [ 344.348207][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 344.378377][T16948] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 344.462441][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.725915][ T5845] block nbd4: Receive control failed (result -1) [ 344.781224][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.798640][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.811408][ T5828] syz_tun (unregistering): left allmulticast mode [ 344.823848][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.833146][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.839959][ T5828] syz_tun (unregistering): left promiscuous mode [ 344.847624][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.865790][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.873165][ T5828] bridge0: port 2(syz_tun) entered disabled state [ 344.905403][T16974] netlink: 'syz.2.3294': attribute type 33 has an invalid length. [ 344.929174][T16969] veth0_to_team: entered promiscuous mode [ 345.010477][T16970] wlan0 speed is unknown, defaulting to 1000 [ 345.033692][T16970] lo speed is unknown, defaulting to 1000 [ 345.092829][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.261785][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.283689][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.333948][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.367797][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.777651][T16970] chnl_net:caif_netlink_parms(): no params data found [ 345.893693][ T5845] Bluetooth: hci4: command tx timeout [ 345.919640][T17011] Cannot find del_set index 4 as target [ 346.026149][T16970] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.038586][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.047524][T16970] bridge_slave_0: entered allmulticast mode [ 346.057130][T16970] bridge_slave_0: entered promiscuous mode [ 346.070145][T16970] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.077755][T16970] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.085500][T16970] bridge_slave_1: entered allmulticast mode [ 346.093841][T16970] bridge_slave_1: entered promiscuous mode [ 346.124817][T17024] __nla_validate_parse: 11 callbacks suppressed [ 346.124835][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3307'. [ 346.167879][T16970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.191227][T16970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.271020][T16970] team0: Port device team_slave_0 added [ 346.303399][T16970] team0: Port device team_slave_1 added [ 346.376802][T16970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.385907][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.442581][T16970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.468013][T16970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.486216][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.515539][T16970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.627630][T17047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3313'. [ 346.689659][T17049] netlink: 'syz.1.3314': attribute type 2 has an invalid length. [ 346.846055][T17069] tipc: Failed to remove unknown binding: 66,1,1/0:2395049759/2395049761 [ 346.944100][ T5845] Bluetooth: hci0: command tx timeout [ 348.393495][T16970] hsr_slave_0: entered promiscuous mode [ 348.399862][T16970] hsr_slave_1: entered promiscuous mode [ 348.406682][T16970] debugfs: 'hsr0' already exists in 'hsr' [ 348.412661][T16970] Cannot create hsr debugfs directory [ 348.526822][T17081] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3321'. [ 348.857694][T16970] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.868772][T16970] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.898068][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'. [ 348.918817][T17108] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3327'. [ 348.974108][T17112] net_ratelimit: 18 callbacks suppressed [ 348.974125][T17112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.988378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.029615][T17111] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3330'. [ 349.041506][ T5845] Bluetooth: hci0: command tx timeout [ 349.047383][T16538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.057980][T16970] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.082991][T16970] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.122709][T17119] netlink: 'syz.1.3332': attribute type 3 has an invalid length. [ 349.138407][T17121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3330'. [ 349.157051][T16970] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.189797][T16970] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.255541][T17127] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3333'. [ 349.255846][T16970] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.322359][T16970] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.429111][T17135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3337'. [ 349.499719][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3338'. [ 349.581296][T17144] syzkaller0: entered promiscuous mode [ 349.590960][T17144] syzkaller0: entered allmulticast mode [ 349.665829][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.732996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.767284][T16970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 349.786792][T16970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.843152][T16970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.903192][T16970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.055963][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.347830][T16970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.438672][T16970] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.468867][ T4118] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.476070][ T4118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.598279][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.605500][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.693196][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.771394][T17221] bond0: entered promiscuous mode [ 350.815761][T17221] bond_slave_0: entered promiscuous mode [ 350.824250][T17221] bond_slave_1: entered promiscuous mode [ 350.849958][T17221] batadv0: entered promiscuous mode [ 350.873800][T17221] debugfs: 'hsr1' already exists in 'hsr' [ 350.879575][T17221] Cannot create hsr debugfs directory [ 350.891379][T17221] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 351.097346][T16538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.105902][ T5845] Bluetooth: hci0: command tx timeout [ 351.196692][T17253] v: renamed from vlan0 (while UP) [ 351.295423][T17260] syzkaller1: entered promiscuous mode [ 351.301106][T17260] syzkaller1: entered allmulticast mode [ 351.313703][T17261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.417891][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.457904][T16970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.478952][T17270] xt_nat: multiple ranges no longer supported [ 351.602724][T17276] __nla_validate_parse: 5 callbacks suppressed [ 351.602743][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 351.652566][T17276] gretap0: entered promiscuous mode [ 351.760898][T17287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3378'. [ 351.829854][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'. [ 353.174453][ T5845] Bluetooth: hci0: command tx timeout [ 353.459711][T16970] veth0_vlan: entered promiscuous mode [ 353.505569][T16970] veth1_vlan: entered promiscuous mode [ 353.641346][T16970] veth0_macvtap: entered promiscuous mode [ 353.668965][T16970] veth1_macvtap: entered promiscuous mode [ 353.713705][T16970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.757136][T16970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.775538][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3389'. [ 353.818603][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 353.832702][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 353.841712][T17328] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3391'. [ 353.933184][ T1308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.964696][ T1308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.981017][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 353.998329][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 354.008133][T17336] net_ratelimit: 12 callbacks suppressed [ 354.008144][T17336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.009743][T17341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.017908][ T1308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.055973][T17342] xt_recent: Unsupported userspace flags (000000b1) [ 354.059056][ T1308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.075994][T17344] ipt_ECN: cannot use operation on non-tcp rule [ 354.124769][T17340] xt_CT: No such helper "snmp_trap" [ 354.213648][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.573619][T17371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3403'. [ 354.590149][T17371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.599282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.778828][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.856053][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.254354][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.577304][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.897034][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.938447][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.971930][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.028874][ T4849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.039991][T17373] netlink: 'syz.1.3404': attribute type 1 has an invalid length. [ 356.050932][ T4849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.065086][T17373] netlink: 'syz.1.3404': attribute type 3 has an invalid length. [ 356.073518][T17373] NCSI netlink: No device for ifindex 813332851 [ 356.159021][T17384] netlink: 'syz.4.3284': attribute type 4 has an invalid length. [ 356.263547][T17384] bond1: Unable to set down delay as MII monitoring is disabled [ 356.277915][T17384] bond1 (unregistering): Released all slaves [ 356.316295][T17391] syzkaller1: entered promiscuous mode [ 356.321797][T17391] syzkaller1: entered allmulticast mode [ 356.577238][ T5970] IPVS: starting estimator thread 0... [ 356.651594][T17418] __nla_validate_parse: 5 callbacks suppressed [ 356.651613][T17418] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3418'. [ 356.661242][T17419] digital: digital_start_poll: Unknown protocol [ 356.680156][T17414] IPVS: using max 28 ests per chain, 67200 per kthread [ 356.880267][T17437] netlink: 'syz.1.3424': attribute type 1 has an invalid length. [ 356.945601][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3424'. [ 356.970021][T17437] bond0: entered promiscuous mode [ 356.983569][T17437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.049222][T17447] bond0: (slave bridge2): making interface the new active one [ 357.090677][T17447] bridge2: entered promiscuous mode [ 357.098776][T17447] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 357.115991][T17438] bond0: entered allmulticast mode [ 357.133214][T17438] bridge2: entered allmulticast mode [ 357.239979][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3432'. [ 357.323561][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3433'. [ 357.350635][T17475] netlink: 'syz.1.3434': attribute type 7 has an invalid length. [ 359.013581][ T10] net_ratelimit: 10 callbacks suppressed [ 359.013600][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.413185][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.054513][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.453203][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.854624][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.094926][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.504135][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.972511][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.134726][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.533222][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.213646][ T5970] net_ratelimit: 5 callbacks suppressed [ 364.213659][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.615030][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.022616][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.252743][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.653141][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.293905][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.693015][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.932646][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.332494][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.733899][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.412953][ T10] net_ratelimit: 5 callbacks suppressed [ 369.412972][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.815929][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.974170][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.452746][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.853353][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.492728][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.893235][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.217604][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.533788][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.933317][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.612715][ T183] net_ratelimit: 4 callbacks suppressed [ 374.612734][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.013165][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.252810][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.653939][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.053958][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.062339][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.693905][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.853006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.093416][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.732849][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.780136][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.813782][ T183] net_ratelimit: 10 callbacks suppressed [ 379.813796][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.213307][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.852633][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.253120][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.335715][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.893305][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.134553][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.293243][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.933715][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.334048][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.015672][ T183] net_ratelimit: 4 callbacks suppressed [ 385.015691][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.173742][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.413152][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.053685][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.456279][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.093336][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.412739][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.493220][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.133453][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.213274][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.213787][ T5970] net_ratelimit: 5 callbacks suppressed [ 390.213800][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.452667][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.613395][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.932488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.252786][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.653046][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.063525][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.223658][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.292509][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.693484][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.252851][T17353] net_ratelimit: 5 callbacks suppressed [ 395.252865][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.414005][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.815706][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.453753][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.853217][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.493569][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.893580][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.980206][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.133106][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.292655][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.613699][ T183] net_ratelimit: 8 callbacks suppressed [ 400.613717][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.013086][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.335246][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.653585][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.053412][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.293407][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.453229][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.693570][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.094167][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.736085][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.813374][ T5970] net_ratelimit: 5 callbacks suppressed [ 405.813388][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.213492][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.852670][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.263296][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.576442][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.893196][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.295251][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.372609][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.533160][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.932726][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.012553][ T5970] net_ratelimit: 6 callbacks suppressed [ 411.012573][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.413590][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.413833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.431090][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.572817][ T180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.054842][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.453361][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.093074][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.493597][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.133891][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.753830][T17487] veth0_to_bond: entered allmulticast mode [ 414.760475][T17486] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 414.788883][T17486] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 414.809877][T17486] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 414.862073][T17495] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3441'. [ 414.921569][T17499] xt_hashlimit: size too large, truncated to 1048576 [ 414.991082][T17509] ieee802154 phy1 wpan1: encryption failed: -90 [ 415.031742][T17502] netlink: 'syz.3.3443': attribute type 33 has an invalid length. [ 415.091905][T17502] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 415.137235][T17502] bond2 (unregistering): Released all slaves [ 415.468986][T17529] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 415.646769][T17556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3455'. [ 415.792898][T17567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3459'. [ 415.823998][T17567] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.832701][T17567] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.864888][T17575] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3460'. [ 415.965293][ T5945] IPVS: starting estimator thread 0... [ 415.971063][T17578] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 416.036990][T17584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3464'. [ 416.050625][T17584] netlink: 'syz.1.3464': attribute type 2 has an invalid length. [ 416.060988][T17584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3464'. [ 416.072676][T17579] IPVS: using max 50 ests per chain, 120000 per kthread [ 416.214077][ T183] net_ratelimit: 6 callbacks suppressed [ 416.214093][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.232989][T17594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.378976][T17601] netlink: 'syz.0.3470': attribute type 1 has an invalid length. [ 416.490162][T17603] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3468'. [ 416.511142][T17611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3474'. [ 416.542314][T17611] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3474'. [ 416.618303][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.746141][T17630] Bluetooth: MGMT ver 1.23 [ 416.867096][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3480'. [ 417.002474][T17650] netlink: 'syz.1.3484': attribute type 1 has an invalid length. [ 417.179684][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.232454][T17667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.241291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.258136][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.318488][T17675] tipc: Failed to obtain node identity [ 417.325481][T17675] tipc: Enabling of bearer rejected, failed to enable media [ 417.494733][T17353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.573365][T17684] syz_tun: entered allmulticast mode [ 417.588962][T17684] dvmrp8: entered allmulticast mode [ 417.611706][T17683] syz_tun: left allmulticast mode [ 417.653361][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.661501][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.127508][T17729] netlink: 'syz.1.3512': attribute type 3 has an invalid length. [ 418.468906][T17755] netlink: 'syz.3.3520': attribute type 1 has an invalid length. [ 418.730186][T17777] xt_socket: unknown flags 0x50 [ 418.781351][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 418.788267][ T5845] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 419.840307][T17856] syzkaller0: entered promiscuous mode [ 419.846535][T17856] syzkaller0: entered allmulticast mode [ 419.994735][T17868] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 420.221030][T17874] bond3: Unable to set up delay as MII monitoring is disabled [ 420.231223][T17874] bond3 (unregistering): Released all slaves [ 420.261652][T17877] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 420.344588][T17825] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 420.407750][T17887] netlink: 'syz.4.3558': attribute type 1 has an invalid length. [ 420.417125][T17887] FAULT_INJECTION: forcing a failure. [ 420.417125][T17887] name failslab, interval 1, probability 0, space 0, times 0 [ 420.431204][T17887] CPU: 1 UID: 0 PID: 17887 Comm: syz.4.3558 Not tainted syzkaller #0 PREEMPT(full) [ 420.431230][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.431257][T17887] Call Trace: [ 420.431263][T17887] [ 420.431272][T17887] dump_stack_lvl+0x189/0x250 [ 420.431298][T17887] ? __pfx____ratelimit+0x10/0x10 [ 420.431319][T17887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.431337][T17887] ? __pfx__printk+0x10/0x10 [ 420.431360][T17887] ? __pfx___might_resched+0x10/0x10 [ 420.431377][T17887] ? fs_reclaim_acquire+0x7d/0x100 [ 420.431405][T17887] should_fail_ex+0x414/0x560 [ 420.431429][T17887] should_failslab+0xa8/0x100 [ 420.431454][T17887] __kmalloc_cache_noprof+0x6f/0x6f0 [ 420.431475][T17887] ? qfq_change_class+0x9ea/0xea0 [ 420.431505][T17887] qfq_change_class+0x9ea/0xea0 [ 420.431537][T17887] ? __pfx_qfq_change_class+0x10/0x10 [ 420.431565][T17887] ? lockdep_rtnl_is_held+0x26/0x40 [ 420.431589][T17887] ? qdisc_lookup+0x179/0x6d0 [ 420.431610][T17887] tc_ctl_tclass+0xaa0/0x1500 [ 420.431645][T17887] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 420.431663][T17887] ? rcu_is_watching+0x15/0xb0 [ 420.431683][T17887] ? trace_contention_end+0x39/0x100 [ 420.431704][T17887] ? __mutex_lock+0x335/0x1350 [ 420.431732][T17887] ? __dev_queue_xmit+0x289/0x3140 [ 420.431750][T17887] ? __dev_queue_xmit+0x289/0x3140 [ 420.431797][T17887] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 420.431816][T17887] rtnetlink_rcv_msg+0x77c/0xb70 [ 420.431843][T17887] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 420.431864][T17887] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.431884][T17887] ? ref_tracker_free+0x63a/0x7d0 [ 420.431905][T17887] ? __asan_memcpy+0x40/0x70 [ 420.431923][T17887] ? __pfx_ref_tracker_free+0x10/0x10 [ 420.431954][T17887] netlink_rcv_skb+0x208/0x470 [ 420.431972][T17887] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.431996][T17887] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.432025][T17887] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.432050][T17887] netlink_unicast+0x82f/0x9e0 [ 420.432083][T17887] ? __pfx_netlink_unicast+0x10/0x10 [ 420.432111][T17887] ? netlink_sendmsg+0x642/0xb30 [ 420.432125][T17887] ? skb_put+0x11b/0x210 [ 420.432149][T17887] netlink_sendmsg+0x805/0xb30 [ 420.432174][T17887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.432194][T17887] ? aa_sock_msg_perm+0xf1/0x1b0 [ 420.432213][T17887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.432233][T17887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.432251][T17887] __sock_sendmsg+0x21c/0x270 [ 420.432273][T17887] ____sys_sendmsg+0x505/0x820 [ 420.432303][T17887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.432336][T17887] ? import_iovec+0x74/0xa0 [ 420.432360][T17887] ___sys_sendmsg+0x21f/0x2a0 [ 420.432385][T17887] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.432417][T17887] ? rcu_read_lock_any_held+0xb3/0x120 [ 420.432466][T17887] ? __fget_files+0x2a/0x420 [ 420.432480][T17887] ? __fget_files+0x3a0/0x420 [ 420.432505][T17887] __x64_sys_sendmsg+0x19b/0x260 [ 420.432531][T17887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.432565][T17887] ? __pfx_ksys_write+0x10/0x10 [ 420.432597][T17887] ? do_syscall_64+0xbe/0xf80 [ 420.432623][T17887] do_syscall_64+0xfa/0xf80 [ 420.432644][T17887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.432660][T17887] ? clear_bhb_loop+0x60/0xb0 [ 420.432681][T17887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.432697][T17887] RIP: 0033:0x7f9d7778f749 [ 420.432714][T17887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.432729][T17887] RSP: 002b:00007f9d78618038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.432748][T17887] RAX: ffffffffffffffda RBX: 00007f9d779e5fa0 RCX: 00007f9d7778f749 [ 420.432761][T17887] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 420.432772][T17887] RBP: 00007f9d78618090 R08: 0000000000000000 R09: 0000000000000000 [ 420.432782][T17887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.432792][T17887] R13: 00007f9d779e6038 R14: 00007f9d779e5fa0 R15: 00007ffc96008fd8 [ 420.432822][T17887] [ 420.834037][T17886] ================================================================== [ 420.842139][T17886] BUG: KASAN: slab-use-after-free in qfq_reset_qdisc+0xf9/0x240 [ 420.849788][T17886] Read of size 8 at addr ffff888057773450 by task syz.4.3558/17886 [ 420.857681][T17886] [ 420.859992][T17886] CPU: 1 UID: 0 PID: 17886 Comm: syz.4.3558 Not tainted syzkaller #0 PREEMPT(full) [ 420.860006][T17886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.860012][T17886] Call Trace: [ 420.860017][T17886] [ 420.860022][T17886] dump_stack_lvl+0x189/0x250 [ 420.860036][T17886] ? __virt_addr_valid+0x1c8/0x5c0 [ 420.860049][T17886] ? rcu_is_watching+0x15/0xb0 [ 420.860059][T17886] ? __kasan_check_byte+0x12/0x40 [ 420.860073][T17886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.860082][T17886] ? rcu_is_watching+0x15/0xb0 [ 420.860092][T17886] ? lock_release+0x4b/0x3b0 [ 420.860102][T17886] ? __virt_addr_valid+0x1c8/0x5c0 [ 420.860113][T17886] ? __virt_addr_valid+0x4a5/0x5c0 [ 420.860124][T17886] print_report+0xca/0x240 [ 420.860133][T17886] ? qfq_reset_qdisc+0xf9/0x240 [ 420.860146][T17886] kasan_report+0x118/0x150 [ 420.860159][T17886] ? qfq_reset_qdisc+0xf9/0x240 [ 420.860173][T17886] qfq_reset_qdisc+0xf9/0x240 [ 420.860186][T17886] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 420.860198][T17886] qdisc_reset+0xff/0x560 [ 420.860213][T17886] __qdisc_destroy+0x120/0x400 [ 420.860227][T17886] dev_shutdown+0x34c/0x440 [ 420.860236][T17886] unregister_netdevice_many_notify+0x117c/0x2310 [ 420.860251][T17886] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 420.860264][T17886] ? queue_delayed_work_on+0x11a/0x280 [ 420.860274][T17886] ? lockdep_hardirqs_on+0x98/0x140 [ 420.860288][T17886] unregister_netdevice_queue+0x317/0x350 [ 420.860298][T17886] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 420.860308][T17886] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 420.860317][T17886] ? linkwatch_urgent_event+0x62/0x3a0 [ 420.860329][T17886] __tun_detach+0x6d9/0x15d0 [ 420.860342][T17886] ? __pfx_tun_chr_close+0x10/0x10 [ 420.860355][T17886] tun_chr_close+0x10a/0x1c0 [ 420.860368][T17886] __fput+0x44c/0xa70 [ 420.860380][T17886] task_work_run+0x1d4/0x260 [ 420.860394][T17886] ? __pfx_task_work_run+0x10/0x10 [ 420.860405][T17886] ? __se_sys_close_range+0x4ed/0x650 [ 420.860420][T17886] ? exit_to_user_mode_loop+0x55/0x4f0 [ 420.860430][T17886] exit_to_user_mode_loop+0xff/0x4f0 [ 420.860439][T17886] ? rcu_is_watching+0x15/0xb0 [ 420.860450][T17886] do_syscall_64+0x2e3/0xf80 [ 420.860462][T17886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.860472][T17886] ? clear_bhb_loop+0x60/0xb0 [ 420.860482][T17886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.860491][T17886] RIP: 0033:0x7f9d7778f749 [ 420.860501][T17886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.860510][T17886] RSP: 002b:00007ffc96009138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 420.860520][T17886] RAX: 0000000000000000 RBX: 00007f9d779e7da0 RCX: 00007f9d7778f749 [ 420.860527][T17886] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 420.860538][T17886] RBP: 00007f9d779e7da0 R08: 0000000000000000 R09: 000000109600942f [ 420.860544][T17886] R10: 000000000003fd54 R11: 0000000000000246 R12: 0000000000066d17 [ 420.860550][T17886] R13: 00007ffc96009230 R14: ffffffffffffffff R15: 00007ffc96009250 [ 420.860561][T17886] [ 420.860564][T17886] [ 421.165811][T17886] Allocated by task 17887: [ 421.170209][T17886] kasan_save_track+0x3e/0x80 [ 421.174877][T17886] __kasan_kmalloc+0x93/0xb0 [ 421.179453][T17886] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 421.184809][T17886] qfq_change_class+0x5c4/0xea0 [ 421.189644][T17886] tc_ctl_tclass+0xaa0/0x1500 [ 421.194302][T17886] rtnetlink_rcv_msg+0x77c/0xb70 [ 421.199225][T17886] netlink_rcv_skb+0x208/0x470 [ 421.203992][T17886] netlink_unicast+0x82f/0x9e0 [ 421.208739][T17886] netlink_sendmsg+0x805/0xb30 [ 421.213479][T17886] __sock_sendmsg+0x21c/0x270 [ 421.218136][T17886] ____sys_sendmsg+0x505/0x820 [ 421.222885][T17886] ___sys_sendmsg+0x21f/0x2a0 [ 421.227547][T17886] __x64_sys_sendmsg+0x19b/0x260 [ 421.232475][T17886] do_syscall_64+0xfa/0xf80 [ 421.236959][T17886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.242835][T17886] [ 421.245137][T17886] Freed by task 17887: [ 421.249181][T17886] kasan_save_track+0x3e/0x80 [ 421.253840][T17886] __kasan_save_free_info+0x46/0x50 [ 421.259021][T17886] __kasan_slab_free+0x5c/0x80 [ 421.263764][T17886] kfree+0x1c0/0x660 [ 421.267643][T17886] qfq_change_class+0xb0c/0xea0 [ 421.272482][T17886] tc_ctl_tclass+0xaa0/0x1500 [ 421.277149][T17886] rtnetlink_rcv_msg+0x77c/0xb70 [ 421.282068][T17886] netlink_rcv_skb+0x208/0x470 [ 421.286812][T17886] netlink_unicast+0x82f/0x9e0 [ 421.291565][T17886] netlink_sendmsg+0x805/0xb30 [ 421.296306][T17886] __sock_sendmsg+0x21c/0x270 [ 421.300970][T17886] ____sys_sendmsg+0x505/0x820 [ 421.305720][T17886] ___sys_sendmsg+0x21f/0x2a0 [ 421.310378][T17886] __x64_sys_sendmsg+0x19b/0x260 [ 421.315297][T17886] do_syscall_64+0xfa/0xf80 [ 421.319786][T17886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.325659][T17886] [ 421.327964][T17886] The buggy address belongs to the object at ffff888057773400 [ 421.327964][T17886] which belongs to the cache kmalloc-128 of size 128 [ 421.341994][T17886] The buggy address is located 80 bytes inside of [ 421.341994][T17886] freed 128-byte region [ffff888057773400, ffff888057773480) [ 421.355682][T17886] [ 421.357990][T17886] The buggy address belongs to the physical page: [ 421.364387][T17886] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57773 [ 421.373126][T17886] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 421.380225][T17886] page_type: f5(slab) [ 421.384189][T17886] raw: 00fff00000000000 ffff88801a026a00 dead000000000100 dead000000000122 [ 421.392752][T17886] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 421.401326][T17886] page dumped because: kasan: bad access detected [ 421.407727][T17886] page_owner tracks the page as allocated [ 421.413417][T17886] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5837, tgid 5837 (syz-executor), ts 76888001652, free_ts 23202709206 [ 421.432673][T17886] post_alloc_hook+0x234/0x290 [ 421.437428][T17886] get_page_from_freelist+0x2365/0x2440 [ 421.443045][T17886] __alloc_frozen_pages_noprof+0x181/0x370 [ 421.448838][T17886] alloc_pages_mpol+0x232/0x4a0 [ 421.453675][T17886] allocate_slab+0x86/0x3b0 [ 421.458178][T17886] ___slab_alloc+0xf2b/0x1960 [ 421.462845][T17886] __slab_alloc+0x65/0x100 [ 421.467283][T17886] __kmalloc_noprof+0x471/0x800 [ 421.472119][T17886] tnode_new+0xc3/0x380 [ 421.476269][T17886] resize+0x406/0x2710 [ 421.480326][T17886] fib_insert_alias+0xab7/0x1210 [ 421.485246][T17886] fib_table_insert+0x67c/0x1b50 [ 421.490172][T17886] fib_magic+0x2c4/0x390 [ 421.494396][T17886] fib_add_ifaddr+0x144/0x5f0 [ 421.499055][T17886] fib_inetaddr_event+0x12e/0x190 [ 421.504058][T17886] notifier_call_chain+0x19d/0x3a0 [ 421.509153][T17886] page last free pid 1 tgid 1 stack trace: [ 421.514933][T17886] __free_frozen_pages+0xbc4/0xd30 [ 421.520032][T17886] free_contig_range+0x1bd/0x490 [ 421.524951][T17886] destroy_args+0x69/0x660 [ 421.529349][T17886] debug_vm_pgtable+0x39f/0x3b0 [ 421.534184][T17886] do_one_initcall+0x1fb/0x7f0 [ 421.538930][T17886] do_initcall_level+0x104/0x190 [ 421.543849][T17886] do_initcalls+0x59/0xa0 [ 421.548157][T17886] kernel_init_freeable+0x334/0x4b0 [ 421.553333][T17886] kernel_init+0x1d/0x1d0 [ 421.557643][T17886] ret_from_fork+0x599/0xb30 [ 421.562215][T17886] ret_from_fork_asm+0x1a/0x30 [ 421.566960][T17886] [ 421.569268][T17886] Memory state around the buggy address: [ 421.574879][T17886] ffff888057773300: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 421.582923][T17886] ffff888057773380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 421.590967][T17886] >ffff888057773400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 421.599003][T17886] ^ [ 421.605656][T17886] ffff888057773480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 421.613697][T17886] ffff888057773500: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 421.621738][T17886] ================================================================== [ 421.632674][T17886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 421.639918][T17886] CPU: 0 UID: 0 PID: 17886 Comm: syz.4.3558 Not tainted syzkaller #0 PREEMPT(full) [ 421.649295][T17886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.659357][T17886] Call Trace: [ 421.662630][T17886] [ 421.665549][T17886] dump_stack_lvl+0x99/0x250 [ 421.670127][T17886] ? __asan_memcpy+0x40/0x70 [ 421.674701][T17886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.679880][T17886] ? __pfx__printk+0x10/0x10 [ 421.684461][T17886] vpanic+0x237/0x6d0 [ 421.688522][T17886] ? __pfx_vpanic+0x10/0x10 [ 421.693012][T17886] ? preempt_schedule_common+0x83/0xd0 [ 421.698469][T17886] ? preempt_schedule+0xae/0xc0 [ 421.703308][T17886] panic+0xb9/0xc0 [ 421.707130][T17886] ? __pfx_panic+0x10/0x10 [ 421.711534][T17886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.717855][T17886] ? qfq_reset_qdisc+0xf9/0x240 [ 421.722690][T17886] check_panic_on_warn+0x89/0xb0 [ 421.727615][T17886] ? qfq_reset_qdisc+0xf9/0x240 [ 421.732448][T17886] end_report+0x6f/0x140 [ 421.736676][T17886] kasan_report+0x129/0x150 [ 421.741161][T17886] ? qfq_reset_qdisc+0xf9/0x240 [ 421.746000][T17886] qfq_reset_qdisc+0xf9/0x240 [ 421.750664][T17886] ? __pfx_qfq_reset_qdisc+0x10/0x10 [ 421.755933][T17886] qdisc_reset+0xff/0x560 [ 421.760251][T17886] __qdisc_destroy+0x120/0x400 [ 421.765004][T17886] dev_shutdown+0x34c/0x440 [ 421.769491][T17886] unregister_netdevice_many_notify+0x117c/0x2310 [ 421.775906][T17886] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 421.782653][T17886] ? queue_delayed_work_on+0x11a/0x280 [ 421.788096][T17886] ? lockdep_hardirqs_on+0x98/0x140 [ 421.793282][T17886] unregister_netdevice_queue+0x317/0x350 [ 421.798989][T17886] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 421.804779][T17886] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 421.811003][T17886] ? linkwatch_urgent_event+0x62/0x3a0 [ 421.816449][T17886] __tun_detach+0x6d9/0x15d0 [ 421.821025][T17886] ? __pfx_tun_chr_close+0x10/0x10 [ 421.826120][T17886] tun_chr_close+0x10a/0x1c0 [ 421.830696][T17886] __fput+0x44c/0xa70 [ 421.834665][T17886] task_work_run+0x1d4/0x260 [ 421.839241][T17886] ? __pfx_task_work_run+0x10/0x10 [ 421.844336][T17886] ? __se_sys_close_range+0x4ed/0x650 [ 421.849702][T17886] ? exit_to_user_mode_loop+0x55/0x4f0 [ 421.855231][T17886] exit_to_user_mode_loop+0xff/0x4f0 [ 421.860511][T17886] ? rcu_is_watching+0x15/0xb0 [ 421.865260][T17886] do_syscall_64+0x2e3/0xf80 [ 421.869837][T17886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.875886][T17886] ? clear_bhb_loop+0x60/0xb0 [ 421.880546][T17886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.886607][T17886] RIP: 0033:0x7f9d7778f749 [ 421.891007][T17886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.910606][T17886] RSP: 002b:00007ffc96009138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 421.919015][T17886] RAX: 0000000000000000 RBX: 00007f9d779e7da0 RCX: 00007f9d7778f749 [ 421.926973][T17886] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 421.934928][T17886] RBP: 00007f9d779e7da0 R08: 0000000000000000 R09: 000000109600942f [ 421.942882][T17886] R10: 000000000003fd54 R11: 0000000000000246 R12: 0000000000066d17 [ 421.950834][T17886] R13: 00007ffc96009230 R14: ffffffffffffffff R15: 00007ffc96009250 [ 421.958797][T17886] [ 421.961945][T17886] Kernel Offset: disabled [ 421.966255][T17886] Rebooting in 86400 seconds..