last executing test programs: 40.832621914s ago: executing program 3 (id=3694): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xadf, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x30, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x17, 0x501, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @empty, @remote}}}}}}, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:* mw'], 0xa) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r7, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x23}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x29}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040844}, 0x200000c0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8800000010000504feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000680012800e0001006970366772657461700000005400028008000c0001000000060010004e22000014000700fc020000000000000000000000000000060011004e22000004001200060018000900000008000100", @ANYRES32=r3], 0x88}}, 0x4) 40.584746826s ago: executing program 1 (id=3697): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100ff}}], 0x18}}], 0x1, 0x8450) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x15) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 40.472052373s ago: executing program 2 (id=3699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffe0, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept4(r12, 0x0, 0x0, 0x800) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0b062dbd7000030000003000000008000200", @ANYRES32=r11, @ANYBLOB="0500f377efa1d64112d672cb1699351033195415f500000000000e603360d21f16c7945709c32aa033da3952975b62dd17d1958f21cac0236d99d436e705bf300cdb0b383af0c58f66480449a0f8ebcc4ab47a5f3fa3cde7b6635d5f4cc8398db512f291f4e5205941c56772438460000000000000"], 0x24}}, 0x0) 40.356523535s ago: executing program 3 (id=3700): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000003c0)=0x26, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x65, 0x8, 0x0, 0xfffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4f4e, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010600000000000000000900000024000480130001"], 0x38}}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f00000002c0)=0x840, 0x4) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000800000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000) sendmmsg$sock(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x8}, 0x1c) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x0) connect$vsock_stream(r7, &(0x7f0000000340)={0x28, 0x0, 0x2711, @host}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 40.084421534s ago: executing program 2 (id=3701): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10c4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x10, 0xfff3}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$packet(0x11, 0x2, 0x300) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 39.887516422s ago: executing program 4 (id=3702): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000200)=@tipc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/48, 0x30}, {&(0x7f0000000300)=""/72, 0x48}], 0x2, &(0x7f0000000580)=""/126, 0x7e}, 0x100) 39.649976143s ago: executing program 1 (id=3703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000200)="448b7c", 0x3}, {&(0x7f0000000440)="03be9b0e06798d7d34d9b282be419e87b4b88c0e4015bf66d971220929e8c28c517103000000000000", 0x29}], 0x3) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bff32ebb42a9ecbee5de6ccd40dd6826eef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "0e3f81a20e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0x22}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040d", 0xc}], 0x3) 39.12817767s ago: executing program 3 (id=3704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x260, 0x0, 0x5002004a, 0x0, 0xf8, 0x0, 0x1c8, 0x3c8, 0x3c8, 0x1c8, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffff00, 0xff000000, 0xffffff00, 0xffffffff], 0x4e22, 0x4e20, 0x4e24, 0x4e20, 0x5, 0x1000, 0x7, 0x4, 0x6}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c23, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x3, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) r1 = socket(0x400000000010, 0xa, 0x0) sendmmsg(r1, &(0x7f0000001f00)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000100)="43df7a9e41fe4b2a5ba9dc5904a1bd582535560e434465412487ae576fabd682929aa8137fa47c1dbe11242ff87ec624ee8e79249f117018fcfcee057ea1fa428504c5a9b7ececb49cc5ef36308810a7", 0x50}, {&(0x7f0000000180)="710835dc39d14c0d69a5e25fe55cdec9f76cff26288ee57d5596dc4568802618731bfe1421dc8605f89f7c22462a04d7679c3b3b12259edfc12566", 0x3b}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="f744388d840cffb46b3f0d702a66240142a662e8f06418188cc75cd25d22268a9fbbb10558257cb4d21b09eb787c14b04136d098c7fd08ccf591361aacf555bc15cb3de499a8e34a03b115f3c17aae81ccb9f04abc8fffe2d39ee4b3", 0x5c}], 0x4, &(0x7f0000001280)=[{0x68, 0x117, 0x3, "5ad94ca7ca69b0bf7001d4ef69ba3bb86b8ef457aa37b320417e3c3d4e0394ec5ef63e6d835bdd6641f27dea1ace159be2e3df7b18401d35fcf326eaaaa35e8139fdab65451c0ffd31c33dc7241a5688e98fbf"}, {0x68, 0x10e, 0x7fff, "a1bb937047721733f8edb464eec1752a689b92005bc1e7421c9fd329584db2f1d0ff869f19e3d2835cac3a431c6345962750090ec136f46b15d28805d17217e9957448c0a071d515c8577d501ce3104e1e7aa17c"}, {0xd0, 0xff, 0x313, "1afbf0607fdcc0d09488e387f1c6a45e918cbd90aec33f1e8a97fffe4de97cc33b4e88aeff0c94562073b95a9fe2f8c9041ba44dbdeef5c52f7835f5a593b96ff969cc74fca583f582b01dd8d1f4e5226fa0362ad353b7f924bcf7eb25063e0db3a4d87321cff23f72029eb826aa25134387dc4dda03ad88eca2fc999a1427176aed7761d1763c9ef666f84a1ec9164726adb7b9caa1c7ea0faf7f189d6493fbb85adf2e118f338f9fe7dff3d8e2ac3f596930f1b102683a84"}, {0x18, 0x10e, 0x0, "7e1e"}, {0x80, 0x3a, 0xe, "3e61be0a5fee046a3a07cb7682e4dba2dcee6af14d6074f05c7654bf115486d5a75f920b0ae09c0ee11e0e538ae2f88ffd3c782085802c60c6d3abc89b15e8c78c8f59c91fb90de5272b8240205c55a33ec1eaee0cbd22a11e7be0fe130aa905b45c04d98eadf7c55a544e38d775460b"}, {0x98, 0x116, 0xe, "cbcbc6ee9a86453fa78708425585c7002b5b19b33e8394eecabd83f4f3f1fcd043cd51cec9dee5bd7d579b469c70add729364856fb5cd06678365e8c997ce8c6fc1dc1d09e58c6c8b79ff7c3906a1c7021735482237a6138ece49ee8d2d91dff89acb28965c5af750ddb242ef66dcf0a3598d6b44c8e69aa2c0151030eda50866a"}, {0x70, 0x132, 0x76e, "8c4e5ef0cd9db62984908fb50641a167aed10321ca07a4b368b0171052829cf8edda587fc06ece5e840b87aae68a3eba77405917f3afd97913b7a4ab4e3a2fcc9a0feb050363d5702abe52d34a2e1e8b97a9d6bd77128f94b808115546d4ab1b"}, {0xe0, 0x88, 0xff, "d9537806319060070308e2025d9d773a7cbc2c45cb5b56d9c78a0efa08f9e4588de9ebc8767da21e85c9bcd1de70b5371ecc7b50da5e34053136b13b29943ab2f2ce840545f121ffdeae2b031f52ece12fc992bd75214d4878d578c8b7758c8b10579d27d5db7485f4e3cfc3ef10e6d0a46120d45957052277ac944bd81c81129112e5b1b7fa16554c299beb1836f2ba73e1db4b91fbdaffb7b54fda99d9aa8e6de0323a0154386d9f4db5548e188c470fe56fb3f6e161a209aafa7c9614f0717983734dfb5514dce5"}, {0x20, 0x10e, 0x8, "5c8ecb0936e919cfdd"}, {0x68, 0x116, 0x4, "1a4bf408ce0f77f534d4b725d0fb79029b241deb02eb0a0dc722a9ccaa527b6cd42e3cf3edaafae4fcfdacd1e27642a9b1e6882f69a9d6086512506483b8d425247692d47035258b3904b5e28c2a89616caedca86ada4cbe"}], 0x4a8}}, {{&(0x7f0000001740)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000017c0)="8f78cc112739d9f6c3768d", 0xb}, {&(0x7f0000001800)="4739c03fd3b7acf5b72d44ba60f5cf8117cd4d7e76b7e62a0bdbab69c93e4378d8c3b4ece02a9ef52fe9b23e15827913f230bb86f3aa49da69e00d88608f8baab5346800fdeed8", 0x47}, {&(0x7f0000001880)="a357c3929fae78df45b549cb01c26255b5628d25513d35872eab1815f4c26fd578a6566e7e2dd8f1ea651f26095038c0db64ff41dd37adbd6e63aefd9b2403c798971cc53ba5e9923fc9590bea26ca38bc8b48e7e9ab3253a007ab3a16598d7fcc7d23652bc19f6a9c211e1aa546c4972dd3eb959d0a5171b682", 0x7a}, {&(0x7f0000001900)="ea8b59b79bc1a59661a97c607bb4b44c80311ec8c02b27da68449af4785e8333d36d24d3601ee3c06c3c23e25d13b49eede4abf9d13a8da27c05d2b40241a665a03f0a87247e9152fa4aa5d6377a4f73d93b83889b94277fdd7b20c631d704a1d2f281594d884f07ff4ab6336a24fff619460a47e74446b82a4e1bc4f638e678cddfaed22f883f3d", 0x88}, {&(0x7f00000019c0)="8654e12cb76af3279cf1a03c6717762f55d1415a239ee9383129e8820921002598157cbc771596c82c7dc8ce1b1278b10e6b78b138ee02f0baf2ba4b6a7822c6f4611e22de776f95c27297d47a8a80826cea57c6ec1c61cb8df5f9e7349e00c06c2c4eba20860c84612d202c10263e357f8d93989e1993bfed41afd13f4c9e649a49a438cb91471a25c0d2aabe653e0a1543ec6b1df8ee5e77e20c1f30a977bb90284d16a904cee7266e843ccfc3574631aa80bd8048405f18ceff76809027ffb6b000ed77481682b4390b06c1bca420ae3b49cb", 0xd4}, {&(0x7f0000001ac0)="10a8ac1226fcf013a1ac00368ce62efc7ce3c5fc65f872da9675a23366c8c84af3e97eabf670b436de9391075f1f52c4a3255f79a08785f06f14590c8e226f9737e2fce66fbd7ee5c4aecc8927852e7a95a2fb682bfbe2e4b511783f1ab1a7fe480742ff41e10d4234370116c18ba1cf0f781b8146f61fad8bc6f14ff65790f113ed86043782f369c538b5b559884f7217", 0x91}], 0x6, &(0x7f0000001c00)=[{0x90, 0x3a, 0x9, "905b842ab89c9f5ae918299b9eb39ce8d6d96f24ec828c08ed0a0dc84846405ccf59dfb242860d4fa8f87ed36e4ed791e730aaeac0caf5cb62fc18c23b63636f37839b654ad4b0fd6e2df4684fc5260345e06d3204639d81d202de81459388d803a1cd1e75dea1686a38059c62f0964be5165ad0d3d4ec8f408b07190a"}, {0x48, 0x10a, 0xffffffff, "96bcf48956d153ac7343c4240c4d737586ebe0d5376dff5f5c4bc7a4f0cc9ad12ac6a68ea980675df320d37624664d399eacf585"}, {0x58, 0x114, 0xffffffff, "98181f35783634f8b146304b89b86c3029072a70e78f8f6a50a13f005abffda5f434e0a81d07604bb88d058dc26c4ef923bf967910d8f87287a340169d246c2590be43e841"}], 0x130}}, {{&(0x7f0000001d40)=@l2tp6={0xa, 0x0, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000000, 0x1}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001dc0)}], 0x1, &(0x7f0000001e40)=[{0xb0, 0x103, 0x0, "e4a8ff94cb23694511f684e97bbbe4c88577e5d63ca4ad81fbe7633f9705cdaee2d5a2ea20379c27267d5e191f1dc78df01f9d07a7744e4889cd0d8f39448d3dddf3059506fb1b3066212d6e2d3b783e603e797f297bc8677446d71a930c8c11c49a8cde9a743d9be1c3afb516e21084d2aab1883ff2d802f0595d78f96d9ccce59d215661da4aac2c11b658f6f49399df9043e205db0eba539c40ff7eeb9b"}], 0xb0}}], 0x3, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) 38.333668492s ago: executing program 4 (id=3705): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r1, 0x25, 0x0, @void}, 0x10) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) (async, rerun: 32) r5 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) (async) close(r6) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) 36.244745821s ago: executing program 2 (id=3707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00006005bbbbbbbbbbbbbbbbbbbbbbbb080045190018ab010000082f"], 0x2a) 32.730396909s ago: executing program 0 (id=3708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008084) 32.621065864s ago: executing program 0 (id=3709): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) bind$802154_raw(r0, &(0x7f0000000640)={0x24, @none={0x0, 0x1}}, 0x14) (async) recvmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/202, 0xca}, {&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000240)=""/32, 0x20}], 0x3}, 0x40000000) 32.574955667s ago: executing program 0 (id=3710): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x800) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) syz_emit_ethernet(0x46, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x1000000) 32.336707098s ago: executing program 0 (id=3711): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socket(0x2, 0x80805, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = socket$inet6(0xa, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 31.436970713s ago: executing program 0 (id=3712): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xb133}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xd66}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x68f}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x7fff}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000c30b73e8c8997f9018243428745fe13ded706011aaf1a57cb08747b296d38ecdf5b04a844c0a57f2beb6d82392db9b54069697ca49aed267abb98755958dbf31020e386dc0944fbfe806b7fbd4fcf3301d289cec520990c7e79162a0efe4f2d8a7dd5152a43c3b27b8d046d388718864311c4020a5c99459376701b87f863513af", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000"], 0x38, 0x4004c}}], 0x1, 0x805) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x20000800) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000880)=ANY=[], 0x32600) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x10310}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4028841}, 0x8000) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x9}, 0x8) (async) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x82002}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x453, 0x1, 0x70bd29, 0x25dfdbfd, "d8b156fb520af4f35dd1c2acb0107ad822c991ed0b3fb710f84e7d5ec8b848a55bae9d98a1374807e93db450259b2aea9ec3764284eebe7d0ae70ee6e3ff3afa63ed6e036c2e44a263da07edb6c1d965010349155cdb58b4ab975a4f9114910c72e46cd0c106f607c9a83405a38247b7ec822fd788288bcd36f298b0", ["", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 31.322516052s ago: executing program 0 (id=3713): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0xb23, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x14, 0xff, 0x3, 0x8, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}, 0x1, 0x7}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/15], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 31.248747864s ago: executing program 1 (id=3714): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$inet(0x2, 0x3, 0x3) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@ll={0x11, 0xf5, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="5566fb8aa6", 0x5}, {&(0x7f0000000100)="ff324d434ec75697a84d04", 0xb}, {&(0x7f0000000600)="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"/2809, 0xaf9}], 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRES64=r0], 0x10b8}, 0xff00) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00010001"], 0x20}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000f80)=[{}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000008000200070000000800020000000000140001"], 0x50}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') unshare(0x6a040000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(0xffffffffffffffff, 0x0, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r11, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, 0x0, 0x10) 30.547837947s ago: executing program 1 (id=3715): r0 = socket(0x15, 0x5, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7, 0x11, r0, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x6) 30.346131486s ago: executing program 1 (id=3716): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7, 0x1}, {0xb, 0xfff1}, {0x9, 0x65ac5ceac1834f4a}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x2c}}, 0x0) unshare(0x6020400) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x45, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x247c668d5209bf62, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25090002000f797a32000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x40844}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x27, 0xe80, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x30000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$unix(0x1, 0x1, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044080) bind$llc(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d2c0012802800081c903e01006c617374000000001800028008000140fffffe000c000240fffffffffffffff8080003400000011014"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) 29.409955123s ago: executing program 4 (id=3717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9, 0x0, 0x0, {0xa}}], {0x14}}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) 29.319160912s ago: executing program 2 (id=3718): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x840) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0xd, [{0x5, 0x2, 0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x5f, 0x6f]}}, 0x0, 0x38, 0x0, 0x1, 0x440}, 0x28) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0x9f, &(0x7f0000000300)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}, {"81a3938f294dfbfe12f72e749aa1c659ac547d71542e367223a54fd3d92418f757343f81608f66d8ee048892bcfb67f46735b1aed3c43cf3ee190739745531bb894a64ff489c32d4e887b044291db59a5a353583290a8fc4d7ee78f1f867fc8ae60c9ad9db513a377e"}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0xd27636450401d73e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008"], 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 29.277742466s ago: executing program 3 (id=3719): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000180)={'erspan0\x00', r2, 0x20, 0x8000, 0x80000000, 0xf, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x66, 0x0, 0xf, 0x4, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0xf, 0x15, [@broadcast, @private=0xa010100, @empty]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x12, r3}) (async) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010100000000000000000000000920000000080a010100000000000000000a0000020900010073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) (async) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b4411"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) (async) close(0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e0001", @ANYRESOCT=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D8\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c000280050008000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 29.114227967s ago: executing program 4 (id=3720): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x5, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1c}, @generic={0x7, 0x2, 0xa, 0x9, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="1100000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/15], 0x50) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c001800fedbdf2500010000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04003c00128009000100626f6e64000000002c0002800500010001000000080003000300000008000500e381000008000300937b0000080012000200000008000500", @ANYRES32=r1, @ANYBLOB], 0x64}}, 0x8000002) 28.886294466s ago: executing program 3 (id=3721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b00100003c00010325bd7000fcffffff0700000008000300", @ANYRES32=r1, @ANYBLOB="3c01698008009b00", @ANYRES32=r1, @ANYBLOB="9f00d58044011def7afa136b9638227d48133b53ae51d90896864a8f500a9a219ffd17f8a4a3b6abc7cc8c3174f0220c04a62407388f181931c978b8c554d9be6a3b4a50d463127c182c8bd9bba1a56a10d8b983a4f7b819ee9c23d1d81ddc9a8833e427ceb1e2055f9298f5cdeee3275acf41fbbec53a7381445651d8c5ba1d59c3f4144afd8db80717ab2e352c091842f6ff69789a8808004a00", @ANYRES32=r2, @ANYBLOB="00151595496ab8515eb9ce784b5bf7992b1d037da899126992e3e4f923de6d96422a81b92401089378f824cbbe0a1c701e1a4c9c74b145ee6ab9780ae9f619bb70cdf5d21f3cb2f91235d332749b9a4e79e6afb92e2a511651d1d57f666210cec7757f1d0837419269995bc98ec77867d1868bd6ba45b746cd7a51a4ac25e29c24367a333eaaabdf29c2dd01357a92630a1f63c6a5203059442390d2fdff1271d289fceb258cdf21dcacc6e53fbde805b1f964c299d8216eec06e56ee35a581984188dd933d9652fc901bc1597530128bd6de6eb10facd29cc14693caff7c800d9d174b424b297d367"], 0x1b0}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 28.784488844s ago: executing program 4 (id=3722): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socket(0x2, 0x80805, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = socket$inet6(0xa, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 28.767544114s ago: executing program 2 (id=3723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8010) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r3, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xdf, &(0x7f0000000080)=""/223}, 0x94) 28.764862168s ago: executing program 3 (id=3724): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x56}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @local, 0x97}, 0x1c) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r9, 0x3e}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x278}, {&(0x7f00000022c0)="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", 0x1fa}, {&(0x7f00000002c0)="55c28d3d76ef", 0x6}, {&(0x7f0000001180)="537df4d27d104f4de335fb25791fcabfe1045a3b5895ace92414471f11d36dd84a2439f17bb2af037988034ebd77f2bfc4f3e829c44efd70423d9d66ec84f33633fcce014a04ac95f33e2647503e0b9b4904e6ddebf95509c45b6a6a", 0x5c}], 0x5}, 0x4104) 28.548503567s ago: executing program 2 (id=3725): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e03, 0x800008, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000640)=ANY=[], 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty, 0x6}, 0x1c) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bind$bt_hci(r6, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x23, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ff7f0000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYRES32=r0, @ANYRES32], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x8, &(0x7f0000000440)=""/8, 0x41000, 0x6a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x3, 0x3, 0x4}], 0x10, 0xc}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) 27.835947422s ago: executing program 4 (id=3726): r0 = socket$inet(0x2, 0x3, 0x81) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x328, 0x70bd2d, 0x25dfdc03, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0xcc801) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff", 0x9}], 0x1}], 0x1, 0x40800) r2 = socket(0x15, 0x5, 0x0) connect$unix(r2, &(0x7f00000003c0)=@abs={0xa}, 0x6e) r3 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8, 0x0, 0xfffd}, @printk={@s, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe6, &(0x7f0000000500)=""/230, 0x0, 0x21}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x518, 0x398, 0x1d0, 0xc8, 0x0, 0x0, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, &(0x7f0000000100), {[{{@ip={@local, @multicast2, 0xffffffff, 0xff, 'sit0\x00', 'ip6erspan0\x00', {}, {}, 0x16, 0x3, 0x5}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0xc04}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@addrtype={{0x30}, {0x200, 0x8, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x9, @ipv4=@broadcast, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @loopback, 0xff, 0x0, 'vcan0\x00', 'team_slave_0\x00', {}, {}, 0x67, 0x2, 0x8}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x1, 0x3, 0x0, 0x0, 0x2], 0x3, 0x2}}}, @common=@addrtype={{0x30}, {0x502, 0x0, 0x1, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xf}}}, {{@ip={@remote, @rand_addr=0x64010100, 0xff000000, 0xffffff00, 'veth1_to_hsr\x00', 'wlan1\x00', {}, {}, 0xff, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8589", @ANYRES16=0x0, @ANYBLOB="000803000000fddbdf250100000008001100010000000500050001000000050022000100000006001d000900000005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4004000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0x3) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'lo\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) setsockopt(r4, 0x100, 0x4000, &(0x7f0000000280), 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf251e00000008000300", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20000094) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) 23.190310688s ago: executing program 1 (id=3727): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0x6, 0x28, [0x92f6, 0x10ff, 0x628c, 0x6], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700400000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10, 0x110, 0xd}}], 0x10}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x803, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) mkdirat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 32 (id=3713): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0xb23, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x14, 0xff, 0x3, 0x8, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}, 0x1, 0x7}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/15], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): equeue, screwing up backlog [ 424.647306][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.656015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.286065][ T6488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.294587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.702259][T16529] netlink: 'syz.2.2598': attribute type 13 has an invalid length. [ 425.713762][T16531] __nla_validate_parse: 4 callbacks suppressed [ 425.734216][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 425.745070][T16532] netlink: 'syz.2.2598': attribute type 13 has an invalid length. [ 425.771156][T16535] openvswitch: netlink: Message has 4096 unknown bytes. [ 425.771157][T16536] openvswitch: netlink: Message has 4096 unknown bytes. [ 426.212654][T16568] tipc: Enabled bearer , priority 0 [ 426.230239][T16568] syzkaller0: entered promiscuous mode [ 426.239210][T16568] syzkaller0: entered allmulticast mode [ 426.264772][T16572] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2610'. [ 426.446894][T16568] tipc: Resetting bearer [ 426.461285][T16564] tipc: Resetting bearer [ 426.535611][T16564] tipc: Disabling bearer [ 426.686119][T16594] netlink: 'syz.4.2614': attribute type 3 has an invalid length. [ 426.709078][T16594] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2614'. [ 426.719299][T16594] netlink: 'syz.4.2614': attribute type 10 has an invalid length. [ 426.858886][T16600] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2619'. [ 427.110688][T16593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2617'. [ 427.121510][T16593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2617'. [ 427.329057][T16624] vlan4: entered allmulticast mode [ 427.360448][T16624] bond0: entered allmulticast mode [ 427.446221][T16633] netlink: 'syz.3.2626': attribute type 1 has an invalid length. [ 427.537476][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2626'. [ 427.607387][T16637] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2627'. [ 427.617263][T16635] bond13: entered promiscuous mode [ 427.630732][T16635] bond13: entered allmulticast mode [ 427.639183][T16642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2629'. [ 428.045947][T16662] netlink: 'syz.2.2633': attribute type 1 has an invalid length. [ 428.092951][T16662] netlink: 'syz.2.2633': attribute type 4 has an invalid length. [ 428.117179][T16662] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2633'. [ 428.475967][T16676] netlink: 'syz.4.2640': attribute type 4 has an invalid length. [ 428.505250][T16676] netlink: 'syz.4.2640': attribute type 4 has an invalid length. [ 428.554135][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.618201][T16683] IPVS: set_ctl: invalid protocol: 44 172.20.20.33:20003 [ 428.665951][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.091914][T16710] pim6reg99999999: entered allmulticast mode [ 429.153207][T16708] bond14: entered promiscuous mode [ 429.170562][T16708] 8021q: adding VLAN 0 to HW filter on device bond14 [ 429.248895][T16718] x_tables: ip_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 429.452505][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.039491][T16768] syzkaller1: entered promiscuous mode [ 430.073323][T16768] syzkaller1: entered allmulticast mode [ 430.414680][T16788] netlink: 'syz.4.2663': attribute type 13 has an invalid length. [ 430.610318][T16802] netlink: 'syz.1.2667': attribute type 4 has an invalid length. [ 430.645604][T16802] netlink: 'syz.1.2667': attribute type 24 has an invalid length. [ 430.836944][T16817] __nla_validate_parse: 27 callbacks suppressed [ 430.836965][T16817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2670'. [ 431.035804][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2674'. [ 431.069769][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2674'. [ 431.088275][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'. [ 431.098766][T16835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2677'. [ 431.105198][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2674'. [ 431.108149][T16835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2677'. [ 431.514791][T16852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 431.584533][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 431.628286][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.952444][T16873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.118902][ T29] audit: type=1800 audit(1780794084.049:9): pid=16884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2691" name=CB dev="tmpfs" ino=2527 res=0 errno=0 [ 432.200313][ T29] audit: type=1800 audit(1780794084.119:10): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2691" name=CB dev="tmpfs" ino=2527 res=0 errno=0 [ 432.378549][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 432.378866][T16891] netlink: 'syz.3.2692': attribute type 3 has an invalid length. [ 432.528356][T16894] pim6reg1: entered promiscuous mode [ 432.535554][T16894] pim6reg1: entered allmulticast mode [ 432.612176][T16896] netlink: 'syz.0.2694': attribute type 1 has an invalid length. [ 433.215910][T16925] dvmrp0: entered allmulticast mode [ 434.347274][T16959] bond15: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 434.388482][T16959] bond15 (unregistering): Released all slaves [ 435.319609][T16990] netlink: 'syz.3.2719': attribute type 7 has an invalid length. [ 436.246194][T17038] netlink: 'syz.3.2730': attribute type 6 has an invalid length. [ 436.264348][T17038] __nla_validate_parse: 15 callbacks suppressed [ 436.264367][T17038] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2730'. [ 436.299948][T17038] netlink: 5252 bytes leftover after parsing attributes in process `syz.3.2730'. [ 436.321182][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 436.342848][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 436.357770][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 436.382368][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2731'. [ 436.434017][T17047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2731'. [ 436.462608][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 436.931941][T17067] tipc: Enabled bearer , priority 0 [ 436.948733][T17069] netlink: 'syz.3.2739': attribute type 1 has an invalid length. [ 436.959138][T17067] syzkaller0: entered promiscuous mode [ 436.972420][T17067] syzkaller0: entered allmulticast mode [ 437.128291][T17083] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2741'. [ 437.416287][T17100] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2744'. [ 437.598263][T17083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.628925][T17111] netlink: 'syz.1.2746': attribute type 1 has an invalid length. [ 437.640081][T17112] sctp: [Deprecated]: syz.3.2747 (pid 17112) Use of int in max_burst socket option. [ 437.640081][T17112] Use struct sctp_assoc_value instead [ 437.755570][T17065] tipc: Resetting bearer [ 437.875945][T17065] tipc: Disabling bearer [ 437.920934][T17121] vlan3: entered allmulticast mode [ 437.936999][T17121] macvtap0: entered allmulticast mode [ 437.953069][T17121] veth0_macvtap: entered allmulticast mode [ 437.975610][T17125] netlink: 'syz.1.2748': attribute type 4 has an invalid length. [ 438.032321][T17121] netlink: 'syz.1.2748': attribute type 4 has an invalid length. [ 438.453792][T17145] vlan1: Caught tx_queue_len zero misconfig [ 438.495220][T17147] tipc: Enabling of bearer rejected, media not registered [ 438.636297][T17155] xt_hashlimit: size too large, truncated to 1048576 [ 438.645418][T17155] xt_hashlimit: invalid interval [ 439.067623][T17179] syzkaller0: entered promiscuous mode [ 439.090057][T17179] syzkaller0: entered allmulticast mode [ 439.398166][T17194] netlink: 'syz.4.2770': attribute type 1 has an invalid length. [ 439.594895][T17211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.677178][T17209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.684544][T17209] IPv6: NLM_F_CREATE should be set when creating new route [ 439.691827][T17209] IPv6: NLM_F_CREATE should be set when creating new route [ 440.004049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.501746][T17223] infiniband uyz0: set down [ 440.541036][T17223] infiniband uyz0: added bridge_slave_1 [ 440.637367][T17223] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 440.722678][T17223] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 440.755986][T17223] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 440.769768][ T4947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.779556][ T4947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.794357][ T4947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 440.819116][ T4947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 440.827636][ T4947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.960787][T17223] RDS/IB: uyz0: added [ 440.981143][T17223] smc: adding ib device uyz0 with port count 1 [ 441.014258][T17223] smc: ib device uyz0 port 1 has no pnetid [ 441.037423][T17247] SET target dimension over the limit! [ 441.140982][T17251] netlink: 'syz.2.2786': attribute type 1 has an invalid length. [ 441.592251][T17264] netlink: 'syz.2.2789': attribute type 7 has an invalid length. [ 442.000986][T17270] __nla_validate_parse: 63 callbacks suppressed [ 442.001008][T17270] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.2791'. [ 442.185450][T17273] netlink: 'syz.1.2792': attribute type 21 has an invalid length. [ 442.207035][T17273] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2792'. [ 442.255586][T17273] netlink: 'syz.1.2792': attribute type 5 has an invalid length. [ 442.273573][T17273] netlink: 'syz.1.2792': attribute type 6 has an invalid length. [ 442.292280][T17273] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2792'. [ 442.884053][ T5636] Bluetooth: hci5: command tx timeout [ 442.925153][T17286] ip6tnl4: entered allmulticast mode [ 443.398790][T17297] netlink: 'syz.2.2798': attribute type 1 has an invalid length. [ 443.551651][T17235] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.561489][T17235] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.579609][T17235] bridge_slave_0: entered allmulticast mode [ 443.586481][T17303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2799'. [ 443.604500][T17235] bridge_slave_0: entered promiscuous mode [ 443.614530][T17235] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.621812][T17235] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.629464][T17235] bridge_slave_1: entered allmulticast mode [ 443.637735][T17235] bridge_slave_1: entered promiscuous mode [ 443.737670][T17235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.747495][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'. [ 443.769114][T17235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.854089][T17235] team0: Port device team_slave_0 added [ 443.873149][T17235] team0: Port device team_slave_1 added [ 443.954627][T17312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2801'. [ 443.969444][T17235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.977084][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.004496][T17235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.024442][T17235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.031504][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.057592][T17235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.072421][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 444.215983][T17235] hsr_slave_0: entered promiscuous mode [ 444.223240][T17235] hsr_slave_1: entered promiscuous mode [ 444.492745][ T29] audit: type=1804 audit(1780794096.419:11): pid=17323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2803" name="/newroot/544/cgroup.controllers" dev="tmpfs" ino=2799 res=1 errno=0 [ 444.524087][ T29] audit: type=1800 audit(1780794096.449:12): pid=17323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2803" name="cgroup.controllers" dev="tmpfs" ino=2799 res=0 errno=0 [ 444.964039][ T5636] Bluetooth: hci5: command tx timeout [ 445.800983][T17337] SET target dimension over the limit! [ 445.809076][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'. [ 446.887965][T17351] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2811'. [ 446.975253][T17351] team0: Port device team_slave_0 removed [ 447.054268][ T5636] Bluetooth: hci5: command tx timeout [ 447.249168][T17357] netlink: 'syz.0.2812': attribute type 3 has an invalid length. [ 447.257323][T17357] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2812'. [ 447.271180][T17357] netlink: 'syz.0.2812': attribute type 10 has an invalid length. [ 447.288486][T17357] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 447.292742][ T76] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 447.358332][T17317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.387818][T17235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 447.441585][T17235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.484874][T17235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 447.529853][T17235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.547009][T17235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 447.570378][T17235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.588071][T17235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 447.626686][T17235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.020178][T17235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.067874][T17235] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.101895][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.109222][ T6488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.148717][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.156009][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.758102][T17419] macsec3: entered promiscuous mode [ 448.773749][T17419] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 448.800681][T17419] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 449.124588][ T5636] Bluetooth: hci5: command tx timeout [ 449.300849][T17235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.310716][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2826'. [ 449.523675][T17450] tipc: Enabling of bearer rejected, already enabled [ 449.591435][T17455] netlink: 'syz.2.2829': attribute type 1 has an invalid length. [ 449.869129][T17455] bond18: (slave bridge7): making interface the new active one [ 449.883369][T17455] bond18: (slave bridge7): Enslaving as an active interface with an up link [ 449.903763][T17459] macvlan2: entered promiscuous mode [ 449.909912][T17459] macvlan2: entered allmulticast mode [ 449.919147][T17459] bond18: entered promiscuous mode [ 449.925190][T17459] bridge7: entered promiscuous mode [ 449.934530][T17459] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 449.942671][T17459] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 449.960800][T17459] bond18: left promiscuous mode [ 449.966176][T17459] bridge7: left promiscuous mode [ 449.992155][T17472] wg0: Caught tx_queue_len zero misconfig [ 450.042879][T17235] veth0_vlan: entered promiscuous mode [ 450.086286][T17235] veth1_vlan: entered promiscuous mode [ 450.182669][T17476] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 450.213622][T17476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.256579][T17476] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 450.321033][T17235] veth0_macvtap: entered promiscuous mode [ 450.347002][T17235] veth1_macvtap: entered promiscuous mode [ 450.403030][T17235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.464554][T17494] FAULT_INJECTION: forcing a failure. [ 450.464554][T17494] name failslab, interval 1, probability 0, space 0, times 0 [ 450.479343][T17235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.492754][T17494] CPU: 0 UID: 0 PID: 17494 Comm: syz.1.2839 Not tainted syzkaller #0 PREEMPT(full) [ 450.492799][T17494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.492817][T17494] Call Trace: [ 450.492830][T17494] [ 450.492839][T17494] dump_stack_lvl+0xe8/0x150 [ 450.492870][T17494] should_fail_ex+0x412/0x560 [ 450.492899][T17494] should_failslab+0xa8/0x100 [ 450.492920][T17494] ? skb_clone+0x212/0x3a0 [ 450.492946][T17494] kmem_cache_alloc_noprof+0x87/0x650 [ 450.492985][T17494] skb_clone+0x212/0x3a0 [ 450.493014][T17494] __netlink_deliver_tap+0x404/0x850 [ 450.493053][T17494] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.493080][T17494] netlink_deliver_tap+0x19c/0x1b0 [ 450.493106][T17494] netlink_sendskb+0x68/0x140 [ 450.493132][T17494] nfnetlink_rcv+0x251a/0x27b0 [ 450.493191][T17494] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 450.493231][T17494] ? ref_tracker_free+0x693/0x840 [ 450.493288][T17494] ? __netlink_deliver_tap+0x807/0x850 [ 450.493322][T17494] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.493347][T17494] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.493378][T17494] netlink_unicast+0x75c/0x8e0 [ 450.493412][T17494] netlink_sendmsg+0x813/0xb40 [ 450.493447][T17494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.493477][T17494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.493511][T17494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.493544][T17494] ____sys_sendmsg+0x972/0x9f0 [ 450.493569][T17494] ? __might_fault+0xaf/0x130 [ 450.493604][T17494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.493639][T17494] ? import_iovec+0x73/0xa0 [ 450.493669][T17494] ___sys_sendmsg+0x2a5/0x360 [ 450.493692][T17494] ? __lock_acquire+0x6b5/0x2cf0 [ 450.493720][T17494] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.493793][T17494] ? __fget_files+0x2a/0x420 [ 450.493819][T17494] ? __fget_files+0x3a0/0x420 [ 450.493856][T17494] __x64_sys_sendmsg+0x1bd/0x2a0 [ 450.493884][T17494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.493920][T17494] ? __pfx_ksys_write+0x10/0x10 [ 450.493961][T17494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.493984][T17494] do_syscall_64+0x174/0x580 [ 450.494007][T17494] ? trace_irq_disable+0x3b/0x140 [ 450.494039][T17494] ? clear_bhb_loop+0x40/0x90 [ 450.494065][T17494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.494086][T17494] RIP: 0033:0x7f039a99ce59 [ 450.494107][T17494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.494125][T17494] RSP: 002b:00007f039b890028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.494147][T17494] RAX: ffffffffffffffda RBX: 00007f039ac15fa0 RCX: 00007f039a99ce59 [ 450.494163][T17494] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 450.494176][T17494] RBP: 00007f039b890090 R08: 0000000000000000 R09: 0000000000000000 [ 450.494188][T17494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.494200][T17494] R13: 00007f039ac16038 R14: 00007f039ac15fa0 R15: 00007ffda908b788 [ 450.494235][T17494] [ 451.028349][T17500] bridge0: left promiscuous mode [ 451.044331][T17500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.052897][T17500] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.072001][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.081205][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.089416][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.097572][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.106538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.135739][T17500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.146576][T17500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.157930][T17500] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 451.170824][T17500] veth1_vlan: left promiscuous mode [ 451.178216][T17500] veth0_vlan: left promiscuous mode [ 451.184446][T17500] veth0_vlan: entered promiscuous mode [ 451.193013][T17500] veth1_vlan: entered promiscuous mode [ 451.203239][T17500] veth1_macvtap: left promiscuous mode [ 451.210988][T17500] veth0_macvtap: left promiscuous mode [ 451.218134][T17500] veth0_macvtap: entered promiscuous mode [ 451.225533][T17500] veth1_macvtap: entered promiscuous mode [ 451.237377][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.249886][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.261992][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.271501][T17500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.291756][T17500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.315098][T17500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.326353][T17500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 451.335062][T17500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.343038][T17500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 451.352757][T17500] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.375857][T17500] 8021q: adding VLAN 0 to HW filter on device bond7 [ 451.387089][T17500] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.399805][T17500] 8021q: adding VLAN 0 to HW filter on device bond9 [ 451.407971][T17500] 8021q: adding VLAN 0 to HW filter on device bond10 [ 451.425042][T17500] 8021q: adding VLAN 0 to HW filter on device bond11 [ 451.436880][T17500] bond12: left promiscuous mode [ 451.443245][T17500] bond13: left promiscuous mode [ 451.449429][T17500] 8021q: adding VLAN 0 to HW filter on device bond13 [ 451.457089][T17500] bond14: left promiscuous mode [ 451.463774][T17500] 8021q: adding VLAN 0 to HW filter on device bond15 [ 451.516108][ T6935] bridge0: entered promiscuous mode [ 451.602662][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 451.611128][T17516] openvswitch: netlink: Key 32 has unexpected len 16 expected 2 [ 451.616147][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.650053][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 451.659818][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.669493][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 451.679379][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.705088][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.720177][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 451.739575][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.758808][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.790091][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.823746][ T6488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.858972][ T6488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.882874][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2849'. [ 452.061373][ T6488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.092002][ T6488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.183079][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.199804][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.213023][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 452.430936][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2854'. [ 452.446427][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2854'. [ 452.691333][T17557] syzkaller0: entered promiscuous mode [ 452.712402][T17557] syzkaller0: entered allmulticast mode [ 452.812206][T17562] netlink: 'syz.1.2858': attribute type 1 has an invalid length. [ 452.836829][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.064395][ T4947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.080313][T17562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 453.092086][ T4947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.101995][ T4947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.110972][ T4947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.118848][ T4947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 453.267589][T17565] bond9: Unable to set up delay as MII monitoring is disabled [ 453.314007][T17565] bond9 (unregistering): Released all slaves [ 453.422916][T17579] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 453.512073][T17582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2861'. [ 453.818605][T17592] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 453.854188][T17592] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 453.900301][T17592] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 453.984722][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.010646][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 455.063147][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 455.136338][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.204597][ T5636] Bluetooth: hci4: command tx timeout [ 456.048989][T17659] netlink: 'syz.0.2881': attribute type 10 has an invalid length. [ 456.111400][T17661] netlink: 'syz.0.2881': attribute type 10 has an invalid length. [ 456.149052][T17661] team0: Port device – removed [ 456.163429][ T1080] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 456.177979][T17661] bond0: (slave –): Enslaving as an active interface with an up link [ 456.195508][T17569] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.210553][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.219416][T17569] bridge_slave_0: entered allmulticast mode [ 456.227663][T17569] bridge_slave_0: entered promiscuous mode [ 456.236784][T17569] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.247915][T17569] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.255635][T17569] bridge_slave_1: entered allmulticast mode [ 456.263610][T17569] bridge_slave_1: entered promiscuous mode [ 456.270619][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.312981][T17569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.339889][T17569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.417239][T17569] team0: Port device team_slave_0 added [ 456.426921][T17569] team0: Port device team_slave_1 added [ 456.467486][T17569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.474791][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.502448][T17569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.520758][T17569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.528142][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.569810][T17569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.632609][T17676] netlink: 'syz.3.2887': attribute type 1 has an invalid length. [ 456.645636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.655246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.663384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.671528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.679643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.688651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.698765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.716805][T17676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.749876][T17569] hsr_slave_0: entered promiscuous mode [ 456.757117][T17569] hsr_slave_1: entered promiscuous mode [ 456.763511][T17569] debugfs: 'hsr0' already exists in 'hsr' [ 456.769867][T17569] Cannot create hsr debugfs directory [ 456.996669][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 457.289337][ T5636] Bluetooth: hci4: command tx timeout [ 457.414905][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.431751][T17708] netlink: 'syz.4.2896': attribute type 1 has an invalid length. [ 457.455987][T17708] netlink: 758 bytes leftover after parsing attributes in process `syz.4.2896'. [ 457.625000][T17711] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 457.643945][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2898'. [ 457.680395][T17713] tap0: tun_chr_ioctl cmd 1074025677 [ 457.687373][T17713] tap0: linktype set to 6 [ 457.829742][ T29] audit: type=1804 audit(1780794109.759:13): pid=17715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2898" name="/newroot/562/memory.events" dev="tmpfs" ino=2892 res=1 errno=0 [ 457.839408][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2898'. [ 457.887816][ T29] audit: type=1800 audit(1780794109.759:14): pid=17715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2898" name="memory.events" dev="tmpfs" ino=2892 res=0 errno=0 [ 457.979709][T17569] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.073691][T17569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.108857][T17569] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.130853][T17569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.140613][T17569] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.164427][T17569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.182404][T17569] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.211392][T17569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.419752][T17734] netlink: 'syz.4.2904': attribute type 12 has an invalid length. [ 458.429533][T17734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2904'. [ 458.476962][T17735] netlink: 'syz.4.2904': attribute type 12 has an invalid length. [ 458.504511][T17739] netlink: 'syz.0.2903': attribute type 1 has an invalid length. [ 458.512455][T17735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2904'. [ 458.594772][T17569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.634024][T17569] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.666012][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.673285][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.708617][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.715865][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.044634][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2909'. [ 459.110437][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2909'. [ 459.148014][T17762] ipvlan2: entered allmulticast mode [ 459.153616][T17762] syz_tun: entered allmulticast mode [ 459.364223][ T5636] Bluetooth: hci4: command tx timeout [ 459.783509][T17569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.939001][T17569] veth0_vlan: entered promiscuous mode [ 459.989306][T17569] veth1_vlan: entered promiscuous mode [ 460.090850][T17569] veth0_macvtap: entered promiscuous mode [ 460.120645][T17569] veth1_macvtap: entered promiscuous mode [ 460.181374][T17569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.241059][T17569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.266350][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.290713][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.321445][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.347399][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.425090][T17802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2921'. [ 460.570283][T17811] siw: device registration error -23 [ 460.594173][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 460.615891][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 460.804018][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.838974][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.066737][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.088208][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.447314][ T5636] Bluetooth: hci4: command tx timeout [ 461.840100][T17848] bond1 (unregistering): Released all slaves [ 461.849534][T17852] sctp: [Deprecated]: syz.1.2934 (pid 17852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.849534][T17852] Use struct sctp_sack_info instead [ 462.056936][ T76] net_ratelimit: 3 callbacks suppressed [ 462.056956][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.218622][T17882] netlink: 'syz.3.2939': attribute type 4 has an invalid length. [ 462.410736][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.419033][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.427252][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.435458][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.444687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.775064][T17917] __nla_validate_parse: 6 callbacks suppressed [ 462.775084][T17917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 463.236362][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.567489][T17959] Bluetooth: MGMT ver 1.23 [ 463.950443][T17974] syzkaller0: entered promiscuous mode [ 463.965054][T17974] syzkaller0: entered allmulticast mode [ 464.179877][T17985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2961'. [ 464.354283][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.546126][ T29] audit: type=1800 audit(1780794116.479:15): pid=17963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2957" name="memory.events" dev="tmpfs" ino=162 res=0 errno=0 [ 464.639814][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'. [ 464.860579][T18007] smc: net device wlan0 applied user defined pnetid SYZ0 [ 464.950765][T18012] syzkaller1: entered promiscuous mode [ 464.980037][T18012] syzkaller1: entered allmulticast mode [ 465.233673][ T4947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.254080][ T4947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.262983][ T4947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.272793][ T4947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.288186][ T4947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.374207][T18032] dvmrp0: entered allmulticast mode [ 465.529582][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.674735][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.042951][T18025] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.051795][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.059847][T18025] bridge_slave_0: entered allmulticast mode [ 467.071219][T18025] bridge_slave_0: entered promiscuous mode [ 467.094857][T18025] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.110859][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.120850][T18025] bridge_slave_1: entered allmulticast mode [ 467.136122][T18025] bridge_slave_1: entered promiscuous mode [ 467.273138][T18025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.292885][T18025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.365292][ T4947] Bluetooth: hci0: command tx timeout [ 467.402817][T18025] team0: Port device team_slave_0 added [ 467.430900][T18025] team0: Port device team_slave_1 added [ 467.576600][T18025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.584161][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.610777][T18025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.661023][T18025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.678454][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.708123][T18025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.741503][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 467.750802][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 467.765480][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2983'. [ 467.807998][T18025] hsr_slave_0: entered promiscuous mode [ 467.815648][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.818498][T18025] hsr_slave_1: entered promiscuous mode [ 467.830562][T18025] debugfs: 'hsr0' already exists in 'hsr' [ 467.845212][T18025] Cannot create hsr debugfs directory [ 467.915067][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045d71000: rx timeout, send abort [ 468.019563][T18093] ip6erspan1: entered allmulticast mode [ 468.165245][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.173476][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.181671][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.189822][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.192835][T18025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.201721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.236257][T18025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.366212][T18113] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2991'. [ 468.426108][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045d71000: abort rx timeout. Force session deactivation [ 468.438401][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'. [ 468.525880][T18025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.537398][T18025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.559003][T18112] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2991'. [ 468.576395][T18119] ip6tnl1: entered allmulticast mode [ 468.585328][ T7662] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 468.805208][T18144] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2996'. [ 468.849606][T18122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.965522][T18129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.033584][T18151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2997'. [ 469.037798][T18025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.057208][T18151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2997'. [ 469.069684][T18025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.142590][T18143] bridge9: entered promiscuous mode [ 469.161929][T18143] bridge9: entered allmulticast mode [ 469.183094][T18143] team0: Port device bridge9 added [ 469.382646][T18148] bond16: option downdelay: invalid value (18446744073709551613) [ 469.403700][T18148] bond16: option downdelay: allowed values 0 - 2147483647 [ 469.416729][T18148] bond16 (unregistering): Released all slaves [ 469.455097][ T4947] Bluetooth: hci0: command tx timeout [ 469.582404][T18122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.621648][T18025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.634213][T18025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.656124][T18148] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 469.657960][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'. [ 469.728351][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 469.740468][T18122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.944967][T18122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.073738][T18171] sctp: [Deprecated]: syz.3.3003 (pid 18171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.073738][T18171] Use struct sctp_sack_info instead [ 470.075923][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.100745][T18171] sctp: [Deprecated]: syz.3.3003 (pid 18171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.100745][T18171] Use struct sctp_sack_info instead [ 470.243593][T18128] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.257458][T18025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 470.277419][T18025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.295200][T18025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 470.319154][T18025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.347547][T18128] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.388042][T18025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 470.411823][T18025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.446891][T18025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 470.468288][T18192] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 470.477780][T18025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.501789][T18129] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.547780][T18193] bond8: Unable to set up delay as MII monitoring is disabled [ 470.557151][T18193] bond8 (unregistering): Released all slaves [ 470.622126][T18192] 8021q: adding VLAN 0 to HW filter on device bond8 [ 470.649458][T18128] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.831319][T18215] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 470.972503][T18215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.008720][T18224] vlan2: entered allmulticast mode [ 471.019284][T18224] bond1: entered allmulticast mode [ 471.057854][T18227] bond1: (slave geneve2): making interface the new active one [ 471.065861][T18227] geneve2: entered allmulticast mode [ 471.078786][T18227] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 471.284477][T18129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.296523][T18025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.360733][T18025] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.399845][T18126] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.407077][T18126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.452994][T18126] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.460237][T18126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.523272][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 471.534460][ T4947] Bluetooth: hci0: command tx timeout [ 471.556498][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 471.762003][T18246] veth3: entered allmulticast mode [ 471.777753][T18243] tipc: Enabled bearer , priority 0 [ 471.918246][T18250] Bluetooth: MGMT ver 1.23 [ 472.425083][T18129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.618049][T18242] tipc: Disabling bearer [ 472.694086][T18272] x_tables: duplicate underflow at hook 3 [ 472.804237][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 472.928895][T18025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.975665][T18283] openvswitch: netlink: Key type 30 is not supported [ 473.170800][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c6bd400: rx timeout, send abort [ 473.307910][T18025] veth0_vlan: entered promiscuous mode [ 473.335887][T18025] veth1_vlan: entered promiscuous mode [ 473.366201][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.374529][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.382891][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.391100][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.460714][T18025] veth0_macvtap: entered promiscuous mode [ 473.500553][T18025] veth1_macvtap: entered promiscuous mode [ 473.547020][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.569253][T18025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.604609][ T4947] Bluetooth: hci0: command tx timeout [ 473.624830][T18025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.670971][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c6bc400: rx timeout, send abort [ 473.679880][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c6bd400: abort rx timeout. Force session deactivation [ 473.821230][T18132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.874155][T18132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.965562][T18132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.010392][T18296] netlink: 'syz.2.3029': attribute type 13 has an invalid length. [ 474.036029][T18132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.061812][T18298] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 474.078325][ T6929] IPVS: starting estimator thread 0... [ 474.100342][T18299] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 474.121899][T18298] netlink: 'syz.0.3030': attribute type 2 has an invalid length. [ 474.124697][T18299] netlink: 'syz.0.3030': attribute type 2 has an invalid length. [ 474.158336][T18298] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 474.162716][T18299] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 474.175270][T18303] IPVS: using max 36 ests per chain, 86400 per kthread [ 474.179346][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c6bc400: abort rx timeout. Force session deactivation [ 474.485960][T18310] __nla_validate_parse: 3 callbacks suppressed [ 474.485977][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3032'. [ 474.526979][T18128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.549033][T18128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.650026][T18319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3034'. [ 474.670241][T18128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.682212][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.691461][T18128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.034765][T18329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3037'. [ 475.049411][T18329] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3037'. [ 475.248743][T18337] lo: Caught tx_queue_len zero misconfig [ 475.261235][T18337] netlink: 'syz.2.3039': attribute type 8 has an invalid length. [ 475.269758][T18337] sch_fq: defrate 0 ignored. [ 475.291811][T18337] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.3039'. [ 475.307627][T18338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3041'. [ 475.807088][T18128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.845489][T18366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3046'. [ 476.201124][T18391] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 476.239822][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3053'. [ 476.944389][T18129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.002997][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.064253][T18128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.643643][T18366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.046931][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.055172][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.063350][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.071561][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.111651][T18427] sctp: [Deprecated]: syz.0.3058 (pid 18427) Use of int in max_burst socket option deprecated. [ 479.111651][T18427] Use struct sctp_assoc_value instead [ 479.194024][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.245750][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3058'. [ 479.501687][T18452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3064'. [ 479.612418][T18471] netlink: 'syz.0.3067': attribute type 1 has an invalid length. [ 479.826063][T18471] bond9: entered promiscuous mode [ 479.858565][T18471] 8021q: adding VLAN 0 to HW filter on device bond9 [ 479.981630][T18477] sock: sock_timestamping_bind_phc: sock not bind to device [ 479.998009][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 480.022691][T18477] netlink: 'syz.0.3067': attribute type 11 has an invalid length. [ 480.040859][T18477] netlink: 'syz.0.3067': attribute type 11 has an invalid length. [ 480.059062][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3067'. [ 480.292048][T18471] bond9: (slave bridge10): making interface the new active one [ 480.305828][T18128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.326466][T18471] bridge10: entered promiscuous mode [ 480.342590][T18471] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 480.390977][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 480.409133][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 480.440151][T18477] netlink: 'syz.0.3067': attribute type 11 has an invalid length. [ 480.478742][T18477] netlink: 'syz.0.3067': attribute type 11 has an invalid length. [ 480.512153][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3067'. [ 480.525626][T18470] netlink: 'syz.4.3068': attribute type 61 has an invalid length. [ 480.710737][T18502] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3076'. [ 480.825859][T18506] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3078'. [ 480.852103][T18510] : entered promiscuous mode [ 480.941710][T18515] syzkaller1: entered promiscuous mode [ 480.965641][T18515] syzkaller1: entered allmulticast mode [ 481.128944][T18527] netlink: 'syz.2.3082': attribute type 30 has an invalid length. [ 481.438828][T18128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.603983][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 482.565294][T18128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.686758][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.759365][T18533] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3083'. [ 483.982980][T18547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'. [ 484.278063][T18565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.531928][T18578] syzkaller1: entered promiscuous mode [ 484.545313][T18578] syzkaller1: entered allmulticast mode [ 484.610336][T18584] __nla_validate_parse: 7 callbacks suppressed [ 484.610356][T18584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3099'. [ 484.717575][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 484.738520][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 484.764159][T18584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3099'. [ 484.805893][T18129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.814179][T18129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.822342][T18129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.830548][T18129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.840822][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.007611][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 485.147033][T18616] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3102'. [ 485.232864][T18618] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 485.256606][T18618] netlink: 'syz.2.3106': attribute type 49 has an invalid length. [ 485.355610][T18621] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 485.370509][T18625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3108'. [ 485.922033][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 485.941332][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 485.951772][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 485.962032][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 485.970009][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 485.986236][T18126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.320838][T18650] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 486.543212][T18634] syzkaller1: entered promiscuous mode [ 486.569313][T18634] syzkaller1: entered allmulticast mode [ 487.040120][T18671] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3118'. [ 487.128962][T18673] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3120'. [ 487.144055][T18673] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3120'. [ 487.166974][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.211479][T18126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 487.235472][T18126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.417893][T18126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 487.445252][T18126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.772545][T18126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 487.825870][T18126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.054172][T18126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 488.064759][T18126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.084318][ T4947] Bluetooth: hci2: command tx timeout [ 488.328276][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.789223][T18735] xt_hashlimit: size too large, truncated to 1048576 [ 488.852935][T18737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.860278][T18737] IPv6: NLM_F_CREATE should be set when creating new route [ 488.869139][T18729] syzkaller0: entered promiscuous mode [ 488.882316][T18729] syzkaller0: entered allmulticast mode [ 489.468046][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.164320][ T4947] Bluetooth: hci2: command tx timeout [ 490.566060][ T7659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.574369][ T7659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.582539][ T7659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.590722][ T7659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.606159][ T7659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.231957][T18754] __nla_validate_parse: 33 callbacks suppressed [ 491.231972][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3139'. [ 491.413400][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'. [ 491.470229][T18761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3139'. [ 491.517265][T18126] bond7 (unregistering): (slave gretap1): Releasing active interface [ 491.526103][T18126] bond7 (unregistering): (slave gretap1): the permanent HWaddr of slave - 1e:2b:30:e3:2e:53 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 491.665242][T18126] bond7 (unregistering): (slave bridge7): Releasing active interface [ 491.692281][T18126] team0: Port device bridge9 removed [ 491.706770][T18126] bond0 (unregistering): Released all slaves [ 491.720632][T18126] bond1 (unregistering): Released all slaves [ 491.738235][T18126] bond2 (unregistering): Released all slaves [ 491.753347][T18126] bond3 (unregistering): Released all slaves [ 491.771318][T18126] bond4 (unregistering): Released all slaves [ 491.790439][T18126] bond5 (unregistering): Released all slaves [ 491.809920][T18126] bond6 (unregistering): Released all slaves [ 491.830544][T18126] bond7 (unregistering): Released all slaves [ 491.850187][T18126] bond8 (unregistering): (slave veth9): Releasing active interface [ 491.866274][T18126] bond8 (unregistering): (slave veth11): Releasing active interface [ 491.879058][T18126] bond8 (unregistering): Released all slaves [ 491.898591][T18126] bond9 (unregistering): Released all slaves [ 491.915113][T18126] bond10 (unregistering): Released all slaves [ 491.931912][T18126] bond11 (unregistering): Released all slaves [ 491.951017][T18126] bond12 (unregistering): Released all slaves [ 491.971713][T18126] bond13 (unregistering): Released all slaves [ 491.991580][T18126] bond14 (unregistering): Released all slaves [ 492.011451][T18126] bond15 (unregistering): Released all slaves [ 492.244916][ T4947] Bluetooth: hci2: command tx timeout [ 492.449131][T18126] 5nè: left promiscuous mode [ 492.659554][T18781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3143'. [ 492.861657][T18779] tipc: Started in network mode [ 492.871536][T18779] tipc: Node identity ba03d6b8e7bc, cluster identity 4711 [ 492.879735][T18779] tipc: Enabled bearer , priority 0 [ 492.910169][T18780] nbd: illegal input index -1 [ 492.986552][T18126] tipc: Left network mode [ 493.034854][T18782] syzkaller0: entered promiscuous mode [ 493.054674][T18782] syzkaller0: entered allmulticast mode [ 493.089973][T18775] tipc: Resetting bearer [ 493.185766][T18771] tipc: Resetting bearer [ 493.282878][T18771] tipc: Disabling bearer [ 493.387496][T18126] IPVS: stopping master sync thread 6301 ... [ 493.644560][T18638] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.654869][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.667902][T18638] bridge_slave_0: entered allmulticast mode [ 493.681971][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'. [ 493.693539][T18638] bridge_slave_0: entered promiscuous mode [ 493.749804][T18638] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.784957][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.813313][T18638] bridge_slave_1: entered allmulticast mode [ 493.825866][T18638] bridge_slave_1: entered promiscuous mode [ 493.834720][T18821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3149'. [ 493.907963][T18818] openvswitch: netlink: IP tunnel dst address not specified [ 493.916804][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.933971][T18823] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3150'. [ 493.951939][T18818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.992269][T18638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.026712][T18638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.324805][ T4947] Bluetooth: hci2: command tx timeout [ 494.333937][T18837] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 494.351257][T18841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3155'. [ 494.352479][T18638] team0: Port device team_slave_0 added [ 494.371899][T18638] team0: Port device team_slave_1 added [ 494.384105][T18841] openvswitch: netlink: Flow actions attr not present in new flow. [ 494.555586][T18638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.578513][T18638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.658816][T18638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.756696][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3157'. [ 494.806411][T18638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.826692][T18638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.868764][T18638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.025334][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3159'. [ 495.320731][T18870] vlan4: entered allmulticast mode [ 495.335438][T18870] bridge11: entered allmulticast mode [ 495.820583][T18638] hsr_slave_0: entered promiscuous mode [ 495.923030][T18897] netlink: 'syz.1.3165': attribute type 4 has an invalid length. [ 495.972847][T18638] hsr_slave_1: entered promiscuous mode [ 495.980003][T18638] debugfs: 'hsr0' already exists in 'hsr' [ 495.986171][T18638] Cannot create hsr debugfs directory [ 495.995990][T18892] bond0: Caught tx_queue_len zero misconfig [ 496.005916][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 496.282069][T18912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.336295][T18903] syzkaller0: entered promiscuous mode [ 496.342387][T18903] syzkaller0: entered allmulticast mode [ 496.419008][T18900] tipc: Enabled bearer , priority 0 [ 496.469076][T18908] tipc: Resetting bearer [ 496.496311][T18931] __nla_validate_parse: 2 callbacks suppressed [ 496.496329][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'. [ 496.787601][T18899] tipc: Resetting bearer [ 496.875872][T18899] tipc: Disabling bearer [ 497.615493][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 497.638458][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'. [ 498.070824][T18126] hsr_slave_0: left promiscuous mode [ 498.087933][T18126] hsr_slave_1: left promiscuous mode [ 498.227354][T18126] veth1_macvtap: left promiscuous mode [ 498.236140][T18126] veth0_macvtap: left promiscuous mode [ 498.250902][T18126] veth1_vlan: left promiscuous mode [ 498.261983][T18126] veth0_vlan: left promiscuous mode [ 498.512205][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 498.564511][T19002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3185'. [ 498.752057][T18126] team0 (unregistering): Port device veth1_to_hsr removed [ 498.987560][T18980] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3179'. [ 499.189753][T19011] netlink: 'syz.4.3187': attribute type 1 has an invalid length. [ 501.256838][T18132] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.265483][T18132] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.273717][T18132] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.290786][T19011] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 501.419419][T18132] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.486669][T18126] IPVS: stop unused estimator thread 0... [ 502.135949][T19068] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3198'. [ 502.719151][T18638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 502.745652][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.766070][T18638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 502.796701][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.821359][T18638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 502.852793][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.879657][T18638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 502.895321][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3202'. [ 502.917217][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.096265][T19115] bond2: option lacp_rate: invalid value (128) [ 503.106934][T19115] bond2 (unregistering): Released all slaves [ 503.269753][ T6940] IPVS: starting estimator thread 0... [ 503.277053][T19126] IPVS: lc: FWM 3 0x00000003 - no destination available [ 503.297148][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 503.369860][T18638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.377455][T19127] IPVS: using max 26 ests per chain, 62400 per kthread [ 503.419233][T18638] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.439465][T18126] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.446688][T18126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.501566][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.508779][ T7659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.591352][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 503.637030][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 503.659109][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 503.683150][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 503.716057][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 503.737175][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 503.758443][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 503.786034][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 504.051675][T19159] tap0: tun_chr_ioctl cmd 1074025677 [ 504.057964][T19159] tap0: linktype set to 6 [ 504.177070][T18126] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25 [ 504.395547][T18126] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 504.531428][ T1080] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 504.592412][ T5643] syz2: Port: 1 Link DOWN [ 504.865341][T19160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.200444][T19206] netlink: 'syz.1.3218': attribute type 2 has an invalid length. [ 505.240077][T19206] netlink: 'syz.1.3218': attribute type 2 has an invalid length. [ 505.276150][T18638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.435438][T18638] veth0_vlan: entered promiscuous mode [ 505.467133][T18638] veth1_vlan: entered promiscuous mode [ 505.524062][ T4947] Bluetooth: hci2: command tx timeout [ 505.592379][T18638] veth0_macvtap: entered promiscuous mode [ 505.659810][T18638] veth1_macvtap: entered promiscuous mode [ 505.732089][T18638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.761484][T18638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.797729][ T7659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.812460][ T7659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.835308][ T7659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.849149][ T7659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.366702][T18125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.393888][T18125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.540128][T19237] netlink: 'syz.1.3223': attribute type 1 has an invalid length. [ 506.557835][T18125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.585638][T18125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.717157][T19249] netlink: 'syz.1.3223': attribute type 10 has an invalid length. [ 506.898686][T19237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.002942][T19243] bond1: (slave dummy0): making interface the new active one [ 507.049037][T19243] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 507.111674][T19249] dummy0: entered promiscuous mode [ 507.163683][T19249] bond1: (slave dummy0): Releasing active interface [ 507.576962][T19286] __nla_validate_parse: 107 callbacks suppressed [ 507.576982][T19286] netlink: 39 bytes leftover after parsing attributes in process `syz.3.3231'. [ 508.013408][T19306] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 508.092088][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.108445][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.121194][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.133606][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.144853][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.158780][T19306] bond2 (unregistering): Released all slaves [ 509.143498][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3249'. [ 509.169135][T19363] ipvlan2: entered allmulticast mode [ 509.176463][T19363] syz_tun: entered allmulticast mode [ 509.206628][T19366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3249'. [ 509.471710][T19376] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 509.480176][T19376] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3251'. [ 509.716354][T19315] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.724021][T19315] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.731408][T19315] bridge_slave_0: entered allmulticast mode [ 509.739386][T19315] bridge_slave_0: entered promiscuous mode [ 509.754897][T19315] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.762253][T19315] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.771970][T19315] bridge_slave_1: entered allmulticast mode [ 509.780195][T19315] bridge_slave_1: entered promiscuous mode [ 509.812289][T19390] syzkaller0: entered promiscuous mode [ 509.819153][T19390] syzkaller0: entered allmulticast mode [ 509.830193][T19315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.843059][T19315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.880315][T19315] team0: Port device team_slave_0 added [ 509.888807][T19315] team0: Port device team_slave_1 added [ 509.895885][T19391] netlink: 'syz.3.3254': attribute type 1 has an invalid length. [ 509.927031][T19315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.934083][T19315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.960560][T19315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.973319][T19315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.980664][T19315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.009065][T19315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.062919][T19315] hsr_slave_0: entered promiscuous mode [ 510.070470][T19315] hsr_slave_1: entered promiscuous mode [ 510.077053][T19315] debugfs: 'hsr0' already exists in 'hsr' [ 510.082789][T19315] Cannot create hsr debugfs directory [ 510.203874][T19393] FAULT_INJECTION: forcing a failure. [ 510.203874][T19393] name failslab, interval 1, probability 0, space 0, times 0 [ 510.219849][T19393] CPU: 1 UID: 0 PID: 19393 Comm: syz.1.3255 Not tainted syzkaller #0 PREEMPT(full) [ 510.219875][T19393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 510.219888][T19393] Call Trace: [ 510.219895][T19393] [ 510.219903][T19393] dump_stack_lvl+0xe8/0x150 [ 510.220038][T19393] should_fail_ex+0x412/0x560 [ 510.220106][T19393] should_failslab+0xa8/0x100 [ 510.220157][T19393] ? skb_ext_add+0x148/0x8f0 [ 510.220207][T19393] kmem_cache_alloc_noprof+0x87/0x650 [ 510.220248][T19393] skb_ext_add+0x148/0x8f0 [ 510.220272][T19393] ? __local_bh_enable_ip+0xd0/0x130 [ 510.220317][T19393] j1939_sk_sendmsg+0x6f3/0x1380 [ 510.220396][T19393] ? aa_sk_perm+0x6d5/0x900 [ 510.220447][T19393] ? lockdep_hardirqs_on+0x7a/0x110 [ 510.220512][T19393] ? irqentry_exit+0x218/0x8b0 [ 510.220539][T19393] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 510.220567][T19393] ? aa_sock_msg_perm+0xf1/0x1b0 [ 510.220624][T19393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.220670][T19393] ____sys_sendmsg+0x972/0x9f0 [ 510.220725][T19393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.220757][T19393] ? import_iovec+0x73/0xa0 [ 510.220824][T19393] ___sys_sendmsg+0x2a5/0x360 [ 510.220847][T19393] ? __lock_acquire+0x6b5/0x2cf0 [ 510.220887][T19393] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.220946][T19393] ? __fget_files+0x2a/0x420 [ 510.220979][T19393] ? __fget_files+0x3a0/0x420 [ 510.221012][T19393] __x64_sys_sendmsg+0x1bd/0x2a0 [ 510.221038][T19393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.221070][T19393] ? __pfx_ksys_write+0x10/0x10 [ 510.221114][T19393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.221149][T19393] do_syscall_64+0x174/0x580 [ 510.221172][T19393] ? clear_bhb_loop+0x40/0x90 [ 510.221194][T19393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.221212][T19393] RIP: 0033:0x7f0e7199ce59 [ 510.221229][T19393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.221245][T19393] RSP: 002b:00007f0e7286b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.221265][T19393] RAX: ffffffffffffffda RBX: 00007f0e71c15fa0 RCX: 00007f0e7199ce59 [ 510.221279][T19393] RDX: 0000000004000110 RSI: 0000200000000500 RDI: 0000000000000003 [ 510.221292][T19393] RBP: 00007f0e7286b090 R08: 0000000000000000 R09: 0000000000000000 [ 510.221304][T19393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.221316][T19393] R13: 00007f0e71c16038 R14: 00007f0e71c15fa0 R15: 00007ffc99a63c98 [ 510.221347][T19393] [ 510.247881][ T4947] Bluetooth: hci1: command tx timeout [ 511.828707][T19348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.859705][T19315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 511.958381][T19315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.967585][T19315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.000137][T19315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.025548][T19315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.049118][T19315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.063695][T19315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.079846][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 512.091533][T19315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.094214][T19407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3259'. [ 512.100087][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 512.120469][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 512.126672][T19408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3259'. [ 512.151843][T19406] netlink: 'syz.4.3260': attribute type 3 has an invalid length. [ 512.162601][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3260'. [ 512.348831][T19315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.375589][T19315] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.399650][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.407043][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.440729][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.447952][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.565462][ T4947] Bluetooth: hci1: command tx timeout [ 512.846335][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 512.890185][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 512.983150][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 512.999500][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 513.023116][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3265'. [ 513.348286][T19452] tipc: Started in network mode [ 513.362807][T19455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3271'. [ 513.365598][T19452] tipc: Node identity fa4426e02bff, cluster identity 4711 [ 513.379982][T19452] tipc: Enabled bearer , priority 0 [ 513.393474][T19448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3268'. [ 513.515524][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'. [ 513.532470][T19452] syzkaller0: entered promiscuous mode [ 513.541200][T19452] syzkaller0: entered allmulticast mode [ 513.549005][T19452] tipc: Resetting bearer [ 513.571026][T19468] syzkaller1: entered promiscuous mode [ 513.577078][T19468] syzkaller1: entered allmulticast mode [ 513.585216][T19450] tipc: Resetting bearer [ 513.807506][T19469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3272'. [ 514.652695][ T4947] Bluetooth: hci1: command tx timeout [ 515.662954][T19450] tipc: Disabling bearer [ 515.701298][T19465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3272'. [ 515.712484][T19315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.723387][ T6939] tipc: Node number set to 3518703328 [ 515.928104][T19315] veth0_vlan: entered promiscuous mode [ 515.955249][T19485] netlink: 'syz.3.3277': attribute type 1 has an invalid length. [ 515.978317][T19315] veth1_vlan: entered promiscuous mode [ 516.136599][T19315] veth0_macvtap: entered promiscuous mode [ 516.159078][T19315] veth1_macvtap: entered promiscuous mode [ 516.208122][T19315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.389772][T19315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.696136][T18126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.719795][T18126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.733630][ T4947] Bluetooth: hci1: command tx timeout [ 516.775269][T18126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.788364][T18126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.970620][T19516] tipc: Resetting bearer [ 517.168005][T19523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.502218][T19531] ipvlan2: entered allmulticast mode [ 518.339188][T18126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.389419][T18126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.399170][T19567] __nla_validate_parse: 4 callbacks suppressed [ 518.399188][T19567] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3294'. [ 518.647585][T18126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.657280][T18126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.872514][T19583] batadv_slave_1: entered promiscuous mode [ 518.907042][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 518.923333][T19581] batadv_slave_1: left promiscuous mode [ 518.971908][T19584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 518.999751][T19588] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3298'. [ 519.015458][T19590] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 519.041125][T19588] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.049093][T19588] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.059278][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'. [ 519.266861][T19599] netlink: 'syz.0.3302': attribute type 3 has an invalid length. [ 519.302014][T19599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3302'. [ 519.655840][T19626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 519.908690][T19637] netlink: 'syz.0.3311': attribute type 3 has an invalid length. [ 520.014735][T19637] nbd: must specify at least one socket [ 520.037906][T19637] block nbd0: NBD_DISCONNECT [ 520.052327][T19637] block nbd0: Send disconnect failed -32 [ 520.080361][T19637] block nbd0: Send disconnect failed -32 [ 520.103149][T19637] block nbd0: shutting down sockets [ 520.236156][T19651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3315'. [ 520.297477][T19656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3316'. [ 520.367257][T18134] erspan0: left allmulticast mode [ 520.380935][T18134] erspan0: left promiscuous mode [ 520.388740][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3316'. [ 520.404552][T18134] bridge4: port 1(erspan0) entered disabled state [ 520.727078][T18134] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 520.780057][T18134] bond12 (unregistering): (slave gretap2): Releasing active interface [ 520.962556][T18134] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 520.996917][T18134] bond6 (unregistering): (slave bridge3): Releasing active interface [ 521.062480][T18134] bond18 (unregistering): (slave bridge7): Releasing active interface [ 521.082857][T18134] bond1 (unregistering): Released all slaves [ 521.101307][T18134] bond2 (unregistering): (slave bond3): Releasing backup interface [ 521.110339][T18134] bond2 (unregistering): Released all slaves [ 521.131818][T18134] bond3 (unregistering): Released all slaves [ 521.148537][T18134] bond4 (unregistering): Released all slaves [ 521.170939][T18134] bond5 (unregistering): Released all slaves [ 521.186895][T18134] bond6 (unregistering): Released all slaves [ 521.208327][T18134] bond7 (unregistering): (slave bond8): Releasing backup interface [ 521.217204][T18134] bond7 (unregistering): Released all slaves [ 521.241192][T18134] bond8 (unregistering): Released all slaves [ 521.262734][T18134] bond9 (unregistering): Released all slaves [ 521.281395][T18134] bond10 (unregistering): Released all slaves [ 521.307204][T18134] bond11 (unregistering): Released all slaves [ 521.323626][T18134] bond0 (unregistering): Released all slaves [ 521.342898][T18134] bond12 (unregistering): Released all slaves [ 521.376439][T18134] bond13 (unregistering): (slave bond14): Releasing backup interface [ 521.385438][T18134] bond13 (unregistering): Released all slaves [ 521.401507][T18134] bond14 (unregistering): Released all slaves [ 521.419237][T18134] bond15 (unregistering): Released all slaves [ 521.442219][T18134] bond16 (unregistering): Released all slaves [ 521.459509][T18134] bond17 (unregistering): Released all slaves [ 521.475075][T18134] bond18 (unregistering): Released all slaves [ 521.846219][T19678] bond2: entered promiscuous mode [ 522.108625][T18134] tipc: Disabling bearer [ 522.141036][T18134] tipc: Left network mode [ 522.156867][T19695] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 522.282622][T18134] IPVS: stopping master sync thread 7606 ... [ 522.381994][T19706] netlink: 'syz.2.3326': attribute type 1 has an invalid length. [ 522.970717][T19721] netlink: 'syz.2.3328': attribute type 1 has an invalid length. [ 523.055530][T19721] bond3: entered promiscuous mode [ 523.099709][T19721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 523.173226][T19725] bond3: entered allmulticast mode [ 523.275039][T19721] netlink: 'syz.2.3328': attribute type 1 has an invalid length. [ 523.377700][T19734] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 523.461892][T19725] bond3: (slave bridge2): making interface the new active one [ 523.488159][T19725] bridge2: entered promiscuous mode [ 523.504297][T19725] bridge2: entered allmulticast mode [ 523.556385][T19725] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 523.990715][T19764] __nla_validate_parse: 9 callbacks suppressed [ 523.990736][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3337'. [ 524.249194][T19771] netlink: 'syz.2.3338': attribute type 1 has an invalid length. [ 524.776511][T19789] batadv_slave_1: entered promiscuous mode [ 524.824207][T18134] hsr_slave_0: left promiscuous mode [ 524.836326][T18134] hsr_slave_1: left promiscuous mode [ 524.866312][T18134] pim6reg99999999 (unregistering): left allmulticast mode [ 525.375030][T19789] batadv_slave_1: left promiscuous mode [ 525.420825][T19807] netlink: 'syz.1.3341': attribute type 4 has an invalid length. [ 525.652777][T18134] IPVS: stop unused estimator thread 0... [ 526.422459][T19738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.664076][T19821] netlink: 'syz.3.3344': attribute type 10 has an invalid length. [ 526.759818][T19828] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 527.096958][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3351'. [ 527.193419][T19844] netlink: 'syz.1.3351': attribute type 12 has an invalid length. [ 527.591439][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3353'. [ 527.626963][T19854] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 527.932023][T19872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3357'. [ 528.159351][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3359'. [ 528.266731][T19879] veth1_to_batadv: entered promiscuous mode [ 528.294189][T19876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3359'. [ 528.312810][T19879] netlink: 480 bytes leftover after parsing attributes in process `syz.4.3360'. [ 528.325522][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 528.352905][T19879] netlink: 480 bytes leftover after parsing attributes in process `syz.4.3360'. [ 528.689210][T19891] netlink: 'syz.3.3364': attribute type 1 has an invalid length. [ 528.789423][T19891] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 529.186896][T19911] x_tables: duplicate underflow at hook 1 [ 529.241286][T19900] netlink: 'syz.2.3366': attribute type 1 has an invalid length. [ 529.610189][T19921] netlink: 'syz.2.3372': attribute type 7 has an invalid length. [ 529.655158][T19921] netlink: 'syz.2.3372': attribute type 8 has an invalid length. [ 529.661818][T19929] IPVS: ip_vs_add_dest(): server weight less than zero [ 529.816372][T19935] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3376'. [ 530.297096][T19974] batman_adv: batadv0: Adding interface: ipvlan2 [ 530.310476][T19974] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.391223][T19974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.427322][T19974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.463743][T19974] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 530.481444][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 530.514873][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3386'. [ 530.617050][T18129] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.617382][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 530.636112][T18129] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.636157][T18129] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.636207][T18129] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.664665][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3386'. [ 530.908975][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3393'. [ 531.104517][T20009] bond1: entered allmulticast mode [ 531.152129][T20009] sctp: [Deprecated]: syz.3.3395 (pid 20009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.152129][T20009] Use struct sctp_sack_info instead [ 532.097674][T20053] x_tables: duplicate underflow at hook 2 [ 532.804035][T20090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3415'. [ 532.966661][T20103] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3419'. [ 532.985580][T20101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3418'. [ 533.007957][T20101] netlink: 121 bytes leftover after parsing attributes in process `syz.2.3418'. [ 533.051014][T20106] ip6gre1: entered promiscuous mode [ 533.066230][T20106] ip6gre1: entered allmulticast mode [ 533.116613][T20110] netlink: 'syz.0.3423': attribute type 2 has an invalid length. [ 533.641293][T20139] pimreg: entered allmulticast mode [ 533.652377][T20137] syzkaller0: entered promiscuous mode [ 533.658211][T20137] syzkaller0: entered allmulticast mode [ 533.796582][T20148] pimreg: left allmulticast mode [ 534.301196][T20185] netlink: 'syz.0.3440': attribute type 1 has an invalid length. [ 535.079123][T20215] __nla_validate_parse: 9 callbacks suppressed [ 535.079144][T20215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3445'. [ 535.144743][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3445'. [ 535.171896][T20215] geneve0: entered promiscuous mode [ 535.183698][T20215] geneve0: left promiscuous mode [ 535.489399][T20237] syzkaller1: entered promiscuous mode [ 535.501975][T20237] syzkaller1: entered allmulticast mode [ 535.678884][T20249] netlink: 'syz.2.3455': attribute type 4 has an invalid length. [ 535.699273][T20249] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3455'. [ 535.720854][T20249] .`: renamed from bond0 (while UP) [ 536.060164][T20266] xt_HMARK: spi-set and port-set can't be combined [ 536.326899][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.370012][T19938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.408651][T19938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.500904][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 536.530009][T20296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3465'. [ 536.549389][T20296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3465'. [ 536.568882][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.632218][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 536.663494][T20297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3462'. [ 536.722996][T20300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3467'. [ 537.169243][T20310] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3470'. [ 537.283980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.600555][T20337] netlink: 'syz.4.3476': attribute type 13 has an invalid length. [ 537.605703][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.629590][T20337] netlink: 'syz.4.3476': attribute type 17 has an invalid length. [ 537.935213][T20345] syzkaller1: left promiscuous mode [ 537.963876][T20345] syzkaller1: left allmulticast mode [ 538.165986][T20361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.376485][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.534406][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.644791][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.688464][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.735641][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.137911][T20422] netlink: 'syz.0.3496': attribute type 5 has an invalid length. [ 539.225346][T20429] netlink: 'syz.1.3498': attribute type 3 has an invalid length. [ 540.230202][T20484] 5nè‹Ò: entered promiscuous mode [ 540.267846][T20482] tipc: Enabling of bearer rejected, failed to enable media [ 540.320364][T20492] __nla_validate_parse: 6 callbacks suppressed [ 540.320382][T20492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3515'. [ 540.437157][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3517'. [ 540.499221][T20500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3518'. [ 540.551498][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 540.561648][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 540.573698][T20505] netlink: 304 bytes leftover after parsing attributes in process `syz.1.3520'. [ 540.600575][T20505] netlink: 'syz.1.3520': attribute type 10 has an invalid length. [ 541.264675][T20511] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.404605][T20526] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 541.404605][T20526] Please contact the netfilter-devel mailing list or update your nftables rules. [ 541.894576][T20555] net_ratelimit: 9 callbacks suppressed [ 541.894598][T20555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.925733][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.023133][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3537'. [ 542.034115][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3533'. [ 542.072036][T20559] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.100024][T20559] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.158291][T20555] veth0_macvtap: left promiscuous mode [ 542.409847][T20564] syzkaller1: entered promiscuous mode [ 542.419941][T20564] syzkaller1: entered allmulticast mode [ 542.453036][T20559] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.493939][T20559] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.701092][T20581] netlink: 'syz.2.3540': attribute type 1 has an invalid length. [ 542.719113][T20581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.742138][T20559] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.764831][T20559] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.834302][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'. [ 542.911787][T20559] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.931302][T20559] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.943475][T20585] netlink: 840 bytes leftover after parsing attributes in process `syz.0.3541'. [ 542.973156][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.045770][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.189013][T18125] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.198918][T18125] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.250184][T18125] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.259764][T18125] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.281989][ T48] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.306460][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.330477][ T48] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.339359][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.392833][T20597] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 543.402342][T20596] netlink: 'syz.1.3545': attribute type 8 has an invalid length. [ 543.662717][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.675085][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.846099][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.004778][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.036920][T20632] netlink: 'syz.2.3554': attribute type 1 has an invalid length. [ 544.045035][T20632] netlink: 'syz.2.3554': attribute type 2 has an invalid length. [ 544.085431][T20634] sch_fq: defrate 0 ignored. [ 544.411818][T20645] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 544.418894][ T6940] IPVS: starting estimator thread 0... [ 544.441694][T20645] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.448975][T20645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.456771][T20645] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.463993][T20645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.535399][T20646] IPVS: using max 28 ests per chain, 67200 per kthread [ 544.969215][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.046166][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.493398][T20687] __nla_validate_parse: 8 callbacks suppressed [ 545.493417][T20687] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.3571'. [ 545.515218][T20686] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.3571'. [ 546.526543][T20732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3585'. [ 546.569929][T20734] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 546.705478][T20732] bond0: entered promiscuous mode [ 546.712730][T20732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.721131][T20734] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 546.737645][T20739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.756325][T20739] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 546.769434][T20739] bond0: (slave ip6gre1): Error -95 calling set_mac_address [ 546.778452][T20748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'. [ 546.800642][T20740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3586'. [ 547.124459][ T6945] net_ratelimit: 99 callbacks suppressed [ 547.124479][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.190498][T20767] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 547.217721][T20767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.525445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.622478][T20787] tipc: Failed to remove unknown binding: 66,0,0/0:2737646053/2737646055 [ 547.631459][T20787] tipc: Failed to remove unknown binding: 66,0,0/0:2737646053/2737646054 [ 547.641090][T20787] tipc: Failed to remove unknown binding: 66,0,0/0:2737646053/2737646055 [ 547.649972][T20787] tipc: Failed to remove unknown binding: 66,0,0/0:2737646053/2737646054 [ 548.020052][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.049599][T20793] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3600'. [ 548.164480][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.453401][T20814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3605'. [ 548.506077][T20818] netlink: 'syz.0.3604': attribute type 1 has an invalid length. [ 548.711369][T20824] bond1: (slave gretap1): making interface the new active one [ 548.732459][T20824] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 548.768788][T20818] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 548.792259][T20819] macvlan2: entered promiscuous mode [ 548.798190][T20819] macvlan2: entered allmulticast mode [ 548.814063][T20819] bond1: entered promiscuous mode [ 548.819472][T20819] gretap1: entered promiscuous mode [ 548.827859][T20819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 548.836244][T20819] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 548.854301][T20819] bond1: left promiscuous mode [ 548.859297][T20819] gretap1: left promiscuous mode [ 549.061462][T20836] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 549.093242][T20836] 8021q: adding VLAN 0 to HW filter on device bond4 [ 549.109518][T20836] bond4: entered allmulticast mode [ 549.204669][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.222722][T20841] bond4: (slave ip6gretap1): making interface the new active one [ 549.235886][T20841] ip6gretap1: entered allmulticast mode [ 549.248143][T20841] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 550.246723][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.684921][T20886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3622'. [ 551.008973][T20793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.040204][T20887] netlink: 'syz.0.3622': attribute type 1 has an invalid length. [ 551.070363][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.220035][T20895] openvswitch: netlink: Actions may not be safe on all matching packets [ 551.252610][T20893] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.277227][T20893] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 551.724393][T20919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'. [ 551.902638][T20931] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3635'. [ 552.055515][T20941] bond0: (slave bond_slave_1): Releasing backup interface [ 552.144147][T20941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3638'. [ 552.227893][T20952] syzkaller1: entered allmulticast mode [ 552.324785][ T6945] net_ratelimit: 12 callbacks suppressed [ 552.324804][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.380769][T20960] netlink: 'syz.4.3642': attribute type 1 has an invalid length. [ 552.420425][T20960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 552.433953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.453930][T20960] vlan3: entered promiscuous mode [ 552.459096][T20960] bond4: entered promiscuous mode [ 552.464672][T20960] vlan3: entered allmulticast mode [ 552.469906][T20960] bond4: entered allmulticast mode [ 552.497185][T20960] bond4: (slave bridge4): making interface the new active one [ 552.506019][T20960] bridge4: entered promiscuous mode [ 552.512291][T20960] bridge4: entered allmulticast mode [ 552.521233][T20960] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 552.552466][T20924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.647351][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.854348][T20983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3649'. [ 552.962382][T20992] syzkaller0: entered promiscuous mode [ 552.969052][T20992] syzkaller0: entered allmulticast mode [ 553.023574][T20992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3653'. [ 553.291670][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.336909][T21014] netlink: 'syz.3.3657': attribute type 1 has an invalid length. [ 553.363288][T21014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.373283][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.408969][T21014] bond3: (slave veth0): Enslaving as a backup interface with an up link [ 553.547392][T21024] tc_dump_action: action bad kind [ 553.941300][T21039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3663'. [ 554.156960][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.251478][T21043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3664'. [ 554.284440][T21043] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3664'. [ 554.648796][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.944488][T21054] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3665'. [ 555.684409][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.780873][T21074] xt_HMARK: spi-set and port-set can't be combined [ 555.788923][T21074] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3671'. [ 555.799330][T21074] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3671'. [ 555.809133][T21074] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3671'. [ 556.812992][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.037167][T21103] netlink: 'syz.0.3678': attribute type 11 has an invalid length. [ 557.732346][T21111] netlink: 'syz.4.3680': attribute type 1 has an invalid length. [ 557.900642][ T6939] net_ratelimit: 1 callbacks suppressed [ 557.900662][ T6939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.050924][T21122] macvlan3: entered promiscuous mode [ 558.093163][T21122] macvlan3: entered allmulticast mode [ 558.127608][T21122] bond5: entered promiscuous mode [ 558.158157][T21122] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 558.507018][T21130] openvswitch: netlink: Duplicate or invalid key (type 0). [ 558.516512][T21130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.527360][T21122] bond5: left promiscuous mode [ 558.660397][T21119] bond5: (slave gretap1): making interface the new active one [ 558.681773][T21119] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 558.969775][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.035331][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.296953][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.535695][T21141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.615457][T21141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.265994][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.379711][ T6946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.000560][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.012668][T21148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3688'. [ 563.114039][ T35] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.152572][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.201166][T21170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3693'. [ 563.285133][ T35] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.330578][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.372455][ T35] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.409834][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.438032][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.446202][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.477685][ T35] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.550736][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.624685][T21184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.664934][T21184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.683684][T21187] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3699'. [ 563.703618][T21184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.726270][T21184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.752660][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3700'. [ 563.774544][T21184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.785266][T21190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3698'. [ 563.799926][T21184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.829890][T21184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.033113][T21194] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3701'. [ 564.421690][T21196] tipc: Started in network mode [ 564.433626][T21196] tipc: Node identity 56bad54939af, cluster identity 4711 [ 564.449617][T21196] tipc: Enabled bearer , priority 0 [ 564.549711][T21197] netlink: 'syz.1.3703': attribute type 21 has an invalid length. [ 564.609030][T21197] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3703'. [ 564.732623][T21196] syzkaller0: entered promiscuous mode [ 564.765448][T21196] syzkaller0: entered allmulticast mode [ 564.807339][T21196] tipc: Resetting bearer [ 564.823696][T21197] netlink: 'syz.1.3703': attribute type 5 has an invalid length. [ 564.846513][T21197] netlink: 'syz.1.3703': attribute type 6 has an invalid length. [ 564.888114][T21197] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3703'. [ 564.971174][T21205] syzkaller0: entered promiscuous mode [ 565.004016][T21205] syzkaller0: entered allmulticast mode [ 565.132038][ T5636] Bluetooth: hci5: command 0x0406 tx timeout [ 565.880387][ T35] tipc: Resetting bearer [ 565.908853][T21195] tipc: Resetting bearer [ 565.949914][T21217] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3706'. [ 566.214581][T21220] netlink: 'syz.0.3706': attribute type 3 has an invalid length. [ 566.222622][T21220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3706'. [ 569.051969][ T6946] net_ratelimit: 234 callbacks suppressed [ 569.051990][ T6946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.673244][ T5643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.089494][ T6946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.761904][T21195] tipc: Disabling bearer [ 570.797358][ T6940] tipc: Node number set to 1863701833 [ 570.947042][T21215] bridge_slave_0: left allmulticast mode [ 570.952782][T21215] bridge_slave_0: left promiscuous mode [ 570.960765][T21215] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.990423][T21215] bridge_slave_1: left allmulticast mode [ 570.996690][T21215] bridge_slave_1: left promiscuous mode [ 571.002521][T21215] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.037530][T21215] bond0: (slave bond_slave_0): Releasing backup interface [ 571.064528][T21215] bond0: (slave bond_slave_1): Releasing backup interface [ 571.096657][T21215] team0: Port device team_slave_0 removed [ 571.115609][T21215] team0: Port device team_slave_1 removed [ 571.122445][T21215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.136361][T21215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.150546][ T6945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.162337][T21215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.170622][T21215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.183538][T21215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.352221][T21234] Unsupported ieee802154 address type: 0 [ 571.436954][T21237] __nla_validate_parse: 1 callbacks suppressed [ 571.436974][T21237] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3710'. [ 571.499340][T21237] gretap0: entered promiscuous mode [ 572.166953][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.507254][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.703041][T21252] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 572.755063][T21252] bond2 (unregistering): Released all slaves [ 572.800006][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 572.810098][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.933352][T21260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.944004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.697352][T21267] lo speed is unknown, defaulting to 1000 [ 573.711777][T21267] lo speed is unknown, defaulting to 1000 [ 573.720324][T21267] lo speed is unknown, defaulting to 1000 [ 573.727664][T21267] smbdirect: ib_dev[yz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 573.742576][T21267] smbdirect: ib_dev[yz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 573.761179][T21267] smbdirect: ib_dev[yz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 573.777436][T21268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3716'. [ 573.800216][T21267] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 573.848424][T21267] lo speed is unknown, defaulting to 1000 [ 573.867970][T21267] lo speed is unknown, defaulting to 1000 [ 573.881072][T21267] lo speed is unknown, defaulting to 1000 [ 573.891854][T21267] lo speed is unknown, defaulting to 1000 [ 573.900300][T21267] lo speed is unknown, defaulting to 1000 [ 573.908573][T21267] lo speed is unknown, defaulting to 1000 [ 573.918218][T21267] lo speed is unknown, defaulting to 1000 [ 573.931694][T21267] lo speed is unknown, defaulting to 1000 [ 573.940282][T21267] lo speed is unknown, defaulting to 1000 [ 574.262500][ T6946] net_ratelimit: 1 callbacks suppressed [ 574.262521][ T6946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.896901][T21281] netlink: 'syz.3.3719': attribute type 1 has an invalid length. [ 574.920094][T21281] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 575.286325][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.335299][T21294] syzkaller0: entered promiscuous mode [ 575.356474][T21294] syzkaller0: entered allmulticast mode [ 575.611794][T21301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 575.895432][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.210610][T21306] x_tables: duplicate underflow at hook 1 [ 576.702535][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.913786][ C1] sched: DL replenish lagged too much [ 582.093242][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 582.159305][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.495754][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.078076][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.227632][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.726412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 598.866976][ T6932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.522073][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.440008][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.492312][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.973047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.614642][ T7661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.028607][T21309] Bluetooth: hci0: command tx timeout [ 617.780554][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.481124][T19939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.640404][T18069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.748628][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.710228][ T7657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.230076][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.641316][ T6944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.057580][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.669402][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.121720][T18069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.597528][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.745363][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.176757][T18069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.648840][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.749543][ T6944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.864356][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.315563][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.383691][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.497148][T21310] Bluetooth: hci2: command tx timeout [ 649.239499][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.658042][T19938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.289953][ T6944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.660653][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.478369][T18069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.743512][T18069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.028377][T18070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.093483][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.760395][ T7661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.193424][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.124297][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.175697][ T6933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.996293][T18130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.729328][ T7661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.160646][T18132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.551308][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.731711][ T6932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.344337][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.226863][T18130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.611906][ T6931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.857478][ T7659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.276753][ T7661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.323248][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.631230][T19938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.373042][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 712.052921][ T6929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.724278][ T6944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.423716][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 714.430810][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18638/1:b..l [ 714.439360][ C0] rcu: (detected by 0, t=10502 jiffies, g=111425, q=1027303 ncpus=2) [ 714.447551][ C0] task:syz-executor state:R running task stack:22536 pid:18638 tgid:18638 ppid:18631 task_flags:0x400140 flags:0x00080000 [ 714.462093][ C0] Call Trace: [ 714.465404][ C0] [ 714.468363][ C0] __schedule+0x1821/0x5740 [ 714.472892][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 714.477880][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 714.482845][ C0] ? __pfx___schedule+0x10/0x10 [ 714.487729][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 714.492703][ C0] preempt_schedule_irq+0x4d/0xa0 [ 714.497752][ C0] irqentry_exit+0x14f/0x8b0 [ 714.502377][ C0] ? trace_irq_disable+0x3b/0x140 [ 714.507480][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 714.513501][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 714.518816][ C0] Code: be 97 11 00 00 00 00 eb b5 e8 95 dd 07 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 75 78 97 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1a d2 0a 0a cc 48 8d 3d f2 27 92 [ 714.538448][ C0] RSP: 0018:ffffc90004e67420 EFLAGS: 00000282 [ 714.544558][ C0] RAX: dd1b40d7e17da800 RBX: 0000000000000202 RCX: 0000000000000046 [ 714.552563][ C0] RDX: 0000000000000002 RSI: ffffffff8e2239f3 RDI: ffffffff8c28b9e0 [ 714.560566][ C0] RBP: ffff8880462449e0 R08: 0000000000000022 R09: ffffffff8e95cc20 [ 714.568563][ C0] R10: ffffc90004e67578 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 714.576559][ C0] R13: 0000000000000002 R14: ffffffff8e95cc20 R15: ffff888046243e00 [ 714.584563][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 714.590805][ C0] ? unwind_next_frame+0xa6/0x2550 [ 714.595977][ C0] unwind_next_frame+0x1bba/0x2550 [ 714.601135][ C0] ? unwind_next_frame+0xa6/0x2550 [ 714.606297][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.612403][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 714.618594][ C0] arch_stack_walk+0x11b/0x150 [ 714.623431][ C0] stack_trace_save+0xa9/0x100 [ 714.628224][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 714.633633][ C0] save_stack+0x122/0x230 [ 714.638001][ C0] ? __pfx_save_stack+0x10/0x10 [ 714.642879][ C0] ? __free_frozen_pages+0xc1c/0xd30 [ 714.648194][ C0] ? __slab_free+0x274/0x2c0 [ 714.652811][ C0] ? qlist_free_all+0x99/0x100 [ 714.657625][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 714.663292][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 714.668357][ C0] ? __kmalloc_noprof+0x316/0x760 [ 714.673409][ C0] ? tomoyo_encode+0x28b/0x550 [ 714.678270][ C0] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 714.684101][ C0] ? tomoyo_path_perm+0x283/0x560 [ 714.689198][ C0] ? security_inode_getattr+0x12b/0x310 [ 714.694814][ C0] ? __x64_sys_newfstat+0x13b/0x270 [ 714.700039][ C0] ? do_syscall_64+0x174/0x580 [ 714.704834][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.710946][ C0] __reset_page_owner+0x71/0x1f0 [ 714.715934][ C0] __free_frozen_pages+0xc1c/0xd30 [ 714.721092][ C0] __slab_free+0x274/0x2c0 [ 714.725556][ C0] qlist_free_all+0x99/0x100 [ 714.730187][ C0] kasan_quarantine_reduce+0x148/0x160 [ 714.735790][ C0] __kasan_slab_alloc+0x22/0x80 [ 714.740682][ C0] __kmalloc_noprof+0x316/0x760 [ 714.745564][ C0] ? trace_kmalloc+0x2a/0xf0 [ 714.750186][ C0] ? tomoyo_encode+0x28b/0x550 [ 714.754962][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 714.760035][ C0] tomoyo_encode+0x28b/0x550 [ 714.764652][ C0] tomoyo_realpath_from_path+0x58d/0x5d0 [ 714.770305][ C0] ? tomoyo_domain+0xd7/0x130 [ 714.775023][ C0] tomoyo_path_perm+0x283/0x560 [ 714.779940][ C0] ? tomoyo_path_perm+0x251/0x560 [ 714.784998][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 714.790442][ C0] ? __x64_sys_openat+0x138/0x170 [ 714.795553][ C0] security_inode_getattr+0x12b/0x310 [ 714.800957][ C0] __x64_sys_newfstat+0x13b/0x270 [ 714.806043][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 714.811643][ C0] ? rcu_is_watching+0x15/0xb0 [ 714.816451][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.822548][ C0] do_syscall_64+0x174/0x580 [ 714.827172][ C0] ? clear_bhb_loop+0x40/0x90 [ 714.831894][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.837817][ C0] RIP: 0033:0x7fd77879b467 [ 714.842260][ C0] RSP: 002b:00007ffd8d45cca8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 714.850699][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd77879b467 [ 714.858737][ C0] RDX: 0000000000000000 RSI: 00007ffd8d45ccb0 RDI: 0000000000000003 [ 714.866734][ C0] RBP: 00007ffd8d45cdac R08: 0000000000000000 R09: 0000000000000000 [ 714.874731][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000006c [ 714.882717][ C0] R13: 0000000000000000 R14: 000000000008c7b4 R15: 00007ffd8d45ce00 [ 714.890717][ C0] [ 714.893760][ C0] rcu: rcu_preempt kthread starved for 367 jiffies! g111425 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 714.904887][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 714.914874][ C0] rcu: RCU grace-period kthread stack dump: [ 714.920777][ C0] task:rcu_preempt state:R running task stack:27392 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 714.934300][ C0] Call Trace: [ 714.937605][ C0] [ 714.940562][ C0] __schedule+0x1821/0x5740 [ 714.945101][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 714.950103][ C0] ? __pfx___schedule+0x10/0x10 [ 714.955020][ C0] ? schedule+0x90/0x360 [ 714.959302][ C0] schedule+0x164/0x360 [ 714.963499][ C0] schedule_timeout+0x158/0x2c0 [ 714.968465][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 714.973863][ C0] ? __pfx_process_timeout+0x10/0x10 [ 714.979186][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.985013][ C0] ? prepare_to_swait_event+0x340/0x370 [ 714.990618][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 714.995511][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 715.001715][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 715.007023][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 715.012267][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 715.016911][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 715.022139][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 715.027975][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 715.032956][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 715.038007][ C0] kthread+0x389/0x470 [ 715.042109][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 715.047325][ C0] ? __pfx_kthread+0x10/0x10 [ 715.051968][ C0] ret_from_fork+0x514/0xb70 [ 715.056586][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 715.061719][ C0] ? __switch_to+0xc79/0x1410 [ 715.066431][ C0] ? __pfx_kthread+0x10/0x10 [ 715.071066][ C0] ret_from_fork_asm+0x1a/0x30 [ 715.075888][ C0] [ 715.078921][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 715.085272][ C0] Sending NMI from CPU 0 to CPUs 1: [ 715.090515][ C1] NMI backtrace for cpu 1 [ 715.090532][ C1] CPU: 1 UID: 0 PID: 135 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 715.090566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.090577][ C1] Workqueue: events_unbound toggle_allocation_gate [ 715.090607][ C1] RIP: 0010:deref_stack_reg+0x1d1/0x230 [ 715.090630][ C1] Code: 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 03 05 ba 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e <41> 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 715.090644][ C1] RSP: 0018:ffffc90000a077a0 EFLAGS: 00000282 [ 715.090657][ C1] RAX: 1ffff92000140f01 RBX: ffffffff914bcc5a RCX: 0000000000000001 [ 715.090669][ C1] RDX: ffffc90000a078c8 RSI: dffffc0000000000 RDI: ffffc90000a08cc8 [ 715.090681][ C1] RBP: 1ffff92000140f11 R08: ffffc90000a08cc8 R09: 0000000000000000 [ 715.090692][ C1] R10: ffffc90000a078d8 R11: fffff52000140f1d R12: ffffc90000a08cc8 [ 715.090704][ C1] R13: 1ffff92000140f13 R14: ffffc90000a07888 R15: dffffc0000000000 [ 715.090717][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 715.090730][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.090741][ C1] CR2: 00007fc8480a57f7 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 715.090756][ C1] Call Trace: [ 715.090761][ C1] [ 715.090768][ C1] unwind_next_frame+0x19d5/0x2550 [ 715.090793][ C1] ? unwind_next_frame+0xa6/0x2550 [ 715.090813][ C1] ? process_backlog+0xaa3/0x1950 [ 715.090919][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 715.090947][ C1] arch_stack_walk+0x11b/0x150 [ 715.090972][ C1] ? __napi_poll+0xae/0x340 [ 715.091020][ C1] stack_trace_save+0xa9/0x100 [ 715.091046][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 715.091087][ C1] ? unwind_next_frame+0xa6/0x2550 [ 715.091107][ C1] kasan_save_track+0x3e/0x80 [ 715.091129][ C1] ? kasan_save_track+0x3e/0x80 [ 715.091150][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 715.091173][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 715.091195][ C1] ? ref_tracker_alloc+0x15a/0x4c0 [ 715.091235][ C1] ? dst_init+0xd9/0x480 [ 715.091255][ C1] ? dst_alloc+0x12a/0x170 [ 715.091274][ C1] ? ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 715.091344][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 715.091369][ C1] ? ip_route_output_flow+0x2a/0x150 [ 715.091390][ C1] ? ip_route_me_harder+0x742/0xf90 [ 715.091452][ C1] ? synproxy_send_tcp+0x34c/0x670 [ 715.091561][ C1] ? synproxy_send_client_synack+0x8c1/0xe30 [ 715.091583][ C1] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 715.091642][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 715.091665][ C1] ? nft_do_chain+0x48d/0x1ae0 [ 715.091689][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 715.091748][ C1] ? nf_hook_slow+0xc5/0x220 [ 715.091807][ C1] ? NF_HOOK+0x21f/0x3c0 [ 715.091825][ C1] ? NF_HOOK+0x336/0x3c0 [ 715.091843][ C1] ? process_backlog+0xaa3/0x1950 [ 715.091876][ C1] __kasan_kmalloc+0x93/0xb0 [ 715.091900][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 715.091923][ C1] ? smp_text_poke_batch_finish+0x5f5/0x1160 [ 715.091947][ C1] ? ref_tracker_alloc+0x15a/0x4c0 [ 715.091963][ C1] ? __kmalloc_cache_noprof+0x15b/0x660 [ 715.091989][ C1] ref_tracker_alloc+0x15a/0x4c0 [ 715.092008][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 715.092031][ C1] ? rcu_is_watching+0x15/0xb0 [ 715.092050][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 715.092071][ C1] ? dst_alloc+0x105/0x170 [ 715.092094][ C1] dst_init+0xd9/0x480 [ 715.092115][ C1] dst_alloc+0x12a/0x170 [ 715.092138][ C1] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 715.092168][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 715.092194][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 715.092220][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 715.092252][ C1] ? lock_acquire+0x106/0x350 [ 715.092275][ C1] ip_route_output_flow+0x2a/0x150 [ 715.092323][ C1] ? ip_route_me_harder+0x730/0xf90 [ 715.092350][ C1] ip_route_me_harder+0x742/0xf90 [ 715.092375][ C1] ? ret_from_fork+0x514/0xb70 [ 715.092392][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 715.092419][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 715.092459][ C1] ? __cookie_v4_init_sequence+0x25d/0x500 [ 715.092485][ C1] synproxy_send_tcp+0x34c/0x670 [ 715.092513][ C1] synproxy_send_client_synack+0x8c1/0xe30 [ 715.092546][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 715.092571][ C1] ? nft_log_dump+0x2f8/0x4e0 [ 715.092592][ C1] ? synproxy_pernet+0x45/0x270 [ 715.092621][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 715.092651][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 715.092679][ C1] ? nf_ip_checksum+0x13c/0x510 [ 715.092709][ C1] nft_synproxy_do_eval+0x305/0x580 [ 715.092739][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 715.092808][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 715.092839][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 715.092871][ C1] nft_do_chain+0x48d/0x1ae0 [ 715.092901][ C1] ? ip_vs_service_find+0x152/0x3c0 [ 715.092948][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 715.092988][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 715.093013][ C1] nft_do_chain_inet+0x360/0x4b0 [ 715.093041][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 715.093073][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 715.093098][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 715.093126][ C1] nf_hook_slow+0xc5/0x220 [ 715.093152][ C1] NF_HOOK+0x21f/0x3c0 [ 715.093174][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 715.093196][ C1] ? NF_HOOK+0x9e/0x3c0 [ 715.093217][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 715.093236][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 715.093260][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 715.093285][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 715.093315][ C1] NF_HOOK+0x336/0x3c0 [ 715.093336][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 715.093358][ C1] ? NF_HOOK+0x9e/0x3c0 [ 715.093378][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 715.093400][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 715.093424][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 715.093445][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 715.093465][ C1] ? process_backlog+0x3eb/0x1950 [ 715.093481][ C1] process_backlog+0xaa3/0x1950 [ 715.093508][ C1] __napi_poll+0xae/0x340 [ 715.093533][ C1] ? skb_defer_free_flush+0x233/0x260 [ 715.093561][ C1] net_rx_action+0x627/0xf70 [ 715.093584][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 715.093616][ C1] handle_softirqs+0x22a/0x840 [ 715.093636][ C1] ? __irq_exit_rcu+0xca/0x220 [ 715.093659][ C1] __irq_exit_rcu+0xca/0x220 [ 715.093681][ C1] irq_exit_rcu+0x9/0x30 [ 715.093697][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 715.093717][ C1] [ 715.093722][ C1] [ 715.093729][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 715.093748][ C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0 [ 715.093776][ C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 aa 07 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 55 03 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 3a 03 0c [ 715.093793][ C1] RSP: 0018:ffffc90002ebf700 EFLAGS: 00000293 [ 715.093808][ C1] RAX: ffffffff81b9b376 RBX: ffff8880b873c388 RCX: ffff88801f7c5d00 [ 715.093822][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 715.093832][ C1] RBP: ffffc90002ebf840 R08: ffffffff90309df7 R09: 1ffffffff20613be [ 715.093846][ C1] R10: dffffc0000000000 R11: fffffbfff20613bf R12: 1ffff110170c85d1 [ 715.093859][ C1] R13: dffffc0000000000 R14: ffff8880b8642e88 R15: 0000000000000000 [ 715.093877][ C1] ? smp_call_function_many_cond+0xfe6/0x13d0 [ 715.093912][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 715.093938][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 715.093955][ C1] ? kmem_cache_alloc_bulk_noprof+0xae/0x7c0 [ 715.093981][ C1] ? __pfx___text_poke+0x10/0x10 [ 715.094004][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 715.094026][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 715.094042][ C1] smp_text_poke_batch_finish+0x5f5/0x1160 [ 715.094067][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 715.094096][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 715.094114][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 715.094140][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 715.094171][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 715.094196][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 715.094227][ C1] static_key_enable+0x1a/0x20 [ 715.094244][ C1] toggle_allocation_gate+0xab/0x290 [ 715.094269][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 715.094298][ C1] ? process_scheduled_works+0xa70/0x1860 [ 715.094318][ C1] ? process_scheduled_works+0xa70/0x1860 [ 715.094334][ C1] ? process_scheduled_works+0xa70/0x1860 [ 715.094350][ C1] process_scheduled_works+0xb5d/0x1860 [ 715.094381][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 715.094400][ C1] ? assign_work+0x3d5/0x5e0 [ 715.094417][ C1] worker_thread+0xa53/0xfc0 [ 715.094447][ C1] kthread+0x389/0x470 [ 715.094468][ C1] ? __pfx_worker_thread+0x10/0x10 [ 715.094484][ C1] ? __pfx_kthread+0x10/0x10 [ 715.094504][ C1] ret_from_fork+0x514/0xb70 [ 715.094522][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 715.094538][ C1] ? __switch_to+0xc79/0x1410 [ 715.094562][ C1] ? __pfx_kthread+0x10/0x10 [ 715.094583][ C1] ret_from_fork_asm+0x1a/0x30 [ 715.094609][ C1] [ 717.342313][ T6940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.010862][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog