last executing test programs: 4.957816296s ago: executing program 2 (id=4031): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r1, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) connect$unix(r5, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) poll(&(0x7f0000000080)=[{r5, 0x1040}], 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x404, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xc}, @NFTA_SET_DESC={0x2e0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x120, 0x2, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x803}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2683}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x150, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x51c}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x670}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaada}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x64c9d10e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2400000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x981a}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_USERDATA={0xef, 0xd, 0x1, 0x0, "73957c2d147a2eb57d7f959cd2dba90b4b913fe01d262470945980f49ec13878f00f0f995e9e069f4dca5ed81054f15a189ed96a3c447f36b605f16fe19258d46c420e1345123bd315a94585e69245dfa4a3c4d9eb7fcb66e36f1b29720e257a22f32d79732d4db86f200bb4c4a961592f6a076fffd3b2b75c8bb736b2a8df7fba25d5a945e263ba16512fe1d8fa052eb72e7a62662310b3e15dc96a4c63926a175b05c8f7f55994d8641d93ffba5d75775757c17207dcdbe8a3856d4771e58c14c7cad1a64a660774b5d691bdf4acfbaeb3a7e9149fd5ee37c4c001d21f47bde3f914c8cbf4a83cf93e3d"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x26c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_DELOBJ={0x168, 0x14, 0xa, 0x100, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xa9, 0x8, "c276c6f901e35554fb9e402b723bef8c62ecf612c443a19a7d306197f7031409c7ba4b2112058a734e281e8f36bd8beb2f7f68870f44228e9f6db088de6d35a48f229a6c912008f75d0393b7255fed94ada871abcb548cd3ab671c7dcdbb801b6e80dff225c7c49b47d79888b8000d8a474932631cdaef4c6b050423682ea7fd3cc44098c135df049707ad824a5db2fd0863b1dbcb6ab1d56ee90305d19c4791a3a37688f3"}, @NFTA_OBJ_USERDATA={0x87, 0x8, "7c4d5bd0d7a45ff0490974bd77a7f64c2b66c6c4e51481da253b3cdf18739d740a6dcee7d7c021a95c0fa5609943574d2c6aa92894b5d39e4b31bad9f807e4db3faf1735766ede0144e09ea56dc3663bba9922792f37f98c9071544c56efe557fefb7b7b32d8e95c752ef8cf82b11cbfc00e0eca356e378752a560c8bfeec4bb18eca1"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWRULE={0x130, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x36, 0x7, 0x1, 0x0, "3bf1e90046b9946cc4b7eca0789c6b8cd9c2ff22628fda9ee050ddbb7e666e6a7bc167511dfeb12c36ac03361adf562ed0d4"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}], {0x14}}, 0x700}, 0x1, 0x0, 0x0, 0x10}, 0x4090) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES8=r0], 0x64}}, 0x0) 4.957357754s ago: executing program 0 (id=4032): r0 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r4, 0x0, 0x856) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x401, 0x3, 0x3ff, 0x8008, r3, 0x100, '\x00', 0x0, r4, 0x490000, 0x1, 0x2, 0x9, @value=r5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 4.95634809s ago: executing program 1 (id=4033): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req={0x9, 0xbc1b, 0x0, 0xf83c}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x40040, &(0x7f0000000580)={0x11, 0xf6, r5, 0x1, 0x9}, 0x14) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x46}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r6, &(0x7f0000000000)='.[\\]\x00', 0x48a000, &(0x7f00000002c0)={@align=0xffffffffffff3ec2, {0x4, 0xa666, 0x535c, 0x400}}, 0x5, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x81}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000019c0)={r1, &(0x7f0000000140)="8412dc35861b9997d67ebaac574d0cd749702907271b00e252f3ad64ab5ab134fabe58ae253e4449082019eb04a8463d48f6cc44add601da3bd46f1d3e8ada9697c2bd1635cf447cfd45559bcd9aecb5816592bf5e7650a99f2ba56642e748cc661e9dcde674d8ca97b936d30109c0b512445abb8e0c38a9696977bca0a9d305de70e63d792c10b7aee6ebec8d9c4bed947c8b0822a7d67201ac800cc29cbf11886f850f83196811f79befcc83adb48db16b43108e18dcaf5a8da3bedf7fac8ba9de8b3c3bc17095d3", &(0x7f0000000400)=@buf="ec99c897e167f37c644c19b77ce66b29208e59285e1d43d355f24292b47cbd4edfb7a52a4a3ec12ee0cd0d6a14b928b927f146d3ac5da0c30769765e119caf3414aa776b57ce9f83ed892ccba484838bc377ceb3dbf0ac15f8914d682a9bdf0f9a518a0453818acca7f441de5ef2b9e7f1583fa6b1edee06a6bf8360d17b29c462a608c4f06623945293122907339cc254458c65f1bb1a0fa7b99bd2e2d374ab8378ec512519f10b0f4c2875f7b34f87d1e6937285d42ab0c782b139c73bda69d7d2b64ad88a9cfa7a4256b5890a69badc6f30d941e9b1aa96", 0x4}, 0x20) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc804) 4.611165327s ago: executing program 0 (id=4035): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000, 0x2, 0xff, 0xa, 0x8, 0xd}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}, 0x4048040) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x24, 0x66, 0x221, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x104, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r10, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r13}, &(0x7f0000000280), &(0x7f0000000240)=r11}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f00000000c0)=r14, 0x4) 4.402846315s ago: executing program 2 (id=4038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x2df2, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x2022, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x3b, 0x0, @val=@netfilter={0x1, 0x0, 0x1, 0x1}}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r1], 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.110302709s ago: executing program 4 (id=4039): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "461ce9d9d16eb5b6", "42042555a4957e6799d1b1bca036a055", "eae83072", "9f87101430475f10"}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250200000006000ac24e2300000500020008"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000006c0)={&(0x7f0000000180), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r7, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 4.106610899s ago: executing program 3 (id=4040): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x1, r3, 0x4c86}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002400)={{0x1, 0xffffffffffffffff}, &(0x7f0000002380), &(0x7f00000023c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x1, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xab4}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001300)=""/4096, 0x40f00, 0x20, '\x00', r3, @fallback=0x2b, r4, 0x8, &(0x7f0000002300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000002340)={0x1, 0x4, 0x3023, 0x2}, 0x10, 0xffffffffffffffff, r5, 0x3, &(0x7f0000002440)=[r7, r0], &(0x7f0000002480)=[{0x5, 0x1, 0xb, 0x5}, {0x5, 0x3, 0x9, 0x8}, {0x5, 0x2, 0x9}], 0x10, 0x2}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x3, @private=0xa010101}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) shutdown(r8, 0x0) 4.102166312s ago: executing program 2 (id=4041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x8}, 0x26) epoll_create(0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0xb4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x88, 0xc, "70b125c56a2b5636464b4242a17296eb61ca70e07308000000eba738f056dd826b1132bb7020290f4514029ed917ffbfda717d633d31d04d9b01ba8d27b480348b43aee6612b24ffadd4ce0bdd3f0332fb36947116f8fb3a8f658c708a50ab83d990ae62cce76fe15bfe2983de79be7e7789e8ddaf28a0d042139ecfb46fa0d22e4b0ce1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}, 0x1, 0x0, 0x0, 0x8010}, 0x20008040) 4.001910828s ago: executing program 0 (id=4042): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5, 0x4, 0xc0000000, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x1d, 0x3, 0x0, 0x0, "750cb35a82f275078e2c086f5a4308684eef29381ae2fd2dce79f6a5346987625ae037455b5a8bb03f34c0b61ffa5b631792a23a4e42d821acb37de82ad3b52b"}}, 0x80}, 0x300}, 0x8040) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x104, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_METALST={0x6c, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x1f, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x104}}, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/245, 0xf5}], 0x1}}], 0x3, 0x400122a0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3.870112553s ago: executing program 2 (id=4043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000040)={'veth0_to_bond\x00', @random="013501320400"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20040044) 3.73014331s ago: executing program 0 (id=4044): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x40898) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4004090) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000003d80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000280)="df6f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d80)="a9", 0x1}], 0x1}}], 0x2, 0x40000c6) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x490, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x5, 0x3, 0x5, 0x1, 0x401, 0x4, 0x9, 0x800, 0x0, 0x81, 0x9e, 0x4, 0x6, 0x5, 0x8, 0xd897, 0x7f, 0x4, 0x3, 0x9, 0x1346, 0x5, 0x8001, 0x3, 0x8, 0xdb, 0x1, 0x3f9, 0x7ff, 0x10001, 0xf5, 0x4, 0x2, 0x3, 0x9, 0x1, 0x3, 0x610, 0x8001, 0xc66, 0x6, 0x4, 0x10000, 0x80000001, 0x80000001, 0x6, 0x3a6, 0xffff3779, 0x5, 0xd, 0x4, 0x70, 0x800, 0x9, 0x401, 0x1, 0xb5, 0x8, 0xe3f, 0x9, 0x4, 0x810c, 0xa8, 0xfffffffb, 0x70, 0x2, 0x8c2f, 0x4, 0x2, 0xa, 0x100, 0xffff, 0x1, 0x6b0, 0x2, 0x6, 0x0, 0x77, 0x99, 0x7, 0x6, 0xe, 0xd5, 0x4000000, 0x7, 0x81, 0x5, 0x80, 0x4, 0x2, 0x5, 0x7, 0x3, 0x7, 0x2, 0xf, 0xebc0, 0x7, 0x6, 0xffff0001, 0xff, 0x8000, 0x0, 0x40, 0x200, 0x1, 0x7, 0xb, 0x7fff, 0xfff, 0x7, 0x1, 0xfffffff0, 0x9, 0xa92, 0x7, 0x1, 0x101, 0x8, 0x1, 0x1, 0xf91c, 0x6, 0xff, 0x6, 0xfffff001, 0x2, 0x26, 0x2, 0x90c, 0x5111, 0x2, 0x1, 0x6, 0x6, 0x9, 0xffffffff, 0x7, 0x4, 0x0, 0xc, 0x0, 0x7, 0x7, 0x8a, 0x5, 0xfffffffc, 0x80000001, 0x9, 0x7, 0xe, 0x8, 0x7, 0x8, 0x6, 0x3, 0x9, 0x4, 0x101, 0x4, 0x4c4, 0x3, 0x6, 0x9, 0x5, 0xa06, 0x0, 0x1e, 0x6, 0x4, 0x4, 0xb90, 0x5, 0xffff, 0xffff880e, 0x80000000, 0x101, 0x4, 0x1, 0xfffffff1, 0x1, 0x4, 0x800, 0xfffffdc1, 0xffffffff, 0x8, 0x5854, 0x2, 0xb81, 0x0, 0xfffff001, 0x4, 0x6, 0x8, 0x0, 0x7, 0x40, 0x6, 0x7, 0xc0e, 0x6, 0x81, 0x7, 0x37b1, 0x7c, 0xfe06409, 0x6c, 0x0, 0x2da1, 0x4, 0x0, 0x9, 0xff, 0x4, 0x1ff, 0xd, 0x2, 0x80000001, 0x8, 0x81, 0x7, 0x6, 0x20080, 0x7, 0x1, 0x1c3d4fab, 0x6, 0x3, 0xeaa7, 0x0, 0x3, 0x7f, 0x3, 0xa6, 0x1, 0x1, 0x8, 0x2, 0x8a1, 0x3, 0x3, 0x10000, 0x5, 0xd, 0x7, 0x23, 0x3, 0xc0000000, 0x7, 0x5, 0x7f, 0x3ff, 0x38, 0x1000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x3, 0xfffffff8, 0x8, 0xffff0000, {0xf, 0x2, 0x3, 0x5, 0x0, 0x8}, {0x8, 0x0, 0x6, 0x7, 0x8}, 0x1a496f8d, 0x9, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) 3.717363336s ago: executing program 3 (id=4045): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = socket$inet(0xa, 0x3, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000911137000000000095000000000000004cc30c5aa2e71ad6af9b54dc37d4c4658edb21f7f867980af3a37f9ede8ef5825ac020c3778cf727ca866300002623992cb4de0d49a59cfcfcdcaf417268df411d29a403cdf72f5db49437ad92f1d2c357f2a8394b170a19657d955bffe92d32a0cf111c5c26fb42782d1ae46478b969773e9ed60824bf2e894aed9dac8ce0062bd99542d94fcbec7f868b73f2c9229b624f5d5273ee5fb0d6ff81abd1148409db96de779ce9e1639f265090feaf4fb7b90c0b345c6d91633ecedcec341b30a4b048eb6f112e41f0c6d7111f3d7126377118229016a25f0d8f7413e300649759e8fed0a61ebacfd33bba66eff98469606b86c2f9dc73aefc"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$FICLONE(r1, 0x40049409, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) 3.626346578s ago: executing program 1 (id=4046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRES64=r0], 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 3.597024722s ago: executing program 2 (id=4047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x5, 0x2, {{0x3468802, 0x7, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x40d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 3.546184945s ago: executing program 3 (id=4048): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_to_bridge\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r4, 0x0, 0x80, 0x8) vmsplice(r2, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0x21c}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041004}, 0x44000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r10, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0xfffffffffffffde6, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x54}}, 0x0) 3.544462654s ago: executing program 4 (id=4049): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x310, 0xffffffff, 0xffffffff, 0x310, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x258, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x2f, 0x0, 0x0, 0x80000000, 0x5, 0x3, 0x0, 0x20}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x4, 0x6, 0x2}, {0x2, 0x2, 0x3}, 0x1, 0x7f}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x2, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x408) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) (rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r6, 0x25, 0x4, @void}, 0x10) (rerun: 64) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000580)={{0x900, 0xca1d}, 0x100, './file0\x00'}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x20000000, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x20, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x269}, @TCA_RED_PARMS={0x14, 0x1, {0x8000, 0x4, 0xcb, 0xf, 0x3, 0x1c, 0x1}}]}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x3}}}]}, 0x60}}, 0x0) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb88a80a008100450008004500002c00000000002f9078ac1e0001e00078040000000000000086ddffff00000000"], 0x46) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000006600000000000000000000000000000000000000000000000000000000000000000000ffffffff00e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2c, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffa}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x48}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfc0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (rerun: 64) 3.449058865s ago: executing program 1 (id=4050): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x48, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000040000000000000e0400000000000000000000000000000d040000000000000000000004000000000400000000000008030000000000004f2e5f0051d6a2528265add24f2488e2f88c858e34fac69a673195c7494c2cd0da94d0e9b115c0fc184c00b3ee93a0a85193555d6cd03b727d6088466a231032a940c3f1687f7cc028282e7207c3318e7b"], 0x0, 0x53}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r5, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250200000006000ac24e2300000500020008"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r9, 0x58, &(0x7f0000000840)}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000023000000000100000030000180060004000000000006000100020000000600020000000000040003"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000a80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000d40)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r11, @ANYBLOB="000327bd7000fcdbdf250e0000001c0001800800080010000000070006007368000008000500020000002c000180060004004e20000008000900180000000800050004000000060004004e200000080006006f7666000800050002000000080004000300000008000600080000001800038014000000000000000001080004000100000024000380060007004e24000006000400ff00000006000400000400000800030001000000140003800800050064010101060007004e2000"/198], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x8414) (async, rerun: 64) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="001010007bb535fc4babe05b869696a6b1f21ceac55b6703bcbcbe78aa218b628bb530d54ecac96609aed8e4579d40913dfbe0c2854738e91581fbe705d1f478dd33ac70928f90bcea45e883fd01685057fca86c0978b7572a57c9a91ee04edfaef1e8d520ed4a955a96197a08bdc86fa80b31f7419a5a0922ab78603b77a2aff6834ea984", @ANYRES16=r8, @ANYBLOB="00012cbd7000ffdbdf2502000000040005000400050008000600e0000002050002000200000008000600ac1414bb04000500"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r12, 0x4) r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000b80)={0x0}, &(0x7f0000000bc0)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000001040)=ANY=[@ANYBLOB="c1fb89102cbc3a0000dc1286ca666ae02648b486ce08b8f8e489b4c5d0a3d2b9e3d0770fa7ec6456874379f479d75369b42157cfde193f51734722c931565fe771a0d8a3d5e4596126e9c086729ea9ffe1dd69f9f5ec049c15365f3716e71b99aa8d78b9f93070be9f2dbbae34cb39b3f0b899b60bd770523c15a866d70b4e0fe2b6cd78a849bd9797c5749c5a0a6b299e77f0d0d9611005b46789e0c74073a3ab37c2e672de02a8f9429733ff244822c2d1f750a22ea96e73005983d71c00bbfaa3588ea1b88176d28483b7f9230a37169f5426046407e84a0cb7294df12d00"/234, @ANYRES8=r11, @ANYBLOB="040026bd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYRESOCT, @ANYRES64=r5, @ANYBLOB="0d001d0480002e00", @ANYRES32=r14, @ANYBLOB="080001000000000008001c00", @ANYRES32=r15, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20045004) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r13, r0, 0x4, r6}, 0x10) 3.264737843s ago: executing program 2 (id=4051): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44000068}, 0x24) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001000390426bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01980000000000004000128008000100736974003400028006000e000100000008000300ac1414"], 0x60}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0x2, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r6, &(0x7f0000000600)={&(0x7f0000000240)={0x2c, 0xe, r3, 0x3c}, 0x10, &(0x7f0000000540)=[{&(0x7f00000002c0)="7f4541a97fd9f2bfee32f37014bfffcdb413", 0x12}, {&(0x7f0000000480)="008473160b67d6216b8f1ab39a50ca2e60a37065342d769e5d514f74b7822e9c540d3aa3f375a62b3ddd9e7d17e8be9244a11ecf34f9ab61324f80d3b3811506c7c14a944d486466ffebdd2a5c237bc1218085144f80099cbc5f24f88652f2c514c605e69a0ae79fa2d7912b1b0ceeaf4714ef739cebf40ffcb6375471b1", 0x7e}], 0x2, 0x0, 0x0, 0x4}, 0x40800) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f0000000580)="a1c6757dfaadb021e548300000000400006cf0c0a85f932dcb69d6ac0bdd8dccb977ee89358defa770c61882338034f18a69e3453f76c7a35c8b1c76930ad05449f2273fe82e6661382febf47461", 0x4e}], 0x2) sendto$packet(r0, &(0x7f0000000440)="a80320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77ba32b6d78839980700e666f8fe52f66b96e84000050016f37fe8c0295f5c", 0x3d, 0xc881, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x10, 0x6, @random="0f95f89a2293"}, 0x14) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0xffffffff) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000500)="b90600076008008cb89e08f00800511d0833df5493de46ecb3aaca564f39a331b78d", 0x0, 0xfffffdfb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) 3.150916581s ago: executing program 1 (id=4052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xf6da, 0xd, 0x20000000, 0x7fffffff, 0x678c}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r11], 0x20, 0x6044}, 0x6) close(r7) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0xfffffff8}, 0x1c) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r13, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r13, 0x2) 3.110511959s ago: executing program 4 (id=4053): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000002060101000000000000000000000000050004000000000005000400020000000500010007000000050005000a0000001400080012400000ffff0c000300686173683a697000"/84], 0x54}}, 0x0) 3.020007161s ago: executing program 4 (id=4054): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0002100c00d2"], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x28) (async, rerun: 64) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000003b80)={0x10000001}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x1, 'veth0_to_team\x00', {}, 0x1ff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@gettfilter={0x2c, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xffe0}, {0xfffb, 0x10}, {0x8, 0xffff}}, [{0x8}]}, 0x2c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21e2a4de6f01e765}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf25010000000000000007410000004c0018000000096962000000000000000000000000000000000000000000000000000000000000000000000000000000000000007100000000000000000000000000000000000000000000348586fb3b265dfd4c1bcc095a41da3c784ae8fcf21da7ac2c1a68a7f28bbfa853e80053c88f8534a1ca19"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newchain={0x2c, 0x64, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xb, 0x7}, {0xe, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xff}]}, 0x2c}}, 0x0) recvfrom$packet(r5, &(0x7f0000000180)=""/25, 0x19, 0x2, &(0x7f0000000480)={0x11, 0x1, r7, 0x1, 0xb, 0x6, @broadcast}, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x1412, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x40, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}}, 0x4008000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="260a0000000000006111b8df000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 542.405065ms ago: executing program 0 (id=4055): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x20, 0x19, 0x15, 0xfffefffc, 0xffffffff, "", [@typed={0xa, 0x20, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x4, 0x12}]}, 0x20}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 541.991001ms ago: executing program 4 (id=4056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800db5b2cbd7000fedbdf251d01030015000400020000c007030000564f4286108f87d20600000026eea9938ffda2e74891116c26ff4c9cc562cde91d14251deb403d93c67219bb91aa41c9cc90a52e3993202edd8e9d9e0ee07acafc78a3ba7a39a9d5424986d6714d3ac6aaeaccd68d80253d0643f7bd"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) 431.221822ms ago: executing program 3 (id=4057): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'pimreg\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffd5d}, 0x94) 368.055631ms ago: executing program 1 (id=4058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008040) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x80, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x52, 0x6, "49ab0b8f7a2d5b3d1c831ddf5925c41c82c3625c9d3475c4dd2e737b73a8f309850929a8bb5583821123b822e99f338a41a462b210c801cf197a072ab1c7ed5a352b0c8af6cf671eee803054aa9c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20024040}, 0x2000c015) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000000c002b8008000200", @ANYRES32, @ANYBLOB="1400030076657468305f746f5f6261746164760008002900419203"], 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 234.391794ms ago: executing program 0 (id=4059): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}}, 0x4080800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}}, 0x4080800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000240)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/14, 0xe}], 0x1, &(0x7f0000000540)=""/151, 0x97}, 0x5}, {{&(0x7f0000000600)=@qipcrtr, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f00000006c0)=""/15, 0xf}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000800)=""/103, 0x67}], 0x4}, 0x10001}, {{&(0x7f00000008c0)=@vsock, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/31, 0x1f}, {&(0x7f0000000980)=""/250, 0xfa}, {&(0x7f0000000a80)=""/233, 0xe9}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/201, 0xc9}, {&(0x7f0000000cc0)=""/46, 0x2e}], 0x6, &(0x7f0000000d80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001d80)=@nfc, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e00)=""/98, 0x62}], 0x1, &(0x7f0000001ec0)}, 0x711a}], 0x4, 0x100, &(0x7f0000002000)) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) (async) write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) 184.587066ms ago: executing program 4 (id=4060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000500), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0xffff, 0x201, 0x489c, 0x6}, 0x3c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r7], 0x20}}, 0x4000) 172.669524ms ago: executing program 3 (id=4061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x4908d13283d17e5f}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e63}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'geneve1\x00', 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "c04b100a68ee9f321ee7d62007329ec2b3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) 4.712558ms ago: executing program 3 (id=4062): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf251a00000058002e800c0004000203aaaaaaaaaaaa050005000100000006000300a2aa000006000100040000000c0004000200aaaaaaaaaaaa0500050001000000060001006a0e000006000100050000000c0004000203aaaaaaaaaaaa08000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="5c002e8006", @ANYRES32], 0x134}}, 0x40080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000009000000070000000000000700000000000000000000000d04000000040000000000000e0400000000000000060000000000000c02000000000000002e002e2e"], 0x0, 0x55}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000011", @ANYRESOCT=0x0, @ANYRES8=0x0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 0s ago: executing program 1 (id=4063): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, 0x0, 0x20000894) sendmmsg$inet6(r1, &(0x7f000000c800)=[{{&(0x7f00000050c0)={0xa, 0x4e21, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c, &(0x7f0000005300)=[{&(0x7f0000005100)="18c96daedcb0bd0f5aa4aa19ce70", 0xe}, {&(0x7f0000005200)="d8e0291382b682ca62739eac876a9c417bcfa3bcba30a46b7fc0486ea5677b281a6fe8ddbc1b5e7c56cbfa26204c76ad60a84d2eba6b3bf7fb333c76efbc2fa04c56d8b2bb9e5121e353408d9b975683e8b02d5d578f6509f7449e727b5d00f05c968ed2a6c05f396e1cf536eac3541272540bb2c961", 0x76}, {&(0x7f00000052c0)="309b9251faf4a1a362fa5b0642b1265762dd", 0x12}], 0x3, &(0x7f0000000000)=[@dstopts={{0x28, 0x29, 0x37, {0x2c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x2b1}, @pad1, @pad1]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x2f, 0xa, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xd, 0x3, [0x4, 0x4]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x6, 0x3, [0x0, 0x8]}}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x7ff}, @enc_lim={0x4, 0x1, 0x7}]}}}, @flowinfo={{0x0, 0x29, 0xb, 0x8}}], 0xb0}}, {{&(0x7f0000005600)={0xa, 0x4e23, 0x7, @local, 0x7}, 0x1c, &(0x7f0000006640)=[{&(0x7f0000005640)="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", 0xffd}], 0x1000000000000151}}], 0x2, 0x20000044) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f000000ca00)={0x9}, 0x1) kernel console output (not intermixed with test programs): n:24kB active_file:1040kB inactive_file:170896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122180kB dirty:332kB writeback:0kB shmem:3664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15932kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 482.649131][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.687549][T18213] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 482.689495][T17949] bridge_slave_1: entered allmulticast mode [ 482.736370][T18213] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.777439][T17949] bridge_slave_1: entered promiscuous mode [ 482.807705][ T4939] Bluetooth: hci0: command tx timeout [ 482.828347][T18213] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 482.841380][T18213] Node 0 DMA32 free:903848kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36152kB inactive_anon:24kB active_file:1040kB inactive_file:170896kB unevictable:1536kB writepending:280kB zspages:4kB present:3129332kB managed:2548828kB mlocked:0kB bounce:0kB free_pcp:40888kB local_pcp:21256kB free_cma:0kB [ 482.903983][T18213] lowmem_reserve[]: 0 0 0 0 0 [ 482.913280][T18213] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.954759][T18213] lowmem_reserve[]: 0 0 0 0 0 [ 482.959539][T18213] Node 1 Normal free:3943716kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4028kB local_pcp:4028kB free_cma:0kB [ 483.003802][T18213] lowmem_reserve[]: 0 0 0 0 0 [ 483.032694][T18213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 483.046664][T18213] Node 0 DMA32: 1166*4kB (UME) 570*8kB (UME) 264*16kB (UME) 741*32kB (UME) 312*64kB (UME) 187*128kB (UME) 89*256kB (UM) 33*512kB (UME) 13*1024kB (UM) 6*2048kB (UM) 185*4096kB (UM) = 904104kB [ 483.080486][T18213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 483.094794][T18213] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3943716kB [ 483.128842][T18213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 483.134808][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 483.138852][T18213] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 483.166950][T17949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.184968][T18213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 483.210632][T17949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.230480][T18213] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 483.264541][T18213] 44384 total pagecache pages [ 483.273262][T18213] 4 pages in swap cache [ 483.346905][T18213] Free swap = 124792kB [ 483.351110][T18213] Total swap = 124996kB [ 483.355273][T18213] 2097051 pages RAM [ 483.359081][T18213] 0 pages HighMem/MovableOnly [ 483.371969][T18213] 428162 pages reserved [ 483.377440][T18213] 0 pages cma reserved [ 483.403184][T17949] team0: Port device team_slave_0 added [ 483.425943][T17949] team0: Port device team_slave_1 added [ 483.571752][T17949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.578829][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.610920][T17949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.662246][T17949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.677003][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.740997][T17949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.885738][T17949] hsr_slave_0: entered promiscuous mode [ 483.904199][T17949] hsr_slave_1: entered promiscuous mode [ 483.910302][T17949] debugfs: 'hsr0' already exists in 'hsr' [ 483.916059][T17949] Cannot create hsr debugfs directory [ 483.927237][ T24] net_ratelimit: 6 callbacks suppressed [ 483.927252][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.941106][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.015146][T18242] syzkaller0: entered promiscuous mode [ 484.020698][T18242] syzkaller0: entered allmulticast mode [ 484.279738][ T6534] hsr_slave_0: left promiscuous mode [ 484.305906][ T6534] hsr_slave_1: left promiscuous mode [ 484.500465][ T6534] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 484.762461][T18189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.814704][ T6577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.823514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.968206][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.977061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.093857][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3020'. [ 485.128795][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'. [ 485.206510][T18249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3019'. [ 485.265211][T18255] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3019'. [ 485.528648][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 485.560204][T18251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3020'. [ 485.656599][T18270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 485.727999][T18276] netlink: 'syz.0.3023': attribute type 21 has an invalid length. [ 485.740558][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3022'. [ 485.785664][T18276] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3023'. [ 486.011533][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.020277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.072644][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 486.121718][T18276] netlink: 'syz.0.3023': attribute type 4 has an invalid length. [ 486.146863][T18276] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3023'. [ 486.417534][T11911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.463969][T18294] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 486.631308][T18299] ieee802154 phy0 wpan0: encryption failed: -22 [ 486.719232][ C0] bridge0: port 1(syz_tun) entered learning state [ 486.875736][ T6534] IPVS: stop unused estimator thread 0... [ 487.897296][T17949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.965395][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.975553][T17949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.071343][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.119196][T17949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.163706][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.380409][T17949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.411578][T17949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.457999][T18375] __nla_validate_parse: 2 callbacks suppressed [ 488.458018][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3041'. [ 488.468553][T18376] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 488.764523][T18392] netlink: 'syz.2.3043': attribute type 1 has an invalid length. [ 488.808486][T18368] bond1: entered promiscuous mode [ 488.814093][T18368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.005947][T18392] 8021q: adding VLAN 0 to HW filter on device bond13 [ 489.125135][ T24] net_ratelimit: 6 callbacks suppressed [ 489.125154][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.139091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.196176][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'. [ 489.205075][T18409] openvswitch: netlink: Flow key attr not present in new flow. [ 489.406089][T18417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.415492][T18417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.423987][T18417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.440503][T11911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.518997][T17949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.595284][T18422] netlink: 'syz.2.3048': attribute type 1 has an invalid length. [ 489.623611][T18426] netlink: 'syz.2.3048': attribute type 1 has an invalid length. [ 489.632305][T18420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.641204][T18420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.728094][T17949] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.740028][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.747246][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.828070][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.835254][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.844784][T18422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.913587][T18410] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 490.170414][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.385666][T18462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3056'. [ 490.394878][T18457] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3056'. [ 491.051211][T18496] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3062'. [ 491.085363][T18484] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 491.282408][T18503] netlink: 'syz.2.3059': attribute type 4 has an invalid length. [ 491.858372][T17949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.251002][T17949] veth0_vlan: entered promiscuous mode [ 492.303419][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3069'. [ 492.449929][T17949] veth1_vlan: entered promiscuous mode [ 492.453178][T18543] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 492.653180][T17949] veth0_macvtap: entered promiscuous mode [ 492.678993][T17949] veth1_macvtap: entered promiscuous mode [ 492.705450][T17949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.740371][T17949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.762915][ T6559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.796868][ T6559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.902015][ T6559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.936897][ T6559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.955234][T18564] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3073'. [ 493.014974][T18552] lo speed is unknown, defaulting to 1000 [ 493.074741][T18552] lo speed is unknown, defaulting to 1000 [ 493.301229][ T6535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.326719][T18575] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3075'. [ 493.338328][ T6535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.480603][ T6540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.534618][ T6540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.644593][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3077'. [ 493.766928][T18592] netlink: 'syz.2.3078': attribute type 1 has an invalid length. [ 493.832643][T18592] bond14: entered promiscuous mode [ 493.840214][T18592] 8021q: adding VLAN 0 to HW filter on device bond14 [ 494.328466][ T24] net_ratelimit: 12 callbacks suppressed [ 494.328485][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.349697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.483883][T18618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3081'. [ 494.562563][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 494.576430][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 494.585889][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 494.609930][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 494.678451][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 494.925353][T18634] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3084'. [ 494.997479][T18636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3085'. [ 495.064817][T18634] netlink: 'syz.0.3084': attribute type 1 has an invalid length. [ 495.231605][T18641] netlink: 'syz.0.3084': attribute type 3 has an invalid length. [ 495.246200][T18641] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3084'. [ 495.376845][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.385699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.531456][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.681266][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.690314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.816509][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'. [ 495.957396][T18641] 8021q: adding VLAN 0 to HW filter on device bond12 [ 495.966522][T18641] bond11: (slave bond12): making interface the new active one [ 495.974549][T18641] bond11: (slave bond12): Enslaving as an active interface with an up link [ 496.211233][T18677] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 496.392502][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.401417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.824557][ T4939] Bluetooth: hci2: command tx timeout [ 496.846089][T18704] x_tables: duplicate underflow at hook 3 [ 496.846995][T18705] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3094'. [ 496.903136][T18619] lo speed is unknown, defaulting to 1000 [ 496.910728][T18619] lo speed is unknown, defaulting to 1000 [ 497.451279][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.306067][T18758] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 498.386825][T18765] netlink: 'syz.1.3109': attribute type 1 has an invalid length. [ 498.401593][T18758] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 498.453298][T18758] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 498.545012][T18765] bond2: entered promiscuous mode [ 498.577484][T18765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.664974][T18768] ipvlan2: entered allmulticast mode [ 498.689356][T18768] bond2: entered allmulticast mode [ 498.715958][T18774] bond2: (slave bridge2): making interface the new active one [ 498.739320][T18774] bridge2: entered promiscuous mode [ 498.744983][T18774] bridge2: entered allmulticast mode [ 498.754983][T18774] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 498.877823][ T4939] Bluetooth: hci2: command tx timeout [ 499.341924][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 499.525823][ T24] net_ratelimit: 4 callbacks suppressed [ 499.525843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.540236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.940777][T18813] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.3115'. [ 500.406983][T18619] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.414352][T18830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3117'. [ 500.431232][T18619] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.431407][T18619] bridge_slave_0: entered allmulticast mode [ 500.439633][T18619] bridge_slave_0: entered promiscuous mode [ 500.480016][T18824] tunl0: Caught tx_queue_len zero misconfig [ 500.506672][T18619] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.556810][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.565710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.576893][T18619] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.602584][T18619] bridge_slave_1: entered allmulticast mode [ 500.610319][T18619] bridge_slave_1: entered promiscuous mode [ 500.967745][ T4939] Bluetooth: hci2: command tx timeout [ 501.356383][T18845] bridge0: port 1(syz_tun) entered blocking state [ 501.362919][T18845] bridge0: port 1(syz_tun) entered disabled state [ 501.453915][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.454518][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.461178][T18845] syz_tun: entered allmulticast mode [ 501.476181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.548961][T18845] syz_tun: entered promiscuous mode [ 501.584367][T18619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.599576][T14196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.631452][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.640352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.694186][T18619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.822639][T18619] team0: Port device team_slave_0 added [ 501.831058][T18619] team0: Port device team_slave_1 added [ 501.954819][T18619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.962789][T18619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.109279][T18619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.195281][T18619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.227087][T18619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.266899][T18619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.322653][T18889] vlan4: entered allmulticast mode [ 502.329754][T18889] bond0: entered allmulticast mode [ 502.496958][T18619] hsr_slave_0: entered promiscuous mode [ 502.504947][T18619] hsr_slave_1: entered promiscuous mode [ 502.698471][T18908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3132'. [ 502.715312][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.801615][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 503.029758][T18921] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3137'. [ 503.032692][ T4939] Bluetooth: hci2: command tx timeout [ 503.380345][T18930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3139'. [ 503.448788][T18928] lo speed is unknown, defaulting to 1000 [ 503.456283][T18928] lo speed is unknown, defaulting to 1000 [ 503.619113][T18619] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.645209][T18619] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.739057][T18943] netlink: 'syz.0.3142': attribute type 2 has an invalid length. [ 504.051046][T18619] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.061361][T18619] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.254042][T18619] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.264358][T18619] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.446812][T18619] netdevsim netdevsim4 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.458192][T18619] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.687098][T14196] net_ratelimit: 3 callbacks suppressed [ 504.687114][T14196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.705502][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 504.737280][T18969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 504.813130][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.821867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.067200][T18619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 505.110211][T18619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.212507][T18974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.247763][T18619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 505.259592][T18619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.294595][T18619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 505.329081][T18619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.376488][T18979] gretap0: entered promiscuous mode [ 505.384459][T18619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 505.409306][T18619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.624250][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 505.838800][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.847661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.921341][T19001] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.3157'. [ 505.969453][T18619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.008418][T18619] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.038849][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.051025][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.073377][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.080562][ T6569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.535164][T19017] syzkaller0: entered promiscuous mode [ 506.580214][T19017] syzkaller0: entered allmulticast mode [ 506.890299][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.898623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.212559][ T6560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.221631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.774977][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.995917][ T24] net_ratelimit: 4 callbacks suppressed [ 509.995931][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.009749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.255315][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 510.267710][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'. [ 510.323867][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 510.385190][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'. [ 510.582447][T19073] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3173'. [ 510.801571][T14196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.944053][T18619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.060215][T11920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.075560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.323242][T19111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.442092][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 511.468703][T19120] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 511.518833][T18619] veth0_vlan: entered promiscuous mode [ 511.555964][T18619] veth1_vlan: entered promiscuous mode [ 511.607339][T18619] veth0_macvtap: entered promiscuous mode [ 511.621975][T18619] veth1_macvtap: entered promiscuous mode [ 511.652841][T18619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.672446][T18619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.702982][ T6559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.729677][ T6559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.761800][ T6559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.808007][ T6559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.846970][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3187'. [ 511.965537][T19131] sock: sock_timestamping_bind_phc: sock not bind to device [ 511.990681][T19131] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 512.065218][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.081999][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.090390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.105482][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.213408][ T6559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.221265][ T6559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.246744][T19138] netlink: 'syz.1.3190': attribute type 1 has an invalid length. [ 512.312768][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3191'. [ 512.321675][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 512.340920][ T6549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.349857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.354035][T19140] netlink: 'syz.0.3191': attribute type 24 has an invalid length. [ 512.406275][T19144] sctp: [Deprecated]: syz.3.3193 (pid 19144) Use of int in maxseg socket option. [ 512.406275][T19144] Use struct sctp_assoc_value instead [ 512.500891][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'. [ 512.509815][T19151] netlink: 'syz.2.3192': attribute type 6 has an invalid length. [ 512.624987][T19149] lo speed is unknown, defaulting to 1000 [ 512.650036][T19149] lo speed is unknown, defaulting to 1000 [ 512.796141][T19159] syzkaller0: entered promiscuous mode [ 512.815548][T19159] syzkaller0: entered allmulticast mode [ 513.002638][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.015624][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.027171][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.035182][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.043373][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 513.506301][ T5622] bridge0: port 1(syz_tun) entered disabled state [ 513.592258][ T5622] syz_tun (unregistering): left allmulticast mode [ 513.602144][ T5622] syz_tun (unregistering): left promiscuous mode [ 513.632510][ T5622] bridge0: port 1(syz_tun) entered disabled state [ 513.860866][T19184] syzkaller0: entered promiscuous mode [ 513.900828][T19184] syzkaller0: entered allmulticast mode [ 515.187614][ T5636] Bluetooth: hci4: command tx timeout [ 515.188235][ T24] net_ratelimit: 5 callbacks suppressed [ 515.188266][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.208620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.237342][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.245648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.923221][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.273747][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.278105][ T5636] Bluetooth: hci4: command tx timeout [ 517.282601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.730728][T19160] lo speed is unknown, defaulting to 1000 [ 517.738598][T19160] lo speed is unknown, defaulting to 1000 [ 517.756121][T19227] __nla_validate_parse: 2 callbacks suppressed [ 517.756139][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'. [ 517.771246][T19227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.863469][T19227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.929355][T19231] macvlan0: entered promiscuous mode [ 517.945282][T19231] macvlan0: entered allmulticast mode [ 517.950705][T19231] veth1_vlan: entered allmulticast mode [ 517.963834][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'. [ 517.990236][T19233] netlink: 'syz.3.3212': attribute type 1 has an invalid length. [ 518.021683][T19231] veth1_vlan: left allmulticast mode [ 518.085522][T19237] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3210'. [ 518.086928][T19238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3212'. [ 518.098465][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.112844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.134341][T19231] macvlan0 (unregistering): left promiscuous mode [ 518.189040][T19231] macvlan0 (unregistering): left allmulticast mode [ 518.335270][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.787083][T19260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3219'. [ 519.083490][T19269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3219'. [ 519.092487][T19269] nbd: nbd64 already in use [ 519.359314][ T5636] Bluetooth: hci4: command tx timeout [ 519.413953][T19225] udevd[19225]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 519.524182][T19286] bridge_slave_0: left allmulticast mode [ 519.535121][T19286] bridge_slave_0: left promiscuous mode [ 519.550557][T19286] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.561562][T19286] bridge_slave_1: left allmulticast mode [ 519.613600][T19286] bridge_slave_1: left promiscuous mode [ 519.621250][T19286] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.693086][T19286] bond0: (slave bond_slave_0): Releasing backup interface [ 519.712525][T19286] bond0: (slave bond_slave_1): Releasing backup interface [ 519.726927][T19286] team0: Port device team_slave_0 removed [ 519.757063][T19286] team0: Port device team_slave_1 removed [ 519.763628][T19286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.797932][T19286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.832748][T19286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.843189][T19286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.858707][T19160] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.865886][T19160] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.881624][T19160] bridge_slave_0: entered allmulticast mode [ 519.890103][T19160] bridge_slave_0: entered promiscuous mode [ 519.897266][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'. [ 519.973232][T19160] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.980415][T19160] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.987624][T19160] bridge_slave_1: entered allmulticast mode [ 520.019626][T19312] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3228'. [ 520.074842][T19160] bridge_slave_1: entered promiscuous mode [ 520.195780][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 520.239811][T19160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.280211][T19160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.393598][ T42] net_ratelimit: 9 callbacks suppressed [ 520.393616][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.407597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.436079][T19160] team0: Port device team_slave_0 added [ 520.444884][T19160] team0: Port device team_slave_1 added [ 520.615866][T19160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.622854][T19160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.672861][T19160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.691416][T19335] lo speed is unknown, defaulting to 1000 [ 520.702935][T19335] lo speed is unknown, defaulting to 1000 [ 520.710291][T19160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.743947][T19160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.829958][T19160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.082921][T19160] hsr_slave_0: entered promiscuous mode [ 521.089573][T19160] hsr_slave_1: entered promiscuous mode [ 521.156386][T19160] debugfs: 'hsr0' already exists in 'hsr' [ 521.162153][T19160] Cannot create hsr debugfs directory [ 521.245512][T19350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3238'. [ 521.428868][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.437249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.437991][ T5636] Bluetooth: hci4: command tx timeout [ 521.731794][T19160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.893495][T19160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.087654][T19160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.470964][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.479336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.617193][T19160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.030761][T19160] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.060921][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.115962][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.178238][T19160] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.232828][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.295447][T19160] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.361203][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.452348][T19160] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 523.471948][T19160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.513943][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.522373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.722035][T19416] __nla_validate_parse: 3 callbacks suppressed [ 523.722053][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3256'. [ 523.746112][T19419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3257'. [ 523.768217][T19160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.795455][T19422] lo: Caught tx_queue_len zero misconfig [ 523.809965][T19160] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.827825][T19419] syzkaller0: entered promiscuous mode [ 523.833335][T19419] syzkaller0: entered allmulticast mode [ 523.863800][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.884137][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.891325][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.949804][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.956983][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.100849][T19428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'. [ 524.135370][T19428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3259'. [ 524.154386][T19428] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3259'. [ 524.202710][T19434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3260'. [ 524.210751][T19428] netlink: 'syz.2.3259': attribute type 3 has an invalid length. [ 524.225137][T19428] netlink: 'syz.2.3259': attribute type 2 has an invalid length. [ 524.244609][T19434] syzkaller0: entered promiscuous mode [ 524.259227][T19434] syzkaller0: entered allmulticast mode [ 524.318512][T19428] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3259'. [ 524.355609][T19428] netlink: 'syz.2.3259': attribute type 2 has an invalid length. [ 525.217875][T19478] sctp: [Deprecated]: syz.2.3270 (pid 19478) Use of int in max_burst socket option. [ 525.217875][T19478] Use struct sctp_assoc_value instead [ 525.255273][T19481] xt_connbytes: Forcing CT accounting to be enabled [ 525.403037][T19160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.411910][T19485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3272'. [ 525.616166][T19490] pimreg: entered allmulticast mode [ 525.619818][T11917] net_ratelimit: 3 callbacks suppressed [ 525.619833][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.635288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.659597][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'. [ 525.668489][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'. [ 525.693911][T19160] veth0_vlan: entered promiscuous mode [ 525.730008][T19160] veth1_vlan: entered promiscuous mode [ 525.785649][ T6534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.797083][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.815103][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.865783][T19160] veth0_macvtap: entered promiscuous mode [ 525.929269][T19160] veth1_macvtap: entered promiscuous mode [ 525.979527][ T29] audit: type=1804 audit(1783295381.943:19): pid=19501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3278" name="/newroot/29/cgroup.controllers" dev="tmpfs" ino=165 res=1 errno=0 [ 526.024608][T19160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.085320][T19160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.137746][ T29] audit: type=1800 audit(1783295381.943:20): pid=19501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3278" name="cgroup.controllers" dev="tmpfs" ino=165 res=0 errno=0 [ 526.167829][ T29] audit: type=1800 audit(1783295381.983:21): pid=19501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3278" name="cgroup.controllers" dev="tmpfs" ino=165 res=0 errno=0 [ 526.237572][T19508] 8021q: adding VLAN 0 to HW filter on device bond15 [ 526.340271][T19503] tipc: Enabling of bearer rejected, failed to enable media [ 526.368655][T19509] bond15: (slave veth15): Enslaving as an active interface with an up link [ 526.399434][ T6586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.408213][ T6586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.467027][ T6586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.552875][T19515] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 526.643036][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.651456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.003366][ T6586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.442100][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.473233][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.590409][ T6569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.616550][ T6569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.675795][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.684570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.852586][T19558] lo speed is unknown, defaulting to 1000 [ 527.870364][T19558] lo speed is unknown, defaulting to 1000 [ 528.119617][T19566] netlink: 'syz.3.3290': attribute type 7 has an invalid length. [ 528.265448][T19570] bridge3: port 1(dummy0) entered blocking state [ 528.292586][T19570] bridge3: port 1(dummy0) entered disabled state [ 528.309813][T19570] dummy0: entered allmulticast mode [ 528.338950][T19570] dummy0: entered promiscuous mode [ 528.752596][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.945591][T19587] __nla_validate_parse: 9 callbacks suppressed [ 528.945609][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3296'. [ 528.970858][T19582] bridge1: entered promiscuous mode [ 528.976094][T19582] bridge1: entered allmulticast mode [ 528.993112][T19582] team0: Port device bridge1 added [ 529.012957][T19583] bridge2: entered promiscuous mode [ 529.027617][T19583] bridge2: entered allmulticast mode [ 529.082515][T19583] team0: Port device bridge2 added [ 529.131261][T19584] bridge0: port 3(team0) entered blocking state [ 529.169424][T19584] bridge0: port 3(team0) entered disabled state [ 529.206256][ T4939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 529.235390][T19584] team0: entered allmulticast mode [ 529.245936][ T4939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 529.256057][T19584] team_slave_0: entered allmulticast mode [ 529.256082][T19584] team_slave_1: entered allmulticast mode [ 529.273932][ T4939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 529.276853][T19584] team0: entered promiscuous mode [ 529.298354][ T4939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 529.307551][ T4939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 529.320885][T19584] team_slave_0: entered promiscuous mode [ 529.327375][T19584] team_slave_1: entered promiscuous mode [ 529.336419][T19584] bridge0: port 3(team0) entered blocking state [ 529.342731][T19584] bridge0: port 3(team0) entered forwarding state [ 529.949388][ T5621] syz_tun (unregistering): left allmulticast mode [ 529.983785][ T5621] syz_tun (unregistering): left promiscuous mode [ 530.005430][ T5621] bridge0: port 1(syz_tun) entered disabled state [ 530.619949][T19627] tipc: Started in network mode [ 530.634421][T19624] netlink: 'syz.1.3302': attribute type 1 has an invalid length. [ 530.658015][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 530.664477][T19627] tipc: Node identity 6a63dc124a0a, cluster identity 4711 [ 530.674172][T19627] tipc: Enabled bearer , priority 0 [ 530.677457][T19624] netlink: 'syz.1.3302': attribute type 1 has an invalid length. [ 530.803231][T11917] net_ratelimit: 7 callbacks suppressed [ 530.803248][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.825143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.911009][T19632] syzkaller0: entered promiscuous mode [ 530.930573][T19632] syzkaller0: entered allmulticast mode [ 530.972062][T19632] tipc: Resetting bearer [ 531.096785][T19588] lo speed is unknown, defaulting to 1000 [ 531.111854][T19637] tipc: Resetting bearer [ 531.154609][T19655] Bluetooth: MGMT ver 1.23 [ 531.479604][ T5636] Bluetooth: hci3: command tx timeout [ 531.546143][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.563130][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.578038][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.846401][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.855286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.889136][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.897982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.530802][ T5636] Bluetooth: hci3: command tx timeout [ 533.912447][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.374489][T19637] tipc: Disabling bearer [ 534.452287][T19588] lo speed is unknown, defaulting to 1000 [ 534.540156][T19668] tipc: Enabling of bearer rejected, failed to enable media [ 534.575551][ T24] tipc: Node number set to 543808530 [ 534.734772][T19683] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3312'. [ 534.775508][T19683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3312'. [ 534.818589][T19685] veth4: entered allmulticast mode [ 534.923193][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 535.125057][T19697] netlink: 'syz.4.3316': attribute type 2 has an invalid length. [ 535.133104][T19701] netlink: 'syz.1.3318': attribute type 10 has an invalid length. [ 535.162630][T19697] : entered promiscuous mode [ 535.164855][T19703] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3319'. [ 535.206675][T19701] team0: Port device vlan0 added [ 535.249004][T19703] netlink: 279 bytes leftover after parsing attributes in process `syz.0.3319'. [ 535.270450][T19703] veth0_to_bond: default FDB implementation only supports local addresses [ 535.597208][ T5636] Bluetooth: hci3: command tx timeout [ 535.667781][T19717] pimreg: entered allmulticast mode [ 535.854492][T19712] pimreg: left allmulticast mode [ 535.914311][T19723] net_ratelimit: 6 callbacks suppressed [ 535.914329][T19723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.001710][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.010712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.576866][T19588] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.592098][T19588] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.600079][T19588] bridge_slave_0: entered allmulticast mode [ 536.608516][T19588] bridge_slave_0: entered promiscuous mode [ 536.621180][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 536.632292][T19588] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.639391][T19588] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.653948][T19588] bridge_slave_1: entered allmulticast mode [ 536.661057][T19588] bridge_slave_1: entered promiscuous mode [ 536.667308][T19747] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 536.781378][T19588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.793870][T19588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.970632][T19588] team0: Port device team_slave_0 added [ 537.000770][T19588] team0: Port device team_slave_1 added [ 537.034937][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.043359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.137792][T19588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.144770][T19588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.218937][T19588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.231422][T19588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.295346][T19761] IPVS: Scheduler module ip_vs_ not found [ 537.308450][T19588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.341648][T19588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.460155][T19770] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 537.558838][T19588] hsr_slave_0: entered promiscuous mode [ 537.597963][T19588] hsr_slave_1: entered promiscuous mode [ 537.617941][T19588] debugfs: 'hsr0' already exists in 'hsr' [ 537.628675][T19588] Cannot create hsr debugfs directory [ 537.677694][ T5636] Bluetooth: hci3: command tx timeout [ 537.683352][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.778244][T19779] xt_hashlimit: size too large, truncated to 1048576 [ 537.879524][T19776] netlink: 'syz.3.3339': attribute type 4 has an invalid length. [ 537.982378][T19787] netlink: 'syz.3.3339': attribute type 4 has an invalid length. [ 537.987476][T19786] netlink: 'syz.0.3341': attribute type 4 has an invalid length. [ 538.052546][T19788] netlink: 'syz.0.3341': attribute type 4 has an invalid length. [ 538.110599][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.127366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.134490][T19782] syzkaller0: entered promiscuous mode [ 538.141141][T19782] syzkaller0: entered allmulticast mode [ 538.320220][T19788] netlink: 'syz.0.3341': attribute type 4 has an invalid length. [ 538.548026][T19793] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3343'. [ 538.730614][T19588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 538.743031][T19588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.793674][T19588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 538.805232][T19588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.813330][T19588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 538.834244][T19588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.854671][T19588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 538.914747][T19588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.108362][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.116774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.204513][T19827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3349'. [ 539.309614][T19588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.341257][T19588] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.363403][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.370558][ T6586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.398195][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.405430][ T6540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.942905][T19588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.982331][T19588] veth0_vlan: entered promiscuous mode [ 539.996144][T19588] veth1_vlan: entered promiscuous mode [ 540.028776][T19588] veth0_macvtap: entered promiscuous mode [ 540.045331][T19588] veth1_macvtap: entered promiscuous mode [ 540.066590][T19588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.078920][T19588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.095973][ T6540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.111999][ T6540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.123754][ T6540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.132495][ T6540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.387912][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 540.397053][T19850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3353'. [ 540.618724][T19855] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 540.636586][T19855] veth5: entered allmulticast mode [ 541.208408][ T42] net_ratelimit: 5 callbacks suppressed [ 541.208432][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.224484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.972114][T19814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.173600][ T6559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.182274][ T6559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.230716][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.239517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.374918][ T6534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.440634][ T6534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.539766][T19869] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3361'. [ 542.759170][T19879] syzkaller0: entered promiscuous mode [ 542.771027][T19881] netlink: 'syz.1.3365': attribute type 10 has an invalid length. [ 542.780324][T19879] syzkaller0: entered allmulticast mode [ 542.794027][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 542.824217][T19881] openvswitch: netlink: Message has 4 unknown bytes. [ 542.842856][T19884] ip6t_srh: unknown srh match flags 4000 [ 543.019753][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 543.115156][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3367'. [ 543.126581][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 543.157831][T19897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3369'. [ 543.206488][T19897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3369'. [ 543.241580][ T5755] hid (null): unknown global tag 0xb4 [ 543.247247][ T5755] hid (null): unknown global tag 0xd [ 543.384104][ T5755] hid-generic 0005:0001:0040.0001: unexpected long global item [ 543.400954][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.409363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.464537][ T5755] hid-generic 0005:0001:0040.0001: probe with driver hid-generic failed with error -22 [ 543.569603][T19913] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3372'. [ 543.586296][T19914] netlink: 'syz.4.3371': attribute type 30 has an invalid length. [ 543.591167][T19915] sctp: [Deprecated]: syz.2.3374 (pid 19915) Use of int in maxseg socket option. [ 543.591167][T19915] Use struct sctp_assoc_value instead [ 543.637873][T19913] syzkaller1: entered promiscuous mode [ 543.667626][T19913] syzkaller1: entered allmulticast mode [ 543.767879][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.079403][T19925] geneve2: entered promiscuous mode [ 544.187848][T19929] netlink: 'syz.2.3379': attribute type 2 has an invalid length. [ 544.257790][T19929] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 544.280027][T19929] netlink: 'syz.2.3379': attribute type 9 has an invalid length. [ 544.448584][T19931] syzkaller0: entered promiscuous mode [ 544.454192][T19931] syzkaller0: entered allmulticast mode [ 544.471600][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.479959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.780472][T19944] lo speed is unknown, defaulting to 1000 [ 544.787977][T19944] lo speed is unknown, defaulting to 1000 [ 544.861812][T19949] ip6erspan0: entered allmulticast mode [ 544.966570][T19955] syzkaller0: entered promiscuous mode [ 544.989746][T19955] syzkaller0: entered allmulticast mode [ 545.021242][T19955] tipc: Started in network mode [ 545.033443][T19955] tipc: Node identity 923092e0c296, cluster identity 4711 [ 545.053236][T19955] tipc: Enabled bearer , priority 0 [ 545.075481][T19954] tipc: Resetting bearer [ 545.153551][T19954] tipc: Disabling bearer [ 545.638708][T19972] batman_adv: batadv0: Adding interface: dummy0 [ 545.685140][T19972] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.721519][T19972] batman_adv: batadv0: Interface activated: dummy0 [ 545.860553][T19980] __nla_validate_parse: 1 callbacks suppressed [ 545.860570][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 546.134022][T19994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3396'. [ 546.176874][T19994] netlink: 'syz.1.3396': attribute type 1 has an invalid length. [ 546.502159][T19999] lo speed is unknown, defaulting to 1000 [ 546.509629][T19999] lo speed is unknown, defaulting to 1000 [ 546.533293][T20001] syzkaller0: entered promiscuous mode [ 546.556185][T20001] syzkaller0: entered allmulticast mode [ 546.558686][ T5755] net_ratelimit: 4 callbacks suppressed [ 546.558702][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.576119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.594169][T20013] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.809621][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.607541][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.615986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.809890][T20047] netlink: 'syz.2.3407': attribute type 10 has an invalid length. [ 547.845849][T20036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3404'. [ 547.912726][T20047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.959601][T20036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3404'. [ 547.971080][T20047] team0: Port device bond0 added [ 548.001793][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 548.156874][T20060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3410'. [ 548.158261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.426140][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3413'. [ 548.438883][T20065] netlink: 'syz.4.3413': attribute type 10 has an invalid length. [ 548.458288][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3413'. [ 548.529134][T20067] netdevsim netdevsim1: Direct firmware load for á failed with error -2 [ 548.546828][T20067] netdevsim netdevsim1: Falling back to sysfs fallback for: á [ 548.672189][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.687868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.716287][T20076] netlink: 'syz.2.3416': attribute type 13 has an invalid length. [ 548.877175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 549.070687][T20095] sctp: [Deprecated]: syz.0.3419 (pid 20095) Use of int in max_burst socket option. [ 549.070687][T20095] Use struct sctp_assoc_value instead [ 549.093251][T20076] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.101031][T20076] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.298679][T20076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.327572][T20076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.658857][T20102] sctp: [Deprecated]: syz.1.3421 (pid 20102) Use of int in max_burst socket option. [ 549.658857][T20102] Use struct sctp_assoc_value instead [ 549.680612][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.860905][ T6569] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.884914][ T6569] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.942123][ T6569] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.955528][ T6569] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.968832][T20103] lo speed is unknown, defaulting to 1000 [ 550.007020][T20103] lo speed is unknown, defaulting to 1000 [ 550.630216][T20134] netlink: 'syz.3.3430': attribute type 1 has an invalid length. [ 550.904345][T20134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.913600][T20134] bond1: (slave bond2): making interface the new active one [ 550.921495][T20134] bond1: (slave bond2): Enslaving as an active interface with an up link [ 550.937644][T20141] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3430'. [ 551.472807][T20154] netlink: 'syz.1.3434': attribute type 1 has an invalid length. [ 551.480575][T20154] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3434'. [ 551.660222][T20169] netlink: 'syz.2.3436': attribute type 7 has an invalid length. [ 551.763876][T20180] net_ratelimit: 7 callbacks suppressed [ 551.763892][T20180] openvswitch: netlink: Tunnel attr 245 out of range max 16 [ 551.790428][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.798883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.268653][T20199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3445'. [ 552.284206][T20199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3445'. [ 552.335583][T20219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3445'. [ 552.344573][T20219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3445'. [ 552.800465][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.808864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.830827][T20252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3450'. [ 552.873995][T20252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3450'. [ 552.887857][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.056025][T20261] hsr0: entered promiscuous mode [ 553.376776][T20274] lo speed is unknown, defaulting to 1000 [ 553.384232][T20274] lo speed is unknown, defaulting to 1000 [ 553.827384][T20294] xt_connbytes: Forcing CT accounting to be enabled [ 553.834498][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.843348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.155786][T20305] netlink: 'syz.3.3464': attribute type 13 has an invalid length. [ 554.173895][T20305] netlink: 'syz.3.3464': attribute type 17 has an invalid length. [ 554.206628][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 554.556336][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3468'. [ 554.649704][T20304] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 554.887948][T20328] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 554.896009][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.173686][T20336] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 555.656847][T20348] lo: entered allmulticast mode [ 555.800721][T20362] batadv_slave_1: entered promiscuous mode [ 556.030120][T20362] batadv_slave_1: left promiscuous mode [ 556.184179][T20365] __nla_validate_parse: 6 callbacks suppressed [ 556.184195][T20365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'. [ 556.215928][T20383] team0: Port device bond0 removed [ 556.239331][T20383] bridge_slave_0: left allmulticast mode [ 556.263762][T20383] bridge_slave_0: left promiscuous mode [ 556.280525][T20383] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.326855][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 556.367616][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 556.376521][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3492'. [ 556.379088][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3492'. [ 556.385377][T20393] netlink: 'syz.4.3492': attribute type 19 has an invalid length. [ 556.385394][T20393] netlink: 'syz.4.3492': attribute type 20 has an invalid length. [ 556.435434][T20383] bridge_slave_1: left allmulticast mode [ 556.445229][T20383] bridge_slave_1: left promiscuous mode [ 556.451899][T20383] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.458558][T20390] netlink: 'syz.4.3492': attribute type 19 has an invalid length. [ 556.467133][T20390] netlink: 'syz.4.3492': attribute type 20 has an invalid length. [ 556.504700][T20383] bond0: (slave bond_slave_0): Releasing backup interface [ 556.525513][T20383] bond0: (slave bond_slave_1): Releasing backup interface [ 556.538710][T20383] team0: Port device team_slave_0 removed [ 556.550235][T20383] team0: Port device team_slave_1 removed [ 556.561444][T20383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.580940][T20383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.679264][ T6569] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.688809][ T6569] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.756359][ T6569] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.821855][ T6569] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.902353][T20414] netlink: 'syz.4.3497': attribute type 13 has an invalid length. [ 556.986914][ T5755] net_ratelimit: 6 callbacks suppressed [ 556.986931][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.001744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.109804][T20227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.119858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.567464][T20438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 557.666428][T20435] block nbd1: server does not support multiple connections per device. [ 557.813281][T20435] block nbd1: shutting down sockets [ 557.996973][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.005379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.280861][T20461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3504'. [ 558.605598][T20468] veth3: entered promiscuous mode [ 558.615068][T20468] veth3: entered allmulticast mode [ 558.642201][T20468] team0: Port device veth3 added [ 558.992713][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.061611][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.070849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.364451][T20493] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3512'. [ 559.401007][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3512'. [ 559.410092][T20493] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3512'. [ 559.486636][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3513'. [ 560.086576][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.723804][T20536] netlink: 'syz.3.3523': attribute type 1 has an invalid length. [ 560.788839][T20541] netlink: 'syz.2.3521': attribute type 12 has an invalid length. [ 560.962583][T20536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.006514][T20543] veth1_macvtap: entered allmulticast mode [ 561.154976][T20550] netlink: 'syz.1.3525': attribute type 12 has an invalid length. [ 561.272505][T20227] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.281405][T20227] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.341808][T20227] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.366892][T20227] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.494196][T20571] netlink: 'syz.1.3531': attribute type 1 has an invalid length. [ 561.501968][T20571] __nla_validate_parse: 8 callbacks suppressed [ 561.501983][T20571] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3531'. [ 561.559328][T20567] block nbd1: server does not support multiple connections per device. [ 561.590715][T20574] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 561.599985][T20567] block nbd1: shutting down sockets [ 561.752425][T20574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.760891][T20571] pim6reg1: entered promiscuous mode [ 561.816688][T20571] pim6reg1: entered allmulticast mode [ 561.874570][T20579] bond1: (slave geneve2): making interface the new active one [ 561.883419][T20579] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 561.963926][T20230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.974435][T20230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.052808][T20230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.073350][T20230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.084860][T14198] net_ratelimit: 3 callbacks suppressed [ 562.084898][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.198441][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.214811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.598623][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3537'. [ 562.741213][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3537'. [ 562.818665][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3537'. [ 562.827568][T20598] openvswitch: netlink: Flow actions attr not present in new flow. [ 562.863448][T20606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.883522][ T6535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.892652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.925104][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.136535][T20609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.195038][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.203492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.361133][T20626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.373595][T20626] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.385972][T20626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.448902][T20626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 563.459340][T20626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.485334][T20626] veth1_vlan: left promiscuous mode [ 563.491310][T20626] veth0_vlan: left promiscuous mode [ 563.497781][T20626] veth0_vlan: entered promiscuous mode [ 563.513781][T20626] veth1_vlan: entered promiscuous mode [ 563.524737][T20626] veth1_macvtap: left promiscuous mode [ 563.531778][T20626] veth0_macvtap: left promiscuous mode [ 563.539133][T20626] veth0_macvtap: entered promiscuous mode [ 563.553801][T20626] veth1_macvtap: entered promiscuous mode [ 563.570549][T20626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 563.578971][T20626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 563.589718][T20626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.597949][T20626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.621489][T20631] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 563.964187][T20644] syzkaller0: entered promiscuous mode [ 563.970095][T20644] syzkaller0: entered allmulticast mode [ 564.085138][T20647] bond2: entered promiscuous mode [ 564.096442][T20647] bond2: entered allmulticast mode [ 564.101978][T20647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.259981][T11917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.449888][T20668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3549'. [ 564.536274][T20650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3549'. [ 565.447022][T20695] netlink: 'syz.3.3555': attribute type 13 has an invalid length. [ 565.465304][T20695] netlink: 'syz.3.3555': attribute type 17 has an invalid length. [ 568.157532][T11907] net_ratelimit: 4 callbacks suppressed [ 568.157552][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.317917][T20665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3553'. [ 568.330170][T20665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3553'. [ 568.352507][T20665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3553'. [ 568.361726][T20665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3553'. [ 568.418723][T20650] bond1: entered promiscuous mode [ 568.424577][T20650] bond1: entered allmulticast mode [ 568.430048][T20650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.549379][T20707] netlink: 'syz.2.3557': attribute type 1 has an invalid length. [ 568.629469][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.639486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.811363][T20721] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048) [ 568.949393][T20695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 569.023959][T20695] veth3: left promiscuous mode [ 569.029194][T20695] veth3: left allmulticast mode [ 569.040606][T14198] bridge0: entered promiscuous mode [ 569.052088][T20707] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 569.576312][T20751] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3570'. [ 569.781719][T20757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3570'. [ 569.892437][T20763] openvswitch: netlink: Tunnel attr 245 out of range max 16 [ 570.064628][T20771] netlink: 'syz.1.3576': attribute type 4 has an invalid length. [ 570.117582][T20774] netlink: 'syz.1.3576': attribute type 4 has an invalid length. [ 570.181610][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'. [ 570.376250][T20781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3576'. [ 570.431779][T20785] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3578'. [ 570.557889][T20229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.567039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.154110][T20815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3586'. [ 571.225466][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.817981][T20855] lo speed is unknown, defaulting to 1000 [ 571.891711][T20855] lo speed is unknown, defaulting to 1000 [ 572.999592][T20891] netlink: 'syz.0.3606': attribute type 1 has an invalid length. [ 573.139896][T20891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.558195][T20911] __nla_validate_parse: 6 callbacks suppressed [ 573.558215][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 573.777903][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.786850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.862993][T20924] netlink: 'syz.4.3617': attribute type 11 has an invalid length. [ 573.890673][T20924] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3617'. [ 573.928290][T20926] netlink: 'syz.4.3617': attribute type 11 has an invalid length. [ 573.936614][T20926] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3617'. [ 574.188873][T20937] pim6reg: entered allmulticast mode [ 574.201427][T20945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3623'. [ 574.210951][T20936] lo speed is unknown, defaulting to 1000 [ 574.214574][T20937] pim6reg: left allmulticast mode [ 574.253584][T20947] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3624'. [ 574.263089][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.271416][T20936] lo speed is unknown, defaulting to 1000 [ 574.280852][T20945] ipvlan2: entered allmulticast mode [ 574.292201][T20945] gretap0: entered allmulticast mode [ 574.468028][T20952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3625'. [ 574.896975][T20967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.910714][T20967] IPv6: NLM_F_CREATE should be set when creating new route [ 574.918000][T20967] IPv6: NLM_F_CREATE should be set when creating new route [ 574.925228][T20967] IPv6: NLM_F_CREATE should be set when creating new route [ 574.978454][T20967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.542510][T20985] macvtap1: entered promiscuous mode [ 575.548311][T20985] vlan0: entered promiscuous mode [ 575.674621][T20985] vlan0: left promiscuous mode [ 575.698197][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.708751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.976101][T21002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3642'. [ 576.086566][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3642'. [ 576.202072][T21002] macsec2: entered promiscuous mode [ 576.485377][T21019] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3645'. [ 576.711007][T21030] netlink: 'syz.4.3649': attribute type 15 has an invalid length. [ 576.724749][T21030] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3649'. [ 577.151317][T21045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.278319][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.733657][T21065] bridge0: port 3(team0) entered disabled state [ 577.740976][T21065] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.748623][T21065] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.792182][T21065] bridge0: entered allmulticast mode [ 577.826274][T21065] team0: left allmulticast mode [ 577.831902][T21065] team_slave_0: left allmulticast mode [ 577.846207][T21065] team_slave_1: left allmulticast mode [ 577.854477][T21065] team0: left promiscuous mode [ 577.859805][T21065] team_slave_0: left promiscuous mode [ 577.885301][T21065] team_slave_1: left promiscuous mode [ 577.897707][T21065] bridge0: port 3(team0) entered disabled state [ 577.911278][T21065] bridge_slave_1: left allmulticast mode [ 577.916929][T21065] bridge_slave_1: left promiscuous mode [ 577.929190][T21065] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.761404][T21065] bridge_slave_0: left allmulticast mode [ 578.767171][T21065] bridge_slave_0: left promiscuous mode [ 578.772992][T21065] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.321286][T21117] batadv_slave_1: entered promiscuous mode [ 579.346051][T14198] IPVS: starting estimator thread 0... [ 579.477156][T21119] IPVS: using max 32 ests per chain, 76800 per kthread [ 579.530261][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.539310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.009920][T21149] syzkaller0: entered promiscuous mode [ 580.033001][T21149] syzkaller0: entered allmulticast mode [ 580.081071][T21106] batadv_slave_1: left promiscuous mode [ 580.309740][ T4939] Bluetooth: hci5: command 0x0405 tx timeout [ 580.320403][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.790838][T21185] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3681'. [ 580.811712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.924231][T21164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3676'. [ 581.430778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.438665][T20211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.448220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.754257][T21228] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3691'. [ 581.821094][T21230] ip6tnl0: Caught tx_queue_len zero misconfig [ 581.870885][T21233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3690'. [ 581.902749][T21233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3690'. [ 581.963213][T21227] block nbd1: server does not support multiple connections per device. [ 581.976180][T21227] block nbd1: shutting down sockets [ 581.984756][T21237] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 581.991080][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3694'. [ 582.003949][T21237] bond2 (unregistering): Released all slaves [ 582.006455][T21239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3694'. [ 582.191979][T21245] lo speed is unknown, defaulting to 1000 [ 582.240005][T21245] lo speed is unknown, defaulting to 1000 [ 582.400172][T21255] mac80211_hwsim hwsim48 wlan0: Caught tx_queue_len zero misconfig [ 582.426457][T21255] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 582.463574][T21258] bond0: (slave bond_slave_1): Releasing backup interface [ 582.557621][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'. [ 582.589522][T21263] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 582.617143][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3699'. [ 582.945319][T21275] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 583.072141][T21265] nbd0: detected capacity change from 0 to 63 [ 583.093094][T21258] block nbd0: NBD_DISCONNECT [ 583.103830][T21258] block nbd0: Disconnected due to user request. [ 583.110639][T21258] block nbd0: shutting down sockets [ 583.186104][ C1] blk_print_req_error: 117 callbacks suppressed [ 583.186123][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 583.201548][ C1] buffer_io_error: 138 callbacks suppressed [ 583.201645][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 583.223053][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 583.232207][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 583.239941][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 583.252194][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 583.260987][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 583.271264][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 583.281690][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 583.296554][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 583.336563][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 583.350340][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 583.377167][ T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 583.386484][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 583.395109][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.404238][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 583.413807][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 583.423500][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 583.433948][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 583.442739][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 583.457598][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 583.471125][T20699] ldm_validate_partition_table(): Disk read failed. [ 583.486189][T20699] Dev nbd0: unable to read RDB block 0 [ 583.497387][T20699] nbd0: unable to read partition table [ 583.542967][T20699] ldm_validate_partition_table(): Disk read failed. [ 583.558515][T20699] Dev nbd0: unable to read RDB block 0 [ 583.573598][T20699] nbd0: unable to read partition table [ 583.604631][T21288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.661746][T21289] netlink: 'syz.4.3704': attribute type 1 has an invalid length. [ 583.683098][T21291] tc_dump_action: action bad kind [ 583.707357][T21289] netlink: 'syz.4.3704': attribute type 8 has an invalid length. [ 583.829026][T21291] netlink: 'syz.0.3707': attribute type 1 has an invalid length. [ 584.323835][T21307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.655540][T21320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3714'. [ 584.712774][T21312] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 584.795199][T11917] IPVS: starting estimator thread 0... [ 584.887850][T21328] IPVS: using max 36 ests per chain, 86400 per kthread [ 585.323233][T21339] tun0: tun_chr_ioctl cmd 1074025681 [ 585.673575][T21356] netlink: 'syz.4.3728': attribute type 1 has an invalid length. [ 585.712235][T21356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.759771][T21356] bond2: (slave gretap0): Enslaving as a backup interface with an up link [ 585.837708][T21372] __nla_validate_parse: 1 callbacks suppressed [ 585.837726][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3732'. [ 585.857585][T20231] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 585.865728][T21372] ipvlan2: entered allmulticast mode [ 585.874727][T21372] erspan0: entered allmulticast mode [ 585.882542][T21372] batman_adv: batadv0: Adding interface: ipvlan2 [ 585.892126][T21372] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.918483][T21372] batman_adv: batadv0: Interface activated: ipvlan2 [ 586.088063][T20231] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 586.270742][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3736'. [ 586.342630][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'. [ 586.364118][T21389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3738'. [ 586.393286][T21389] geneve4: entered promiscuous mode [ 586.402132][T21389] geneve4: entered allmulticast mode [ 586.437246][T21397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3735'. [ 586.477633][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.585136][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.593538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.652810][T21399] netlink: 'syz.1.3740': attribute type 1 has an invalid length. [ 586.703425][T21403] siw: device registration error -23 [ 586.762113][T21403] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3739'. [ 586.784914][T21403] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3739'. [ 587.320603][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 587.455709][T21445] syzkaller0: entered promiscuous mode [ 587.461233][T21445] syzkaller0: entered allmulticast mode [ 587.515991][T21445] tipc: Enabled bearer , priority 0 [ 587.984091][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'. [ 587.993019][T21469] netlink: 'syz.2.3756': attribute type 5 has an invalid length. [ 588.028629][T21469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3756'. [ 588.069614][T21466] syzkaller0: entered promiscuous mode [ 588.078652][T21466] syzkaller0: entered allmulticast mode [ 588.123056][T21469] geneve3: entered promiscuous mode [ 588.128314][T21469] geneve3: entered allmulticast mode [ 588.150335][T20226] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 41433 - 0 [ 588.167969][T20226] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 41433 - 0 [ 588.259480][T21474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.466128][T21479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 588.482763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.582019][T21479] bond3: (slave bond4): Enslaving as an active interface with an up link [ 588.595380][T20226] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 41433 - 0 [ 588.629371][T20226] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 41433 - 0 [ 588.661737][T21484] bond3 (unregistering): (slave bond4): Releasing backup interface [ 588.681767][T21484] bond3 (unregistering): Released all slaves [ 588.821322][T21443] tipc: Resetting bearer [ 588.946074][T21443] tipc: Disabling bearer [ 589.159668][T21514] syzkaller1: entered promiscuous mode [ 589.167696][T21514] syzkaller1: entered allmulticast mode [ 589.175887][T21514] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 589.240406][T21516] xt_CONNSECMARK: invalid mode: 254 [ 589.332944][T21516] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 589.434470][T21518] block nbd0: server does not support multiple connections per device. [ 589.457454][T21518] block nbd0: shutting down sockets [ 589.539843][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.627370][T21535] x_tables: duplicate underflow at hook 2 [ 589.701537][ T29] audit: type=1800 audit(1783295445.693:22): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3773" name="blkio.bfq.time_recursive" dev="tmpfs" ino=368 res=0 errno=0 [ 589.779323][T21543] netlink: 'syz.3.3772': attribute type 1 has an invalid length. [ 589.927758][T21550] team0: entered allmulticast mode [ 589.932936][T21550] vlan0: entered allmulticast mode [ 589.938072][T21550] veth0_vlan: entered allmulticast mode [ 589.985310][T21550] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 590.175531][T21547] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 590.701932][T21578] syzkaller0: entered promiscuous mode [ 590.727916][T21578] syzkaller0: entered allmulticast mode [ 590.832462][T21579] bridge0: port 3(ip6gretap0) entered blocking state [ 590.839263][T21579] bridge0: port 3(ip6gretap0) entered disabled state [ 590.846340][T21579] ip6gretap0: entered allmulticast mode [ 590.860960][T21579] ip6gretap0: entered promiscuous mode [ 590.867177][T21579] bridge0: port 3(ip6gretap0) entered blocking state [ 590.873972][T21579] bridge0: port 3(ip6gretap0) entered forwarding state [ 590.890589][T21582] __nla_validate_parse: 8 callbacks suppressed [ 590.890606][T21582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3783'. [ 590.991181][T21583] syz_tun: entered allmulticast mode [ 591.067113][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'. [ 591.168663][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 591.177573][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 591.366031][T21569] syz_tun: left allmulticast mode [ 592.307993][T20210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.316865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.548190][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.592839][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.069112][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.077677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.627427][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.717437][T20213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.726334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.667553][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.834066][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.842230][T20238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.850330][T20238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.861972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.708616][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.767434][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.953193][T20238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.962162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.593621][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.603307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.788255][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.828303][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.709177][T20213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.717365][T20213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.726364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.734909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.868284][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.831960][T20213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.840954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.849074][T20211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.858104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.907515][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.270226][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 622.947366][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.314432][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.323896][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 624.324359][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.589224][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.598298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.606790][T20210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.615409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.347543][T11907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.763737][T20222] bond10 (unregistering): (slave gre3): Releasing backup interface [ 629.771868][T20222] gre3 (unregistering): left promiscuous mode [ 629.809012][T20222] bond3 (unregistering): (slave geneve3): Releasing active interface [ 629.992986][T20222] bond0 (unregistering): Released all slaves [ 630.008510][T20222] bond1 (unregistering): Released all slaves [ 630.032875][T20222] bond2 (unregistering): Released all slaves [ 630.047336][T20222] bond3 (unregistering): Released all slaves [ 630.064977][T20222] bond4 (unregistering): Released all slaves [ 630.079828][T20222] bond5 (unregistering): Released all slaves [ 630.102899][T20222] bond6 (unregistering): Released all slaves [ 630.119901][T20222] bond7 (unregistering): Released all slaves [ 630.138577][T20222] bond8 (unregistering): Released all slaves [ 630.152684][T20222] bond9 (unregistering): (slave dummy0): Releasing backup interface [ 630.169220][T20222] bond9 (unregistering): Released all slaves [ 630.182402][T20222] bond10 (unregistering): Released all slaves [ 630.206219][T20222] bond11 (unregistering): (slave bond12): Releasing backup interface [ 630.215236][T20222] bond11 (unregistering): Released all slaves [ 630.232171][T20222] bond12 (unregistering): Released all slaves [ 630.413328][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.440081][T20222] : left promiscuous mode [ 630.577735][T20222] tipc: Left network mode [ 631.361211][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.369371][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.378366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.386790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.936957][T20222] hsr_slave_0: left promiscuous mode [ 632.379670][ T24] lo speed is unknown, defaulting to 1000 [ 632.386744][ T24] syz : Port: 1 Link DOWN [ 632.400368][ T6580] smbdirect: ib_dev[syz ] removed [ 632.693602][T20222] IPVS: stop unused estimator thread 0... [ 633.427285][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.574608][T20211] vlan0: left allmulticast mode [ 634.577390][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.579672][T20211] geneve0: left allmulticast mode [ 634.582389][T20211] bridge0: port 3(vlan0) entered disabled state [ 634.765941][T20211] gretap0 (unregistering): left allmulticast mode [ 634.773282][T20211] gretap0 (unregistering): left promiscuous mode [ 634.877814][T20211] .` (unregistering): Released all slaves [ 634.888410][T20211] bond1 (unregistering): Released all slaves [ 634.909999][T20211] bond2 (unregistering): Released all slaves [ 634.930019][T20211] bond3 (unregistering): Released all slaves [ 634.951178][T20211] bond4 (unregistering): Released all slaves [ 634.965091][T20211] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 634.974508][T20211] bond5 (unregistering): Released all slaves [ 634.992037][T20211] bond6 (unregistering): Released all slaves [ 635.005080][T20211] bond0 (unregistering): Released all slaves [ 635.025147][T20211] bond7 (unregistering): Released all slaves [ 635.200409][T20211] : left promiscuous mode [ 635.280436][T20211] ´: left promiscuous mode [ 635.388330][T20211] : left promiscuous mode [ 635.493310][T20211] tipc: Disabling bearer [ 635.499306][T20211] tipc: Disabling bearer [ 635.505332][T20211] tipc: Left network mode [ 635.558625][T20211] IPVS: stopping master sync thread 8877 ... [ 635.567318][T20211] IPVS: stopping backup sync thread 11363 ... [ 636.114162][T20211] hsr_slave_0: left promiscuous mode [ 636.120550][T20211] hsr_slave_1: left promiscuous mode [ 636.417082][T20213] smc: removing ib device syz0 [ 636.524213][T20213] smbdirect: ib_dev[syz0] removed [ 636.631213][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 637.122281][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.130746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.139417][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.155836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.677311][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.728527][T20211] IPVS: stop unused estimator thread 0... [ 640.707681][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.227904][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.236776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.869952][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.879093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.747283][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.789960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.788424][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.347972][T20210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.356853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.987519][T20210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.996473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.829058][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.867424][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.108115][T20238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.117070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.748031][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.757011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.911097][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.868413][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.877376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.947407][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.507599][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.516467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.945599][T21630] lo speed is unknown, defaulting to 1000 [ 659.954126][T21639] batadv_slave_1: entered promiscuous mode [ 660.160960][T21654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 660.185083][T21654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 660.227921][T21656] tipc: New replicast peer: 255.255.255.255 [ 660.234768][T21656] tipc: Enabled bearer , priority 10 [ 660.330155][T21660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.398813][T21664] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3802'. [ 660.399470][T21660] netlink: 'syz.3.3801': attribute type 1 has an invalid length. [ 660.442792][T21663] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3802'. [ 660.483653][T21671] netlink: 'syz.4.3804': attribute type 1 has an invalid length. [ 660.496619][T21667] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 660.509035][T21660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 660.559656][T21676] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3805'. [ 660.610199][T21671] bond3: entered promiscuous mode [ 660.615655][T21671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.635572][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 660.654556][T21670] bond4: (slave geneve2): making interface the new active one [ 660.675989][T21670] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 660.684874][T21639] batadv_slave_1: left promiscuous mode [ 660.799311][T21679] vlan2: entered allmulticast mode [ 660.804475][T21679] bond3: entered allmulticast mode [ 660.833313][T21690] netlink: 'syz.0.3806': attribute type 30 has an invalid length. [ 660.928878][T21690] bond3: option arp_missed_max: invalid value (0) [ 660.935399][T21690] bond3: option arp_missed_max: allowed values 1 - 255 [ 660.952509][T21690] bond3 (unregistering): Released all slaves [ 661.361763][ T42] tipc: Node number set to 1353093856 [ 661.418273][T21717] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.3816'. [ 661.475402][T21723] netlink: 'syz.2.3819': attribute type 32 has an invalid length. [ 661.494920][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3819'. [ 661.595152][T21723] bond3: Setting coupled_control to off (0) [ 661.614338][T21718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3817'. [ 661.832233][T21746] bond5 (unregistering): Released all slaves [ 661.980552][T21751] Cannot find add_set index 0 as target [ 661.987598][T21751] netlink: 'syz.0.3824': attribute type 12 has an invalid length. [ 661.988823][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.485898][T21755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3827'. [ 662.873792][T21795] openvswitch: netlink: IP tunnel dst address not specified [ 662.900383][T21799] syzkaller0: entered promiscuous mode [ 662.906087][T21799] syzkaller0: entered allmulticast mode [ 663.980704][T21791] lo speed is unknown, defaulting to 1000 [ 663.986082][T21816] netlink: 'syz.0.3844': attribute type 1 has an invalid length. [ 664.150178][T21819] gretap1: entered allmulticast mode [ 664.175137][T21819] bond3: (slave gretap1): making interface the new active one [ 664.183946][T21819] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 664.392770][T21835] IPVS: Scheduler module ip_vs_sip not found [ 664.557428][T20212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.566313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.621151][T21830] sctp: [Deprecated]: syz.4.3848 (pid 21830) Use of int in max_burst socket option deprecated. [ 664.621151][T21830] Use struct sctp_assoc_value instead [ 664.662986][T20211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.672001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.027935][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.050656][T21863] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 665.050656][T21863] Please contact the netfilter-devel mailing list or update your nftables rules. [ 667.213733][T21884] syz_tun: entered allmulticast mode [ 667.220194][T21884] __nla_validate_parse: 8 callbacks suppressed [ 667.220205][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 667.266344][ T42] IPVS: starting estimator thread 0... [ 667.345236][T21827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 667.374544][T21885] IPVS: using max 35 ests per chain, 84000 per kthread [ 667.529015][T21894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.615289][T21894] vlan3: entered promiscuous mode [ 667.632980][T21894] hsr0: entered promiscuous mode [ 667.660005][T21894] vlan3: entered allmulticast mode [ 667.668123][T21907] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.683293][T21894] hsr0: entered allmulticast mode [ 667.690201][T21909] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.701476][T21894] hsr_slave_0: entered allmulticast mode [ 667.716034][T21894] hsr_slave_1: entered allmulticast mode [ 667.728617][T21912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 667.800081][T21905] lo speed is unknown, defaulting to 1000 [ 668.067475][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.342391][T21943] netlink: 'syz.3.3878': attribute type 2 has an invalid length. [ 668.421123][T21943] : entered promiscuous mode [ 668.546043][T21951] netlink: 'syz.3.3881': attribute type 21 has an invalid length. [ 668.563075][T21951] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3881'. [ 668.583417][T21954] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 668.593677][T21951] netlink: 'syz.3.3881': attribute type 5 has an invalid length. [ 668.617454][T21951] netlink: 'syz.3.3881': attribute type 6 has an invalid length. [ 668.626050][T21957] netlink: 'syz.4.3882': attribute type 1 has an invalid length. [ 668.655639][T21951] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3881'. [ 668.776608][T21963] batman_adv: batadv0: Adding interface: dummy0 [ 668.806207][T21963] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.855385][T21963] batman_adv: batadv0: Interface activated: dummy0 [ 668.974820][T21974] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.3886'. [ 669.000390][T21967] batadv0: mtu less than device minimum [ 669.016505][T21967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.097723][T21979] sctp: [Deprecated]: syz.4.3888 (pid 21979) Use of int in max_burst socket option. [ 669.097723][T21979] Use struct sctp_assoc_value instead [ 669.112513][T21976] lo speed is unknown, defaulting to 1000 [ 669.140024][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3888'. [ 669.467810][T21982] lo speed is unknown, defaulting to 1000 [ 669.557930][T21986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3889'. [ 670.183757][T22012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3896'. [ 670.367631][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'. [ 670.422798][T20226] net_ratelimit: 18 callbacks suppressed [ 670.422816][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.436608][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.445011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.460042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.506849][T22018] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3899'. [ 670.522429][T22018] dummy0 (unregistering): left allmulticast mode [ 670.528858][T22018] dummy0 (unregistering): left promiscuous mode [ 670.535416][T22018] bridge3: port 1(dummy0) entered disabled state [ 671.110826][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.126194][T22042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.137168][T22046] xt_TCPMSS: Only works on TCP SYN packets [ 671.165353][T22044] 8021q: adding VLAN 0 to HW filter on device bond5 [ 671.176178][T22044] bond4: (slave bond5): Enslaving as an active interface with an up link [ 671.211257][T22042] bond4 (unregistering): (slave bond5): Releasing backup interface [ 671.244986][T22042] bond4 (unregistering): Released all slaves [ 671.571411][T22066] netlink: 'syz.4.3910': attribute type 13 has an invalid length. [ 671.631864][T22068] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 671.684782][T20217] bond2: (slave gretap0): link status up again after 0 ms [ 671.696329][T20217] bond2: (slave gretap0): failed to get link speed/duplex [ 671.831082][T20214] bond2: (slave gretap0): failed to get link speed/duplex [ 671.894437][T22076] netlink: 'syz.1.3914': attribute type 11 has an invalid length. [ 671.947167][T20214] bond2: (slave gretap0): failed to get link speed/duplex [ 672.090521][T20214] bond2: (slave gretap0): failed to get link speed/duplex [ 672.332700][T22089] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 672.400248][T22098] bridge4: entered promiscuous mode [ 672.410471][T22098] bridge4: entered allmulticast mode [ 672.418780][T22098] team0: Port device bridge4 added [ 672.495575][T22105] bridge0: port 1(team0) entered blocking state [ 672.513373][T22105] bridge0: port 1(team0) entered disabled state [ 672.525790][T22105] team0: entered allmulticast mode [ 672.534806][T22105] team_slave_0: entered allmulticast mode [ 672.540623][T22105] team_slave_1: entered allmulticast mode [ 672.552112][T22110] netlink: 'syz.1.3922': attribute type 8 has an invalid length. [ 672.559449][T22105] team0: entered promiscuous mode [ 672.566065][T22105] team_slave_0: entered promiscuous mode [ 672.572054][T22105] team_slave_1: entered promiscuous mode [ 673.034409][T22136] __nla_validate_parse: 9 callbacks suppressed [ 673.034428][T22136] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3929'. [ 673.070318][T22136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3929'. [ 673.214345][T22140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'. [ 673.433819][T22142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3931'. [ 673.712785][T22152] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.3935'. [ 673.726187][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 673.752549][T22148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3933'. [ 673.761876][T22148] ip6gre0: Master is either lo or non-ether device [ 673.915126][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3938'. [ 673.934445][T22165] lo speed is unknown, defaulting to 1000 [ 673.967822][ T4939] block nbd0: Receive control failed (result -107) [ 674.116200][T22177] xt_hashlimit: size too large, truncated to 1048576 [ 674.194522][T22179] netlink: 'syz.4.3941': attribute type 21 has an invalid length. [ 674.225376][T22179] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3941'. [ 674.349207][T22179] netlink: 'syz.4.3941': attribute type 5 has an invalid length. [ 674.356986][T22179] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3941'. [ 674.386795][T22188] tipc: Enabling of bearer rejected, failed to enable media [ 674.588082][T22196] syzkaller0: entered promiscuous mode [ 674.593635][T22196] syzkaller0: entered allmulticast mode [ 674.855611][T22208] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 674.880002][T22208] bond5 (unregistering): Released all slaves [ 674.917649][T22213] syzkaller0: entered promiscuous mode [ 674.929944][T22213] syzkaller0: entered allmulticast mode [ 675.146905][T22224] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 675.242869][T22220] vlan2: entered allmulticast mode [ 675.248019][T22220] bond0: entered allmulticast mode [ 675.271125][T22220] bond_slave_0: entered allmulticast mode [ 675.276904][T22220] bond_slave_1: entered allmulticast mode [ 675.375972][T22234] syzkaller0: entered promiscuous mode [ 675.381751][T22234] syzkaller0: entered allmulticast mode [ 675.619184][T22240] bond2: left promiscuous mode [ 675.635668][T22240] bond2: left allmulticast mode [ 675.663416][T22240] geneve3: left promiscuous mode [ 675.688551][T22240] geneve3: left allmulticast mode [ 675.723860][ T6535] net_ratelimit: 25 callbacks suppressed [ 675.723877][ T6535] bond2: (slave gretap0): failed to get link speed/duplex [ 675.771086][T22241] lo speed is unknown, defaulting to 1000 [ 675.771187][T22247] netlink: 'syz.1.3959': attribute type 18 has an invalid length. [ 676.022252][T20217] bond2: (slave gretap0): failed to get link speed/duplex [ 676.167315][T20217] bond2: (slave gretap0): failed to get link speed/duplex [ 676.174871][T20217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.183797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.200605][T20214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.209124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.249660][T22265] netlink: 'syz.0.3964': attribute type 11 has an invalid length. [ 676.449510][T20216] bond2: (slave gretap0): failed to get link speed/duplex [ 676.648427][T20231] bond2: (slave gretap0): failed to get link speed/duplex [ 676.788204][T20217] bond2: (slave gretap0): failed to get link speed/duplex [ 677.418078][T22292] netlink: 'syz.0.3972': attribute type 2 has an invalid length. [ 677.972583][T22315] erspan1: entered allmulticast mode [ 678.036218][T22320] syz.1.3978 (22320) used obsolete PPPIOCDETACH ioctl [ 678.049668][T22318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.097962][T22318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.119860][T22321] __nla_validate_parse: 11 callbacks suppressed [ 678.119896][T22321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3979'. [ 678.198664][T22324] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3981'. [ 678.210693][T22324] erspan0: entered promiscuous mode [ 678.239810][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'. [ 678.571917][T22332] tap0: tun_chr_ioctl cmd 1074025677 [ 678.577367][T22332] tap0: linktype set to 804 [ 678.614038][T22332] tap0: tun_chr_ioctl cmd 2148553947 [ 678.673285][T22341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 679.408139][T22337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.736130][T22383] sctp: [Deprecated]: syz.3.3994 (pid 22383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 679.736130][T22383] Use struct sctp_sack_info instead [ 680.147686][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3999'. [ 680.319160][T22403] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 680.346650][T22403] syzkaller1: linktype set to 773 [ 680.369253][T22411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4002'. [ 680.727350][T20226] net_ratelimit: 26 callbacks suppressed [ 680.727397][T20226] bond2: (slave gretap0): failed to get link speed/duplex [ 680.783343][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4004'. [ 680.828372][T22426] netlink: 'syz.3.4004': attribute type 2 has an invalid length. [ 680.863174][T22426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4004'. [ 680.905097][T20216] bond2: (slave gretap0): failed to get link speed/duplex [ 681.038233][T20231] bond2: (slave gretap0): failed to get link speed/duplex [ 681.167921][T20226] bond2: (slave gretap0): failed to get link speed/duplex [ 681.292478][T20226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.301365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.420532][T22446] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 681.474610][T22446] bond5 (unregistering): Released all slaves [ 681.517445][T22455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4015'. [ 681.607736][T20226] bond2: (slave gretap0): link status up again after 0 ms [ 681.653088][T20226] bond2: (slave gretap0): link status up again after 0 ms [ 681.710031][T20217] bond2: (slave gretap0): link status up again after 0 ms [ 681.768052][T20217] bond2: (slave gretap0): link status up again after 0 ms [ 681.910805][T22472] netlink: 'syz.3.4017': attribute type 10 has an invalid length. [ 682.067945][T22472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.076992][T22472] team0: Port device netdevsim1 added [ 682.273475][T22475] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.4018'. [ 682.398418][T22486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4023'. [ 682.705116][T22495] xt_hashlimit: size too large, truncated to 1048576 [ 682.785889][T22483] bond5: Removing last ns target with arp_interval on [ 683.008859][T22505] netlink: 'syz.1.4025': attribute type 25 has an invalid length. [ 683.023080][T22508] xt_connbytes: Forcing CT accounting to be enabled [ 683.130900][T22486] __nla_validate_parse: 42 callbacks suppressed [ 683.130919][T22486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4023'. [ 683.175676][T22486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4023'. [ 683.297958][T22510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4026'. [ 683.312044][T22510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4026'. [ 683.345177][T22510] netlink: 'syz.2.4026': attribute type 12 has an invalid length. [ 683.368231][T22510] netlink: 'syz.2.4026': attribute type 13 has an invalid length. [ 683.574148][T22515] netlink: 'syz.1.4027': attribute type 3 has an invalid length. [ 683.815987][T22529] netlink: 'syz.0.4032': attribute type 49 has an invalid length. [ 683.978591][T22536] x_tables: duplicate underflow at hook 2 [ 683.985641][T22530] netlink: 'syz.2.4031': attribute type 9 has an invalid length. [ 684.009538][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 684.051075][T22530] gretap0: entered promiscuous mode [ 684.059276][T22530] macvlan2: entered promiscuous mode [ 684.065480][T22530] macvlan2: entered allmulticast mode [ 684.356986][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 684.600056][T22556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4039'. [ 684.725080][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4042'. [ 684.752297][T22563] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4042'. [ 684.892669][T22571] : renamed from veth0_to_bond (while UP) [ 685.286583][T22590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.296260][T22596] --map-set only usable from mangle table [ 685.319759][T22600] IPv6: NLM_F_CREATE should be specified when creating new route [ 685.489781][T22598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'. [ 685.758914][ T6535] net_ratelimit: 30 callbacks suppressed [ 685.758959][ T6535] bond2: (slave gretap0): failed to get link speed/duplex [ 685.780200][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.911727][T20231] bond2: (slave gretap0): failed to get link speed/duplex [ 686.048344][ T6535] bond2: (slave gretap0): failed to get link speed/duplex [ 686.158124][T20226] bond2: (slave gretap0): failed to get link speed/duplex [ 686.273149][T20214] bond2: (slave gretap0): failed to get link speed/duplex [ 686.308688][T14195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.050526][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.061402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.669729][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.680709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.951281][T22573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.513956][T22631] netlink: 'syz.1.4058': attribute type 2 has an invalid length. [ 688.688917][ C0] ================================================================== [ 688.697040][ C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 688.705117][ C0] Read of size 2 at addr ffff888151c610b4 by task syz.0.4059/22643 [ 688.713006][ C0] [ 688.715364][ C0] CPU: 0 UID: 0 PID: 22643 Comm: syz.0.4059 Not tainted syzkaller #0 PREEMPT(full) [ 688.715389][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.715403][ C0] Call Trace: [ 688.715412][ C0] [ 688.715421][ C0] dump_stack_lvl+0xe8/0x150 [ 688.715483][ C0] print_address_description+0x55/0x1e0 [ 688.715525][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 688.715540][ C0] print_report+0x58/0x70 [ 688.715561][ C0] kasan_report+0x117/0x150 [ 688.715605][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 688.715622][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 688.715642][ C0] __dev_queue_xmit+0x27f/0x37f0 [ 688.715658][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 688.715694][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 688.715738][ C0] ? ebt_do_table+0x2605/0x27d0 [ 688.715846][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 688.715862][ C0] ? ebt_do_table+0x2605/0x27d0 [ 688.715883][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 688.715917][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 688.715938][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 688.715957][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 688.715976][ C0] ? br_nf_post_routing+0x1d0/0xee0 [ 688.715999][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 688.716051][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 688.716069][ C0] NF_HOOK+0x360/0x3f0 [ 688.716085][ C0] ? net_generic+0x1e/0x240 [ 688.716104][ C0] ? NF_HOOK+0xa2/0x3f0 [ 688.716120][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 688.716138][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 688.716160][ C0] br_forward_finish+0xd3/0x130 [ 688.716176][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 688.716194][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 688.716211][ C0] NF_HOOK+0x360/0x3f0 [ 688.716229][ C0] ? NF_HOOK+0xa2/0x3f0 [ 688.716245][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 688.716262][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 688.716283][ C0] ? br_handle_vlan+0x5e/0x530 [ 688.716321][ C0] __br_forward+0x397/0x540 [ 688.716338][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 688.716356][ C0] br_flood+0x3e6/0x8d0 [ 688.716378][ C0] br_handle_frame_finish+0x1175/0x1990 [ 688.716403][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 688.716423][ C0] ? net_generic+0x1e/0x240 [ 688.716441][ C0] ? net_generic+0x1e/0x240 [ 688.716458][ C0] ? net_generic+0x1e/0x240 [ 688.716476][ C0] ? br_cfm_parse+0xe50/0x1790 [ 688.716494][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 688.716517][ C0] br_handle_frame+0x81b/0x1510 [ 688.716564][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 688.716584][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 688.716608][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 688.716627][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 688.716675][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 688.716701][ C0] ? lock_acquire+0x106/0x350 [ 688.716726][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 688.716745][ C0] ? __lock_acquire+0x683/0x2cf0 [ 688.716772][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 688.716799][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 688.716820][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 688.716838][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 688.716855][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 688.716872][ C0] ? dev_gro_receive+0x1097/0x2380 [ 688.716928][ C0] napi_complete_done+0x299/0x730 [ 688.716946][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 688.716964][ C0] ? gro_cell_poll+0x175/0x5d0 [ 688.717006][ C0] gro_cell_poll+0x5ab/0x5d0 [ 688.717028][ C0] ? gro_cell_poll+0x175/0x5d0 [ 688.717046][ C0] __napi_poll+0xaa/0x330 [ 688.717063][ C0] net_rx_action+0x61d/0xf50 [ 688.717086][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 688.717102][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 688.717167][ C0] handle_softirqs+0x225/0x840 [ 688.717185][ C0] ? do_softirq+0x76/0xd0 [ 688.717201][ C0] ? tun_rx_batched+0x185/0x790 [ 688.717270][ C0] do_softirq+0x76/0xd0 [ 688.717286][ C0] [ 688.717291][ C0] [ 688.717297][ C0] __local_bh_enable_ip+0xf8/0x130 [ 688.717312][ C0] ? tun_rx_batched+0x185/0x790 [ 688.717330][ C0] tun_rx_batched+0x616/0x790 [ 688.717351][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 688.717368][ C0] ? tun_get_user+0x2717/0x4370 [ 688.717386][ C0] ? tun_get_user+0x2717/0x4370 [ 688.717404][ C0] ? tun_get_user+0x23cb/0x4370 [ 688.717422][ C0] ? tun_get_user+0x23cb/0x4370 [ 688.717439][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 688.717454][ C0] ? tun_get_user+0x2717/0x4370 [ 688.717472][ C0] ? tun_get_user+0x2717/0x4370 [ 688.717489][ C0] tun_get_user+0x2b44/0x4370 [ 688.717513][ C0] ? aa_file_perm+0x18b/0x15f0 [ 688.717544][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 688.717559][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 688.717577][ C0] ? __lock_acquire+0x683/0x2cf0 [ 688.717598][ C0] ? __lock_acquire+0x683/0x2cf0 [ 688.717620][ C0] ? irqentry_exit+0x218/0x8f0 [ 688.717639][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 688.717657][ C0] ? irqentry_exit+0x218/0x8f0 [ 688.717680][ C0] ? tun_chr_write_iter+0xd9/0x200 [ 688.717715][ C0] ? tun_get_user+0x5/0x4370 [ 688.717733][ C0] tun_chr_write_iter+0x113/0x200 [ 688.717751][ C0] vfs_write+0x612/0xba0 [ 688.717776][ C0] ? __pfx_vfs_write+0x10/0x10 [ 688.717805][ C0] ? __fget_files+0x2a/0x420 [ 688.717834][ C0] ksys_write+0x150/0x270 [ 688.717856][ C0] ? __pfx_ksys_write+0x10/0x10 [ 688.717880][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.717904][ C0] do_syscall_64+0x174/0x580 [ 688.717924][ C0] ? clear_bhb_loop+0x40/0x90 [ 688.717940][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.717955][ C0] RIP: 0033:0x7fe2dcd9de59 [ 688.717969][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.717983][ C0] RSP: 002b:00007fe2ddba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.717999][ C0] RAX: ffffffffffffffda RBX: 00007fe2dd026180 RCX: 00007fe2dcd9de59 [ 688.718011][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000004 [ 688.718020][ C0] RBP: 00007fe2dce33e6f R08: 0000000000000000 R09: 0000000000000000 [ 688.718030][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.718038][ C0] R13: 00007fe2dd026218 R14: 00007fe2dd026180 R15: 00007fff7af52a18 [ 688.718056][ C0] [ 688.718061][ C0] [ 689.343383][ C0] The buggy address belongs to the physical page: [ 689.349823][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x151c61 [ 689.358665][ C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 689.365869][ C0] raw: 057ff00000000000 ffffea0005471848 ffffea0005471848 0000000000000000 [ 689.374535][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 689.383099][ C0] page dumped because: kasan: bad access detected [ 689.389518][ C0] page_owner info is not present (never set?) [ 689.395570][ C0] [ 689.397878][ C0] Memory state around the buggy address: [ 689.403487][ C0] ffff888151c60f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 689.411533][ C0] ffff888151c61000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 689.419588][ C0] >ffff888151c61080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 689.427818][ C0] ^ [ 689.433440][ C0] ffff888151c61100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 689.441682][ C0] ffff888151c61180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 689.449833][ C0] ================================================================== [ 689.503646][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 689.510886][ C0] CPU: 0 UID: 0 PID: 22643 Comm: syz.0.4059 Not tainted syzkaller #0 PREEMPT(full) [ 689.520278][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.530442][ C0] Call Trace: [ 689.533736][ C0] [ 689.536590][ C0] vpanic+0x56c/0xa60 [ 689.540599][ C0] ? rcu_is_watching+0x15/0xb0 [ 689.545599][ C0] ? __pfx_vpanic+0x10/0x10 [ 689.550144][ C0] panic+0xc5/0xd0 [ 689.553888][ C0] ? __pfx_panic+0x10/0x10 [ 689.558336][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 689.563989][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 689.569636][ C0] check_panic_on_warn+0x89/0xb0 [ 689.574611][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 689.580262][ C0] end_report+0x73/0x170 [ 689.584521][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 689.590145][ C0] kasan_report+0x128/0x150 [ 689.594639][ C0] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 689.600335][ C0] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 689.605782][ C0] __dev_queue_xmit+0x27f/0x37f0 [ 689.610728][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 689.616001][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 689.621190][ C0] ? ebt_do_table+0x2605/0x27d0 [ 689.626031][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 689.631297][ C0] ? ebt_do_table+0x2605/0x27d0 [ 689.636147][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 689.641469][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 689.646665][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 689.652040][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 689.657399][ C0] ? br_nf_post_routing+0x1d0/0xee0 [ 689.662581][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 689.667942][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 689.673864][ C0] NF_HOOK+0x360/0x3f0 [ 689.677922][ C0] ? net_generic+0x1e/0x240 [ 689.682423][ C0] ? NF_HOOK+0xa2/0x3f0 [ 689.686557][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 689.691127][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 689.697009][ C0] br_forward_finish+0xd3/0x130 [ 689.701870][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 689.707769][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 689.713222][ C0] NF_HOOK+0x360/0x3f0 [ 689.717282][ C0] ? NF_HOOK+0xa2/0x3f0 [ 689.721414][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 689.726069][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 689.731517][ C0] ? br_handle_vlan+0x5e/0x530 [ 689.736288][ C0] __br_forward+0x397/0x540 [ 689.740778][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 689.746215][ C0] br_flood+0x3e6/0x8d0 [ 689.750353][ C0] br_handle_frame_finish+0x1175/0x1990 [ 689.755893][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 689.761787][ C0] ? net_generic+0x1e/0x240 [ 689.766317][ C0] ? net_generic+0x1e/0x240 [ 689.770811][ C0] ? net_generic+0x1e/0x240 [ 689.775300][ C0] ? br_cfm_parse+0xe50/0x1790 [ 689.780047][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 689.785228][ C0] br_handle_frame+0x81b/0x1510 [ 689.790075][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 689.795388][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 689.801279][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 689.806654][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 689.812277][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 689.817717][ C0] ? lock_acquire+0x106/0x350 [ 689.822395][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 689.828475][ C0] ? __lock_acquire+0x683/0x2cf0 [ 689.833407][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 689.839371][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 689.845851][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 689.851996][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 689.858345][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 689.865034][ C0] ? dev_gro_receive+0x1097/0x2380 [ 689.870139][ C0] napi_complete_done+0x299/0x730 [ 689.875144][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 689.880678][ C0] ? gro_cell_poll+0x175/0x5d0 [ 689.885449][ C0] gro_cell_poll+0x5ab/0x5d0 [ 689.890024][ C0] ? gro_cell_poll+0x175/0x5d0 [ 689.894778][ C0] __napi_poll+0xaa/0x330 [ 689.899117][ C0] net_rx_action+0x61d/0xf50 [ 689.903705][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 689.908805][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 689.913830][ C0] handle_softirqs+0x225/0x840 [ 689.918606][ C0] ? do_softirq+0x76/0xd0 [ 689.922926][ C0] ? tun_rx_batched+0x185/0x790 [ 689.927759][ C0] do_softirq+0x76/0xd0 [ 689.931892][ C0] [ 689.934803][ C0] [ 689.937748][ C0] __local_bh_enable_ip+0xf8/0x130 [ 689.942851][ C0] ? tun_rx_batched+0x185/0x790 [ 689.947713][ C0] tun_rx_batched+0x616/0x790 [ 689.952372][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 689.957548][ C0] ? tun_get_user+0x2717/0x4370 [ 689.962377][ C0] ? tun_get_user+0x2717/0x4370 [ 689.967205][ C0] ? tun_get_user+0x23cb/0x4370 [ 689.972039][ C0] ? tun_get_user+0x23cb/0x4370 [ 689.976893][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 689.982163][ C0] ? tun_get_user+0x2717/0x4370 [ 689.986992][ C0] ? tun_get_user+0x2717/0x4370 [ 689.991819][ C0] tun_get_user+0x2b44/0x4370 [ 689.996476][ C0] ? aa_file_perm+0x18b/0x15f0 [ 690.001218][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 690.005966][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 690.011009][ C0] ? __lock_acquire+0x683/0x2cf0 [ 690.015959][ C0] ? __lock_acquire+0x683/0x2cf0 [ 690.020884][ C0] ? irqentry_exit+0x218/0x8f0 [ 690.025650][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 690.030832][ C0] ? irqentry_exit+0x218/0x8f0 [ 690.035589][ C0] ? tun_chr_write_iter+0xd9/0x200 [ 690.040710][ C0] ? tun_get_user+0x5/0x4370 [ 690.045286][ C0] tun_chr_write_iter+0x113/0x200 [ 690.050292][ C0] vfs_write+0x612/0xba0 [ 690.054518][ C0] ? __pfx_vfs_write+0x10/0x10 [ 690.059266][ C0] ? __fget_files+0x2a/0x420 [ 690.063849][ C0] ksys_write+0x150/0x270 [ 690.068191][ C0] ? __pfx_ksys_write+0x10/0x10 [ 690.073028][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.079071][ C0] do_syscall_64+0x174/0x580 [ 690.083642][ C0] ? clear_bhb_loop+0x40/0x90 [ 690.088297][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.094172][ C0] RIP: 0033:0x7fe2dcd9de59 [ 690.098590][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.118281][ C0] RSP: 002b:00007fe2ddba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 690.126684][ C0] RAX: ffffffffffffffda RBX: 00007fe2dd026180 RCX: 00007fe2dcd9de59 [ 690.134660][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000004 [ 690.142614][ C0] RBP: 00007fe2dce33e6f R08: 0000000000000000 R09: 0000000000000000 [ 690.150572][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.158533][ C0] R13: 00007fe2dd026218 R14: 00007fe2dd026180 R15: 00007fff7af52a18 [ 690.166520][ C0] [ 690.169687][ C0] Kernel Offset: disabled [ 690.173995][ C0] Rebooting in 86400 seconds..