last executing test programs: 2.623288225s ago: executing program 3 (id=4441): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000100bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00lapb0') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'team_slave_1\x00', 0x4c02}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000006040)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fe8000000000000000800000000000aa1800148014000240ff020000000000000000000000000001060004404e1f00000500070084"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendto$inet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x1) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf250100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x4008000) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) 2.365063266s ago: executing program 3 (id=4444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="0c0000000400000034ae4ba37a4511cf6118b8bf746bb2e7a3beede54c479d30eb631c46a7a09e4bd5cc3f64f407b6d0f36309cfee6ca4e7123a298ea4b84de465666956867a65f22ecb1271fd4f3f9ceb3adca7f68a0f463d295ad4fffacf65e2bb079075306dee6b8497412c5a7b461471b4cc72a10436aa48e128ddd43dcf8bd52f72095a80efb2896fd5a72dfc9e7e5ec131e3061e05e26bccb3e21228b06695283ab8c1b43a2a3853c6429ea00f5e7ee7f6155ad524f21fc7a30b720add993a75bfd7b885d53f65eca810846391f48aa5"], 0x8) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'}) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000080000000000000001000013020000000500000000000000000000000000000002513e00"], 0x0, 0x38}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000006110860000000000950000000000def85bd3c312b9c5d9c9a078dcd769df904a16110c9073fc7af65603a366e51a7b1f7dfb2b393970e700c4c6370000761bd4f8f42b09b9641f9eb4f48f730d8684490af4bdf4843f6a2251cc149a1559bafbb6aee542df44c8ebaf0995f0bb9c75345667db3435f654f7a554ec3e80e09a0de03700"/161], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @remote, 0x9}, 0x1c) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) 2.180741001s ago: executing program 4 (id=4447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0xc, @void}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="6e2e80cf70f09b40739bafdab1d4b1e0b0f143efd7ebd10cc3071b4e5588b020b2acc5f9aaf14921f8280ae12e4cf6cddbed04fc25dfd1ac291ce3e246e1dd042c220fa8c7fe56d50a9b0622b7f55aaeac3b0db60650667ec5f6faeda2a142d3fd1637425d3025b150cc253d3b21912a91e728cb2ab800a20cc5d3187a5f52bcf565d2bb935ca0e4dcd050dd12cdb3d21801ba1ac509afe77bfb984f3dfc929da4e1d3f6d7197856036d6aa22c7c7642", &(0x7f00000000c0)=""/167}, 0x6a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xf39, 0x7, 0x80000001}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_NET_NS_FD={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) getpeername$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000980)={'syztnl2\x00', &(0x7f00000008c0)={'sit0\x00', r5, 0x8000, 0x7800, 0x400, 0xfffffff4, {{0x1b, 0x4, 0x2, 0x7, 0x6c, 0x66, 0x0, 0xa8, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@generic={0x82, 0x11, "6ff15b42774c94fc4b5c761cf676f3"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x44, [@dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp={0x44, 0x18, 0xc2, 0x0, 0x2, [0x6, 0xde53, 0x4, 0x7f, 0x7ca7]}, @cipso={0x86, 0x1e, 0x1, [{0x2, 0x7, "600d19d224"}, {0x0, 0xd, "61c3f10af2e8269c4b095c"}, {0x1, 0x4, "4af1"}]}, @ra={0x94, 0x4}]}}}}}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) 2.160528646s ago: executing program 3 (id=4448): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x9c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x38}}, 0x1c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffcd8, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x20}}, 0x4000080) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.883652876s ago: executing program 3 (id=4452): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x7) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1405, 0x10, 0x70bd2d, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000780)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r3, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.829893256s ago: executing program 0 (id=4454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r6, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c48bcd2f66"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f8be6cf314"}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990004000000170000001400040070696d36726567300000000000000000080005000600000014001780040003000400040004000400040001001400178004"], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000229bd70000000000000000003080003004e5a45d003893d1aae6f89b7cac14fc3d3f09a871f33a385749c0221ad31f02c161a1834bf99b7865d3fe93d1402447cd086592ef9fb74f03cd68f9dd02a", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000800) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 1.704283919s ago: executing program 4 (id=4456): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r1, 0x1) 1.075521848s ago: executing program 4 (id=4459): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00'], 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000000240)) 1.074269505s ago: executing program 0 (id=4460): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x6, 0x7, 0x3, 0x0, 0x2, 0x0, [{0x5, 0x1, 0x5, '\x00', 0x1002}, {0x0, 0x3bb1}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e21, @broadcast}], 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, [0x1, 0x5, 0x1, 0x9, 0x10001, 0xf, 0xffffffffffff2a12, 0xb9b5, 0x6, 0x7, 0xf82, 0x1, 0x3, 0xc541, 0xfffffffffffffff7]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000280)={r2, 0x7}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0x7, 0x2, 0x4, 0x82e, 0x8000}, &(0x7f0000000340)=0x14) r5 = epoll_create(0x4) r6 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000380)={0x20002009}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000440)={'bridge_slave_1\x00', &(0x7f0000000400)=@ethtool_ts_info}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r4, @in={{0x2, 0x4e22, @private=0xa010102}}, [0x0, 0x5, 0x2, 0x8, 0x10000, 0x9, 0x5, 0x1, 0x1, 0x2, 0x8001, 0x10001, 0x8, 0x5, 0x200]}, &(0x7f0000000580)=0x100) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000005c0)={r8, 0x7f, 0x1, 0x5, 0x7, 0x6}, 0x14) r9 = socket$inet6(0xa, 0x0, 0x80000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e22, 0x7563, 0x2, 0x20, 0x80, 0x0, r10, r11}, {0x30, 0x2, 0x10001, 0x37, 0xfb, 0x7, 0x100000001, 0x6}, {0x800, 0x1c, 0x7, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d4, 0x33}, 0x2, @in=@private=0xa010102, 0x3504, 0x0, 0x0, 0x8, 0xe, 0xddf0, 0xffffade4}}, 0xe8) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000900)={@loopback, @broadcast, 0xffffffffffffffff, "758522f5a667120acd94f04a255a42a9b2a46b8a840f3a69f7fc85a20f450db6", 0xb1, 0x6, 0xa65, 0xc2}, 0x3c) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000940)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0x11) r13 = socket$inet(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r13, 0x0, 0xd2, &(0x7f00000009c0)={@dev={0xac, 0x14, 0x14, 0x12}, @remote, 0x0, "b2c20c8cb4ac23e658c688d73e71973e6b1ebfbdd55cf49fd45e6b171628f117", 0x6, 0x1, 0x7d8d, 0x2}, 0x3c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000a00)=0x9, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000a40)={0x0, 'sit0\x00', {0x4}, 0x8}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', r10, 0x29, 0x1, 0xd1, 0x0, 0x32, @loopback, @private0, 0x7800, 0x7800, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000b80)={'wg1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@mpls_getnetconf={0x4c, 0x52, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r14}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r15}, @NETCONFA_IFINDEX={0x8, 0x1, r10}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3ff}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x8c0) socket$inet_tcp(0x2, 0x1, 0x0) 1.07312391s ago: executing program 4 (id=4462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x500}, [@call={0x85, 0x0, 0x0, 0x89}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) 1.072501999s ago: executing program 1 (id=4463): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990002000000210000000800c400010000000800c5000000000000000000"], 0x3c}}, 0x880) 980.686509ms ago: executing program 0 (id=4464): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd7000eddbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket(0x10, 0x3, 0x9) sendmsg$netlink(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000001c0)={0x10}, 0x10}, {&(0x7f0000000400)={0x10, 0x3f2}, 0x10}], 0x2}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001540)={&(0x7f0000000240)={0x12f4, 0x30, 0x2, 0x7f, 0x25dfdbfd, {0xd}, [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x3dcf}, @nested={0x8, 0xeb, 0x0, 0x1, [@nested={0x4, 0xef}]}, @nested={0x11a7, 0x119, 0x0, 0x1, [@generic="99a6856d3bfe3a802dfde11d15790434c5749b342a055d4614597549c949751ffccd77e7c1d533dab4e44141ff2a08e31f06347a56a55652d312e5f4fc54d9ce0edfe3eaa942185e5c15ef58b8ad9be4106982d5f7f9ac32890a311fbbe1f982dae9cccba632272a4b3586b20f06fa0b9938fcbbe3ef7d9b897b30e035d3998c22dcff3dc4fbf1a46cc05a188855460fe8ef4134e05a3ee936b2f0f1fca2942c2851d4456fa58e48bc32ee7575d9f39ab92b99d69c50522fba39242f2634111e73c6f9015603232aa9a8d3bbb0d57291f79765720e15d26205f2781b94c9d1deec73e2c677c19789dcfaf29f5a4a6501d9ab123e1ba7eef3a172346fc18be74af123b6076934c3446c1ef1b6bbac10b999c0c03a9fe0c39089698faeed6a9e692c243438c0eb38a949db1e8dbbbaf6c226fdc0c0f57c25c94d7331070ff3e1522e59fad605852d2165e58f39ca5487fb4793661c01c7f8e774e2233d40937eb1f838eb2bb5e286c4f8dfae3e3e6c83d50d2a3edf451b6c048f5676ce99546c1849f7db8d1d0355c762db03ad6d2f082f7c8fb93414430c5fc63ce2a8d0d5b86cf2e7c3518f3de214f7ffa27d7df041ceadb1bb66175da8a167ada9601f2437d66b441f5aa23819c2f0247a0ef8bc9b23b80a63c37838bd41e263f7b1e3a31b4e31e4c8592d001e844477496741ec0c4c6d7e14a3c1f1d77556c962ee65eacbe266e4d4623b7f04315b555bc3f49bec3f9da8b9678d0dc8dc647e1618e91e5de162d8f28dd59caa2e785791b6fba9c0402df73bda970bdc9681d32351e1972a86ea82effc6ac09ac479b67f1f622001f00abd0c5d3c057dca8396d6dad14dd021a1cc01a11a3c4825e5560038b644c84325946c163113289b1d6d297787b48b80a38511ffb478f521e8d09876f8a1388c1e7d723132745628d947d0000246fd170e5f7963762ca16975b6949a566bbac9d574bcbb4a3c6f6c1e291e5d5e77721cb87a7c61983f88f4d7ed60b8661930d10e68ff034920d4a23d2104afe29148be00b74728be6add29023d7b7f062ab2033e7319a8b36be9553635684509d518359e42c38348503a93a8443fd8c75984840d00ba70b28eaebf6b808482f705ba600696a90f6bb03771843839c7ee5baf5478c84b00a2a7ffb021f072257fcc87adb30fbeb29b2f95b89174737d9c46980331fdc10ba359b43c36ad2540aa496af313c0c57692ff4ae9e9744d9287e2066ae16206a181deccd28e7404eda354adf4685acc2c0269bd72763bfbe4327d77b17d6446077cda4243941ad7a769daf366e5185477b76096bb0d69819a54894144aa747b7b2b6e14164c99f3d42ed41cb201c1a0729dd100674ccc675dcae24c8046f759c27c0444174a4ebcf90dd33179c8e9f61d069ee7377d41cf72deebc0c54db9ec5b6bcbc9a466e5e64b55bf96a4ea02c4a8e5967fe054d8b2e5364ba4c6e659a8dbe1f1f2a24151a45efdff2ff0c82c5a5da9cb509fe3e58e7c3e9228726a6959224829f21ad57be91c6a09aae13940217801c02c44276b58b4118c19f52cc8b280a473a4eb82f462d8686728ffe70660fc8ba88a109192701adc9689079bcd2852835bdbaf67ff8c36b1e4c36843d4efdc3e2c0d442a202a00966494daeca4346437de003e459a8ddc7b5c0462336d61b0c7179ebbf9143939c76bcafe24f276907c342b1951e44453e725abe211ab1696b77494f96c4cd1aa19f61842476dd7d186c66c1ed57544ee125562f00558f70e3b72252ce8e2c4b49b455f50f73a1b29925cc7c17e4d41d1b8db02cf24c61d62880d343f5afa803cb70f886c19a7bd0fe554039d097336115ca8675d4063ba411b6ae6c98fa1090b782dd03d59c82fa47d7e6e8ec0e794710e8751292ab191188c2653f55851fbf0461d0de85553e9d5e4ea1662798fb1618a2ac1b737f04cfbd0df064d30c1cc2a31ecec3500a277128b3967f5901514681f96f68f9d45dc9403bbcc60e7a0c77a9260393c318ed592843ddd2f359d45aacc1e1148e9ab57d093cd9791b2b8172a2214603660f57904097c53d5691f54e483325edebfe9680990c61e148d9f77cc35ee8f8d44174c98748346236d713975fec6eb819d1399da3b4338e35ad059776b8907df544b5f73e87db5ba47bf8a2e8e8fab45694bb2d2892817d52b00e8965bfa20ad44a04148d19c2380d84dcfae11d4c28a2eb91a5be0e5bc4f6a71d000f3a929ae54992537465f8231184c9b17dfaaa699274fe5354365b5ecd08f59735ccf4c9ee2160dfde456cab9da3f9d50b0ddc1f7ea19fcce6b63cb6a3b2c75e7ad2ff0a810e0cb2eedc281479ed51fc92a60ddb4625bff20dedcd94ada1f9253fb480960f9f76825bef6d6a2dcd1bd32843c42737c5207d653b081049b8d515736e6133e119c2bfc4338b8198515917f914b14483cc0f204ac948de467da3a317a0c39faabe83cec646c7586141ad528b1f856d26134f38bc582c871439871d0d993a1d725d178d1b83b827e7de8acd5d470ec3b4db5fc278b8638afce80f95299598ed037e0dc2f07b44269b97053d0bc06dd31585a36f9bc659590cdaaf7e8a52a1709f7068ba0214d0492c4af5fe35656992e064ba860a96b8c6a14dd00375c3efa9dd4427877910a27343a1161124f5f9f71640079950b189524b45a7b5560394adb9fa829e1236f01d5de723ed290148c300bcb21e798d48c11e9a8e098f6fa9e367c92ff7d9f4c6a9a326f90a0da4c7134128b0ff44b12eb2ef4d8c2044f912597c76628ecc06912fb944cefdc82f89e4b2e5d98fbdb4a85e8da5140c36c7e8114eab3d37d3e14891efa7c425ac8719cd73f887d40a731cc5d27db956789ea35876136c678c8a2b1fd0e89423eeeebdc8b827ca20b9e4fcd34379512cfea34a64c30c6ba06a4de5ca1cf22647d84f8384db9a0e96cf625c8d008303c88be4b932249a5f2ab7c03880301061ff6af90abb41d91e0c7e45a315e621e27cb6d5e35ee7a66bf90dd5f26d32a9e0b8fc7078464e9861401a0a9df533422a8bc0d6f0ce311a6484a312f996e7283088d2922c37994ba0309c7dfbe6c46ae72327bb9c2e0ca310367461a05a55d84bfbf429d93c58562c843e254393a2a8ce2ed7027eb544b1f88f44b15cbc56d912872e2118910b1c334944f8cd44e280a339c0b72a1af2bfa8b86be5d9123bdfa1b6a244933e36fead4b159175e643d8ccf3ea2d2d295cfa7ad3b367ed3a92ee40d19a4cb5eb2da690c19284aa74c8a60e079240229ed28ae78e5445769524ac915a41aff7de30c22cb679a31c3c37b0954df8abef3e435f68c4dd86babdcebde59ed81151ef4563d30b72d4575cc9b72d7f98a5068d1869563980366d9af470ff4fc3b599a83a3778d4a17160ff45424f0a5e955d8bc44c5b61bb5e21299c387f364c3eaa0653d47a005b0c7bf6618696caeb7412cbb7f205a2557cb71831ca692c98815e8c92c7391add3d28519825ebb1bfe3c3a6807fdda594d0988734c8b9f314c0f985054c4b5940de139801fe9e688ab2dec28b8daa558035161b2c067dcc4b197a3ac7b4de1245a4b6f7acc9e921264c27faf756f6773fec3b191d3ce2da98b1406e521df9cf94d21adc781f0e95daac96225180355cd833b463c987a3c6272c34d574bc0a9542fc94044a48a8c81229b136896e09f097b2350bd3fbe631d502695336cb237347ea5c9d2b88046e2d8b69d802b1db5f95ade428355deb0c5e466dbeb4e28a101e8d09b104459dfde31e2a6ca495e7d322873b8df17b8a1749e21a3925c2d32ac417eb31bcaff10b1b0560cea0a30f21d0938cbc06d38601b3e63f64a4d5fe73f80882ad4a14371ff28be03622feb036f0cf9a6afb88dee832383a124ef1cfe7a032d5cbd95f447aca058f3a9f69d0fe7c3a64fab04287610ab6fa681e2bce46c38c1bda8613399587d73786edd7eb4273f60f0ccff8b5ed5aff88805123db24ac837fedc1eb5bc9ed076695104aad3e80e19e71a59a963cc6e33d914e94d97a55a57896f46cc1648d513727952d64768b1c1edfd3ec0f4b0cb557f83526b92f921da878d4a0efd06ef23bc64db1aee6db2524ff8b7c69aeaad376877ea3736dd44012bcde33658d4c70e530399c60ee5595123e5d95afef9ddaec5b3ed14c51763ec3734e96b982b329105d888e87a0b18ec5a9ef923ed91c6cf4b63273be820627e0466324531ea6ba7347cdfb0f7eba5593771e4963fad58c241a7d9bd351b861cedfad4a833d7d8fb3fe5e9a538b45d16c6204488590b9741bd30f197a3bfaf820d681570d62e52d72a25a13de13b37aa45d94ef3fd226d653da4e16f2b87fac479722bbba75c12e9608f02ec97005351aa4a67bde608ad69c6be16ba3ee0ca4899060440320ff95b5c92ee8ea59af6bc0949d62291c7e079c0edc633fba1b4203cb99cd1d259734b05f5f3badf90bdd36c5a5c77b8881bf508dd4477133b8f5f19d0e9a12344b4105d807b4005b9198b3dc3472099cb9815659ec4431b3eaf9995c76f66db2095f1165c938d1e413bb3a976f34c88e951c8c4728bbf1cf9b1e1bf121e4005c648634f7680dc3542fea4025a45e20a1550479283a581b2dfbb406a7ccbc3747090fe8d8b0556ef5e8f3efb04b3751dd1f87b8d9b131c5179321031901f553a0961a42bc861e4b4adf87a427ba0768b159148217784897c62c3627ee61dc0f225e170c86d90e5df3881a0743100193ecadfb30d4fac01679b2db00e403faf6a8761a013bd5c25a1018719f49d2f7b51de7ea0dc3f4fd3fbdd5cb4646b7d707b0e3b58e79e6b7b5b3a02a5ed3c45faa78151fb501833a604a7c8bbaf8a10181689ff84470d8717602255767a737a4c6d92788e2447cd12e55f11a2fa84905d686edf0a8fb8750baccd009d97d4876416a676157569c825863f1bc341f485f053780c0e2d9f8c7a2dce4b00d977d9b82bb3fdb1db3aaeb7ba7a442971e6909eb7d223a44b2b4ab4670b31de2543d6c9bd521f56b17aa0ca6e534ac673e4704ba05063fd5416838e2769668dae2bb30de600d8ad0753044a04162bfde175c0d160f7bdc6c501287c7422bbfbd3637d5c6d4be72217a12ac60166546e9b48da33f016c51e98f7f5e5b5c4b1f3d053c999ba01c91fd10454ffe5508394820a0e06a9a3b6a9c67e7d310e3288a18db35e7a92e87479fdc90e970356ff7b1819f7ec57b96ab28b5304cba658f973061648f721c4f2c6435ec7c5f72a6aee7d7eb3ad5b67edd52113d573addc1b1becd0a7212549e89ff855ec71ad60ed3d5633a659bd89f27c0a6824a7b64312881e9e6b3d796e6e14eb71179fb6bd2d65d0c218fcfddfc35b31567ab471d30582edb80629694fe889430f6f65f316a4c6a695aab2ea534335b24407be0ca907f43c6631f934f218276fe0d6a087d84b269fcd6bb9d42f642824882f3a8d03bb2e572658cbe7b13e4f496a83da5c306225789f26f1cdfe4974ae1df81a2490a550734ebdf705e99253baab13465ee8d5e284f0a804a21ca6f5e733e909acddcac61022809a1c3bebd8214a08f993d2950688aa73519f73593ce68dafeecf84f773ad183336b6376c780237546c66d30907b446c5b37e826405839f8368c77e445f8cadf9048bda08ca1470e7d1510a9080866a40223060a1cf3e64d047abaf05db799c2e4dda0e8542943d0e294f7efec1122eb682c779f3b621738978c10b33a8d84a0f868e766de8a2ff695f138276ff067e166f97485a7741b91b1b32f3b43b9b2df9c0596068b99f7b", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x1}, @generic="d8249d7986966cd1e04062d340eab4d12d2c14e7c4109e0a56897b941feae58d0e88694e68e444ec54fbef4fe8676d6f561835e39a5e4768e6e6693d393bb0c575840e38fe8f057bc9ae48ec7ded1fd8dbab3bd0f3e191d901b0da49c77c1c4ecd686a0507e19c879671de1153b05424f392bc884c234d7c560470f71c0a3017c7da5a7ddf80b548a2360ad89e69b94a13c6699bb3a3a74184ce4891a1f504d9ac1d33e5e4d20aa4d99f994cfbd39eaa2b1ef57188850645c110959909b48249f205d85b25d846b93f3614e83880a22cfab1", @typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@private2}, @generic="2ac87b20300a6f4287b74a4bdc7321c42320d111af8be754ffd1f3df55ecb8df9c11c19c38a9e7b67583762f2d12", @generic="b1bdb9541ae51a102e5f86949999eaf912018a54b41e1300523788220740f60ef4117463937f67dcce51609056c73fdec113fbeb15517af1d2be69a3ee3677270af1da0632d2939cda92d0284b1b5d2423ad7e74450891f7d5dfe6fc458ed72b7840f97466e07a7f510cdfcf10b0833e7bf306fa4bca0382819c5b3d8a6af3e14b46841123e8e9"]}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@private0}, @typed={0xc7, 0x7d, 0x0, 0x0, @binary="48ea056f888b50a64b9e0ea45babbfc2d59851ffffe68b875e20908345f64660fee349c420ccaf23cd10cfd09c5a4f26b69d75d67881fcaaa79d8f62c6d08d70b130ed739ed0d3c2b99dd6c74ae795775f41575e1cf44510f4f63d04f9e418cf12003c9a3433b95a99fc8aa877bafdd653b4052c06b5c6f0e218d45ab2a041c282aa840c1c7ebd4c55d6ec4e0f52a7575322434d93ec20898ed7105da49fa905c17761dbdc1e071b1a97a33ae5e95aa3df3a480ab1bb07de9470753bc233e1ec94763e"}, @generic="7ad9c7baf3c6394ee9beee41688a0883c89287fd66098576e7e10124222f4cf4dccbc7a8df44f4efe0cda78395024a3ad088d20cddd5bfd181f88fef4b27db61834bf5bc13772ebb65"]}, 0x12f4}, 0x1, 0x0, 0x0, 0x4c094}, 0x2c044890) 588.35132ms ago: executing program 4 (id=4465): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f00000003c0), 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x2a, 0x0, 0x0, 0x0, 0xa}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff08, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0, 0xfffff000}, 0x1c, 0x0, 0x2e, &(0x7f00000002c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x88}}}, @flowinfo={{0x0, 0x29, 0xb, 0x2}}], 0x30}}], 0x0, 0x4044c14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x8) write(r5, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) (async) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000e00", @ANYRES64, @ANYBLOB="01000000000000000000490000040800730000ef00000e0001006e657464657673696d0000000f0002006e657464657673694040a2e255f1b855f689bb60f6a622c12fc2d42c2a1377645f7fb8ca312d715bedf0d46879235ce52f347f8fe84ac7282f7263077a101eac8f9bf1de65b66bed9675d2f3074aed0a1f10ce72a535"], 0x3c}}, 0x4000) 587.797361ms ago: executing program 2 (id=4466): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071106a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 587.629039ms ago: executing program 1 (id=4467): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x22c, 0x14, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1a, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "0805d95b96"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "7198d3a60ba234"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "f4e06357bd286e650afea838a0e5abb78dc961053f898d391ec38f6ecaee738d0c7b71aea18beeffb07437a5d855e1efd00d8ec38b0eebc4472e072461a37c3f0f44e07a3d5645b3135e7391fec0b952e2a54c5d9ab8c80c7cf91f3b1219987aee5ef0479e1eb7c22f97f569878b5b5a4bab595b89a5e66af09ef6901559e1bf2497844ee3167a15fde1812a8d9810bcf2837e4cfc845da9dfc23b2ad261a7dbd71e223cbae777d6345a4573d929ee3a60dee872657f4cd9369e266cb1b4cf1f44"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "767224321ebc2b3d0492ada61ea93dd1f00a11eedb18c4701038053982fd9b1509b66b9a3ff6c6"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "0cf34b2822cda002427a6803676c03a94498766ae2d84dfbf7c1bc395576208031d12b533a7be8ec"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "57111c8e490f147d436f932ab1d404e62347a671a89f269984d03e310425598eb8619b16792eb35ec39d28304d49e94472fb24378e2829d947b9254044a6a679f31d79bf67cbb313f6f429"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "4f3945cf3f210952b455de49355d368aedc8621129bf87e6ffbac34cbb9200cf4c860cdbd54724be5b0a5a91f938ee21e64d75550e29ff8843215c69f65100830aecd9a7695b6c213c3e64c857d25b5b8b72cc5599f95f748bfce503b45bd9635aec03985b93ce89807df09ae24458213559135682d2bef98d90e9c5aee068914949c5f820f7f24fdc"}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000080001040100"/20, @ANYRES32=0x0, @ANYBLOB="005002000000000010001a800c000a800500080002000000140003007369743000"/44], 0x44}}, 0x0) 584.006208ms ago: executing program 4 (id=4468): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000101000000000000000400000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) sendmmsg$unix(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf25", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, &(0x7f0000000140)=0x38) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1400e9f1f96f0000010a0103170000000000f2ff00000000"], 0x14}, 0x1, 0x0, 0x0, 0x4013}, 0x8000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f0000001a00)={0xffffffffffffffff, &(0x7f00000002c0)='wlan0\x00', 0x400080, &(0x7f0000000300)={@_ha_fsid={[0x2, 0x8f]}, {0x9, 0x8, 0x3ff, 0x5}}, 0x1, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000019c0)=0xffff}) openat$cgroup_ro(r13, &(0x7f0000001a40)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) recvmsg(r10, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d510c8c95024873}, 0x12000) recvmmsg(r9, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f00000015c0)=""/211, 0xd3}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000005c0)=""/4067, 0xfe3}], 0x5, 0x0, 0x51}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x100, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYRES64=r6], 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 583.399227ms ago: executing program 0 (id=4469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) sendmsg$nl_crypto(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4f8f066167943428}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@del={0x118, 0x11, 0x2, 0x70bd25, 0x25dfdbfb, {{'cts-cbc-aes-aesni\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x80000000}, {0x8, 0x1, 0xffffff01}, {0x8, 0x1, 0xc}, {0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x8004}, 0x4c014) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) syz_emit_ethernet(0x10a, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0xd4, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@dstopts={0x6c}, @routing={0x1, 0x0, 0x2, 0x61}, @srh={0x62, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3ff}, @srh={0x2c, 0x2, 0x4, 0x1, 0x80, 0x10, 0x5, [@mcast1]}, @routing={0x16, 0xa, 0x0, 0x0, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @empty]}, @routing={0x8f, 0x0, 0x1, 0x2}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x4) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000180)) 582.973025ms ago: executing program 2 (id=4470): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x85, 0x1904}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x85, 0x1904}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000140)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r2, 0xa744}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000080)=0xffffffff, 0x4) (async) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000080)=0xffffffff, 0x4) 582.116538ms ago: executing program 1 (id=4471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000280)={&(0x7f0000000240)=[{&(0x7f0000000140)="adb36671718fc1b682e55bb5ccdf82c26fa785777ab6772f53ceace7da40eb9a4503f689a864de92d8847cc1d31d69cb16aa00c392eaeeb1e8276839fc08f2f237b3cc8cba04a537e7d312cf233374e3993be755426dbe4503cc3269a3b8f222192598a5516f21e886358e9b0e5f3db93417e38d91bfcf3e5e6536996e6981cd50f6da8a78c212385237d0bbd92d2a038f40127139181103d0907d873e47e52ca3c5c3f533035bedbf00a956839c83e8440ca16a679a99ff3c4d9164706441922319768d097c19e1c340dd762765ac37574be9bdf921d661c2d6ce2c3ed5594b8fdc4c6eda70e38f55c19fcad95050f4aa77a19a67165b", 0xf7}], 0x1, 0x9, 0x0, 0x80000001, 0xa41, 0x1, 0x3, 0x9}) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) 581.758166ms ago: executing program 3 (id=4472): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 580.822238ms ago: executing program 2 (id=4473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000380)={'erspan0\x00', r2, 0x8, 0x40, 0x0, 0xa, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) r6 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1c, 0x17, &(0x7f0000000180)=@ringbuf={{}, {}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x24, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @printk={@lx}, @printk={@lli}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x7f, 0xc1, &(0x7f0000000640)=""/193, 0x41000, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000780)=[0x1, 0x1, r1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000800)=[{0x3, 0x3, 0x5, 0x6}, {0x3, 0x3, 0x10, 0x1}, {0x0, 0x2, 0x4, 0x7}, {0x4, 0x5, 0x5, 0x9}, {0x5, 0x1, 0x3, 0x4}, {0x0, 0x2, 0xa, 0x4}, {0x0, 0x3, 0x7, 0xc}, {0x1, 0x2, 0xf}, {0x4, 0x3, 0xe, 0x7}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x0, 0x1, 0x2, 0x7, 0x6, 0x18, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xd3, &(0x7f0000000280)=""/211, 0x41100, 0x4e, '\x00', r4, @fallback=0xd, r5, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, r10, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5f01}]}, 0x2c}}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000a80)={'wg2\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) sendmsg$nl_route(r5, &(0x7f0000001280)={&(0x7f0000000a40), 0xc, &(0x7f0000001240)={&(0x7f0000000dc0)=@dellink={0x478, 0x11, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0xd, 0x20880}, [@IFLA_NET_NS_FD={0x8, 0x1c, r13}, @IFLA_IFALIAS={0x14, 0x14, 'geneve0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x97}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_VFINFO_LIST={0x1e8, 0x16, 0x0, 0x1, [{0x100, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d3, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffd2b, 0x77}}, @IFLA_VF_TRUST={0xc, 0x9, {0xeb34, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x5a8, 0x9, 0x8100}}, {0x14, 0x1, {0xe0, 0x60, 0x3, 0x8100}}, {0x14, 0x1, {0x81, 0x69f, 0x9, 0x88a8}}, {0x14, 0x1, {0x8, 0xd48, 0x5, 0x8100}}, {0x14, 0x1, {0x8001, 0xbfb, 0x3}}, {0x14, 0x1, {0x7fffffff, 0x692, 0x80000001, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x7, 0x10001}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xf37, 0xc}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x800, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8e7, 0xf86, 0x1000}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffa, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0xd4}}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x174, 0xc}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x40140000, 0x7797}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x3, 0x400}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x97, 0xffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x5}}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @broadcast}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x101, 0x58b, 0x4, 0x8100}}, {0x14, 0x1, {0xfff, 0x7d, 0x0, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x6fd, 0x80000000}}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2d8}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_VF_PORTS={0x208, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_VF={0x8, 0x1, 0xffd4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf7}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5997ef19386e002e060e44f264498196"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_PROFILE={0x7, 0x2, '!-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "815bac1bb1417de606df8a418d532951"}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "84a6acee447449ffbd09b90aab590b8e"}, @IFLA_PORT_VF={0x8, 0x1, 0x40}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xc6e}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5732c0e3f86f42f6f6c1c5b5243adc6b"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xf}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4c39d5b7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b15bcfa55877bc8c3612a05a19546187"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "983c5f9ee62f6add9d5b881428615e53"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "661086249127374de0d35ff78f0d0d41"}, @IFLA_PORT_VF={0x8, 0x1, 0x101}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9171fff00bba663ef5ee84b691c3cbd9"}, @IFLA_PORT_PROFILE={0x8, 0x2, '%))\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "cbfeb79f5b1488a7ae3b7219df5ef191"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6e93b6d98f362db3550ba5b1b704bf2e"}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'erspan0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9016651329e3f404c716451f44c413bb"}, @IFLA_PORT_PROFILE={0x7, 0x2, '{*\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "82aa0ebe1b2a4ba6a314d383bafbe653"}]}]}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x478}, 0x1, 0x0, 0x0, 0x4040}, 0x2000c085) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) 569.979793ms ago: executing program 0 (id=4474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0xa2, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={r2}, 0xc) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x4, 0x3f73b0449e7fdb7c}, 0xc) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2, 0xb, 0x0, 0x3ff, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7fc1, 0x8, 0x6, 0x7}}) (async) unshare(0x40000000) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000ca15eed6821fd75f72390"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0xff, 0xfffff014}, {0x6}]}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @ldst={0x0, 0x3, 0x1, 0x3, 0xd, 0xffffffffffffffe0, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f00000003c0)='GPL\x00', 0x6, 0x51, &(0x7f0000000480)=""/81, 0x41000, 0x0, '\x00', r5, @fallback=0x1, r6, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x8, 0xa4}, 0x10, r9, r0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 569.238088ms ago: executing program 1 (id=4475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r3}) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={@null, 0x1, 'veth1_to_bridge\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r6], 0xfe33) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2000000002"], 0x48}}, 0x0) pread64(r4, &(0x7f0000000000)=""/62, 0x3e, 0x100000000) 568.569284ms ago: executing program 2 (id=4476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x600}, [@call={0x85, 0x0, 0x0, 0x89}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) 565.429981ms ago: executing program 3 (id=4477): syz_emit_ethernet(0x4e, &(0x7f0000001100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xbe, &(0x7f0000000f80)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0xd7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8ef205fdffffff"}, 0x28) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000200)={0x1, 0x8ea2, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvmmsg(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x23, 0x0) sendto$inet6(r1, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r5, 0x25, 0x0, @val=@tracing={0x0, 0x9ac}}, 0x20) syz_emit_ethernet(0x100e, &(0x7f0000001600)=ANY=[], 0x0) splice(r0, &(0x7f0000000000)=0xb3c, r0, &(0x7f0000000080)=0x6, 0x4, 0x7) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000010c0)={0x47, @multicast2, 0x4e24, 0x3, 'wlc\x00', 0x9, 0x0, 0x71}, 0x2c) ioctl$XFS_IOC_FREE_EOFBLOCKS(r7, 0x8080583a, &(0x7f0000001040)={0x7, 0xad2, 0x0, 0x9, 0x9}) 490.351237ms ago: executing program 2 (id=4478): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xc, 0xc, 0x3, 0x7, 0xa, 0xd, 0x5, 0x3, 0x2, 0x3, 0x2, 0x4, 0x7, 0xc, 0xe, 0x1], 0x0, [0x40, 0x1, 0x0, 0x9, 0x5, 0x3, 0x401, 0x81, 0x1000, 0x152, 0x400, 0x7, 0x2, 0x7151, 0xc409, 0x9], [0x8, 0x5, 0x0, 0x2, 0x8, 0x6, 0xf, 0x9, 0x200, 0x81, 0x9, 0x1, 0xe8, 0xabd8, 0x401, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xc, 0xc, 0x3, 0x7, 0xa, 0xd, 0x5, 0x3, 0x2, 0x3, 0x2, 0x4, 0x7, 0xc, 0xe, 0x1], 0x0, [0x40, 0x1, 0x0, 0x9, 0x5, 0x3, 0x401, 0x81, 0x1000, 0x152, 0x400, 0x7, 0x2, 0x7151, 0xc409, 0x9], [0x8, 0x5, 0x0, 0x2, 0x8, 0x6, 0xf, 0x9, 0x200, 0x81, 0x9, 0x1, 0xe8, 0xabd8, 0x401, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 411.6427ms ago: executing program 1 (id=4479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 384.86043ms ago: executing program 0 (id=4480): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$inet6(0xa, 0x800, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000085000000bf0000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) socket$inet6(0xa, 0x800, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000085000000bf0000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) 132.067151ms ago: executing program 1 (id=4481): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) (async) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 0s ago: executing program 2 (id=4482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r2], 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 374.720897][T16059] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.807258][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.814456][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.939148][T16575] ipt_REJECT: TCP_RESET invalid for non-tcp [ 374.945214][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.945501][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.991180][T16576] netlink: 'syz.0.2921': attribute type 2 has an invalid length. [ 375.022798][T16577] netlink: 'syz.0.2921': attribute type 2 has an invalid length. [ 375.380639][T16598] netlink: 'syz.2.2925': attribute type 4 has an invalid length. [ 375.776323][ T5615] net_ratelimit: 12 callbacks suppressed [ 375.776345][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.835705][T16623] erspan0: entered promiscuous mode [ 375.868758][T16629] __nla_validate_parse: 6 callbacks suppressed [ 375.868779][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 375.976754][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2932'. [ 376.095670][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.109748][T16642] pim6reg: entered allmulticast mode [ 376.582816][T16624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.657132][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.691209][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 376.730395][T16059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.816534][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.038398][T16680] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2941'. [ 377.102735][T16680] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2941'. [ 377.396883][T16687] bridge0: port 2(bridge_slave_1) entered listening state [ 377.458795][T16687] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.771569][T16059] veth0_vlan: entered promiscuous mode [ 377.806535][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 377.856792][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.871257][T16059] veth1_vlan: entered promiscuous mode [ 378.047162][T16059] veth0_macvtap: entered promiscuous mode [ 378.094844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.119445][T16059] veth1_macvtap: entered promiscuous mode [ 378.227140][T16059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.268703][T16059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.322585][T16735] pim6reg: entered allmulticast mode [ 378.357904][T16735] pim6reg: left allmulticast mode [ 378.456747][T16740] openvswitch: netlink: Unknown key attributes 1 [ 378.471161][ T1032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.504400][ T1032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.573648][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'. [ 378.651998][T16743] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2958'. [ 378.739208][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.828617][ T1032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.855376][T16763] netlink: 'syz.0.2963': attribute type 1 has an invalid length. [ 378.859070][T16764] netlink: 'syz.0.2963': attribute type 1 has an invalid length. [ 378.879210][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.889854][T16764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.899704][T16764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.948895][T16766] openvswitch: netlink: IPv4 tun info is not correct [ 379.003955][T16766] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2964'. [ 379.053827][T16772] bond9: option mode: invalid value (10) [ 379.213589][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.247569][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.396016][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.429590][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.578295][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 379.607505][T16797] unsupported nla_type 216 [ 380.532953][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.550760][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.562304][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.572807][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.583449][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.862141][T16829] syzkaller0: Caught tx_queue_len zero misconfig [ 380.982315][ T5615] net_ratelimit: 336 callbacks suppressed [ 380.982345][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.198698][T16856] netlink: 'syz.3.2979': attribute type 1 has an invalid length. [ 381.289627][T16856] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.307119][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.812955][T16884] __nla_validate_parse: 2 callbacks suppressed [ 381.812978][T16884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2984'. [ 381.834715][T16884] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 381.843692][T16876] syzkaller0: entered promiscuous mode [ 381.849421][T16876] syzkaller0: entered allmulticast mode [ 381.888569][T16887] ip_tables: iptables: counters copy to user failed while replacing table [ 382.021869][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.188157][T16895] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 382.209594][T16895] xt_hashlimit: size too large, truncated to 1048576 [ 382.289879][T16899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2988'. [ 382.507002][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.664801][ T4929] Bluetooth: hci2: command tx timeout [ 382.863388][T16910] netlink: 'syz.4.2992': attribute type 11 has an invalid length. [ 382.871486][T16910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2992'. [ 383.055741][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.095562][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.745007][ T4929] Bluetooth: hci2: command tx timeout [ 385.094705][T16839] lo speed is unknown, defaulting to 1000 [ 385.110670][T16839] wlan0 speed is unknown, defaulting to 1000 [ 385.138165][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.148027][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.510628][T16926] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2996'. [ 386.178012][ T5615] net_ratelimit: 3 callbacks suppressed [ 386.178034][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.815087][ T4929] Bluetooth: hci2: command tx timeout [ 387.041591][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 387.065141][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.216821][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.304716][T16839] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.321173][T16839] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.328991][T16839] bridge_slave_0: entered allmulticast mode [ 387.335434][T17022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3022'. [ 387.341486][T16839] bridge_slave_0: entered promiscuous mode [ 387.355787][T16839] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.363264][T16839] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.373898][T16839] bridge_slave_1: entered allmulticast mode [ 387.385185][T16839] bridge_slave_1: entered promiscuous mode [ 387.519005][T16839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.558313][T16839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.685774][T16839] team0: Port device team_slave_0 added [ 387.716941][T16839] team0: Port device team_slave_1 added [ 387.873799][T16839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.890642][T16839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.917395][T16839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.942994][T16839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.954672][T16839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.000612][T16839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.177350][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.200806][T16839] hsr_slave_0: entered promiscuous mode [ 388.216836][T16839] hsr_slave_1: entered promiscuous mode [ 388.234408][T16839] debugfs: 'hsr0' already exists in 'hsr' [ 388.251373][T16839] Cannot create hsr debugfs directory [ 388.257727][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.895117][ T4929] Bluetooth: hci2: command tx timeout [ 388.940887][T17092] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3043'. [ 389.010220][T17102] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.087757][T17101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 389.123020][T16839] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.304881][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.452482][T17118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3048'. [ 389.559534][T16839] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.793893][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 389.878249][T16839] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.073244][T17145] FAULT_INJECTION: forcing a failure. [ 390.073244][T17145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.090440][T16839] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.106662][T17145] CPU: 1 UID: 0 PID: 17145 Comm: syz.4.3056 Not tainted syzkaller #0 PREEMPT(full) [ 390.106693][T17145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.106716][T17145] Call Trace: [ 390.106796][T17145] [ 390.106871][T17145] dump_stack_lvl+0xe8/0x150 [ 390.107051][T17145] should_fail_ex+0x410/0x560 [ 390.107167][T17145] _copy_from_user+0x2d/0xb0 [ 390.107222][T17145] ___sys_sendmsg+0x1c6/0x360 [ 390.107336][T17145] ? __lock_acquire+0x683/0x2cf0 [ 390.107398][T17145] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.107468][T17145] ? __fget_files+0x2a/0x420 [ 390.107521][T17145] ? __fget_files+0x3a2/0x420 [ 390.107559][T17145] __x64_sys_sendmsg+0x1b1/0x290 [ 390.107595][T17145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.107651][T17145] do_syscall_64+0x166/0x520 [ 390.107741][T17145] ? trace_irq_disable+0x3b/0x140 [ 390.107785][T17145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.107823][T17145] ? clear_bhb_loop+0x70/0xc0 [ 390.107850][T17145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.107873][T17145] RIP: 0033:0x7efd7d99e0d9 [ 390.107901][T17145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.107920][T17145] RSP: 002b:00007efd7e85d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.107977][T17145] RAX: ffffffffffffffda RBX: 00007efd7dc25fa0 RCX: 00007efd7d99e0d9 [ 390.107993][T17145] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 390.108008][T17145] RBP: 00007efd7e85d090 R08: 0000000000000000 R09: 0000000000000000 [ 390.108021][T17145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.108035][T17145] R13: 00007efd7dc26038 R14: 00007efd7dc25fa0 R15: 00007ffcb3764588 [ 390.108070][T17145] [ 390.335910][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.611743][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 390.631738][T17164] netlink: 'syz.1.3062': attribute type 16 has an invalid length. [ 390.662805][T17164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3062'. [ 390.711497][T17165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3062'. [ 390.783672][T17167] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3063'. [ 390.826537][T16839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 390.848237][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.864428][T16839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 390.896060][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.904945][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.935831][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.979580][T17178] netlink: 'syz.3.3066': attribute type 1 has an invalid length. [ 391.001195][T16839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.006135][T17179] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 391.023082][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.041640][T16839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 391.071770][T16839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.094039][T17180] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3065'. [ 391.400414][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.433193][T16839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.457958][T17201] xt_TCPMSS: Only works on TCP SYN packets [ 391.519712][T16839] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.573958][T17206] pim6reg: entered allmulticast mode [ 391.579530][T17213] netlink: 'syz.4.3073': attribute type 1 has an invalid length. [ 391.620281][T17213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.702504][T17214] bond1: (slave veth3): Enslaving as an active interface with a down link [ 391.722654][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.729845][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.747632][T17213] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 391.758131][T17213] bond1: (slave batadv1): making interface the new active one [ 391.768447][T17213] batadv1: entered promiscuous mode [ 391.774271][T17213] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 391.938891][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.946222][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.179907][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.229439][T17234] __nla_validate_parse: 1 callbacks suppressed [ 392.229459][T17234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3079'. [ 392.382955][T17243] IPv6: addrconf: prefix option has invalid lifetime [ 392.389820][T17243] IPv6: addrconf: prefix option has invalid lifetime [ 392.426004][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.690509][T17262] syzkaller0: entered promiscuous mode [ 392.698210][T17262] syzkaller0: entered allmulticast mode [ 392.707314][T17245] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3083'. [ 392.735433][T17245] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.000280][T17278] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 393.035277][T17279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.404443][T16839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.431913][T17294] tipc: New replicast peer: 255.255.255.255 [ 393.440090][T17294] tipc: Enabled bearer , priority 10 [ 393.473076][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.551380][T16839] veth0_vlan: entered promiscuous mode [ 393.595911][T16839] veth1_vlan: entered promiscuous mode [ 393.722043][T16839] veth0_macvtap: entered promiscuous mode [ 393.753496][T16839] veth1_macvtap: entered promiscuous mode [ 393.809389][T16839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.837787][T16839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.859126][T17305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3099'. [ 393.913272][T17307] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 393.936488][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.982224][ T1162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.049438][ T1162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.199991][ T6001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.222566][ T6001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.240966][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3104'. [ 394.280602][ T6001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.314207][ T6001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.338560][T17319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3105'. [ 394.414344][T17320] x_tables: duplicate entry at hook 4 [ 394.415784][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.432448][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.528219][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.554027][T17325] netlink: 'syz.4.3108': attribute type 58 has an invalid length. [ 394.589716][T17325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3108'. [ 394.674735][T17329] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3109'. [ 394.772538][T17333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3109'. [ 395.052074][T17344] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 395.343807][T17351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 395.359523][T17351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 395.372638][T17351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 395.390802][T17351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 395.403054][T17351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.857750][T17367] x_tables: duplicate entry at hook 2 [ 396.305384][T17386] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 396.582590][ T29] net_ratelimit: 2 callbacks suppressed [ 396.582610][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.657683][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.673419][T17348] lo speed is unknown, defaulting to 1000 [ 396.701168][T17348] wlan0 speed is unknown, defaulting to 1000 [ 396.928874][T17408] tls_set_device_offload_rx: netdev not found [ 397.296447][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.312487][T17429] netlink: 'syz.4.3136': attribute type 1 has an invalid length. [ 397.455446][T17351] Bluetooth: hci0: command tx timeout [ 397.499419][T17433] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3137'. [ 397.628743][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.909865][T17454] vlan2: entered promiscuous mode [ 398.087050][T17465] lo: entered promiscuous mode [ 398.104691][T17465] lo: entered allmulticast mode [ 398.122652][T17465] tunl0: entered promiscuous mode [ 398.127957][T17465] tunl0: entered allmulticast mode [ 398.134953][T17465] gre0: entered promiscuous mode [ 398.139947][T17465] gre0: entered allmulticast mode [ 398.151756][T17465] gretap0: entered promiscuous mode [ 398.157747][T17465] gretap0: entered allmulticast mode [ 398.169838][T17465] erspan0: entered promiscuous mode [ 398.177210][T17465] erspan0: entered allmulticast mode [ 398.188279][T17465] ip_vti0: entered promiscuous mode [ 398.193580][T17465] ip_vti0: entered allmulticast mode [ 398.201479][T17465] ip6_vti0: entered promiscuous mode [ 398.207104][T17465] ip6_vti0: entered allmulticast mode [ 398.215168][T17465] sit0: entered promiscuous mode [ 398.220313][T17465] sit0: entered allmulticast mode [ 398.229797][T17465] ip6tnl0: entered promiscuous mode [ 398.236427][T17465] ip6tnl0: entered allmulticast mode [ 398.244367][T17465] ip6gre0: entered promiscuous mode [ 398.249908][T17465] ip6gre0: entered allmulticast mode [ 398.259572][T17465] syz_tun: entered promiscuous mode [ 398.267460][T17465] syz_tun: entered allmulticast mode [ 398.278925][T17465] ip6gretap0: entered promiscuous mode [ 398.284461][T17465] ip6gretap0: entered allmulticast mode [ 398.294488][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.302229][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.310652][T17465] bridge0: entered promiscuous mode [ 398.315982][T17465] bridge0: entered allmulticast mode [ 398.324205][T17465] vcan0: entered promiscuous mode [ 398.330386][T17465] vcan0: entered allmulticast mode [ 398.339853][T17465] bond0: entered promiscuous mode [ 398.348046][T17465] bond_slave_0: entered promiscuous mode [ 398.353979][T17465] bond_slave_1: entered promiscuous mode [ 398.361436][T17465] bond0: entered allmulticast mode [ 398.366752][T17465] bond_slave_0: entered allmulticast mode [ 398.372567][T17465] bond_slave_1: entered allmulticast mode [ 398.383431][T17465] team0: entered promiscuous mode [ 398.389299][T17465] team_slave_0: entered promiscuous mode [ 398.397119][T17465] team_slave_1: entered promiscuous mode [ 398.403001][T17465] team0: entered allmulticast mode [ 398.408852][T17465] team_slave_0: entered allmulticast mode [ 398.415127][T17465] team_slave_1: entered allmulticast mode [ 398.424397][T17465] dummy0: entered promiscuous mode [ 398.429683][T17465] dummy0: entered allmulticast mode [ 398.437872][T17465] nlmon0: entered promiscuous mode [ 398.443053][T17465] nlmon0: entered allmulticast mode [ 398.450014][T17465] batadv0: entered promiscuous mode [ 398.455379][T17465] batadv0: entered allmulticast mode [ 398.463731][T17465] vxcan0: entered promiscuous mode [ 398.469932][T17465] vxcan0: entered allmulticast mode [ 398.476820][T17465] vxcan1: entered promiscuous mode [ 398.482129][T17465] vxcan1: entered allmulticast mode [ 398.491097][T17465] veth0: entered promiscuous mode [ 398.497581][T17465] veth0: entered allmulticast mode [ 398.506683][T17465] veth1: entered promiscuous mode [ 398.512062][T17465] veth1: entered allmulticast mode [ 398.521856][T17465] wg0: entered promiscuous mode [ 398.528655][T17465] wg0: entered allmulticast mode [ 398.537528][T17465] wg1: entered promiscuous mode [ 398.542498][T17465] wg1: entered allmulticast mode [ 398.551144][T17465] wg2: entered promiscuous mode [ 398.556690][T17465] wg2: entered allmulticast mode [ 398.563480][T17465] veth0_to_bridge: entered promiscuous mode [ 398.571172][T17465] veth0_to_bridge: entered allmulticast mode [ 398.586672][T17465] veth1_to_bridge: entered promiscuous mode [ 398.592660][T17465] veth1_to_bridge: entered allmulticast mode [ 398.607984][T17465] veth0_to_bond: entered promiscuous mode [ 398.613849][T17465] veth0_to_bond: entered allmulticast mode [ 398.627208][T17465] veth1_to_bond: entered promiscuous mode [ 398.633038][T17465] veth1_to_bond: entered allmulticast mode [ 398.642978][T17465] veth0_to_team: entered promiscuous mode [ 398.650377][T17465] veth0_to_team: entered allmulticast mode [ 398.662562][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.673481][T17465] veth1_to_team: entered promiscuous mode [ 398.679438][T17465] veth1_to_team: entered allmulticast mode [ 398.690383][T17465] veth0_to_batadv: entered promiscuous mode [ 398.696671][T17465] veth0_to_batadv: entered allmulticast mode [ 398.706973][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.714462][T17465] batadv_slave_0: entered promiscuous mode [ 398.721770][T17465] batadv_slave_0: entered allmulticast mode [ 398.730639][T17465] veth1_to_batadv: entered promiscuous mode [ 398.738445][T17465] veth1_to_batadv: entered allmulticast mode [ 398.747326][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.755696][T17465] batadv_slave_1: entered promiscuous mode [ 398.761656][T17465] batadv_slave_1: entered allmulticast mode [ 398.770444][T17465] xfrm0: entered promiscuous mode [ 398.776109][T17465] xfrm0: entered allmulticast mode [ 398.783302][T17465] veth0_to_hsr: entered promiscuous mode [ 398.789169][T17465] veth0_to_hsr: entered allmulticast mode [ 398.798131][T17465] hsr_slave_0: entered allmulticast mode [ 398.807078][T17465] veth1_to_hsr: entered promiscuous mode [ 398.812832][T17465] veth1_to_hsr: entered allmulticast mode [ 398.822654][T17465] hsr_slave_1: entered allmulticast mode [ 398.832483][T17465] hsr0: entered promiscuous mode [ 398.837956][T17465] hsr0: entered allmulticast mode [ 398.846949][T17465] veth1_virt_wifi: entered promiscuous mode [ 398.852918][T17465] veth1_virt_wifi: entered allmulticast mode [ 398.862904][T17465] veth0_virt_wifi: entered promiscuous mode [ 398.871316][T17465] veth0_virt_wifi: entered allmulticast mode [ 398.879941][T17465] virt_wifi0: entered promiscuous mode [ 398.885799][T17465] virt_wifi0: entered allmulticast mode [ 398.891751][T17465] veth1_vlan: entered allmulticast mode [ 398.900669][T17465] veth0_vlan: entered allmulticast mode [ 398.911141][T17465] vlan0: entered promiscuous mode [ 398.916519][T17465] vlan0: entered allmulticast mode [ 398.924517][T17465] vlan1: entered promiscuous mode [ 398.930982][T17465] vlan1: entered allmulticast mode [ 398.939351][T17465] macvlan0: entered promiscuous mode [ 398.946050][T17465] macvlan0: entered allmulticast mode [ 398.954199][T17465] macvlan1: entered promiscuous mode [ 398.959855][T17465] macvlan1: entered allmulticast mode [ 398.968777][T17465] ipvlan0: entered promiscuous mode [ 398.974029][T17465] ipvlan0: entered allmulticast mode [ 398.980576][T17465] ipvlan1: entered promiscuous mode [ 398.986550][T17465] ipvlan1: entered allmulticast mode [ 398.992175][T17465] veth1_macvtap: entered allmulticast mode [ 399.002858][T17465] veth0_macvtap: entered allmulticast mode [ 399.012737][T17465] macvtap0: entered promiscuous mode [ 399.018193][T17465] macvtap0: entered allmulticast mode [ 399.026357][T17465] macsec0: entered promiscuous mode [ 399.031689][T17465] macsec0: entered allmulticast mode [ 399.041668][T17465] geneve0: entered promiscuous mode [ 399.047099][T17465] geneve0: entered allmulticast mode [ 399.056384][T17465] geneve1: entered promiscuous mode [ 399.061692][T17465] geneve1: entered allmulticast mode [ 399.071753][T17465] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 399.079742][T17465] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 399.090874][T17465] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 399.098355][T17465] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 399.109834][T17465] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 399.117334][T17465] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 399.132703][T17465] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 399.140243][T17465] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 399.159360][T17465] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 399.166599][T17465] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 399.184156][T17465] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 399.191974][T17465] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 399.202224][T17465] mac80211_hwsim hwsim27 dvmrp0: entered promiscuous mode [ 399.210410][T17465] mac80211_hwsim hwsim27 dvmrp0: entered allmulticast mode [ 399.218732][T17465] syz_tun.1: entered promiscuous mode [ 399.224429][T17465] syz_tun.1: entered allmulticast mode [ 399.337240][ T6001] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.360556][ T6001] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.372818][ T6001] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.382090][ T6001] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.536113][T17351] Bluetooth: hci0: command tx timeout [ 399.689359][T17492] bond0: Caught tx_queue_len zero misconfig [ 399.696834][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.724214][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.888409][T17495] netlink: 'syz.4.3156': attribute type 1 has an invalid length. [ 399.913719][T17495] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3156'. [ 400.063359][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3158'. [ 400.073553][T17348] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.082538][T17348] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.096772][T17348] bridge_slave_0: entered allmulticast mode [ 400.105523][T17348] bridge_slave_0: entered promiscuous mode [ 400.115909][T17348] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.123253][T17348] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.131892][T17348] bridge_slave_1: entered allmulticast mode [ 400.138364][T17517] set match dimension is over the limit! [ 400.147697][T17348] bridge_slave_1: entered promiscuous mode [ 400.218966][T17348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.250057][T17348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.298772][T17348] team0: Port device team_slave_0 added [ 400.310103][T17348] team0: Port device team_slave_1 added [ 400.392302][T17348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.415516][T17348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.451075][T17348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.465835][T17348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.472868][T17348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.545265][T17348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.592542][T17530] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 400.660701][T17348] hsr_slave_0: entered promiscuous mode [ 400.676635][T17348] hsr_slave_1: entered promiscuous mode [ 400.683081][T17348] debugfs: 'hsr0' already exists in 'hsr' [ 400.706005][T17348] Cannot create hsr debugfs directory [ 400.708818][T17530] xt_CT: No such helper "pptp" [ 400.735581][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.089559][T17542] openvswitch: netlink: Message has 5 unknown bytes. [ 401.099304][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 401.138013][T17547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.378095][T17566] nbd: must specify a size in bytes for the device [ 401.546788][T17573] macvtap0: entered promiscuous mode [ 401.563175][T17573] dummy0: entered promiscuous mode [ 401.670640][ T24] dummy0: left promiscuous mode [ 401.683443][T17582] net_ratelimit: 1 callbacks suppressed [ 401.683465][T17582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.777190][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.790255][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.972966][T17593] netlink: 'syz.0.3181': attribute type 1 has an invalid length. [ 401.996577][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3181'. [ 402.057512][T17348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.072671][T17348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.186674][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 402.250818][T17599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3183'. [ 402.307213][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 402.338874][T17348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.354418][T17348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.367755][T17599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3183'. [ 402.415665][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.633632][T17348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.648852][T17348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.825557][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.900776][T17348] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.930702][T17348] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.985799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.994189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.002605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.010978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.019380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.106366][ T6001] batadv1: left promiscuous mode [ 403.351981][T17651] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3198'. [ 403.477778][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3200'. [ 403.517284][T17654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3200'. [ 403.681494][T17351] block nbd3: Receive control failed (result -32) [ 403.691061][T17348] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 403.742520][T17348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.777765][T17348] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.798717][T17348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.818549][T17348] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.835803][T17348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.859021][T17348] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 403.905167][T17348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.131719][T17682] syzkaller1: entered promiscuous mode [ 404.157463][T17682] syzkaller1: entered allmulticast mode [ 404.335389][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 404.457586][T17348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.498856][T17696] netlink: 'syz.4.3209': attribute type 1 has an invalid length. [ 404.541807][T17348] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.553850][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 404.590941][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.598188][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.613337][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 404.628904][T17685] netlink: 'syz.0.3207': attribute type 2 has an invalid length. [ 404.639042][T17685] netlink: 'syz.0.3207': attribute type 2 has an invalid length. [ 404.659850][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.661978][T17685] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3207'. [ 404.667095][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.721541][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 405.040289][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'. [ 405.051374][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'. [ 405.067052][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'. [ 405.121647][T17719] netlink: 'syz.4.3214': attribute type 2 has an invalid length. [ 405.327633][T17736] netlink: 'syz.0.3217': attribute type 1 has an invalid length. [ 405.993170][T17348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.190448][T17348] veth0_vlan: entered promiscuous mode [ 406.247157][T17348] veth1_vlan: entered promiscuous mode [ 406.315519][T17780] tunl0: Caught tx_queue_len zero misconfig [ 406.398473][T17348] veth0_macvtap: entered promiscuous mode [ 406.421964][T17348] veth1_macvtap: entered promiscuous mode [ 406.439657][T17784] netlink: 'syz.0.3230': attribute type 1 has an invalid length. [ 406.502405][T17348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.527222][T17348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.556579][T17788] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 406.579309][T17788] trusted_key: syz.1.3232 sent an empty control message without MSG_MORE. [ 406.676997][T17791] syzkaller1: entered promiscuous mode [ 406.682969][T17791] syzkaller1: entered allmulticast mode [ 406.819888][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.831975][T17798] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 406.843064][T17798] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 406.879890][ T5994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.946264][ T5994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.009045][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.027857][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.043764][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.139780][T17803] syzkaller0: entered promiscuous mode [ 407.162017][T17803] syzkaller0: entered allmulticast mode [ 407.217223][ T5994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.229231][ T5994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.258201][T17803] tipc: Started in network mode [ 407.263511][T17803] tipc: Node identity de8eee660d7b, cluster identity 4711 [ 407.274006][T17803] tipc: Enabled bearer , priority 0 [ 407.299173][T17801] tipc: Resetting bearer [ 407.436928][T17801] tipc: Disabling bearer [ 407.537011][ T1162] net_ratelimit: 12 callbacks suppressed [ 407.537032][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.844493][T17829] netlink: 'syz.2.3248': attribute type 21 has an invalid length. [ 407.890738][T17829] netlink: 'syz.2.3248': attribute type 2 has an invalid length. [ 408.176180][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.186228][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.202999][ T4929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.226957][ T4929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.238673][ T4929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.252337][ T4929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.267968][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.389638][T17847] syzkaller0: entered promiscuous mode [ 408.406153][T17847] syzkaller0: entered allmulticast mode [ 408.811556][T17855] sctp: [Deprecated]: syz.3.3255 (pid 17855) Use of int in maxseg socket option. [ 408.811556][T17855] Use struct sctp_assoc_value instead [ 409.228176][T17868] x_tables: duplicate underflow at hook 2 [ 409.637383][T17835] lo speed is unknown, defaulting to 1000 [ 409.753582][T17835] wlan0 speed is unknown, defaulting to 1000 [ 409.821499][T17890] vlan0: entered promiscuous mode [ 409.851688][T17890] bridge0: entered promiscuous mode [ 409.871624][T17888] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 410.019005][T17899] __nla_validate_parse: 7 callbacks suppressed [ 410.019026][T17899] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3264'. [ 410.136337][T17905] openvswitch: netlink: Duplicate or invalid key (type 0). [ 410.315713][T17913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3267'. [ 410.336739][T17351] Bluetooth: hci3: command tx timeout [ 410.377091][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 410.653472][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 410.764031][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 410.781843][ T30] audit: type=1107 audit(1787585368.327:4): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Éó«Y Ò÷¬& r‡o^”é8û)é—´' [ 410.800046][T17937] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3272'. [ 411.040411][T17943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.055691][T17942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.215688][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.388380][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.407543][T17835] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.416238][T17835] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.423450][T17835] bridge_slave_0: entered allmulticast mode [ 411.431884][T17835] bridge_slave_0: entered promiscuous mode [ 411.441059][T17835] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.448890][T17835] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.457608][T17835] bridge_slave_1: entered allmulticast mode [ 411.465830][T17835] bridge_slave_1: entered promiscuous mode [ 411.502674][T17835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.516688][T17835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.552037][T17835] team0: Port device team_slave_0 added [ 411.560747][T17835] team0: Port device team_slave_1 added [ 411.592745][T17835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.600667][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.628010][T17835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.641632][T17835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.649314][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.676413][T17835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.730335][T17835] hsr_slave_0: entered promiscuous mode [ 411.737792][T17835] hsr_slave_1: entered promiscuous mode [ 411.743984][T17835] debugfs: 'hsr0' already exists in 'hsr' [ 411.750532][T17835] Cannot create hsr debugfs directory [ 411.931444][T17835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.943320][T17835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.044060][T17835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.056594][T17835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.142701][T17835] .`: (slave netdevsim1): Releasing backup interface [ 412.152729][T17835] .`: (slave netdevsim1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 412.181277][T17835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.191974][T17835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.288638][T17835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.300281][T17835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.414853][T17351] Bluetooth: hci3: command tx timeout [ 412.656744][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.270157][T17918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.309918][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.399497][T17835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.472105][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.505670][T17835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.546528][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.576262][T17835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.598489][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.642408][T17975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3283'. [ 413.663108][T17835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.679481][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.763919][T17972] syzkaller0: entered promiscuous mode [ 413.785734][T17972] syzkaller0: entered allmulticast mode [ 413.815939][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 413.928540][T17996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3286'. [ 413.947574][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.976755][T17996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.185204][T17835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.237073][T17835] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.279498][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.287427][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.328985][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.336274][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.495797][T17351] Bluetooth: hci3: command tx timeout [ 414.574701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.399685][T18045] tipc: Enabling of bearer rejected, failed to enable media [ 415.647915][T17835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.800229][T17835] veth0_vlan: entered promiscuous mode [ 415.830553][T17835] veth1_vlan: entered promiscuous mode [ 415.891054][T17835] veth0_macvtap: entered promiscuous mode [ 415.897495][T18066] netlink: 'syz.3.3304': attribute type 9 has an invalid length. [ 415.919200][T17835] veth1_macvtap: entered promiscuous mode [ 415.961545][T17835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.021833][T17835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.190673][ T1032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.260368][ T1032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.300344][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.318926][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.331057][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.349185][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.439851][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.466318][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.575405][T17351] Bluetooth: hci3: command tx timeout [ 416.709955][T18095] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3313'. [ 416.819839][T18100] syzkaller0: entered promiscuous mode [ 416.846287][T18100] syzkaller0: entered allmulticast mode [ 417.137493][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.312975][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.333433][ T4929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.348242][ T4929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.359254][ T4929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.383289][ T4929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.988373][ T5628] bridge0: port 1(syz_tun) entered disabled state [ 418.113327][ T5628] syz_tun (unregistering): left allmulticast mode [ 418.144106][ T5628] syz_tun (unregistering): left promiscuous mode [ 418.173637][ T5628] bridge0: port 1(syz_tun) entered disabled state [ 418.427034][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.639415][T18165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3327'. [ 418.706115][T18165] syzkaller1: entered promiscuous mode [ 418.722665][T18165] syzkaller1: entered allmulticast mode [ 418.739624][T18166] syzkaller0: entered promiscuous mode [ 418.753631][T18166] syzkaller0: entered allmulticast mode [ 418.836451][T18170] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 418.845307][T18114] lo speed is unknown, defaulting to 1000 [ 418.852233][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3329'. [ 418.864009][T18114] wlan0 speed is unknown, defaulting to 1000 [ 418.884128][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'. [ 418.916324][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3329'. [ 419.057206][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.232668][T18190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.314429][T18193] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3336'. [ 419.329199][T18195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.455490][ T4929] Bluetooth: hci1: command tx timeout [ 419.707795][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.790645][T18210] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3342'. [ 420.001004][T18227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3346'. [ 420.024256][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3346'. [ 420.129899][T18232] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3348'. [ 420.434278][T18242] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 420.447668][T18242] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 420.549557][T18114] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.558963][T18114] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.568184][T18114] bridge_slave_0: entered allmulticast mode [ 420.577861][T18114] bridge_slave_0: entered promiscuous mode [ 420.589093][T18114] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.601311][T18114] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.609616][T18114] bridge_slave_1: entered allmulticast mode [ 420.619385][T18114] bridge_slave_1: entered promiscuous mode [ 420.782670][T18114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.868112][T18256] syzkaller0: entered promiscuous mode [ 420.873957][T18256] syzkaller0: entered allmulticast mode [ 420.898302][T18114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.545035][ T4929] Bluetooth: hci1: command tx timeout [ 422.914925][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.546538][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.601133][T18273] netlink: 'syz.1.3361': attribute type 4 has an invalid length. [ 423.626844][ T4929] Bluetooth: hci1: command tx timeout [ 423.639859][T18114] team0: Port device team_slave_0 added [ 423.665562][T18114] team0: Port device team_slave_1 added [ 423.782971][T18114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.815499][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.864261][T18114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.868186][T18279] __nla_validate_parse: 4 callbacks suppressed [ 423.868267][T18279] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3362'. [ 423.892204][T18114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.907155][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3365'. [ 423.918313][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.985281][T18114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.092505][T18284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.104963][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.118830][T18293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3366'. [ 424.132004][T18293] netlink: 'syz.3.3366': attribute type 1 has an invalid length. [ 424.149732][T18284] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.282979][T18293] bond1: entered promiscuous mode [ 424.288698][T18293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.333117][T18294] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.347383][T18294] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 424.360963][T18294] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 424.438644][T18114] hsr_slave_0: entered promiscuous mode [ 424.459163][T18114] hsr_slave_1: entered promiscuous mode [ 424.476290][T18114] debugfs: 'hsr0' already exists in 'hsr' [ 424.482415][T18114] Cannot create hsr debugfs directory [ 424.850954][T18114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.862207][T18114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.969458][T18114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.980869][T18114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.071872][T18114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.082582][T18114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.168216][T18114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.179826][T18114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.356614][T18114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.367287][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.377484][T18114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.388053][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.397826][T18114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.412204][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.420226][T18114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.433322][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.455872][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.520703][T18114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.542432][T18114] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.557529][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.564755][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.584004][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.591181][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.705259][ T4929] Bluetooth: hci1: command tx timeout [ 425.984406][T18114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.033021][T18114] veth0_vlan: entered promiscuous mode [ 426.048060][T18114] veth1_vlan: entered promiscuous mode [ 426.081302][T18114] veth0_macvtap: entered promiscuous mode [ 426.091250][T18114] veth1_macvtap: entered promiscuous mode [ 426.113084][T18114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.130113][T18114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.176529][ T112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.186948][ T112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.215731][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.237840][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.289457][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.298522][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.336494][ T6001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.344502][ T6001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.018305][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.934885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.936232][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 429.952196][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.495540][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.144853][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.776842][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.696203][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.704402][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.258009][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.537715][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.178491][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.456250][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.464433][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.017262][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.656038][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.216059][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.224647][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.695588][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.776466][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.338709][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.976308][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.897382][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.536596][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.096441][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.016209][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.576083][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.656900][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.135378][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.777077][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 465.791300][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.799542][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.807707][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.256790][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.975590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.983895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.992398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.000773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.009180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.017503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.025850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.034140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.898607][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.096903][ T5999] net_ratelimit: 2 callbacks suppressed [ 474.096925][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.017434][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.656519][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.296791][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.228769][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.291454][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 479.293280][T18344] xt_addrtype: ipv6 does not support BROADCAST matching [ 479.312630][T18340] xt_addrtype: ipv6 does not support BROADCAST matching [ 479.317926][T18341] Bluetooth: MGMT ver 1.23 [ 479.326727][T18338] netlink: 'syz.1.3371': attribute type 13 has an invalid length. [ 479.337923][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 479.385381][T18349] netlink: 'syz.1.3371': attribute type 7 has an invalid length. [ 479.395672][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 479.429633][T18349] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3371'. [ 479.530933][T18358] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3376'. [ 479.681103][T18364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.703415][T18364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.718918][T18364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.728978][T18364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.736795][T18364] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.818161][T18370] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 479.821294][T18371] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3377'. [ 479.902697][T18370] bond1: entered promiscuous mode [ 479.909870][T18370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.986133][T18380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3381'. [ 480.011883][T18380] netlink: 'syz.1.3381': attribute type 4 has an invalid length. [ 480.158110][T18389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.601132][T18402] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 480.687031][T18407] syzkaller0: entered promiscuous mode [ 480.698758][T18407] syzkaller0: entered allmulticast mode [ 481.057185][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.109175][T18428] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 481.158526][T18421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3390'. [ 481.393242][T18444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3397'. [ 481.545380][T18455] Bluetooth: hci0: unsupported parameter 5135 [ 481.626444][T18455] Bluetooth: hci0: unsupported parameter 8192 [ 481.646483][T18455] Bluetooth: hci0: unsupported parameter 5135 [ 481.656112][T18455] Bluetooth: hci0: unsupported parameter 8192 [ 481.778760][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.916111][T18470] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 482.135301][T18484] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3409'. [ 482.286863][T18484] bond2: entered allmulticast mode [ 482.419841][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.989837][T18519] team0: Device veth1_macvtap failed to register rx_handler [ 483.096878][T18521] netlink: 'syz.3.3418': attribute type 29 has an invalid length. [ 483.105590][ T34] IPVS: starting estimator thread 0... [ 483.146040][T18533] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 483.204672][T18534] IPVS: using max 31 ests per chain, 74400 per kthread [ 483.344739][T18544] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 483.453018][T18544] bridge_slave_0: left allmulticast mode [ 483.470643][T18544] bridge_slave_0: left promiscuous mode [ 483.489507][T18544] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.534215][T18544] bridge_slave_1: left allmulticast mode [ 483.558997][T18544] bridge_slave_1: left promiscuous mode [ 483.610390][T18544] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.666624][T18544] bond0: (slave bond_slave_0): Releasing backup interface [ 483.680005][T18544] bond0: (slave bond_slave_1): Releasing backup interface [ 483.713071][T18544] team0: Port device team_slave_0 removed [ 483.725803][T18544] team0: Port device team_slave_1 removed [ 483.732918][T18544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.741929][T18544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.750946][T18544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.761364][T18544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.772325][T18544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 484.064398][T18576] veth1_to_bond: entered allmulticast mode [ 484.095670][T18572] veth1_to_bond: left allmulticast mode [ 484.310875][T18596] __nla_validate_parse: 11 callbacks suppressed [ 484.310895][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3440'. [ 484.371773][T18593] netlink: 'syz.1.3439': attribute type 1 has an invalid length. [ 484.620815][T18603] bond1: (slave veth0_to_bond): making interface the new active one [ 484.666115][T18603] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 484.754323][T18603] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3439'. [ 484.784335][T18622] veth0: entered promiscuous mode [ 484.812060][T18622] veth0: left promiscuous mode [ 484.979186][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.054480][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3448'. [ 485.079540][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3448'. [ 485.104888][T18633] netlink: 'syz.0.3448': attribute type 64 has an invalid length. [ 485.131020][T18633] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3448'. [ 485.257840][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3448'. [ 485.282793][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3448'. [ 485.380533][T18641] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3452'. [ 485.520853][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3448'. [ 485.540318][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3448'. [ 485.869178][T18656] macsec1: entered promiscuous mode [ 485.881356][T18656] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 486.478141][T18675] bond2 (unregistering): Released all slaves [ 486.612303][T18681] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 486.671977][T18673] netlink: 'syz.2.3460': attribute type 1 has an invalid length. [ 486.707974][T18673] netlink: 'syz.2.3460': attribute type 7 has an invalid length. [ 486.771992][T18694] syzkaller0: entered promiscuous mode [ 486.806942][T18673] netlink: 'syz.2.3460': attribute type 8 has an invalid length. [ 486.845215][T18694] syzkaller0: entered allmulticast mode [ 486.894353][T18673] NCSI netlink: No device for ifindex 65584 [ 486.901631][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.909867][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.109977][T18721] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 487.166825][T18721] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 487.197533][T18726] netlink: 'syz.0.3471': attribute type 8 has an invalid length. [ 487.846646][T18764] netlink: 'syz.4.3482': attribute type 2 has an invalid length. [ 487.866189][T18765] netlink: 'syz.4.3482': attribute type 2 has an invalid length. [ 488.186381][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.200239][T18774] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 488.239845][ T9] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 488.335346][T18683] Bluetooth: hci5: command 0x0406 tx timeout [ 488.755805][T18798] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 488.825837][T18804] netlink: 'syz.0.3494': attribute type 32 has an invalid length. [ 488.893560][T18804] bond2: Setting coupled_control to off (0) [ 488.965286][T18810] ip6gre0: Master is either lo or non-ether device [ 489.163590][T18816] team0: mtu less than device minimum [ 489.379843][T18830] Cannot find add_set index 65532 as target [ 489.401363][T18830] netlink: 'syz.1.3503': attribute type 12 has an invalid length. [ 489.434230][T18833] __nla_validate_parse: 22 callbacks suppressed [ 489.434252][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'. [ 489.506833][T18833] ip_tables: iptables: counters copy to user failed while replacing table [ 489.745540][T18843] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3507'. [ 489.758977][T18843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3507'. [ 489.772176][T18843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3507'. [ 490.163856][T18847] xt_hashlimit: size too large, truncated to 1048576 [ 490.366498][T18854] wg2: Caught tx_queue_len zero misconfig [ 490.387225][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3509'. [ 490.407262][T18851] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3509'. [ 490.608246][T18861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3513'. [ 490.729959][T18865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3514'. [ 490.751903][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.019480][T18884] netlink: 'syz.2.3519': attribute type 1 has an invalid length. [ 491.084318][T18887] ip6t_srh: unknown srh invflags 4000 [ 491.136346][T18894] netlink: 'syz.3.3523': attribute type 11 has an invalid length. [ 491.196324][T18884] bond1: entered promiscuous mode [ 491.202425][T18884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.212523][T18890] batadv0: left promiscuous mode [ 491.240784][T18899] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3524'. [ 491.278625][T18895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.324352][T18895] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 491.373858][T18895] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 491.410060][T18895] bond1: (slave xfrm1): making interface the new active one [ 491.430439][T18908] IPVS: set_ctl: invalid protocol: 136 172.20.20.11:5 [ 491.439252][T18895] xfrm1: entered promiscuous mode [ 491.459783][T18895] xfrm1: left promiscuous mode [ 491.561879][T18908] netlink: 'syz.4.3524': attribute type 3 has an invalid length. [ 491.808100][T18925] netlink: 'syz.0.3531': attribute type 11 has an invalid length. [ 491.870702][T18925] netlink: 'syz.0.3531': attribute type 11 has an invalid length. [ 492.021313][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.064819][T18938] xt_SECMARK: invalid mode: 9 [ 492.288659][T18939] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 492.537043][T18955] IPv6: sit1: Disabled Multicast RS [ 492.594349][T18955] sit1: entered allmulticast mode [ 492.657240][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.966415][T18976] netlink: 'syz.4.3545': attribute type 3 has an invalid length. [ 493.169775][T18985] batadv0: Caught tx_queue_len zero misconfig [ 493.199406][T18985] netlink: 'syz.1.3548': attribute type 3 has an invalid length. [ 493.473181][T18998] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3554'. [ 493.732047][T19011] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 493.732047][T19011] Please contact the netfilter-devel mailing list or update your nftables rules. [ 493.941506][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.458341][T19048] netlink: 'syz.0.3569': attribute type 9 has an invalid length. [ 494.468341][T19048] __nla_validate_parse: 3 callbacks suppressed [ 494.468356][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 494.633656][T19054] bridge0: port 2(bridge_slave_1) entered listening state [ 494.644214][T19054] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.661556][T19051] vlan2: entered promiscuous mode [ 494.672486][T19051] bridge0: entered promiscuous mode [ 494.678604][T19051] vlan2: entered allmulticast mode [ 494.683801][T19051] bridge0: entered allmulticast mode [ 494.841627][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 494.948466][T19066] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 495.073209][T19070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3576'. [ 495.084014][T19070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.101152][T19070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.181289][T19070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3576'. [ 496.496741][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.727594][T19014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.989497][T19084] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3579'. [ 497.210199][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3581'. [ 497.242014][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'. [ 497.399739][T19106] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3587'. [ 497.461176][T19112] netlink: 'syz.2.3589': attribute type 11 has an invalid length. [ 497.480335][T19106] syzkaller1: entered promiscuous mode [ 497.484063][T19112] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.3589'. [ 497.492691][T19106] syzkaller1: entered allmulticast mode [ 497.775401][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.937533][T19135] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3594'. [ 498.028865][T19138] syz.4.3592: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 498.063167][T19138] CPU: 1 UID: 0 PID: 19138 Comm: syz.4.3592 Not tainted syzkaller #0 PREEMPT(full) [ 498.063209][T19138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.063223][T19138] Call Trace: [ 498.063232][T19138] [ 498.063242][T19138] dump_stack_lvl+0xe8/0x150 [ 498.063285][T19138] warn_alloc+0x24c/0x270 [ 498.063364][T19138] ? __pfx_warn_alloc+0x10/0x10 [ 498.063390][T19138] ? xskq_create+0x56/0x220 [ 498.063490][T19138] ? xsk_setsockopt+0x52a/0x960 [ 498.063514][T19138] ? do_syscall_64+0x166/0x520 [ 498.063543][T19138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.063585][T19138] __vmalloc_node_range_noprof+0x12c/0x1730 [ 498.063649][T19138] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 498.063677][T19138] ? __kmalloc_cache_noprof+0x331/0x660 [ 498.063705][T19138] ? __kmalloc_cache_noprof+0x152/0x660 [ 498.063732][T19138] ? xskq_create+0x56/0x220 [ 498.063760][T19138] xskq_create+0x148/0x220 [ 498.063785][T19138] ? xsk_init_queue+0x8a/0xe0 [ 498.063810][T19138] xsk_init_queue+0x8a/0xe0 [ 498.063836][T19138] xsk_setsockopt+0x52a/0x960 [ 498.063859][T19138] ? __fget_files+0x2a/0x420 [ 498.063891][T19138] ? __pfx_xsk_setsockopt+0x10/0x10 [ 498.063913][T19138] ? __pfx_aa_sk_perm+0x10/0x10 [ 498.064018][T19138] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 498.064056][T19138] ? __pfx_xsk_setsockopt+0x10/0x10 [ 498.064081][T19138] do_sock_setsockopt+0x17c/0x1b0 [ 498.064128][T19138] __x64_sys_setsockopt+0x13d/0x1b0 [ 498.064167][T19138] do_syscall_64+0x166/0x520 [ 498.064194][T19138] ? trace_irq_disable+0x3b/0x140 [ 498.064225][T19138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.064248][T19138] ? clear_bhb_loop+0x70/0xc0 [ 498.064276][T19138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.064299][T19138] RIP: 0033:0x7efd7d99e0d9 [ 498.064321][T19138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.064350][T19138] RSP: 002b:00007efd7e83c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 498.064374][T19138] RAX: ffffffffffffffda RBX: 00007efd7dc26090 RCX: 00007efd7d99e0d9 [ 498.064391][T19138] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 498.064405][T19138] RBP: 00007efd7da35024 R08: 0000000000000004 R09: 0000000000000000 [ 498.064419][T19138] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.064433][T19138] R13: 00007efd7dc26128 R14: 00007efd7dc26090 R15: 00007ffcb3764588 [ 498.064469][T19138] [ 498.374192][T19138] Mem-Info: [ 498.378738][T19138] active_anon:5723 inactive_anon:0 isolated_anon:0 [ 498.378738][T19138] active_file:0 inactive_file:43592 isolated_file:0 [ 498.378738][T19138] unevictable:0 dirty:106 writeback:0 [ 498.378738][T19138] slab_reclaimable:11658 slab_unreclaimable:120215 [ 498.378738][T19138] mapped:30426 shmem:521 pagetables:1364 [ 498.378738][T19138] sec_pagetables:0 bounce:0 [ 498.378738][T19138] kernel_misc_reclaimable:0 [ 498.378738][T19138] free:1301321 free_pcp:9954 free_cma:0 [ 498.426640][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.439368][T19138] Node 0 active_anon:23092kB inactive_anon:0kB active_file:0kB inactive_file:174160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121704kB dirty:424kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15224kB pagetables:5336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 498.474335][T19138] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 498.513237][T19138] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.545840][T19138] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 498.553302][T19138] Node 0 DMA32 free:1250232kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23092kB inactive_anon:0kB active_file:0kB inactive_file:174160kB unevictable:0kB writepending:424kB zspages:0kB present:3129332kB managed:2547804kB mlocked:0kB bounce:0kB free_pcp:39600kB local_pcp:18696kB free_cma:0kB [ 498.592958][T19138] lowmem_reserve[]: 0 0 0 0 0 [ 498.599702][T19138] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:252kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.629603][T19138] lowmem_reserve[]: 0 0 0 0 0 [ 498.634457][T19138] Node 1 Normal free:3939692kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 498.678723][T19138] lowmem_reserve[]: 0 0 0 0 0 [ 498.683747][T19138] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 498.697706][T19138] Node 0 DMA32: 648*4kB (UME) 517*8kB (UME) 249*16kB (UME) 317*32kB (UME) 128*64kB (UME) 69*128kB (UM) 29*256kB (UM) 39*512kB (UM) 43*1024kB (UE) 1*2048kB (M) 278*4096kB (UM) = 1250040kB [ 498.719434][T19138] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 498.731670][T19138] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 10*16kB (UM) 5*32kB (UM) 10*64kB (UM) 7*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3939692kB [ 498.750416][T19138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.760381][T19138] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 498.770024][T19138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.782050][T19138] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 498.791640][T19138] 44109 total pagecache pages [ 498.796505][T19138] 0 pages in swap cache [ 498.800694][T19138] Free swap = 124996kB [ 498.805574][T19138] Total swap = 124996kB [ 498.809788][T19138] 2097051 pages RAM [ 498.813607][T19138] 0 pages HighMem/MovableOnly [ 498.819528][T19138] 428422 pages reserved [ 498.823743][T19138] 0 pages cma reserved [ 499.695328][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.833318][T19126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.085330][T19162] syzkaller0: entered promiscuous mode [ 501.103687][T19162] syzkaller0: entered allmulticast mode [ 501.322818][T19179] __nla_validate_parse: 1 callbacks suppressed [ 501.322840][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3605'. [ 501.359729][T19182] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3606'. [ 501.471084][T19189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3609'. [ 501.481963][T19189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3609'. [ 501.494320][T19189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3609'. [ 501.617055][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 501.640064][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.687927][T19183] IPv6: sit1: Disabled Multicast RS [ 502.176683][T19214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3614'. [ 502.260072][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.401635][T19226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3618'. [ 502.606156][T19227] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 502.660350][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.667622][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.726992][T19233] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3619'. [ 502.835970][T19216] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3616'. [ 502.886400][T19238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3623'. [ 503.139585][T19254] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 503.536202][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.177230][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.898406][T19356] netlink: 'syz.3.3657': attribute type 1 has an invalid length. [ 505.374791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.383360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.391800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.400202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.408626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.450588][T19367] lo speed is unknown, defaulting to 1000 [ 505.512324][T19367] wlan0 speed is unknown, defaulting to 1000 [ 506.367336][T19376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.374724][T19376] IPv6: NLM_F_CREATE should be set when creating new route [ 506.382047][T19376] IPv6: NLM_F_CREATE should be set when creating new route [ 506.389421][T19376] IPv6: NLM_F_CREATE should be set when creating new route [ 506.423257][T19419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.508042][T19421] __nla_validate_parse: 12 callbacks suppressed [ 506.508063][T19421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3676'. [ 506.551178][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3676'. [ 507.297493][T19456] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 507.307156][T19456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3687'. [ 507.332756][T19459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3688'. [ 507.370741][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 507.387490][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'. [ 507.445785][T19461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3689'. [ 507.738349][T19469] bridge3: entered promiscuous mode [ 507.743709][T19469] bridge3: entered allmulticast mode [ 507.765813][T19471] bridge4: entered promiscuous mode [ 507.773592][T19471] bridge4: entered allmulticast mode [ 507.782773][T19478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3695'. [ 507.900987][T19480] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3695'. [ 507.991961][T19474] syzkaller0: entered promiscuous mode [ 508.016172][ T1032] net_ratelimit: 7 callbacks suppressed [ 508.016192][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.041865][T19474] syzkaller0: entered allmulticast mode [ 508.078694][T19481] xt_nfacct: accounting object `' does not exist [ 508.104204][T19487] openvswitch: netlink: Duplicate or invalid key (type 0). [ 508.624443][T19508] x_tables: duplicate underflow at hook 1 [ 508.644174][T19513] netlink: 'syz.1.3707': attribute type 16 has an invalid length. [ 508.657865][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.661459][T19513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3707'. [ 508.676716][T19513] veth0_macvtap: entered allmulticast mode [ 508.823156][T19517] netlink: 'syz.4.3710': attribute type 1 has an invalid length. [ 508.945473][T19517] bond3: entered promiscuous mode [ 508.963731][T19517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.066326][T19529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.092998][T19529] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 509.119057][T19529] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 509.157698][T19529] bond3: (slave ip6gre1): making interface the new active one [ 509.178675][T19529] ip6gre1: entered promiscuous mode [ 509.201718][T19529] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 509.392597][T19527] lo speed is unknown, defaulting to 1000 [ 509.483242][T19527] wlan0 speed is unknown, defaulting to 1000 [ 509.937630][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.060195][T19561] netlink: 'syz.1.3719': attribute type 1 has an invalid length. [ 510.437350][T19596] netlink: 'syz.1.3727': attribute type 1 has an invalid length. [ 510.578007][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.833215][T19600] bridge2: entered promiscuous mode [ 510.846622][T19600] bond2: (slave bridge2): making interface the new active one [ 510.855986][T19600] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 510.952004][T19623] netlink: 'syz.4.3734': attribute type 1 has an invalid length. [ 511.627016][T19649] __nla_validate_parse: 9 callbacks suppressed [ 511.627036][T19649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3741'. [ 511.681229][T19651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.793187][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3743'. [ 511.855730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.299453][T19670] bridge0: port 1(ipvlan2) entered blocking state [ 512.314716][T19670] bridge0: port 1(ipvlan2) entered disabled state [ 512.321735][T19670] ipvlan2: entered allmulticast mode [ 512.333478][T19670] bridge0: entered allmulticast mode [ 512.347217][T19670] ipvlan2: left allmulticast mode [ 512.352525][T19670] bridge0: left allmulticast mode [ 512.533589][T19682] netlink: 'syz.1.3750': attribute type 11 has an invalid length. [ 512.564041][T19678] xt_l2tp: v2 doesn't support IP mode [ 512.771596][T19693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3755'. [ 512.990243][T19705] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3758'. [ 513.111047][T19713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3761'. [ 513.122486][T19713] netlink: 'syz.1.3761': attribute type 7 has an invalid length. [ 513.131616][T19713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3761'. [ 513.510754][T19726] x_tables: duplicate entry at hook 1 [ 513.639158][T19730] netlink: 'syz.2.3767': attribute type 1 has an invalid length. [ 513.777377][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.074178][T19751] netlink: 4384 bytes leftover after parsing attributes in process `syz.4.3773'. [ 514.082171][T19750] netlink: 4384 bytes leftover after parsing attributes in process `syz.4.3773'. [ 514.331809][T19765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.339140][T19765] IPv6: NLM_F_CREATE should be set when creating new route [ 514.348213][T19765] IPv6: NLM_F_CREATE should be set when creating new route [ 514.355532][T19765] IPv6: NLM_F_CREATE should be set when creating new route [ 514.415776][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.431230][T19771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.462249][T19773] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3779'. [ 514.493984][T19770] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3781'. [ 514.526292][T19770] syzkaller0: entered promiscuous mode [ 514.549344][T19770] syzkaller0: entered allmulticast mode [ 514.613518][T19781] x_tables: duplicate underflow at hook 1 [ 515.010776][T19797] syzkaller0: entered promiscuous mode [ 515.020817][T19797] syzkaller0: entered allmulticast mode [ 515.381105][T19814] atomic_op ffff888034e139e0 conn xmit_atomic 0000000000000000 [ 515.699936][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.708846][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.924056][T19835] netlink: 'syz.3.3801': attribute type 75 has an invalid length. [ 515.949633][T19835] netlink: 'syz.3.3801': attribute type 1 has an invalid length. [ 515.965250][T19832] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 516.014220][T19835] bond3: (slave bridge2): making interface the new active one [ 516.027662][T19835] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 516.051709][T19839] x_tables: duplicate entry at hook 1 [ 516.501868][T19860] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.524445][T19860] netlink: 'syz.4.3807': attribute type 1 has an invalid length. [ 516.838809][T19875] __nla_validate_parse: 4 callbacks suppressed [ 516.838830][T19875] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3811'. [ 516.896831][T19873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.904174][T19873] IPv6: NLM_F_CREATE should be set when creating new route [ 516.911529][T19873] IPv6: NLM_F_CREATE should be set when creating new route [ 516.918854][T19873] IPv6: NLM_F_CREATE should be set when creating new route [ 516.931687][T19875] 8021q: VLANs not supported on ip_vti0 [ 516.947791][T19877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.665920][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3822'. [ 518.290801][T19939] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 518.493666][T19937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.524041][T19955] xt_hashlimit: size too large, truncated to 1048576 [ 518.588688][T19955] xt_hashlimit: max too large, truncated to 1048576 [ 518.642581][T19955] xt_hashlimit: overflow, rate too high: 0 [ 518.783472][T19967] syzkaller0: entered promiscuous mode [ 518.804328][T19967] syzkaller0: entered allmulticast mode [ 519.064596][T17351] Bluetooth: hci2: command 0x0406 tx timeout [ 519.071522][T19884] Bluetooth: hci0: command 0x0419 tx timeout [ 519.370652][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3836'. [ 519.421087][T19993] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 519.462008][T19993] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3839'. [ 519.505550][T19996] netlink: 'syz.2.3841': attribute type 13 has an invalid length. [ 519.535798][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.185624][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.413483][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3854'. [ 520.537714][T20058] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3855'. [ 520.789447][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3857'. [ 520.815833][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.977229][T20079] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 521.135702][T18683] Bluetooth: hci0: command 0x0419 tx timeout [ 521.263943][T20087] tipc: Enabled bearer , priority 0 [ 521.285517][T20087] syzkaller0: entered promiscuous mode [ 521.314582][T20087] syzkaller0: entered allmulticast mode [ 521.455315][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.559261][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 521.696983][T20118] netlink: 'syz.1.3867': attribute type 8 has an invalid length. [ 521.719211][T20092] tipc: Resetting bearer [ 521.735022][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3867'. [ 521.838769][T20092] tipc: Disabling bearer [ 521.853832][T20125] netlink: 'syz.3.3870': attribute type 1 has an invalid length. [ 521.881205][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3872'. [ 521.897535][T20118] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.907981][T20118] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.932565][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3867'. [ 521.954463][T18683] Bluetooth: hci2: command 0x0406 tx timeout [ 522.061032][T20131] team0 (unregistering): Port device team_slave_0 removed [ 522.086678][T20131] team0 (unregistering): Port device team_slave_1 removed [ 522.134261][T20138] sctp: [Deprecated]: syz.3.3873 (pid 20138) Use of int in max_burst socket option. [ 522.134261][T20138] Use struct sctp_assoc_value instead [ 522.210738][T20112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.257756][T20147] Bluetooth: MGMT ver 1.23 [ 522.452869][T20162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3878'. [ 522.612046][T20163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.644086][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3883'. [ 522.711449][T20174] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 522.742999][ T1219] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 523.011797][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 523.137457][T20198] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20000 [ 523.208300][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 523.226289][T18683] Bluetooth: hci0: command 0x0419 tx timeout [ 523.309958][T20204] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3893'. [ 523.508571][T20214] ip6tnl0: Caught tx_queue_len zero misconfig [ 523.550225][T20214] netlink: 'syz.1.3895': attribute type 11 has an invalid length. [ 523.687045][T20222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3899'. [ 523.702205][T20223] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.830845][T20229] syzkaller0: entered promiscuous mode [ 523.846761][T20229] syzkaller0: entered allmulticast mode [ 524.040756][T20234] netlink: 'syz.4.3903': attribute type 21 has an invalid length. [ 524.054798][T20234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3903'. [ 524.329869][T20209] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 524.361882][T20209] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 524.446618][T20209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 524.468195][T20209] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 524.530823][T20209] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 524.543128][T20209] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 524.560326][T20259] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 524.714148][T20209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 524.728784][T20209] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 524.739253][T20261] x_tables: duplicate underflow at hook 3 [ 524.908659][T20209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 524.917614][T20209] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 525.304944][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.941668][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.575856][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.098191][T20305] syzkaller1: entered promiscuous mode [ 527.111086][T20305] syzkaller1: entered allmulticast mode [ 527.218427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.226679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.030861][T20353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3935'. [ 528.087902][T20346] pimreg3: entered allmulticast mode [ 528.338601][T20362] gtp0: entered promiscuous mode [ 528.359502][T20362] gtp0: entered allmulticast mode [ 528.663815][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3944'. [ 528.842991][T20383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.943864][T20397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3948'. [ 529.208025][T20408] netlink: set zone limit has 4 unknown bytes [ 529.612934][T20427] tunl0: Caught tx_queue_len zero misconfig [ 529.640555][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'. [ 529.668576][T20427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3959'. [ 529.919743][T20433] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 529.962759][T20433] bond4 (unregistering): Released all slaves [ 530.028993][T20450] x_tables: unsorted underflow at hook 1 [ 530.070107][T20440] tunl0: entered promiscuous mode [ 530.083464][T20440] netlink: 'syz.2.3966': attribute type 4 has an invalid length. [ 530.123609][T20440] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3966'. [ 530.146335][T20441] netlink: 'syz.2.3966': attribute type 4 has an invalid length. [ 530.163732][T20441] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3966'. [ 530.746162][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3976'. [ 530.775310][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3976'. [ 530.905143][T20491] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 530.942171][T20481] bond3: entered promiscuous mode [ 530.973593][T20481] bond3: entered allmulticast mode [ 530.990939][T20495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3977'. [ 531.014197][T20481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.055633][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.696131][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.339499][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.349907][T20556] xt_hashlimit: size too large, truncated to 1048576 [ 532.706983][T20564] openvswitch: netlink: Flow key attr not present in new flow. [ 532.811925][T20568] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 532.977017][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.054423][T20576] syzkaller0: entered promiscuous mode [ 533.086696][T20576] syzkaller0: entered allmulticast mode [ 533.131523][T20580] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 533.162348][T20580] __nla_validate_parse: 2 callbacks suppressed [ 533.162366][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4004'. [ 533.238986][T20588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4006'. [ 533.268955][T18683] block nbd4: Receive control failed (result -107) [ 533.692645][T20610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4011'. [ 533.709076][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4012'. [ 534.218649][ T34] IPVS: starting estimator thread 0... [ 534.334905][T20635] IPVS: using max 27 ests per chain, 64800 per kthread [ 534.369847][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4016'. [ 534.470605][T20646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4016'. [ 534.811915][T20657] xt_hashlimit: size too large, truncated to 1048576 [ 535.202020][T20673] syzkaller0: entered promiscuous mode [ 535.232030][T20673] syzkaller0: entered allmulticast mode [ 535.290340][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4025'. [ 535.598057][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'. [ 535.651548][T20698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4028'. [ 536.177973][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.334192][T20732] syzkaller0: entered promiscuous mode [ 536.342170][T20732] syzkaller0: entered allmulticast mode [ 536.461451][T20745] netlink: 'syz.3.4043': attribute type 39 has an invalid length. [ 536.801705][T20757] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4046'. [ 536.862337][T20763] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 536.897005][T20757] bond4: entered promiscuous mode [ 536.912394][T20757] bond4: entered allmulticast mode [ 536.919804][T20757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.466020][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.100388][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.371512][T20834] __nla_validate_parse: 9 callbacks suppressed [ 538.371533][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4070'. [ 538.372682][T20835] netlink: 'syz.3.4070': attribute type 16 has an invalid length. [ 538.409147][T20833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4070'. [ 538.422528][T20833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 538.429917][T20833] IPv6: NLM_F_CREATE should be set when creating new route [ 538.461399][T20838] bridge_slave_1: left promiscuous mode [ 538.467504][T20838] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.485838][T20838] bridge_slave_0: left allmulticast mode [ 538.491530][T20838] bridge_slave_0: left promiscuous mode [ 538.512263][T20838] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.736931][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.949119][T20859] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 539.054396][T20863] netlink: 'syz.1.4077': attribute type 1 has an invalid length. [ 539.089831][T20867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4079'. [ 539.147948][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4078'. [ 539.187254][T20863] bond4: entered promiscuous mode [ 539.196534][T20863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.299822][T20876] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 539.796701][T20897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4087'. [ 539.808065][T20899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4087'. [ 540.230497][T20920] netlink: 'syz.0.4093': attribute type 1 has an invalid length. [ 540.302486][T20927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4095'. [ 540.336173][T20924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4094'. [ 540.388280][T20920] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.399452][T20931] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 540.560753][T20942] netlink: 'syz.1.4099': attribute type 1 has an invalid length. [ 540.669786][T20954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4099'. [ 540.843287][T20942] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.861780][T20957] macsec0: left promiscuous mode [ 540.868786][T20960] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4103'. [ 540.879093][T20957] macsec0: left allmulticast mode [ 541.027608][T20966] netlink: 'syz.2.4107': attribute type 1 has an invalid length. [ 541.298343][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.650806][T21007] SET target dimension over the limit! [ 541.720566][T21011] netlink: 'syz.2.4117': attribute type 1 has an invalid length. [ 541.990642][T21023] netlink: 'syz.2.4122': attribute type 4 has an invalid length. [ 542.081214][T21028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.302294][T21038] xt_socket: unknown flags 0x50 [ 542.360384][T21043] dvmrp8: entered allmulticast mode [ 542.582836][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.872844][T21056] debugfs: 'hsr1' already exists in 'hsr' [ 542.902874][T21056] Cannot create hsr debugfs directory [ 542.915581][T21056] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 542.949477][T21056] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 542.986429][T21056] hsr1: entered promiscuous mode [ 543.063101][T21060] 8021q: VLANs not supported on gre0 [ 543.222986][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.370969][T21078] v: renamed from veth0_vlan (while UP) [ 543.578979][T21086] __nla_validate_parse: 8 callbacks suppressed [ 543.579000][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4138'. [ 543.719090][T21086] dvmrp8: entered allmulticast mode [ 543.882899][T21115] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4147'. [ 543.893182][T21115] netlink: 255 bytes leftover after parsing attributes in process `syz.2.4147'. [ 543.903582][T21115] netlink: 255 bytes leftover after parsing attributes in process `syz.2.4147'. [ 544.194380][T21134] lo speed is unknown, defaulting to 1000 [ 544.202899][T21134] wlan0 speed is unknown, defaulting to 1000 [ 544.495338][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.120703][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4156'. [ 546.415303][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.610532][T21099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.831114][T21169] netlink: 808 bytes leftover after parsing attributes in process `syz.0.4163'. [ 547.202832][T21180] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.236156][T21187] netlink: 'syz.3.4171': attribute type 3 has an invalid length. [ 547.244423][T21187] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4171'. [ 547.313523][T21180] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.344819][T21195] netlink: 'syz.3.4174': attribute type 58 has an invalid length. [ 547.360897][T21195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4174'. [ 547.549357][T21195] netlink: 'syz.3.4174': attribute type 58 has an invalid length. [ 547.570414][T21195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4174'. [ 547.664131][T21202] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4175'. [ 547.757613][T21195] netlink: 'syz.3.4174': attribute type 58 has an invalid length. [ 547.913906][T21195] netlink: 'syz.3.4174': attribute type 58 has an invalid length. [ 548.038967][T21195] netlink: 'syz.3.4174': attribute type 58 has an invalid length. [ 548.227174][T21215] netlink: 'syz.2.4179': attribute type 1 has an invalid length. [ 548.306719][T21215] netlink: 'syz.2.4179': attribute type 8 has an invalid length. [ 548.335991][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.526974][T21226] lo speed is unknown, defaulting to 1000 [ 548.562749][T21237] lo speed is unknown, defaulting to 1000 [ 548.572386][T21226] wlan0 speed is unknown, defaulting to 1000 [ 548.785768][T21256] __nla_validate_parse: 3 callbacks suppressed [ 548.785788][T21256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4191'. [ 548.975395][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.039584][T21268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4193'. [ 549.119792][T21237] wlan0 speed is unknown, defaulting to 1000 [ 550.259701][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.576700][T21325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4207'. [ 550.624367][T21322] netlink: 'syz.0.4205': attribute type 83 has an invalid length. [ 550.689916][T21333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4209'. [ 550.700723][T21334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4209'. [ 550.704466][T21322] netlink: 'syz.0.4205': attribute type 83 has an invalid length. [ 550.969417][T21343] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 551.020538][T21343] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.4211'. [ 551.179234][T21355] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4214'. [ 551.247886][T21356] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 551.364270][T21366] xt_l2tp: v2 tid > 0xffff: 1114244 [ 552.093835][T21394] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 552.183173][T21393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4227'. [ 552.192881][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.557251][T21411] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4235'. [ 552.578099][T21411] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4235'. [ 552.636220][ T30] audit: type=1804 audit(1787585510.177:5): pid=21412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4236" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1150 res=1 errno=0 [ 552.689460][ T30] audit: type=1800 audit(1787585510.187:6): pid=21412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4236" name="cgroup.controllers" dev="tmpfs" ino=1150 res=0 errno=0 [ 553.032363][T21432] validate_nla: 15 callbacks suppressed [ 553.032387][T21432] netlink: 'syz.2.4240': attribute type 23 has an invalid length. [ 553.110629][T21435] netlink: 'syz.3.4242': attribute type 29 has an invalid length. [ 553.157259][T21436] netlink: 'syz.4.4241': attribute type 16 has an invalid length. [ 553.185102][ T5994] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.354667][ T1152] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.398737][ T1152] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.435509][ T1152] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.144293][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.172330][T21483] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 554.238611][T21494] __nla_validate_parse: 4 callbacks suppressed [ 554.238632][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4259'. [ 554.596978][T21509] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4264'. [ 554.628072][T21509] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4264'. [ 554.736809][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.753582][T21518] netlink: 'syz.4.4266': attribute type 4 has an invalid length. [ 554.784403][T21515] tipc: Enabled bearer , priority 10 [ 554.813728][T21518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4266'. [ 554.923045][T21518] .`: renamed from bond0 (while UP) [ 555.023770][T21532] netlink: 'syz.2.4269': attribute type 4 has an invalid length. [ 555.033432][T21528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4271'. [ 555.038159][T21532] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4269'. [ 555.181086][T21528] bond0: (slave bond_slave_1): Releasing backup interface [ 555.200771][T21539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4273'. [ 555.213854][T21539] block nbd5: Unsupported socket: should be TCP or UNIX. [ 555.529244][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4278'. [ 555.577810][T21559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4279'. [ 555.758227][T21561] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 555.832911][T21573] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 555.897660][ T29] tipc: Node number set to 3556109926 [ 556.019392][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.243254][T21547] syzkaller1: entered promiscuous mode [ 556.262108][T21590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4284'. [ 556.267523][T21547] syzkaller1: entered allmulticast mode [ 556.319312][T21596] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 556.899610][T21622] sctp: [Deprecated]: syz.2.4291 (pid 21622) Use of int in max_burst socket option. [ 556.899610][T21622] Use struct sctp_assoc_value instead [ 557.633800][ T5274] veth0_vlan: left promiscuous mode [ 557.709885][ T187] veth0_vlan: entered promiscuous mode [ 557.823406][T21672] nbd: illegal input index -8454144 [ 557.838504][T21671] syzkaller0: entered promiscuous mode [ 557.862683][T21671] syzkaller0: entered allmulticast mode [ 557.939318][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.299009][T21696] netlink: 'syz.2.4311': attribute type 10 has an invalid length. [ 558.347805][T21699] netlink: 'syz.2.4311': attribute type 10 has an invalid length. [ 558.681780][T21717] xt_cgroup: xt_cgroup: no path or classid specified [ 558.956817][T21733] gre0: Caught tx_queue_len zero misconfig [ 559.449841][T21755] netlink: 'syz.3.4328': attribute type 10 has an invalid length. [ 559.696971][T21769] __nla_validate_parse: 15 callbacks suppressed [ 559.696992][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4331'. [ 559.794183][T21769] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 559.838958][T21777] ip_tables: iptables: counters copy to user failed while replacing table [ 559.868180][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.949721][T21779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4333'. [ 560.032238][T21779] netlink: 'syz.2.4333': attribute type 7 has an invalid length. [ 560.062231][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4335'. [ 560.076318][T21779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4333'. [ 560.330749][T21786] hsr_slave_1 (unregistering): left promiscuous mode [ 560.380057][T21799] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 560.390686][T21798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4341'. [ 560.497643][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.672299][T21809] vlan2: entered promiscuous mode [ 560.678235][T21809] hsr0: entered promiscuous mode [ 560.683839][T21809] vlan2: entered allmulticast mode [ 560.689692][T21809] hsr0: entered allmulticast mode [ 560.695148][T21809] hsr_slave_0: entered allmulticast mode [ 560.726728][T21811] veth0: entered promiscuous mode [ 560.758469][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'. [ 560.830552][T21817] netlink: 'syz.1.4346': attribute type 21 has an invalid length. [ 560.871833][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4347'. [ 561.067156][T21826] sch_fq: defrate 0 ignored. [ 561.084028][T21826] netlink: 'syz.4.4350': attribute type 11 has an invalid length. [ 561.222727][T21830] veth5: entered promiscuous mode [ 561.230080][T21830] veth5: entered allmulticast mode [ 561.520951][T21810] veth0: left promiscuous mode [ 561.736634][T21858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4359'. [ 561.776672][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.044312][T21872] netlink: 'syz.0.4365': attribute type 1 has an invalid length. [ 562.278067][T21875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4366'. [ 562.463870][T21893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4371'. [ 562.547374][T21895] netlink: 'syz.4.4372': attribute type 1 has an invalid length. [ 562.827029][T21904] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.881508][T21913] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 562.901100][T21913] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 562.910408][T21913] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 563.058598][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.259758][T21929] netlink: ct_mark mask cannot be 0 [ 563.273442][T21929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.695363][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.007254][T21965] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 564.460431][T21989] syzkaller1: entered promiscuous mode [ 564.469087][T21989] syzkaller1: entered allmulticast mode [ 565.097514][T22014] __nla_validate_parse: 6 callbacks suppressed [ 565.097537][T22014] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4405'. [ 565.409615][T22023] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4408'. [ 565.620434][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.636073][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.819849][T22045] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 566.111048][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4409'. [ 566.324386][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4417'. [ 566.340768][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4417'. [ 566.633319][T22078] sit0: Caught tx_queue_len zero misconfig [ 566.736620][T22084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4422'. [ 566.849390][T22092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4424'. [ 566.871622][T22093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.968350][T22097] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 567.000624][T22099] lo: Caught tx_queue_len zero misconfig [ 567.272551][T22113] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4432'. [ 567.317139][T22115] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 567.482302][T22127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4435'. [ 567.538173][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.685597][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4438'. [ 567.730851][ T1152] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.765874][ T1152] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.798338][ T6001] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.825531][ T6001] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.849265][T22188] netlink: 'syz.1.4457': attribute type 10 has an invalid length. [ 568.861350][T22188] syz_tun: entered promiscuous mode [ 569.457174][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.530053][T22220] hsr_slave_0 (unregistering): left promiscuous mode [ 569.780471][T22235] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 570.312877][T22265] netlink: 'syz.0.4480': attribute type 1 has an invalid length. [ 570.392971][T22265] bond5: entered promiscuous mode [ 570.398762][T22265] bond5: entered allmulticast mode [ 570.404663][T22265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.423067][T22265] erspan1: entered allmulticast mode [ 570.438046][T22265] bond5: (slave erspan1): making interface the new active one [ 570.453839][T22265] erspan1: entered promiscuous mode [ 570.470321][T22265] [ 570.472709][T22265] ============================================ [ 570.478962][T22265] WARNING: possible recursive locking detected [ 570.485309][T22265] syzkaller #0 Not tainted [ 570.489759][T22265] -------------------------------------------- [ 570.495941][T22265] syz.0.4480/22265 is trying to acquire lock: [ 570.502039][T22265] ffff888052afa558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 570.512091][T22265] [ 570.512091][T22265] but task is already holding lock: [ 570.519486][T22265] ffff88807f7c1958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 570.529397][T22265] [ 570.529397][T22265] other info that might help us debug this: [ 570.537492][T22265] Possible unsafe locking scenario: [ 570.537492][T22265] [ 570.544987][T22265] CPU0 [ 570.548296][T22265] ---- [ 570.551643][T22265] lock(&qdisc_xmit_lock_key#3); [ 570.556745][T22265] lock(&qdisc_xmit_lock_key#3); [ 570.561825][T22265] [ 570.561825][T22265] *** DEADLOCK *** [ 570.561825][T22265] [ 570.569992][T22265] May be due to missing lock nesting notation [ 570.569992][T22265] [ 570.578420][T22265] locks held by syz.0.4480/22265: 10, last CPU#0: [ 570.584947][T22265] #0: ffffffff905a12a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 570.594666][T22265] #1: ffffffff90036540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 570.603779][T22265] #2: ffffffff8eb5a240 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 570.613905][T22265] #3: ffff888072a5e228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 570.626596][T22265] #4: ffff88807f7c1958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 570.636965][T22265] #5: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 570.646052][T22265] #6: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 570.655882][T22265] #7: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 570.664869][T22265] #8: ffffffff8eb5a240 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 570.674868][T22265] #9: ffff888020f2b228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 570.687571][T22265] [ 570.687571][T22265] stack backtrace: [ 570.693504][T22265] CPU: 0 UID: 0 PID: 22265 Comm: syz.0.4480 Not tainted syzkaller #0 PREEMPT(full) [ 570.693531][T22265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.693544][T22265] Call Trace: [ 570.693551][T22265] [ 570.693559][T22265] dump_stack_lvl+0xe8/0x150 [ 570.693592][T22265] print_deadlock_bug+0x279/0x290 [ 570.693615][T22265] __lock_acquire+0x24df/0x2cf0 [ 570.693646][T22265] ? __pfx_netif_skb_features+0x10/0x10 [ 570.693767][T22265] ? __lock_acquire+0x683/0x2cf0 [ 570.693796][T22265] ? sch_direct_xmit+0x15f/0x4c0 [ 570.693822][T22265] lock_acquire+0x106/0x350 [ 570.693848][T22265] ? sch_direct_xmit+0x15f/0x4c0 [ 570.693882][T22265] _raw_spin_lock+0x2e/0x40 [ 570.693936][T22265] ? sch_direct_xmit+0x15f/0x4c0 [ 570.693961][T22265] sch_direct_xmit+0x15f/0x4c0 [ 570.693990][T22265] ? __pfx_sch_direct_xmit+0x10/0x10 [ 570.694017][T22265] ? arp_solicit+0xae0/0xe40 [ 570.694041][T22265] __dev_queue_xmit+0x177f/0x3820 [ 570.694066][T22265] ? __dev_queue_xmit+0x29b/0x3820 [ 570.694085][T22265] ? __lock_acquire+0x683/0x2cf0 [ 570.694112][T22265] ? arpt_do_table+0x25b/0x1f90 [ 570.694199][T22265] ? __pfx___dev_queue_xmit+0x10/0x10 [ 570.694223][T22265] ? __pfx_arpt_do_table+0x10/0x10 [ 570.694260][T22265] ? NF_HOOK+0xa2/0x3c0 [ 570.694280][T22265] NF_HOOK+0x33a/0x3c0 [ 570.694299][T22265] ? __pfx_arp_xmit_finish+0x10/0x10 [ 570.694319][T22265] ? NF_HOOK+0xa2/0x3c0 [ 570.694336][T22265] ? __pfx_NF_HOOK+0x10/0x10 [ 570.694354][T22265] ? lock_acquire+0x106/0x350 [ 570.694392][T22265] ? __pfx_arp_xmit_finish+0x10/0x10 [ 570.694412][T22265] ? inet_addr_type_dev_table+0x25/0x190 [ 570.694457][T22265] arp_xmit+0x16c/0x270 [ 570.694478][T22265] ? arp_xmit+0x23/0x270 [ 570.694499][T22265] arp_solicit+0xbdc/0xe40 [ 570.694525][T22265] ? __pfx_arp_solicit+0x10/0x10 [ 570.694546][T22265] ? __neigh_event_send+0xea4/0x1510 [ 570.694572][T22265] ? __pfx_arp_solicit+0x10/0x10 [ 570.694591][T22265] __neigh_event_send+0xf0c/0x1510 [ 570.694622][T22265] neigh_resolve_output+0x1a1/0x720 [ 570.694648][T22265] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 570.694676][T22265] ? ip_finish_output2+0x3de/0x10b0 [ 570.694698][T22265] ip_finish_output2+0xc4b/0x10b0 [ 570.694720][T22265] ? ip_skb_dst_mtu+0x811/0xa50 [ 570.694739][T22265] ? ip_finish_output2+0x3de/0x10b0 [ 570.694763][T22265] ? ip_finish_output+0x40b/0x530 [ 570.694784][T22265] ip_output+0x29f/0x450 [ 570.694805][T22265] ? ip_output+0x5a/0x450 [ 570.694830][T22265] iptunnel_xmit+0x626/0xd10 [ 570.694893][T22265] ip_tunnel_xmit+0x195b/0x2040 [ 570.694954][T22265] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 570.694986][T22265] ? __gre_xmit+0x106/0x1a0 [ 570.695049][T22265] erspan_xmit+0xb6a/0x1620 [ 570.695078][T22265] ? __pfx_erspan_xmit+0x10/0x10 [ 570.695108][T22265] dev_hard_start_xmit+0x2cd/0x830 [ 570.695141][T22265] sch_direct_xmit+0x257/0x4c0 [ 570.695176][T22265] ? __pfx_sch_direct_xmit+0x10/0x10 [ 570.695210][T22265] ? do_set_master+0x560/0x720 [ 570.695249][T22265] __dev_queue_xmit+0x177f/0x3820 [ 570.695278][T22265] ? __dev_queue_xmit+0x29b/0x3820 [ 570.695308][T22265] ? __pfx___dev_queue_xmit+0x10/0x10 [ 570.695333][T22265] ? rcu_is_watching+0x16/0xb0 [ 570.695370][T22265] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 570.695409][T22265] ? trace_kmem_cache_alloc+0x29/0xe0 [ 570.695434][T22265] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 570.695462][T22265] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 570.695488][T22265] ? kmem_cache_alloc_node_noprof+0x1f7/0x620 [ 570.695521][T22265] ? __alloc_skb+0x4d0/0x7a0 [ 570.695587][T22265] ? alb_send_lp_vid+0x14e/0x550 [ 570.695688][T22265] alb_send_lp_vid+0x348/0x550 [ 570.695723][T22265] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 570.695757][T22265] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 570.695792][T22265] alb_send_learning_packets+0x12c/0x300 [ 570.695823][T22265] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 570.695858][T22265] ? alb_swap_mac_addr+0x230/0x340 [ 570.695893][T22265] alb_fasten_mac_swap+0x45d/0xf70 [ 570.695923][T22265] ? dev_addr_mod+0x1ba/0x350 [ 570.695991][T22265] bond_alb_handle_active_change+0xc85/0xf50 [ 570.696024][T22265] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 570.696054][T22265] ? __hw_addr_add_ex+0x182/0x520 [ 570.696105][T22265] ? __local_bh_enable_ip+0xd6/0x140 [ 570.696155][T22265] bond_change_active_slave+0x1098/0x36d0 [ 570.696214][T22265] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 570.696256][T22265] ? smp_call_function_many_cond+0xfc7/0x1500 [ 570.696303][T22265] ? smp_call_function_many_cond+0x11b2/0x1500 [ 570.696338][T22265] ? __pfx_bond_change_active_slave+0x10/0x10 [ 570.696367][T22265] ? __pfx_do_sync_core+0x10/0x10 [ 570.696423][T22265] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 570.696457][T22265] ? bond_start_xmit+0x92/0x19e0 [ 570.696490][T22265] ? __pfx___text_poke+0x10/0x10 [ 570.696528][T22265] bond_select_active_slave+0x8a6/0xcd0 [ 570.696560][T22265] ? __pfx_bond_select_active_slave+0x10/0x10 [ 570.696595][T22265] bond_enslave+0x239c/0x3b10 [ 570.696637][T22265] ? __pfx_bond_enslave+0x10/0x10 [ 570.696661][T22265] ? __dev_notify_flags+0x3d4/0x510 [ 570.696704][T22265] ? __pfx___dev_change_flags+0x10/0x10 [ 570.696741][T22265] ? mutex_is_locked+0x17/0x50 [ 570.696766][T22265] do_set_master+0x563/0x720 [ 570.696807][T22265] rtnl_newlink_create+0x4c8/0x7b0 [ 570.696846][T22265] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 570.696884][T22265] ? __pfx___mutex_lock+0x10/0x10 [ 570.696958][T22265] ? ns_capable+0x89/0xe0 [ 570.696987][T22265] rtnl_newlink+0x166d/0x1c30 [ 570.697029][T22265] ? __pfx_rtnl_newlink+0x10/0x10 [ 570.697061][T22265] ? __lock_acquire+0x683/0x2cf0 [ 570.697099][T22265] ? __lock_acquire+0x683/0x2cf0 [ 570.697141][T22265] ? unwind_next_frame+0x8f/0x2550 [ 570.697184][T22265] ? is_bpf_text_address+0x26/0x2b0 [ 570.697228][T22265] ? is_bpf_text_address+0x26/0x2b0 [ 570.697268][T22265] ? __lock_acquire+0x683/0x2cf0 [ 570.697303][T22265] ? kernel_text_address+0xa5/0xe0 [ 570.697325][T22265] ? __kernel_text_address+0xd/0x30 [ 570.697346][T22265] ? unwind_get_return_address+0x4d/0x90 [ 570.697369][T22265] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 570.697410][T22265] ? arch_stack_walk+0xfb/0x150 [ 570.697439][T22265] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 570.697496][T22265] ? __pfx_rtnl_newlink+0x10/0x10 [ 570.697527][T22265] rtnetlink_rcv_msg+0x802/0xc00 [ 570.697559][T22265] ? netlink_sendmsg+0x5d4/0xb40 [ 570.697640][T22265] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 570.697672][T22265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 570.697712][T22265] ? __lock_acquire+0x683/0x2cf0 [ 570.697754][T22265] netlink_rcv_skb+0x226/0x4a0 [ 570.697779][T22265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 570.697812][T22265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.697843][T22265] ? netlink_deliver_tap+0x2e/0x1b0 [ 570.697866][T22265] ? netlink_deliver_tap+0x2e/0x1b0 [ 570.697893][T22265] netlink_unicast+0x7bd/0x940 [ 570.697965][T22265] netlink_sendmsg+0x813/0xb40 [ 570.697996][T22265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.698022][T22265] ? aa_sock_msg_perm+0xf6/0x1c0 [ 570.698098][T22265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.698121][T22265] sock_sendmsg_nosec+0x13a/0x180 [ 570.698148][T22265] ____sys_sendmsg+0x54e/0x850 [ 570.698180][T22265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.698212][T22265] ? import_iovec+0x73/0xa0 [ 570.698264][T22265] ___sys_sendmsg+0x2a5/0x360 [ 570.698291][T22265] ? __lock_acquire+0x683/0x2cf0 [ 570.698320][T22265] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.698357][T22265] ? futex_wait+0x2a2/0x390 [ 570.698400][T22265] ? __fget_files+0x2a/0x420 [ 570.698425][T22265] ? __fget_files+0x3a2/0x420 [ 570.698456][T22265] __x64_sys_sendmsg+0x1b1/0x290 [ 570.698486][T22265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.698526][T22265] do_syscall_64+0x166/0x520 [ 570.698549][T22265] ? trace_irq_disable+0x3b/0x140 [ 570.698574][T22265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.698593][T22265] ? clear_bhb_loop+0x70/0xc0 [ 570.698615][T22265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.698633][T22265] RIP: 0033:0x7f5c30f9e0d9 [ 570.698651][T22265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.698668][T22265] RSP: 002b:00007f5c2f1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.698688][T22265] RAX: ffffffffffffffda RBX: 00007f5c31226090 RCX: 00007f5c30f9e0d9 [ 570.698703][T22265] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 570.698718][T22265] RBP: 00007f5c31035024 R08: 0000000000000000 R09: 0000000000000000 [ 570.698730][T22265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.698741][T22265] R13: 00007f5c31226128 R14: 00007f5c31226090 R15: 00007fff7078e1b8 [ 570.698764][T22265] [ 571.552431][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.570434][T22265] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 571.592129][T22273] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 571.649479][T22278] __nla_validate_parse: 10 callbacks suppressed [ 571.649501][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 571.666331][T22265] syz.0.4480 (22265) used greatest stack depth: 17000 bytes left [ 572.657089][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.297378][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.215581][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.136501][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.775908][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.417573][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog