last executing test programs: 5.45510248s ago: executing program 3 (id=925): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300a8, 0x18841}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x6, 0xb}}]}]}]}, 0x40}}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x1, 0x0, 0xfffff00c}, {0x6, 0x10, 0x0, 0x800}]}, 0x10) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) writev(r1, &(0x7f0000001900)=[{&(0x7f0000000280)="7fa1e21133135da859fe3bcc2f391c418a", 0x11}, {&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="2f494e0da58e778ada8eddb7", 0xc}, {&(0x7f0000001680)="b9a5f30c1f732da3fcf584269f88f00f14a66fc13b09220b72cabe9a0cf9cc9077ce7a8336cc0bdfea98d9786aa5aaa98b6171d4022e95cf3c190b6a18b40317ab92dee61c56a3ec680ee7fee967472cca649c23a2e7d1924f951b08c5884b9d1d836b0ac11fb5970d807851753fe4d5999ffe298dd62f906cfcb4354eb24446163ac49401d8e5456ad028d4458416feafa3c7e5d2a641c5bcbb67ca5e", 0x9d}, {&(0x7f0000001740)="948cda7a2717b37a053279858db77d8c883aa5a8224eec039819a3c0ff48d1dacf133422fc6acaa22fb9e1e82dd0a80d54f16d8bac97fe17ce958a9f893e5ae3d69eeecea38348", 0x47}, {&(0x7f00000017c0)="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", 0xfd}, {&(0x7f00000018c0)="4b0625100ab702e8ce892d8e232f64db9e8af3aa3d9ccc892761c2a1a8c252285f433e0d24edf87804c1ed72ec4c6f433ca2e8f48855e6e3b2", 0x39}], 0x8) r4 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x56, &(0x7f0000001000)={0x1788, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffff5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e1fe4e5c38c458170e7e5d38a2fa77262a334b70da13159214b59e99043f2d45738cfe619d4e54d9d9d52faad4185dc1461e3de1d4a8e2bac117f496b9198352ed12b367de480013f50733fcce28686f100f105d037fe1d3c387164fd3bb6d9f758e8c35de274cc824e0ef8a4ec4d740cb37a646300158bd9f137d0712242f3ff01641eedbf6207cc3e7b9314e8cd44581f210ae9980710a38a426305d71a732645e48a5faf121177bb16c0253dbba4b6495b2fdf147bf3557edbf113", 0x1ac}], 0x1}, 0x84) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x600}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x2c060000) unshare(0x2c020400) r9 = socket$nl_route(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="480000001400190d09034beafd0d36020a841a000000230f00000000a3bc5603ca00000f7f89004e00200000000101ff00c00e0300020000000000000027418c7dad6a923e8b636c0400"/84, 0x54}], 0x1) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r10, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}}, 0x4000000) 4.404648594s ago: executing program 3 (id=932): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}, [@RTA_NH_ID={0x8, 0x1e, 0xfffffff8}, @RTA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000002002000128008000100687372001400028008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 4.304280561s ago: executing program 0 (id=933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xd0, 0xd0, 0x1c8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'macsec0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x1, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1000}}}, {{@ipv6={@private2, @local, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff000000, 0xff, 0xffffffff], 'veth0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x5e, 0x13, 0x5, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"27be", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 3.631859245s ago: executing program 0 (id=938): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$netlink(0x10, 0x3, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.629759898s ago: executing program 3 (id=939): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x65) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x2f, 0x8, 0x4}, {0x20, 0xf, 0x0, 0xffffefff}, {0xe446}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3.420186882s ago: executing program 0 (id=941): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r0 = socket(0x1, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x2000000000000394, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000100000f030000000200000006000000fffeff8b7effaafada000000000000000f0100000092"], 0x0, 0x43, 0x0, 0x8, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) close(r4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r8, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESHEX=r7, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000300)='GPL\x00', 0x28, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) r9 = socket(0x2, 0x80805, 0x0) getsockopt$MRT(r9, 0x0, 0xce, 0x0, 0x0) 2.911817449s ago: executing program 0 (id=943): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xb7b, 0x1, 0x4}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x4048010) sendto(r0, &(0x7f0000000280)="1ddc3619178af7959d", 0x9, 0x44084, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0, 0x0) 2.456720891s ago: executing program 3 (id=946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r3) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r4, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$l2tp6(0xa, 0x2, 0x73) listen(r6, 0x564) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) 2.283893249s ago: executing program 4 (id=947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x20000081) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c000000"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1019, &(0x7f0000004700)={@remote, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0x4, 0x4, '4', "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"}}}}}, 0x0) 2.026693763s ago: executing program 4 (id=950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c0001800600010000d28d1ff5fa40c57e0000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x200440d8}, 0x4000080) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400000003"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r10, r6, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x3ff, 0x0, 0xff6f}}}}}}}, 0x0) 1.660467622s ago: executing program 2 (id=952): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x79}, @void, @val={0xc, 0x99, {0x6, 0x4c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000091}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400d4}, 0x800) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffff}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0xc008) r2 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000380)="9128c58e9c7edf43cf193f3ef02a2158419e632aa62116be30b0dc5d34424d979c4cb618a422f742bb8e242130b05d2cd1625e8b3cc5fb0d9fd781fbee96c5d426966bd7aaa0ecf042ed4fd1b431e51110fd93e87f4a0b55215cd25e68622b9d73c72acbdb9e6c40d6e23be579d6af3a2dbe560a7f67d15777cb8d79d5577189ebded968b24927a5f7ff28c91bfcf6f386699739d07f9eea1901373a1a2581a214f244148e3041e4649cc31a5789cc352cb62ab283bf9b986860472815a7dc7fce5d", 0xc2, 0x24884, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000005c0)={r2, &(0x7f00000004c0)='syz0\x00', 0x600000, &(0x7f0000000500)={@align=0x10, {0xff8f, 0x7, 0x1, 0x8}}, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x7ff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={0xffffffffffffffff, r3, 0xc, 0x0, @void}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1004001}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8081) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000007c0)={0xffffffffffffffff, 0x1, 0x41, 0x4, @vifc_lcl_addr=@remote, @loopback}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000c00)={r5, &(0x7f0000000b00)='siw\x00', 0x2000, &(0x7f0000000b40)={@align=0x6, {0x3, 0x2, 0x7, 0x2}}, 0x2, &(0x7f0000000b80)={@_ha_fsid}, &(0x7f0000000bc0)=0x1}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000cc0)={0x0, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x28, &(0x7f00000008c0)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @generic={0x7, 0x1, 0x5, 0x8001}], &(0x7f0000000a00)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000a40)=""/186, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, r7, 0x8, &(0x7f0000000c40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0x4, 0x5, 0xdc}, 0x10, r8, r3, 0x4, &(0x7f0000000d00)=[r3, r3], &(0x7f0000000d40)=[{0x5, 0x3, 0x0, 0x6}, {0x2, 0x4, 0xd, 0x5}, {0x4, 0x5, 0x10, 0x4}, {0x0, 0x2, 0xe, 0xc}], 0x10, 0x3}, 0x94) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x4, 0x6, 0x102, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendto(r2, &(0x7f0000000f40)="56c409619e9302e2ff9b8acf4950497f0589f2b3b38ef27571fe754d8df7d7ee4f4ebf74", 0x24, 0xc844, &(0x7f0000000f80)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x3, 0x4, 0x3, 0x2}}, 0x80) write(r9, &(0x7f0000001000)="68d59cef31659d45b83e3f9757e57cc2bf096b2687010db2996be055b566107ba7ac0e4780da8d0e9a259c841d7e2947272846fff65e3281e1eaed195b0103264f4d", 0x42) setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000001080)={0x6, {{0x2, 0x4e24, @private=0xa010100}}}, 0x88) r10 = accept4$phonet_pipe(r3, &(0x7f0000001140), &(0x7f0000001180)=0x10, 0x80000) setsockopt$PNPIPE_HANDLE(r10, 0x113, 0x3, &(0x7f00000011c0)=0xce, 0x4) socket$packet(0x11, 0x3, 0x300) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x74, r11, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x74}}, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000001480)={r1, &(0x7f0000001380)='\x00', 0xc7c8b0d76056ecdf, &(0x7f00000013c0)={@_ha_fsid={[0x6, 0x1]}, {0xea6, 0x3b1d, 0x7f, 0x1}}, 0x0, &(0x7f0000001400)={@_ha_fsid}, &(0x7f0000001440)=0x4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001700)={'erspan0\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x4, 0x8, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x65, 0x0, 0xc, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x24, 0x7a, 0x3, 0x5, [{@loopback, 0x4}, {@multicast2, 0x200}, {@rand_addr=0x64010100, 0x3a0b}, {@local, 0xfffff5fc}]}, @noop, @lsrr={0x83, 0x1f, 0xa2, [@dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, @broadcast]}, @generic={0x86, 0x5, "0b9c4a"}, @lsrr={0x83, 0x7, 0x92, [@rand_addr=0x64010102]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x14, 0x6, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x9, 0x7, 0x4, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xaf6}]}, &(0x7f0000001500)='syzkaller\x00', 0x1, 0xe6, &(0x7f0000001540)=""/230, 0x40f00, 0x0, '\x00', r12, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x4, 0x0, 0xff, 0x8}, 0x10, 0x0, r4, 0x0, &(0x7f0000001780)=[r6, r3, r7, r7], 0x0, 0x10, 0x3}, 0x94) bind$rds(r4, &(0x7f0000001880)={0x2, 0x4e22, @local}, 0x10) 1.659992298s ago: executing program 1 (id=953): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x1, 'veth1_virt_wifi\x00', {}, 0xb27}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000050000000900010073797a300000000044000000030a03000000000000000000050000000900010073797a30000000000900030073797a30000000001800048014000300776c616e30000000000000d2f43d59f6"], 0x8c}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f00000001c0)=[0x1, 0x7, 0x3, 0x0, 0x2, 0x2, 0x81], 0x1ff, 0x0, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) accept4(r4, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000005c0)=0x80, 0x81800) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r8, 0x5450b000) (async) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r8, 0xe326e000) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) (async) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)={0x190, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x168, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x134, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @local}, &(0x7f0000000300)=0xc) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100026bd0bcd9f492f9c42277b03def758e5e505ab078ee4a84abf0000000000000000590238f5a9ec63c4262ecb72943f0023a0dcaec5ddcf4527d9a0a44b0df86c0000aaa6e3f5ffffffffffffff0000", @ANYRESHEX=r10, @ANYBLOB="0800070000000000080007005005b12d"], 0x2c}, 0x1, 0x0, 0x0, 0x4008014}, 0x44880) 1.558250491s ago: executing program 4 (id=954): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x2f}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x4f, 0x4200000) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0xf, 0x8, 0x0, 0xb, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @private=0xa010102}}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x26, 0x0, 0x10}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x58}}, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000680)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) 1.429909972s ago: executing program 1 (id=955): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0x1, 0x3, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) shutdown(r2, 0x1) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellinkprop={0x4c, 0x6c, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendto$inet6(r1, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="2501d73ce0861f01000000000000001f5b48", 0xfffffffffffffe57, 0x40004, 0x0, 0x33ad70e955cb5472) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @loopback, 0xff000000, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x21, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x0, 0xa, [0x8, 0x1d, 0x3, 0x3b, 0x5, 0x16, 0xa6, 0xa, 0x2b, 0x20, 0x29, 0x3, 0x36, 0x15, 0x32, 0x24], 0x0, 0x100, 0x10001}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'veth1\x00', 'batadv0\x00', {0xff}, {0xff}, 0x16, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x0, 0x5, 0x2], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x5, 0x7, 0x2, 0x4, 0x2], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@local, @local, @loopback}, 0xc) r5 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000c80)=""/110, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01000000"], 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r0, 0x37, 0x0, @void}, 0x10) close(0x4) close(r7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.336249597s ago: executing program 3 (id=956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="d0000000190001000000000000000000000000000000000000000000000000010a010102000000000000000000000000000000840f5afb594a9a1e3f00000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f"], 0xd0}, 0x1, 0x0, 0x0, 0x2001}, 0x40) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x5e, 0x8) 1.335958812s ago: executing program 2 (id=957): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x201}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) 1.261638666s ago: executing program 4 (id=958): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x1b, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) listen(r2, 0x400) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = socket(0x22, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000900)=0x47) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_open_procfs$namespace(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$unix(0x1, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) 1.177958374s ago: executing program 0 (id=959): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x4010006cf324f5) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000003140100000000000000000009000280"], 0x60}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x1}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x60, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0x45b5a80e724d815b}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.17772473s ago: executing program 1 (id=960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x20000081) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c000000"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1019, &(0x7f0000004700)={@remote, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0x4, 0x4, '4', "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"}}}}}, 0x0) 1.154658699s ago: executing program 2 (id=961): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 993.488666ms ago: executing program 3 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x77, 0x0, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x7, 0x18}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001180)={{r3, &(0x7f0000000840)='hash\x00', 0x10002, &(0x7f0000000880)={@align, {0x1, 0x367, 0x0, 0x3}}, 0x400, &(0x7f00000008c0), &(0x7f0000000900)=0x80000001}, 0x8, &(0x7f0000001080)=[{0x1, 0x6a4, &(0x7f0000000940)='%}\\\\-{#@@[\x00', &(0x7f0000000980)="4baa75130e3dc4f97fac0893f9c6c09abe7f5726e12d35478f4d6e87a5901a655987602fc7662d14b0809c80662b72161da5da8e23be6b2694328ecc254a0e86fad3a35fa25200bd16ba54f407534949f0133a871ef45859f2aa922df6c6709a9336950a1c0b3dfa4880bbdcbd5202eeb30fd0b673905635df8468a4c2acf8459ff2d08c6442d1571e1ccd6e8f7e7421aa691829b999a7e63b8eeecbd4b5c2ec77197ba414d986952781a87c107c5cc6acb23791132ea6a8314a395b58db39ddd2cbd5949a336b10e7516dc3f695ecb5888af70563c03ac8a753fc78ecb4405760213f1b1c635b06c7", 0xe9, 0x20}, {0x3, 0xf, &(0x7f0000000a80)='hash\x00', &(0x7f0000000ac0)="fed7f6e08083cbfd57e228ce7bb00874c22acdd631c31a9bb71329bc20da66526afb6851f3c96e0e92f67fc0d49d5a2a9567af608233bd6020635a823dbb787d077a4c571b8fedc21b4b669facf30abecb6f2fdfc0a025ce7afeae11", 0x5c, 0x10}, {0x2, 0x80000000, &(0x7f0000000b40)='\x00', &(0x7f0000000b80)="3a1d70e05895a65c726c6a77d2a620a7a9d8af9c6958c771b08cf02599f9bf89f716f04291721ae54f30d18392fa0c4a299bceb234240aa44cb9d8c342d4d343e8db3210047c0a0165c68b73d9772c9f61a11302ba98bc2fd66b58be4d7d7b46625d23bbaaff5758571173c2be820757eff1b4bdfd6163a985f0af2b79259ab0acbf3200ecffbbaa6e63d08d7eda4c423bff9f7e8d4d121a514ae0c984b4a63ecb03975863dfe4f0245dab3076e231a640851304efc13c14dc0ab3923a5c4d93164d5d643525", 0xc6, 0x8}, {0x3, 0x7, &(0x7f0000000c80)='[\x00', &(0x7f0000000cc0)="827326905750dc127b89f37d6f2373d70588f1f02a6a294265c203ec224ea7a783bbdacac77683e81bdd2f3fbae7a43b025b9178c6f7342b354d9cfaa6bc5d7eb259c415ff03cb592f974f8de24a1f26baa315cac7f15f70fe6d2f6de73ee4e053496e9da15f7b531bd8e6b69c9258cb93ce38161440fa4edd730c88768671f58c0231c54747dda2f0866d72f1c2e27139f19255cdf885a564260fd4b41dbe26fa509535fd9723fef658b93ee263c37a010dc0ce1cbda7836db0f5519723ec5a85843e0c7d04a7f27a05", 0xca, 0x2}, {0x2, 0x1, &(0x7f0000000dc0)=')\x00', &(0x7f0000000e00)="310a588206e013", 0x7, 0x10}, {0x3, 0x1, &(0x7f0000000e40)='\x00', &(0x7f0000000e80)="61aaa0b0deb7f3db04418b2fe54a12ff357edb778321beeba57208b4510d7e9e6c6c3851735d278962c91c862addc724aefd0832e5576446036744ceecaef26306728a7138661d03a533fbadeaf1e6aac3167bcd62c510cda71ceb0ea832ef795045a06b4389baa00dbf1d67", 0x6c, 0x8}, {0x1, 0xffffffff, &(0x7f0000000f00)='}$:,/)\x00', &(0x7f0000000f40)="db9ef6e446fab8f71efee2e77c6af87b896cbe3b16177f0b5e0585a15120069abfd1cc4a582200fd06f8bb27054ed550a8a94eceac0077b25a182397c5d2b1239fae9106628b37341032b366f87f85e63367bd8e753357ee68d193fb1e8938614774ba9d112775c88b1f38b473362ac2ffed469a065977c2bcf880e01047adeddbaf7e368028175cdc79c51496b4dbbca77b1b7921ca89622c11fc3df5809d1378d78662164b9fdef8", 0xa9, 0xa}, {0x2, 0x6, &(0x7f0000001000)='hash\x00', &(0x7f0000001040)="e01f7f4978b34b6518f86b5898bc691deaa7d21d3ed78b579a9a5b311c0af5024236cbd56ccb206311ac3fb59e8f6acd73296d350f", 0x35, 0x2}]}) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x23, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b4e, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x94}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @generic={0x1, 0x9, 0x9, 0x4, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x85c, 0xe5, &(0x7f0000000740)=""/229, 0x41100, 0x2, '\x00', r1, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x5, 0x4, 0xff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001240)=[{0x1, 0x1, 0xb, 0x3}, {0x1, 0x3, 0x3, 0x2}], 0x10, 0x9}, 0x94) 988.002738ms ago: executing program 1 (id=963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 835.723995ms ago: executing program 2 (id=964): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000eb1"], 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f00000000c0)) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) close(r0) 641.695352ms ago: executing program 1 (id=965): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) 479.109023ms ago: executing program 1 (id=966): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}, [@RTA_NH_ID={0x8, 0x1e, 0xfffffff8}, @RTA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 412.927831ms ago: executing program 2 (id=967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000b62f000011"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0x29) (async) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10080080}, 0x40080) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) (async, rerun: 64) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000240)) (rerun: 64) 334.611135ms ago: executing program 4 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0xfff, 0x4, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @private=0xa010102, {[@ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0xfff, 0x4, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @private=0xa010102, {[@ra={0x94, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xc}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdfa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xdc, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x255, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "af49ec3d6e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2eaa52a5eb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3f0b2ab11db8c53630dca25b64"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "96687b2ee4b6"}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x40081}, 0x80800) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1ff, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x24040887) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r3, 0x200, 0x70bd2b, 0x4, {{}, {@void, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40804}, 0x800) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x20, 0x5, [0xd8e, 0x91e, 0x4, 0x8000, 0x3]}, &(0x7f0000000740)=0x12) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)={0x0, 0x20, 0x5, [0xd8e, 0x91e, 0x4, 0x8000, 0x3]}, &(0x7f0000000740)=0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000840)={r4, 0xb8, &(0x7f0000000780)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @private2, 0x6}, @in6={0xa, 0x4e23, 0xb510, @ipv4={'\x00', '\xff\xff', @empty}, 0x447e}, @in6={0xa, 0x4e21, 0x8, @empty, 0x1}, @in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x2}, @in6={0xa, 0x4e21, 0x6, @empty, 0x80000001}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}]}, &(0x7f0000000880)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000840)={r4, 0xb8, &(0x7f0000000780)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @private2, 0x6}, @in6={0xa, 0x4e23, 0xb510, @ipv4={'\x00', '\xff\xff', @empty}, 0x447e}, @in6={0xa, 0x4e21, 0x8, @empty, 0x1}, @in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x2}, @in6={0xa, 0x4e21, 0x6, @empty, 0x80000001}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}]}, &(0x7f0000000880)=0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x40}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xf}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x72f6}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x40000) sendto(r0, &(0x7f0000000a40)="99947ace3d4a2162b2360ef2b53b32cd81b4163da922ab5801b784c168cbaaa251e1718e0069c733625acd36f037a78cbf1fefd79e0c3edade406b9c8d88170179381c7a1d666555d464ab0eee5391fe5390591972b74c4e47bb34c9e451b18b70141d62fd20182af19a2b25e09c93fb153cea3b264ee3e61d95351124812efd2ce65d53c7b03c116a5686432b3cdc09ea74d35b6061c7922b263db1235adc8dfcc09382bcde251eb204c392509d7d721ffdcefdc9aa04bfd1d7e92358bf3dc644a5d58a66656ec9f81d1a5d571300071bfae4350dc1b8ef8c085746c4251b886a2d266093e27bf43910", 0xea, 0x801, &(0x7f0000000b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) (async) sendto(r0, &(0x7f0000000a40)="99947ace3d4a2162b2360ef2b53b32cd81b4163da922ab5801b784c168cbaaa251e1718e0069c733625acd36f037a78cbf1fefd79e0c3edade406b9c8d88170179381c7a1d666555d464ab0eee5391fe5390591972b74c4e47bb34c9e451b18b70141d62fd20182af19a2b25e09c93fb153cea3b264ee3e61d95351124812efd2ce65d53c7b03c116a5686432b3cdc09ea74d35b6061c7922b263db1235adc8dfcc09382bcde251eb204c392509d7d721ffdcefdc9aa04bfd1d7e92358bf3dc644a5d58a66656ec9f81d1a5d571300071bfae4350dc1b8ef8c085746c4251b886a2d266093e27bf43910", 0xea, 0x801, &(0x7f0000000b40)=@vsock={0x28, 0x0, 0x2710}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r7) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'vxcan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000c40)={r5, 0x5}, &(0x7f0000000c80)=0x8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f00)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r10, &(0x7f0000000fc0)={&(0x7f0000000e00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000084}, 0xd0) (async) sendmsg$NFC_CMD_GET_DEVICE(r10, &(0x7f0000000fc0)={&(0x7f0000000e00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000084}, 0xd0) socket$tipc(0x1e, 0x0, 0x0) (async) r15 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r15, 0x10f, 0x80, &(0x7f0000001000)=0x401, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4110}, 0x8000) (async) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4110}, 0x8000) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0xb7bb5637c4de1d8}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xf8, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x296}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000000, 0x6]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xff, 0xb, 0x6]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x214c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5b3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x309}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x142}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x448}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x10040011) 117.453638ms ago: executing program 0 (id=969): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xb7b, 0x1, 0x4}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x4048010) sendto(r0, &(0x7f0000000280)="1ddc3619178af7959d", 0x9, 0x44084, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0, 0x0) 14.180695ms ago: executing program 2 (id=970): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind(r4, 0x0, 0x0) listen(r3, 0x7df00000) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="44c394f305916c4516999da288a8", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x7f, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=971): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x7ff, 0x5, 0x9}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xffff}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 79.516424][ T5812] cgroup: Unknown subsys name 'net' [ 79.613017][ T5812] cgroup: Unknown subsys name 'cpuset' [ 79.623338][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.284351][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.488001][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.498638][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.509514][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.527958][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.536642][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.540770][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.545041][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.555650][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.559902][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.574947][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.576575][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.583745][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.590653][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.600580][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.605160][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.613672][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.619490][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.629818][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.637319][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.641133][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.650201][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.663540][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.666491][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.671811][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.691141][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.344648][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 84.453864][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 84.482208][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 84.553060][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 84.682953][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.691940][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.699640][ T5825] bridge_slave_0: entered allmulticast mode [ 84.707852][ T5825] bridge_slave_0: entered promiscuous mode [ 84.733920][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.778443][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.785842][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.793395][ T5825] bridge_slave_1: entered allmulticast mode [ 84.800774][ T5825] bridge_slave_1: entered promiscuous mode [ 84.842514][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.850141][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.857656][ T5828] bridge_slave_0: entered allmulticast mode [ 84.865419][ T5828] bridge_slave_0: entered promiscuous mode [ 84.912506][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.920081][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.927617][ T5824] bridge_slave_0: entered allmulticast mode [ 84.935481][ T5824] bridge_slave_0: entered promiscuous mode [ 84.943105][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.950519][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.958096][ T5828] bridge_slave_1: entered allmulticast mode [ 84.965922][ T5828] bridge_slave_1: entered promiscuous mode [ 84.994573][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.002122][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.009431][ T5824] bridge_slave_1: entered allmulticast mode [ 85.017007][ T5824] bridge_slave_1: entered promiscuous mode [ 85.038699][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.093555][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.140598][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.160970][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.168215][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.175599][ T5827] bridge_slave_0: entered allmulticast mode [ 85.182840][ T5827] bridge_slave_0: entered promiscuous mode [ 85.202785][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.214607][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.237158][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.244798][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.252392][ T5827] bridge_slave_1: entered allmulticast mode [ 85.260604][ T5827] bridge_slave_1: entered promiscuous mode [ 85.267838][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.275145][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.283211][ T5826] bridge_slave_0: entered allmulticast mode [ 85.290626][ T5826] bridge_slave_0: entered promiscuous mode [ 85.300287][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.334762][ T5825] team0: Port device team_slave_0 added [ 85.352605][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.360341][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.367635][ T5826] bridge_slave_1: entered allmulticast mode [ 85.375346][ T5826] bridge_slave_1: entered promiscuous mode [ 85.394127][ T5828] team0: Port device team_slave_0 added [ 85.402756][ T5825] team0: Port device team_slave_1 added [ 85.438470][ T5828] team0: Port device team_slave_1 added [ 85.458238][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.480365][ T5824] team0: Port device team_slave_0 added [ 85.508575][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.521053][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.533790][ T5824] team0: Port device team_slave_1 added [ 85.551572][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.558831][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.585343][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.609859][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.632052][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.639305][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.666206][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.679007][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.686638][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.714051][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.714133][ T5836] Bluetooth: hci2: command tx timeout [ 85.731399][ T5840] Bluetooth: hci0: command tx timeout [ 85.737571][ T51] Bluetooth: hci3: command tx timeout [ 85.772412][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.779739][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.805840][ T51] Bluetooth: hci1: command tx timeout [ 85.806320][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.811785][ T5836] Bluetooth: hci4: command tx timeout [ 85.837576][ T5827] team0: Port device team_slave_0 added [ 85.854353][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.861979][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.888640][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.914618][ T5827] team0: Port device team_slave_1 added [ 85.922534][ T5826] team0: Port device team_slave_0 added [ 85.928869][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.936230][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.962765][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.008098][ T5826] team0: Port device team_slave_1 added [ 86.037573][ T5828] hsr_slave_0: entered promiscuous mode [ 86.044069][ T5828] hsr_slave_1: entered promiscuous mode [ 86.089936][ T5825] hsr_slave_0: entered promiscuous mode [ 86.096487][ T5825] hsr_slave_1: entered promiscuous mode [ 86.103097][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 86.108900][ T5825] Cannot create hsr debugfs directory [ 86.117772][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.124908][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.152797][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.166221][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.173555][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.200071][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.243987][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.251678][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.278134][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.296225][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.303461][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.330580][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.383835][ T5824] hsr_slave_0: entered promiscuous mode [ 86.390828][ T5824] hsr_slave_1: entered promiscuous mode [ 86.397287][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 86.403696][ T5824] Cannot create hsr debugfs directory [ 86.558186][ T5827] hsr_slave_0: entered promiscuous mode [ 86.565018][ T5827] hsr_slave_1: entered promiscuous mode [ 86.571722][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 86.577641][ T5827] Cannot create hsr debugfs directory [ 86.637379][ T5826] hsr_slave_0: entered promiscuous mode [ 86.644637][ T5826] hsr_slave_1: entered promiscuous mode [ 86.651200][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 86.657238][ T5826] Cannot create hsr debugfs directory [ 87.084448][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.099585][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.107746][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.119795][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.128025][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.138757][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.146996][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.162435][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.319883][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.339716][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.371442][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.386630][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.418765][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.432906][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.467376][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.482123][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.567688][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.577842][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.587766][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.598086][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.606646][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.616787][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.625495][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.640175][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.731635][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.762479][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.772850][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.782616][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.795390][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.799438][ T51] Bluetooth: hci3: command tx timeout [ 87.808297][ T5840] Bluetooth: hci0: command tx timeout [ 87.815102][ T5836] Bluetooth: hci2: command tx timeout [ 87.823768][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.835086][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.851896][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.862031][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.870165][ T51] Bluetooth: hci1: command tx timeout [ 87.876365][ T5836] Bluetooth: hci4: command tx timeout [ 87.927948][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.972757][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.981388][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.013176][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.025669][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.046486][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.056976][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.065831][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.075616][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.087457][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.095007][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.113715][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.125415][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.213497][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.287324][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.303512][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.364961][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.372507][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.403602][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.411070][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.438496][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.468942][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.476308][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.527688][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.555907][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.563448][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.611633][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.638809][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.677712][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.684957][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.703186][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.724286][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.731707][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.750885][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.775243][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.782609][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.826747][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.834099][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.106871][ T5825] veth0_vlan: entered promiscuous mode [ 89.163968][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.198875][ T5825] veth1_vlan: entered promiscuous mode [ 89.419657][ T5825] veth0_macvtap: entered promiscuous mode [ 89.465471][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.483692][ T5825] veth1_macvtap: entered promiscuous mode [ 89.577192][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.628462][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.689549][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.702638][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.742924][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.753099][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.802507][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.825435][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.879477][ T5840] Bluetooth: hci0: command tx timeout [ 89.885166][ T51] Bluetooth: hci3: command tx timeout [ 89.889296][ T5836] Bluetooth: hci2: command tx timeout [ 89.937069][ T5827] veth0_vlan: entered promiscuous mode [ 89.951083][ T5840] Bluetooth: hci1: command tx timeout [ 89.957050][ T5836] Bluetooth: hci4: command tx timeout [ 90.003364][ T5828] veth0_vlan: entered promiscuous mode [ 90.036107][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.036698][ T5827] veth1_vlan: entered promiscuous mode [ 90.055084][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.068887][ T5826] veth0_vlan: entered promiscuous mode [ 90.133335][ T5828] veth1_vlan: entered promiscuous mode [ 90.143863][ T5826] veth1_vlan: entered promiscuous mode [ 90.155037][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.163210][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.242838][ T5827] veth0_macvtap: entered promiscuous mode [ 90.266561][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.268795][ T5824] veth0_vlan: entered promiscuous mode [ 90.301593][ T5827] veth1_macvtap: entered promiscuous mode [ 90.324070][ T5828] veth0_macvtap: entered promiscuous mode [ 90.337834][ T5824] veth1_vlan: entered promiscuous mode [ 90.412298][ T5946] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.422671][ T5828] veth1_macvtap: entered promiscuous mode [ 90.434363][ T5826] veth0_macvtap: entered promiscuous mode [ 90.447494][ T5946] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.457414][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.475237][ T5826] veth1_macvtap: entered promiscuous mode [ 90.516043][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.575641][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.585441][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.596567][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.640163][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.657214][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.670817][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.696815][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.713190][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.723447][ T5824] veth0_macvtap: entered promiscuous mode [ 90.747632][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.764377][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.798926][ T5824] veth1_macvtap: entered promiscuous mode [ 90.815137][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.828420][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.847905][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.877761][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.891261][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.937860][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.964556][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.987414][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.017255][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.058248][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.118777][ T1098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.120472][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.134490][ T1098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.162769][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.184125][ T1098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.215927][ T1098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.266061][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.276389][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.444261][ T5967] Zero length message leads to an empty skb [ 91.458701][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.479640][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.545862][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.578349][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.695594][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.726138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.894356][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.941265][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.949739][ T5840] Bluetooth: hci2: command tx timeout [ 91.950019][ T51] Bluetooth: hci0: command tx timeout [ 91.956111][ T5836] Bluetooth: hci3: command tx timeout [ 92.006807][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.027157][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.036122][ T5836] Bluetooth: hci4: command tx timeout [ 92.043549][ T5840] Bluetooth: hci1: command tx timeout [ 92.281237][ T1218] cfg80211: failed to load regulatory.db [ 92.668760][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 92.702732][ T5992] bridge1: entered promiscuous mode [ 92.728337][ T5992] bridge1: entered allmulticast mode [ 92.753567][ T5999] syz.2.19 uses old SIOCAX25GETINFO [ 92.780124][ T5992] team0: Port device bridge1 added [ 92.896569][ T5916] IPVS: starting estimator thread 0... [ 92.938276][ T6001] IPVS: sed: FWM 3 0x00000003 - no destination available [ 93.020247][ T6005] IPVS: using max 25 ests per chain, 60000 per kthread [ 95.298469][ T6050] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.754820][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 95.758672][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 95.764208][ T6077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.787496][ T6058] syz.4.33 uses obsolete (PF_INET,SOCK_PACKET) [ 95.800202][ T6058] netlink: 52 bytes leftover after parsing attributes in process `syz.4.33'. [ 95.823002][ T5942] IPVS: starting estimator thread 0... [ 95.919562][ T6079] IPVS: using max 29 ests per chain, 69600 per kthread [ 96.284686][ T6091] netlink: 'syz.3.40': attribute type 30 has an invalid length. [ 96.345083][ T6097] netlink: 'syz.4.41': attribute type 16 has an invalid length. [ 96.385024][ T6097] netlink: 'syz.4.41': attribute type 3 has an invalid length. [ 96.393222][ T6097] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.41'. [ 96.548260][ T6109] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 96.907137][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'. [ 96.937313][ T6116] syz_tun: entered allmulticast mode [ 97.092044][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 97.129503][ T6122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.328184][ T5916] IPVS: starting estimator thread 0... [ 97.340854][ T6129] IPVS: sed: FWM 3 0x00000003 - no destination available [ 97.488523][ T6131] IPVS: using max 23 ests per chain, 55200 per kthread [ 97.663176][ T6142] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 97.890425][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 97.901296][ T6151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.938013][ T6150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 98.013157][ T6155] netlink: 'syz.2.54': attribute type 2 has an invalid length. [ 98.057688][ T6155] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 98.070633][ T6155] netlink: 152 bytes leftover after parsing attributes in process `syz.2.54'. [ 98.480857][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 98.510893][ T6173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.651722][ T6183] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 98.778020][ T6189] IPVS: sed: FWM 3 0x00000003 - no destination available [ 99.022232][ T6193] bridge1: entered promiscuous mode [ 99.303475][ T6211] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 99.325322][ T6210] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 100.193673][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.281406][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.364531][ T6247] netlink: 'syz.4.78': attribute type 10 has an invalid length. [ 100.376801][ T6247] team0: Device ipvlan1 failed to register rx_handler [ 100.453630][ T6227] Unsupported ieee802154 address type: 0 [ 100.606629][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.730012][ T6253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.741070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.773279][ T6254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.782739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.830338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.217954][ T6274] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 101.440409][ T6283] tipc: Started in network mode [ 101.463295][ T6283] tipc: Node identity ac14140f, cluster identity 4711 [ 101.489632][ T6283] tipc: New replicast peer: 0.0.0.0 [ 101.502536][ T6283] tipc: Enabled bearer , priority 10 [ 102.368532][ T6318] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.395006][ T6318] netlink: 'syz.4.96': attribute type 10 has an invalid length. [ 102.498233][ T6312] __nla_validate_parse: 7 callbacks suppressed [ 102.498255][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.95'. [ 102.583572][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.593055][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.607344][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 102.629733][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.637106][ T6318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.645758][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.653037][ T6318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.678380][ T6318] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 102.688178][ T6322] bpq0: entered promiscuous mode [ 102.698631][ T6322] bpq0: entered allmulticast mode [ 102.708353][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 102.709901][ T42] tipc: Node number set to 2886997007 [ 102.951288][ T6334] syzkaller1: entered promiscuous mode [ 102.971672][ T6334] syzkaller1: entered allmulticast mode [ 102.985788][ T6336] lo speed is unknown, defaulting to 1000 [ 102.992326][ T6336] lo speed is unknown, defaulting to 1000 [ 103.003060][ T6336] lo speed is unknown, defaulting to 1000 [ 103.017562][ T6336] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.050723][ T6336] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.132801][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 103.238380][ T6336] lo speed is unknown, defaulting to 1000 [ 103.297001][ T6336] lo speed is unknown, defaulting to 1000 [ 103.325752][ T6336] lo speed is unknown, defaulting to 1000 [ 103.391411][ T6336] lo speed is unknown, defaulting to 1000 [ 103.463256][ T6336] lo speed is unknown, defaulting to 1000 [ 103.499794][ T6336] lo speed is unknown, defaulting to 1000 [ 103.540032][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 103.579600][ T6354] net_ratelimit: 8 callbacks suppressed [ 103.579642][ T6354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.798210][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.867917][ T6363] syzkaller0: entered promiscuous mode [ 103.894983][ T6363] syzkaller0: entered allmulticast mode [ 103.949406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.958176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.342941][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 104.357130][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.430445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.697303][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 104.707912][ T6399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.085239][ T6408] lo speed is unknown, defaulting to 1000 [ 105.389457][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.480401][ T6393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.549566][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.983941][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 105.995237][ T6434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.300953][ T6448] netlink: 'syz.1.137': attribute type 2 has an invalid length. [ 106.416722][ T6453] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 106.471168][ T6448] : entered promiscuous mode [ 106.710771][ T6465] Bluetooth: MGMT ver 1.23 [ 106.782961][ T6469] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 106.808345][ T6469] netlink: 'syz.1.144': attribute type 21 has an invalid length. [ 106.824261][ T6469] netlink: 128 bytes leftover after parsing attributes in process `syz.1.144'. [ 106.835081][ T6469] netlink: 3 bytes leftover after parsing attributes in process `syz.1.144'. [ 107.032097][ T6477] ip6tnl1: entered allmulticast mode [ 107.917325][ T6512] __nla_validate_parse: 5 callbacks suppressed [ 107.917345][ T6512] netlink: 63 bytes leftover after parsing attributes in process `syz.0.158'. [ 108.057620][ T6520] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 108.160934][ T6524] netlink: 'syz.0.161': attribute type 11 has an invalid length. [ 108.337424][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.576902][ T6538] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 108.615532][ T5916] net_ratelimit: 9 callbacks suppressed [ 108.616516][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.623428][ T6546] netlink: 63 bytes leftover after parsing attributes in process `syz.2.171'. [ 108.678846][ T6538] bond1: entered promiscuous mode [ 108.684869][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.718688][ T6549] lo speed is unknown, defaulting to 1000 [ 109.549364][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.557207][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.724036][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.828405][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.846193][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.057718][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 110.075750][ T6604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.168202][ T1098] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.189374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.197963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.202962][ T1098] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.327915][ T1098] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.381091][ T1098] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.576059][ T6618] netlink: 72 bytes leftover after parsing attributes in process `syz.0.181'. [ 110.627859][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 110.656003][ T6621] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.183'. [ 110.661920][ T6626] netlink: 36 bytes leftover after parsing attributes in process `syz.0.181'. [ 110.751606][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.162653][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 111.198879][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 111.235168][ T6646] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 111.483432][ T6652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.615051][ T6656] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.632550][ T6600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.651735][ T6656] netlink: 'syz.4.195': attribute type 6 has an invalid length. [ 111.666132][ T6656] netlink: 'syz.4.195': attribute type 1 has an invalid length. [ 111.686700][ T6656] block nbd0: Unsupported socket: should be TCP or UNIX. [ 111.789547][ T6603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.986153][ T6646] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 112.050900][ T6662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.386678][ T6680] lo: entered allmulticast mode [ 112.595090][ T6662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.301748][ T6662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.355349][ T6711] netlink: 'syz.2.209': attribute type 8 has an invalid length. [ 113.576401][ T6662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.743356][ T6726] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 113.757498][ T6699] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 113.773036][ T6728] __nla_validate_parse: 12 callbacks suppressed [ 113.773060][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 113.802804][ T6726] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 113.833204][ T6726] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 113.851733][ T6730] net_ratelimit: 8 callbacks suppressed [ 113.851755][ T6730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.871665][ T6603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.893922][ T6732] netlink: 64 bytes leftover after parsing attributes in process `syz.2.215'. [ 113.895899][ T6730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.908762][ T6726] netlink: 'syz.1.213': attribute type 21 has an invalid length. [ 113.966082][ T6726] netlink: 128 bytes leftover after parsing attributes in process `syz.1.213'. [ 113.990963][ T6726] netlink: 'syz.1.213': attribute type 4 has an invalid length. [ 114.019198][ T6726] netlink: 'syz.1.213': attribute type 3 has an invalid length. [ 114.029988][ T6735] netlink: 112 bytes leftover after parsing attributes in process `syz.2.215'. [ 114.041406][ T6726] netlink: 3 bytes leftover after parsing attributes in process `syz.1.213'. [ 114.099918][ T1098] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.204788][ T1098] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.288688][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.329719][ T6745] IPVS: sed: FWM 3 0x00000003 - no destination available [ 114.339766][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.348504][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.437185][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.519810][ T6749] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 114.613243][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 114.646456][ T6760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.865895][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.875424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.908077][ T6765] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 114.920319][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.132549][ T6775] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 115.172706][ T6778] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.224'. [ 115.190655][ T6782] netlink: 63 bytes leftover after parsing attributes in process `syz.3.226'. [ 115.194350][ T6775] netlink: 2 bytes leftover after parsing attributes in process `syz.1.223'. [ 115.276905][ T6775] hsr0: entered promiscuous mode [ 115.305439][ T6775] bridge0: port 3(hsr0) entered blocking state [ 115.348861][ T6775] bridge0: port 3(hsr0) entered disabled state [ 115.393903][ T6775] hsr0: entered allmulticast mode [ 115.429341][ T6775] hsr_slave_0: entered allmulticast mode [ 115.521307][ T6775] hsr_slave_1: entered allmulticast mode [ 115.555385][ T6775] bridge0: port 3(hsr0) entered blocking state [ 115.561993][ T6775] bridge0: port 3(hsr0) entered forwarding state [ 115.603403][ T6797] netlink: 'syz.2.230': attribute type 4 has an invalid length. [ 115.795041][ T5916] lo speed is unknown, defaulting to 1000 [ 115.811615][ T6798] lo speed is unknown, defaulting to 1000 [ 115.828622][ T5916] syz2: Port: 1 Link DOWN [ 115.865772][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 116.342855][ T6812] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 116.657615][ T6842] netlink: 'syz.3.239': attribute type 21 has an invalid length. [ 117.152296][ T6857] xt_hashlimit: size too large, truncated to 1048576 [ 117.187800][ T6857] xt_hashlimit: max too large, truncated to 1048576 [ 117.315141][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.379358][ T6863] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.451711][ T6876] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 118.505508][ T6909] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 118.700138][ T6914] warning: `syz.1.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.882300][ T6916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.890244][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.038316][ T6920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.072303][ T6587] net_ratelimit: 11 callbacks suppressed [ 119.072333][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.149642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.161171][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.188288][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.336944][ T6912] syz.2.257 (6912) used greatest stack depth: 16064 bytes left [ 119.360384][ T6936] vlan2: entered promiscuous mode [ 119.365596][ T6936] bridge0: entered promiscuous mode [ 119.388895][ T6934] __nla_validate_parse: 12 callbacks suppressed [ 119.388917][ T6934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.260'. [ 119.448914][ T6945] validate_nla: 7 callbacks suppressed [ 119.448934][ T6945] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 119.466317][ T6945] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 119.475951][ T6945] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 119.498643][ T6940] lo speed is unknown, defaulting to 1000 [ 119.549411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.558016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.651302][ T6953] netlink: 'syz.2.266': attribute type 21 has an invalid length. [ 119.668374][ T6953] netlink: 128 bytes leftover after parsing attributes in process `syz.2.266'. [ 119.718792][ T6953] netlink: 'syz.2.266': attribute type 4 has an invalid length. [ 119.736580][ T6953] netlink: 'syz.2.266': attribute type 3 has an invalid length. [ 119.745681][ T6953] netlink: 3 bytes leftover after parsing attributes in process `syz.2.266'. [ 120.134122][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.559162][ T6986] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 121.164491][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.180779][ T6986] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 121.351858][ T6999] m1Ie5nè‹Ò: entered promiscuous mode [ 121.458958][ T7014] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 121.495739][ T7014] netlink: 224 bytes leftover after parsing attributes in process `syz.2.282'. [ 121.716272][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.190695][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.207016][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.539559][ T7052] IPVS: Error connecting to the multicast addr [ 122.710235][ T7058] lo speed is unknown, defaulting to 1000 [ 122.783096][ T7063] ip6tnl0: Caught tx_queue_len zero misconfig [ 123.283413][ T7076] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 123.449552][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 123.601083][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 123.643554][ T7102] netlink: 92 bytes leftover after parsing attributes in process `syz.1.306'. [ 123.697379][ T7105] netlink: 104 bytes leftover after parsing attributes in process `syz.4.303'. [ 123.698921][ T7086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.903522][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 123.914333][ T7112] Bluetooth: MGMT ver 1.23 [ 124.035813][ T7096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.066304][ T7096] bond1: (slave bond2): Enslaving as an active interface with an up link [ 124.104170][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 124.128502][ T7117] net_ratelimit: 3 callbacks suppressed [ 124.128532][ T7117] openvswitch: netlink: Flow key attr not present in new flow. [ 124.142977][ T7100] bond1 (unregistering): (slave bond2): Releasing backup interface [ 124.170456][ T7100] bond1 (unregistering): Released all slaves [ 124.272485][ T6603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.685347][ T7131] geneve2: entered promiscuous mode [ 124.695023][ T7131] geneve2: entered allmulticast mode [ 124.983683][ T7124] lo speed is unknown, defaulting to 1000 [ 125.232147][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.311947][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.780007][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'. [ 125.789434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.798180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.893337][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'. [ 125.968669][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 126.352312][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.929430][ T7215] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 127.101896][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.328'. [ 127.409846][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.546842][ T7185] lec:lec_atm_close: lec0: Shut down! [ 127.752389][ T7238] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 127.794176][ T7238] netlink: 224 bytes leftover after parsing attributes in process `syz.2.332'. [ 128.271381][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.436292][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.537669][ T7266] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 128.549499][ T7266] netlink: 96 bytes leftover after parsing attributes in process `syz.1.337'. [ 128.566754][ T7266] netlink: 658 bytes leftover after parsing attributes in process `syz.1.337'. [ 128.587394][ T7266] netlink: 1 bytes leftover after parsing attributes in process `syz.1.337'. [ 128.733648][ T7275] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.815244][ T7272] tunl0: Caught tx_queue_len zero misconfig [ 128.913347][ T7286] netlink: 64 bytes leftover after parsing attributes in process `syz.1.342'. [ 129.391602][ T6587] net_ratelimit: 2 callbacks suppressed [ 129.391625][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.480099][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.560275][ T6603] lo speed is unknown, defaulting to 1000 [ 129.892163][ T7310] netlink: 'syz.4.345': attribute type 32 has an invalid length. [ 130.094741][ T5836] Bluetooth: hci3: link tx timeout [ 130.108108][ T5836] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.277563][ T7321] wg1: entered allmulticast mode [ 130.513306][ T6603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.750565][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 131.197520][ T7359] __nla_validate_parse: 2 callbacks suppressed [ 131.197550][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 131.238688][ T7359] netlink: 'syz.0.358': attribute type 10 has an invalid length. [ 131.294180][ T7359] team0: Device veth1_macvtap failed to register rx_handler [ 131.364458][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.549666][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.734269][ T7379] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.364'. [ 132.012460][ T7394] sctp: [Deprecated]: syz.0.368 (pid 7394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.012460][ T7394] Use struct sctp_sack_info instead [ 132.029346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.038457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.090573][ T7396] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 132.112327][ T5489] lec:lec_start_xmit: lec0:No lecd attached [ 132.136405][ T5836] Bluetooth: hci3: link tx timeout [ 132.141923][ T5836] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.151735][ T5836] Bluetooth: hci3: link tx timeout [ 132.158231][ T5836] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.189225][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 132.264326][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 132.399608][ T7402] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 132.410248][ T7405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.439565][ T6598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.445241][ T7402] netlink: 15918 bytes leftover after parsing attributes in process `syz.3.370'. [ 132.594532][ T6603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.884077][ T7424] netlink: 128 bytes leftover after parsing attributes in process `syz.4.377'. [ 133.048720][ T7431] ipvlan2: entered promiscuous mode [ 133.221647][ T7437] netlink: 'syz.1.379': attribute type 21 has an invalid length. [ 133.244043][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.250992][ T7437] netlink: 128 bytes leftover after parsing attributes in process `syz.1.379'. [ 133.279284][ T7437] netlink: 'syz.1.379': attribute type 5 has an invalid length. [ 133.289355][ T7437] netlink: 'syz.1.379': attribute type 6 has an invalid length. [ 133.325004][ T7437] netlink: 3 bytes leftover after parsing attributes in process `syz.1.379'. [ 133.371510][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.530207][ T7453] netlink: 63 bytes leftover after parsing attributes in process `syz.1.385'. [ 133.696152][ T7459] netlink: 'syz.4.384': attribute type 3 has an invalid length. [ 133.722814][ T7459] netlink: 'syz.4.384': attribute type 3 has an invalid length. [ 134.354646][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 134.387471][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'. [ 134.677358][ T6587] net_ratelimit: 1 callbacks suppressed [ 134.677378][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.150478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.159375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.470615][ T6598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.568852][ T7517] bridge_slave_0: left allmulticast mode [ 135.579983][ T7517] bridge_slave_0: left promiscuous mode [ 135.594303][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.622570][ T7517] bridge_slave_1: left allmulticast mode [ 135.636919][ T7517] bridge_slave_1: left promiscuous mode [ 135.648688][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.683062][ T7517] bond0: (slave bond_slave_0): Releasing backup interface [ 135.706378][ T7517] bond0: (slave bond_slave_1): Releasing backup interface [ 135.719529][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.754567][ T7517] team0: Port device team_slave_0 removed [ 135.774476][ T7517] team0: Port device team_slave_1 removed [ 135.787754][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.799920][ T7517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.808317][ T7517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.825540][ T7519] team0: Mode changed to "activebackup" [ 135.836263][ T7499] lo speed is unknown, defaulting to 1000 [ 135.852899][ T7529] vti0: entered promiscuous mode [ 135.857924][ T7529] vti0: entered allmulticast mode [ 136.367450][ T7544] vlan2: entered allmulticast mode [ 136.396219][ T7544] bridge_slave_0: entered allmulticast mode [ 136.738556][ T7567] ipvlan2: entered promiscuous mode [ 136.745513][ T7568] __nla_validate_parse: 3 callbacks suppressed [ 136.745534][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 136.785107][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.848104][ T7568] netlink: 348 bytes leftover after parsing attributes in process `syz.1.411'. [ 136.854442][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 136.885616][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 136.904647][ T7578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.413'. [ 136.917241][ T7568] netlink: 348 bytes leftover after parsing attributes in process `syz.1.411'. [ 136.928629][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 136.939357][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 136.953091][ T7578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.413'. [ 137.239575][ T7585] IPVS: Error connecting to the multicast addr [ 137.309088][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 137.318581][ C0] lec:lec_tx_timeout: lec0 [ 137.323431][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 137.517953][ T7600] netlink: 'syz.2.419': attribute type 3 has an invalid length. [ 137.544249][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 137.567801][ T7594] lo speed is unknown, defaulting to 1000 [ 137.790202][ T6587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.805377][ T7616] syz.4.423: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.862083][ T7616] CPU: 1 UID: 0 PID: 7616 Comm: syz.4.423 Not tainted syzkaller #0 PREEMPT(full) [ 137.862115][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.862127][ T7616] Call Trace: [ 137.862135][ T7616] [ 137.862145][ T7616] dump_stack_lvl+0xe8/0x150 [ 137.862183][ T7616] warn_alloc+0x249/0x340 [ 137.862217][ T7616] ? stack_trace_save+0xa9/0x100 [ 137.862246][ T7616] ? __pfx_warn_alloc+0x10/0x10 [ 137.862288][ T7616] ? kasan_save_track+0x4f/0x80 [ 137.862317][ T7616] ? kasan_save_track+0x3e/0x80 [ 137.862344][ T7616] ? __kasan_kmalloc+0x93/0xb0 [ 137.862362][ T7616] ? __kmalloc_cache_noprof+0x31c/0x660 [ 137.862392][ T7616] ? xskq_create+0x56/0x170 [ 137.862424][ T7616] ? xsk_setsockopt+0x54c/0x990 [ 137.862442][ T7616] ? do_sock_setsockopt+0x17c/0x1b0 [ 137.862471][ T7616] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 137.862500][ T7616] ? do_syscall_64+0x15f/0xf80 [ 137.862529][ T7616] __vmalloc_node_range_noprof+0x132/0x1730 [ 137.862599][ T7616] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.862636][ T7616] ? __kasan_kmalloc+0x93/0xb0 [ 137.862662][ T7616] vmalloc_user_noprof+0xad/0xe0 [ 137.862694][ T7616] ? xskq_create+0xbf/0x170 [ 137.862717][ T7616] xskq_create+0xbf/0x170 [ 137.862744][ T7616] xsk_init_queue+0x8a/0xe0 [ 137.862768][ T7616] xsk_setsockopt+0x54c/0x990 [ 137.862793][ T7616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.862813][ T7616] ? __pfx_aa_sk_perm+0x10/0x10 [ 137.862845][ T7616] ? aa_sock_opt_perm+0xff/0x1a0 [ 137.862877][ T7616] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 137.862909][ T7616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.862932][ T7616] do_sock_setsockopt+0x17c/0x1b0 [ 137.862969][ T7616] __x64_sys_setsockopt+0x13d/0x1b0 [ 137.863000][ T7616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.863022][ T7616] do_syscall_64+0x15f/0xf80 [ 137.863045][ T7616] ? trace_irq_disable+0x3b/0x140 [ 137.863068][ T7616] ? clear_bhb_loop+0x40/0x90 [ 137.863093][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.863112][ T7616] RIP: 0033:0x7f82b759c819 [ 137.863134][ T7616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.863150][ T7616] RSP: 002b:00007f82b83ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.863174][ T7616] RAX: ffffffffffffffda RBX: 00007f82b7815fa0 RCX: 00007f82b759c819 [ 137.863188][ T7616] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 137.863200][ T7616] RBP: 00007f82b7632c91 R08: 0000000000000004 R09: 0000000000000000 [ 137.863213][ T7616] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.863224][ T7616] R13: 00007f82b7816038 R14: 00007f82b7815fa0 R15: 00007ffde111db98 [ 137.863257][ T7616] [ 138.155376][ T7616] Mem-Info: [ 138.159733][ T7616] active_anon:6333 inactive_anon:0 isolated_anon:0 [ 138.159733][ T7616] active_file:3155 inactive_file:39952 isolated_file:0 [ 138.159733][ T7616] unevictable:768 dirty:326 writeback:0 [ 138.159733][ T7616] slab_reclaimable:10539 slab_unreclaimable:94988 [ 138.159733][ T7616] mapped:29525 shmem:1363 pagetables:1247 [ 138.159733][ T7616] sec_pagetables:0 bounce:0 [ 138.159733][ T7616] kernel_misc_reclaimable:0 [ 138.159733][ T7616] free:1330088 free_pcp:12213 free_cma:0 [ 138.206451][ T7616] Node 0 active_anon:25332kB inactive_anon:0kB active_file:12620kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118100kB dirty:1296kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13220kB pagetables:4972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 138.239056][ T7616] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 138.269518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.269850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.286426][ T7616] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.317475][ T7616] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 138.324700][ T7616] Node 0 DMA32 free:1371628kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26168kB inactive_anon:0kB active_file:12620kB inactive_file:159596kB unevictable:1536kB writepending:1320kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:47104kB local_pcp:26856kB free_cma:0kB [ 138.359428][ T7616] lowmem_reserve[]: 0 0 0 0 0 [ 138.364562][ T7616] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 138.398171][ T7616] lowmem_reserve[]: 0 0 0 0 0 [ 138.403125][ T7616] Node 1 Normal free:3933356kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.425922][ T7631] xt_hl: Unknown TTL match mode: 237 [ 138.445197][ T7616] lowmem_reserve[]: 0 0 0 0 0 [ 138.450245][ T7616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 138.502199][ T7616] Node 0 DMA32: 2847*4kB (UME) 1220*8kB (UME) 455*16kB (UME) 179*32kB (UM) 60*64kB (UME) 15*128kB (M) 4*256kB (UME) 3*512kB (UME) 8*1024kB (UE) 3*2048kB (UM) 321*4096kB (UM) = 1371628kB [ 138.537782][ T7616] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 138.554890][ T7616] Node 1 Normal: 3*4kB (U) 8*8kB (UM) 8*16kB (UM) 9*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3933356kB [ 138.575479][ T7616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.585970][ T7616] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.596226][ T7616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.606900][ T7616] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.698216][ T7616] 45118 total pagecache pages [ 138.786740][ T7616] 0 pages in swap cache [ 138.844353][ T7616] Free swap = 124996kB [ 138.901021][ T7616] Total swap = 124996kB [ 138.987190][ T7616] 2097051 pages RAM [ 139.066104][ T5840] block nbd0: Receive control failed (result -107) [ 139.067158][ T7616] 0 pages HighMem/MovableOnly [ 139.129848][ T7616] 427401 pages reserved [ 139.134200][ T7616] 0 pages cma reserved [ 139.340597][ T7657] tipc: Enabled bearer , priority 0 [ 139.369672][ T7657] syzkaller0: entered promiscuous mode [ 139.393611][ T7657] syzkaller0: entered allmulticast mode [ 139.604079][ T7656] tipc: Resetting bearer [ 139.703527][ T7656] tipc: Disabling bearer [ 139.786318][ T7666] lo: Caught tx_queue_len zero misconfig [ 139.807470][ T7666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.058344][ T7714] team_slave_0: entered promiscuous mode [ 141.065444][ T7714] team_slave_1: entered promiscuous mode [ 141.105683][ T7714] macvtap1: entered promiscuous mode [ 141.146464][ T7714] team0: entered promiscuous mode [ 141.169848][ T7714] macvtap1: entered allmulticast mode [ 141.186329][ T7714] team0: entered allmulticast mode [ 141.191996][ T7714] team_slave_0: entered allmulticast mode [ 141.203694][ T7714] team_slave_1: entered allmulticast mode [ 141.219827][ T7699] net_ratelimit: 2 callbacks suppressed [ 141.219849][ T7699] netlink: zone id is out of range [ 141.221624][ T7714] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 141.226007][ T7699] netlink: zone id is out of range [ 141.244396][ T7699] netlink: zone id is out of range [ 141.250303][ T7699] netlink: zone id is out of range [ 141.256737][ T7699] netlink: zone id is out of range [ 141.256968][ T7715] team0: left allmulticast mode [ 141.262825][ T7699] netlink: zone id is out of range [ 141.279146][ T7715] team_slave_0: left allmulticast mode [ 141.279828][ T7699] netlink: zone id is out of range [ 141.290167][ T7715] team_slave_1: left allmulticast mode [ 141.290206][ T7715] team0: left promiscuous mode [ 141.290867][ T7715] team_slave_0: left promiscuous mode [ 141.308963][ T7715] team_slave_1: left promiscuous mode [ 141.316519][ T7699] netlink: zone id is out of range [ 141.322881][ T7699] netlink: zone id is out of range [ 141.330085][ T7699] netlink: zone id is out of range [ 142.008632][ T7741] __nla_validate_parse: 11 callbacks suppressed [ 142.008654][ T7741] netlink: 104 bytes leftover after parsing attributes in process `syz.4.450'. [ 142.231157][ T7748] netlink: 63 bytes leftover after parsing attributes in process `syz.3.454'. [ 142.275758][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 142.326809][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 142.339049][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 142.347498][ C0] lec:lec_tx_timeout: lec0 [ 142.353576][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 142.788864][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 143.043297][ T7766] lo speed is unknown, defaulting to 1000 [ 143.368681][ T7793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.467'. [ 143.579894][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 143.616757][ T7801] netlink: 124 bytes leftover after parsing attributes in process `syz.4.465'. [ 143.659803][ T7801] netlink: 580 bytes leftover after parsing attributes in process `syz.4.465'. [ 143.917896][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.469'. [ 144.173777][ T7815] netlink: 'syz.0.471': attribute type 2 has an invalid length. [ 144.182478][ T7815] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 144.190963][ T7815] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 144.330522][ T7817] netlink: 'syz.0.471': attribute type 21 has an invalid length. [ 146.162630][ T7817] netlink: 'syz.0.471': attribute type 4 has an invalid length. [ 146.172569][ T7817] netlink: 'syz.0.471': attribute type 3 has an invalid length. [ 146.229803][ T7782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.563988][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.656395][ T7831] tipc: Enabled bearer , priority 0 [ 146.685812][ T7831] syzkaller0: entered promiscuous mode [ 146.706432][ T7831] syzkaller0: entered allmulticast mode [ 146.754799][ T7837] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 146.774433][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.784006][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.864493][ T7831] tipc: Resetting bearer [ 146.904587][ T7830] tipc: Resetting bearer [ 146.965160][ T7830] tipc: Disabling bearer [ 147.162425][ T7855] __nla_validate_parse: 7 callbacks suppressed [ 147.162445][ T7855] netlink: 76 bytes leftover after parsing attributes in process `syz.1.480'. [ 147.216865][ T7863] netlink: 63 bytes leftover after parsing attributes in process `syz.3.481'. [ 147.369072][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 147.377912][ C0] lec:lec_tx_timeout: lec0 [ 147.383399][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 147.495936][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 147.725719][ T7880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.485'. [ 147.806529][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 147.901167][ T7885] ip6tnl0: Caught tx_queue_len zero misconfig [ 147.903753][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 147.942425][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 147.983024][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 148.047326][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 148.065067][ T7891] dummy0: entered promiscuous mode [ 148.084568][ T7891] macsec0: entered allmulticast mode [ 148.092236][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 148.101237][ T7891] dummy0: entered allmulticast mode [ 148.383095][ T7903] net_ratelimit: 7 callbacks suppressed [ 148.383117][ T7903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.858954][ T7925] trusted_key: syz.4.496 sent an empty control message without MSG_MORE. [ 149.315611][ T7944] netlink: 'syz.4.501': attribute type 4 has an invalid length. [ 149.385494][ T7949] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 149.401334][ T7941] lo speed is unknown, defaulting to 1000 [ 149.995025][ T7962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.057385][ T7962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.084931][ T7962] bond0 (unregistering): Released all slaves [ 150.458809][ T7984] Bluetooth: MGMT ver 1.23 [ 150.515962][ T7984] xt_TCPMSS: Only works on TCP SYN packets [ 150.968761][ T8005] delete_channel: no stack [ 151.022458][ T8007] netlink: 'syz.3.519': attribute type 13 has an invalid length. [ 151.062095][ T8007] netlink: 'syz.3.519': attribute type 17 has an invalid length. [ 151.094398][ T8010] netlink: Unknown conntrack attr (type=2304, max=9) [ 151.987746][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.014847][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.032231][ T8007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.312589][ T8038] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 152.356073][ T8038] __nla_validate_parse: 11 callbacks suppressed [ 152.356107][ T8038] netlink: 224 bytes leftover after parsing attributes in process `syz.3.527'. [ 152.399052][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 152.407571][ C0] lec:lec_tx_timeout: lec0 [ 152.412500][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 152.423627][ T8043] netlink: 'syz.4.529': attribute type 10 has an invalid length. [ 152.459290][ T8043] netlink: 228 bytes leftover after parsing attributes in process `syz.4.529'. [ 153.072348][ T8052] ip6gretap0: entered promiscuous mode [ 153.086622][ T8052] vlan2: entered promiscuous mode [ 153.206117][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 153.236915][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 153.367848][ T8063] pimreg: entered allmulticast mode [ 153.384789][ T8063] pimreg: left allmulticast mode [ 153.826069][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.540'. [ 153.837613][ T8078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.538'. [ 153.853151][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.540'. [ 154.055364][ T8078] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 154.131463][ T8078] bond0 (unregistering): Released all slaves [ 155.062999][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 155.406612][ T8143] FAULT_INJECTION: forcing a failure. [ 155.406612][ T8143] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 155.447669][ T8143] CPU: 0 UID: 0 PID: 8143 Comm: syz.3.557 Not tainted syzkaller #0 PREEMPT(full) [ 155.447703][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.447727][ T8143] Call Trace: [ 155.447735][ T8143] [ 155.447743][ T8143] dump_stack_lvl+0xe8/0x150 [ 155.447779][ T8143] should_fail_ex+0x412/0x560 [ 155.447811][ T8143] _copy_from_user+0x2d/0xb0 [ 155.447833][ T8143] ___sys_sendmsg+0x1c6/0x360 [ 155.447862][ T8143] ? __lock_acquire+0x6b5/0x2cf0 [ 155.447894][ T8143] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.447962][ T8143] ? __fget_files+0x2a/0x420 [ 155.447987][ T8143] ? __fget_files+0x3a0/0x420 [ 155.448020][ T8143] __x64_sys_sendmsg+0x1bd/0x2a0 [ 155.448052][ T8143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.448089][ T8143] ? __pfx_ksys_write+0x10/0x10 [ 155.448127][ T8143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.448150][ T8143] do_syscall_64+0x15f/0xf80 [ 155.448173][ T8143] ? trace_irq_disable+0x3b/0x140 [ 155.448195][ T8143] ? clear_bhb_loop+0x40/0x90 [ 155.448219][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.448238][ T8143] RIP: 0033:0x7ff309b9c819 [ 155.448258][ T8143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.448274][ T8143] RSP: 002b:00007ff30ab29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.448308][ T8143] RAX: ffffffffffffffda RBX: 00007ff309e15fa0 RCX: 00007ff309b9c819 [ 155.448322][ T8143] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000d [ 155.448335][ T8143] RBP: 00007ff30ab29090 R08: 0000000000000000 R09: 0000000000000000 [ 155.448346][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.448357][ T8143] R13: 00007ff309e16038 R14: 00007ff309e15fa0 R15: 00007ffc0c78feb8 [ 155.448391][ T8143] [ 155.915425][ T8153] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 155.990226][ T8158] netlink: 76 bytes leftover after parsing attributes in process `syz.3.564'. [ 156.264401][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 156.846039][ T8197] netlink: 'syz.4.573': attribute type 1 has an invalid length. [ 156.897633][ T8200] FAULT_INJECTION: forcing a failure. [ 156.897633][ T8200] name failslab, interval 1, probability 0, space 0, times 1 [ 156.972761][ T8200] CPU: 0 UID: 0 PID: 8200 Comm: syz.0.574 Not tainted syzkaller #0 PREEMPT(full) [ 156.972794][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.972806][ T8200] Call Trace: [ 156.972814][ T8200] [ 156.972822][ T8200] dump_stack_lvl+0xe8/0x150 [ 156.972858][ T8200] should_fail_ex+0x412/0x560 [ 156.972891][ T8200] should_failslab+0xa8/0x100 [ 156.972913][ T8200] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 156.972940][ T8200] ? __alloc_skb+0x186/0x7d0 [ 156.972966][ T8200] ? __alloc_skb+0x1d0/0x7d0 [ 156.972987][ T8200] ? __local_bh_enable_ip+0xd0/0x130 [ 156.973018][ T8200] __alloc_skb+0x1d0/0x7d0 [ 156.973049][ T8200] netlink_sendmsg+0x5d4/0xb40 [ 156.973092][ T8200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.973132][ T8200] ? aa_sock_msg_perm+0xf1/0x1b0 [ 156.973160][ T8200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.973192][ T8200] ____sys_sendmsg+0x972/0x9f0 [ 156.973220][ T8200] ? __might_fault+0xaf/0x130 [ 156.973252][ T8200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.973291][ T8200] ? import_iovec+0x73/0xa0 [ 156.973315][ T8200] ___sys_sendmsg+0x2a5/0x360 [ 156.973343][ T8200] ? __lock_acquire+0x6b5/0x2cf0 [ 156.973371][ T8200] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.973436][ T8200] ? __fget_files+0x2a/0x420 [ 156.973461][ T8200] ? __fget_files+0x3a0/0x420 [ 156.973495][ T8200] __x64_sys_sendmsg+0x1bd/0x2a0 [ 156.973527][ T8200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.973567][ T8200] ? __pfx_ksys_write+0x10/0x10 [ 156.973600][ T8200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.973622][ T8200] do_syscall_64+0x15f/0xf80 [ 156.973644][ T8200] ? trace_irq_disable+0x3b/0x140 [ 156.973668][ T8200] ? clear_bhb_loop+0x40/0x90 [ 156.973691][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.973710][ T8200] RIP: 0033:0x7fa094f9c819 [ 156.973730][ T8200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.973746][ T8200] RSP: 002b:00007fa095e63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.973768][ T8200] RAX: ffffffffffffffda RBX: 00007fa095215fa0 RCX: 00007fa094f9c819 [ 156.973782][ T8200] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000d [ 156.973794][ T8200] RBP: 00007fa095e63090 R08: 0000000000000000 R09: 0000000000000000 [ 156.973806][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.973817][ T8200] R13: 00007fa095216038 R14: 00007fa095215fa0 R15: 00007fffc6301e98 [ 156.973847][ T8200] [ 157.419121][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 157.427325][ C0] lec:lec_tx_timeout: lec0 [ 157.432001][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 157.537454][ T8214] dummy0: entered promiscuous mode [ 157.572245][ T8214] bridge0: entered promiscuous mode [ 157.615935][ T8214] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 157.642082][ T8221] __nla_validate_parse: 1 callbacks suppressed [ 157.642102][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.580'. [ 157.712639][ T8214] hsr1: entered allmulticast mode [ 157.758602][ T8214] dummy0: entered allmulticast mode [ 157.790263][ T8214] bridge0: entered allmulticast mode [ 158.058873][ T8233] openvswitch: netlink: Missing valid actions attribute. [ 158.082388][ T8233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.111642][ T8233] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 158.126230][ T8233] syzkaller1: linktype set to 0 [ 158.227023][ T8245] netlink: 68 bytes leftover after parsing attributes in process `syz.1.582'. [ 158.893211][ T8267] lo speed is unknown, defaulting to 1000 [ 159.515483][ T8289] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20002 [ 159.960823][ T8298] lo speed is unknown, defaulting to 1000 [ 160.456859][ T8306] ±ÿÿÿÿa–ïD: renamed from lo [ 160.638092][ T8310] netlink: 280 bytes leftover after parsing attributes in process `syz.0.599'. [ 160.655590][ T8312] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 160.855486][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 160.896290][ T8318] batadv_slave_1: entered promiscuous mode [ 160.926405][ T8318] nbd: nbd0 already in use [ 160.938263][ T8316] batadv_slave_1: left promiscuous mode [ 161.088454][ T8322] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.602'. [ 161.887819][ T8330] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 162.439039][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 162.447216][ C0] lec:lec_tx_timeout: lec0 [ 162.452065][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 162.590375][ T8355] syz_tun: left allmulticast mode [ 162.873987][ T8369] tipc: Failed to remove unknown binding: 66,1,1/0:1905796504/1905796506 [ 162.889760][ T8369] tipc: Failed to remove unknown binding: 66,1,1/0:1905796504/1905796506 [ 162.908469][ T8369] tipc: Failed to remove unknown binding: 66,1,1/0:1905796504/1905796506 [ 162.935600][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 162.947522][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.096541][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.113678][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.305800][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.615'. [ 163.321113][ T8376] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 163.330650][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.339958][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.350362][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.360936][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.342321][ T8353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.534055][ T8387] netlink: 'syz.3.618': attribute type 12 has an invalid length. [ 165.556015][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.618'. [ 165.609406][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 165.738261][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 166.139938][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 167.060269][ T8442] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 167.192749][ T8455] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.636'. [ 167.459102][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 167.467277][ C0] lec:lec_tx_timeout: lec0 [ 167.472507][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 168.065553][ T8483] bond0: (slave team0): Releasing backup interface [ 168.134391][ T8483] bridge_slave_0: left allmulticast mode [ 168.141375][ T8483] bridge_slave_0: left promiscuous mode [ 168.147722][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.164263][ T8483] bridge_slave_1: left allmulticast mode [ 168.170560][ T8483] bridge_slave_1: left promiscuous mode [ 168.185064][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.228500][ T8483] bond0: (slave bond_slave_0): Releasing backup interface [ 168.274732][ T8483] bond0: (slave bond_slave_1): Releasing backup interface [ 168.306406][ T8483] team0: Failed to send options change via netlink (err -105) [ 168.325420][ T8483] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 168.340944][ T8483] team0: Port device team_slave_0 removed [ 168.363203][ T8483] team0: Failed to send options change via netlink (err -105) [ 168.379959][ T8483] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 168.392276][ T8483] team0: Port device team_slave_1 removed [ 168.398900][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.407596][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.417986][ T8483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.453472][ T8486] team0: Mode changed to "broadcast" [ 168.468389][ T8491] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 168.484321][ T8491] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 168.514846][ T8491] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.649'. [ 169.106816][ T8514] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 169.481121][ T8528] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 169.618383][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.663'. [ 169.733310][ T8530] bond2: (slave geneve2): making interface the new active one [ 169.755067][ T8530] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 169.795961][ T8531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.812537][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.833741][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.861218][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.904035][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.250215][ T8551] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 170.297987][ T8555] netlink: 'syz.2.672': attribute type 2 has an invalid length. [ 170.306323][ T8555] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 170.321723][ T8555] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 170.345669][ T8555] netlink: 'syz.2.672': attribute type 21 has an invalid length. [ 170.385531][ T8555] netlink: 128 bytes leftover after parsing attributes in process `syz.2.672'. [ 170.422559][ T8555] netlink: 'syz.2.672': attribute type 4 has an invalid length. [ 170.452945][ T8555] netlink: 'syz.2.672': attribute type 3 has an invalid length. [ 170.497724][ T8555] netlink: 3 bytes leftover after parsing attributes in process `syz.2.672'. [ 170.776301][ T8568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.678'. [ 170.965360][ T8570] SET target dimension over the limit! [ 171.487053][ T8593] lo speed is unknown, defaulting to 1000 [ 171.541546][ T8597] netlink: 'syz.1.687': attribute type 2 has an invalid length. [ 171.611919][ T8597] netlink: 128 bytes leftover after parsing attributes in process `syz.1.687'. [ 171.655681][ T8597] netlink: 3 bytes leftover after parsing attributes in process `syz.1.687'. [ 171.867423][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 171.896889][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 172.293166][ T8616] netlink: 56 bytes leftover after parsing attributes in process `syz.4.694'. [ 172.479045][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 172.487352][ C0] lec:lec_tx_timeout: lec0 [ 172.493868][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 172.594963][ T8628] syz_tun: entered allmulticast mode [ 172.613807][ T8622] syz_tun: left allmulticast mode [ 172.768341][ T8633] bond1: option arp_interval: invalid value (18446744073709551615) [ 172.798084][ T8633] bond1: option arp_interval: allowed values 0 - 2147483647 [ 172.841712][ T8633] bond1 (unregistering): Released all slaves [ 173.295255][ T8647] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.958452][ T8687] __nla_validate_parse: 7 callbacks suppressed [ 173.958473][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.715'. [ 173.979136][ T6142] IPVS: ip_vs_send_async error -101 [ 174.026646][ T8684] delete_channel: no stack [ 175.649455][ T8730] validate_nla: 11 callbacks suppressed [ 175.649475][ T8730] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 176.847315][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'. [ 176.856609][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'. [ 176.866802][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 176.875876][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 177.872844][ T8706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.157738][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 178.208958][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 178.559726][ T8791] dvmrp1: entered allmulticast mode [ 178.631127][ T8791] dvmrp1: left allmulticast mode [ 178.663741][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 178.669111][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6170 ms [ 178.682402][ C0] lec:lec_tx_timeout: lec0 [ 178.688543][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 178.712118][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 178.723180][ T8789] x_tables: duplicate underflow at hook 2 [ 178.725046][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 179.504884][ T8824] netlink: 'syz.0.751': attribute type 3 has an invalid length. [ 179.545877][ T8824] __nla_validate_parse: 2 callbacks suppressed [ 179.545898][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 179.605862][ T8828] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 179.701753][ T8830] netlink: 104 bytes leftover after parsing attributes in process `syz.2.754'. [ 179.728906][ T8830] netlink: 'syz.2.754': attribute type 24 has an invalid length. [ 179.737411][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 179.759456][ T8830] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 179.954248][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 179.955833][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 179.977045][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 179.983801][ T8843] netlink: 'syz.4.757': attribute type 6 has an invalid length. [ 180.072768][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 180.115790][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 180.510343][ T8862] netlink: 'syz.1.765': attribute type 12 has an invalid length. [ 180.527354][ T8862] netlink: 'syz.1.765': attribute type 29 has an invalid length. [ 180.541760][ T8862] netlink: 148 bytes leftover after parsing attributes in process `syz.1.765'. [ 180.552584][ T8862] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 180.561908][ T8862] netlink: 47 bytes leftover after parsing attributes in process `syz.1.765'. [ 180.727298][ T8862] lo speed is unknown, defaulting to 1000 [ 181.030370][ T8886] lo speed is unknown, defaulting to 1000 [ 181.129786][ T8886] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 182.877546][ T8836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.145176][ T8897] pim6reg: entered allmulticast mode [ 183.254689][ T8903] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 183.297883][ T8903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.511666][ T8903] bond3: (slave veth5): Enslaving as an active interface with a down link [ 183.760487][ T8929] syz.0.780: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.775929][ T8929] CPU: 0 UID: 0 PID: 8929 Comm: syz.0.780 Not tainted syzkaller #0 PREEMPT(full) [ 183.775958][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.775971][ T8929] Call Trace: [ 183.775979][ T8929] [ 183.775988][ T8929] dump_stack_lvl+0xe8/0x150 [ 183.776025][ T8929] warn_alloc+0x249/0x340 [ 183.776070][ T8929] ? stack_trace_save+0xa9/0x100 [ 183.776099][ T8929] ? __pfx_warn_alloc+0x10/0x10 [ 183.776139][ T8929] ? kasan_save_track+0x4f/0x80 [ 183.776168][ T8929] ? kasan_save_track+0x3e/0x80 [ 183.776195][ T8929] ? __kasan_kmalloc+0x93/0xb0 [ 183.776212][ T8929] ? __kmalloc_cache_noprof+0x31c/0x660 [ 183.776241][ T8929] ? xskq_create+0x56/0x170 [ 183.776263][ T8929] ? xsk_setsockopt+0x54c/0x990 [ 183.776280][ T8929] ? do_sock_setsockopt+0x17c/0x1b0 [ 183.776308][ T8929] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 183.776334][ T8929] ? do_syscall_64+0x15f/0xf80 [ 183.776368][ T8929] __vmalloc_node_range_noprof+0x132/0x1730 [ 183.776436][ T8929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.776476][ T8929] ? __kasan_kmalloc+0x93/0xb0 [ 183.776503][ T8929] vmalloc_user_noprof+0xad/0xe0 [ 183.776535][ T8929] ? xskq_create+0xbf/0x170 [ 183.776559][ T8929] xskq_create+0xbf/0x170 [ 183.776586][ T8929] xsk_init_queue+0x8a/0xe0 [ 183.776612][ T8929] xsk_setsockopt+0x54c/0x990 [ 183.776636][ T8929] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.776658][ T8929] ? __pfx_aa_sk_perm+0x10/0x10 [ 183.776690][ T8929] ? aa_sock_opt_perm+0xff/0x1a0 [ 183.776722][ T8929] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 183.776754][ T8929] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.776777][ T8929] do_sock_setsockopt+0x17c/0x1b0 [ 183.776812][ T8929] __x64_sys_setsockopt+0x13d/0x1b0 [ 183.776846][ T8929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.776870][ T8929] do_syscall_64+0x15f/0xf80 [ 183.776894][ T8929] ? trace_irq_disable+0x3b/0x140 [ 183.776916][ T8929] ? clear_bhb_loop+0x40/0x90 [ 183.776943][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.776964][ T8929] RIP: 0033:0x7fa094f9c819 [ 183.776985][ T8929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.777002][ T8929] RSP: 002b:00007fa095e63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.777026][ T8929] RAX: ffffffffffffffda RBX: 00007fa095215fa0 RCX: 00007fa094f9c819 [ 183.777041][ T8929] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 183.777064][ T8929] RBP: 00007fa095032c91 R08: 0000000000000004 R09: 0000000000000000 [ 183.777077][ T8929] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.777089][ T8929] R13: 00007fa095216038 R14: 00007fa095215fa0 R15: 00007fffc6301e98 [ 183.777126][ T8929] [ 183.777162][ T8929] Mem-Info: [ 184.088006][ T8929] active_anon:7410 inactive_anon:0 isolated_anon:0 [ 184.088006][ T8929] active_file:3293 inactive_file:39976 isolated_file:0 [ 184.088006][ T8929] unevictable:768 dirty:411 writeback:0 [ 184.088006][ T8929] slab_reclaimable:10904 slab_unreclaimable:116582 [ 184.088006][ T8929] mapped:30648 shmem:2463 pagetables:1280 [ 184.088006][ T8929] sec_pagetables:0 bounce:0 [ 184.088006][ T8929] kernel_misc_reclaimable:0 [ 184.088006][ T8929] free:1306216 free_pcp:11701 free_cma:0 [ 184.168807][ T8929] Node 0 active_anon:30040kB inactive_anon:0kB active_file:13172kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122692kB dirty:1640kB writeback:0kB shmem:8816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13288kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.274390][ T8929] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.392760][ T8929] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.429084][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 184.437260][ C0] lec:lec_tx_timeout: lec0 [ 184.442807][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 184.470204][ T8929] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 184.476204][ T8929] Node 0 DMA32 free:1275688kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30000kB inactive_anon:0kB active_file:13172kB inactive_file:159692kB unevictable:1536kB writepending:1644kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:47592kB local_pcp:27056kB free_cma:0kB [ 184.511696][ T8929] lowmem_reserve[]: 0 0 0 0 0 [ 184.516663][ T8929] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 184.613026][ T8929] lowmem_reserve[]: 0 0 0 0 0 [ 184.636616][ T8929] Node 1 Normal free:3931356kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:2012kB free_cma:0kB [ 184.733153][ T8929] lowmem_reserve[]: 0 0 0 0 0 [ 184.755284][ T8929] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.809849][ T8929] Node 0 DMA32: 2860*4kB (UM) 1719*8kB (UME) 825*16kB (UME) 392*32kB (UME) 154*64kB (UME) 60*128kB (ME) 29*256kB (UME) 11*512kB (M) 3*1024kB (UM) 1*2048kB (U) 290*4096kB (M) = 1274488kB [ 184.883026][ T8929] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 184.912905][ T8929] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3931340kB [ 184.932464][ T8929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.942999][ T8929] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.953323][ T8929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.963916][ T8929] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.974683][ T8929] 45855 total pagecache pages [ 184.979877][ T8929] 0 pages in swap cache [ 184.984377][ T8929] Free swap = 124996kB [ 184.991470][ T8929] Total swap = 124996kB [ 185.001444][ T8929] 2097051 pages RAM [ 185.005351][ T8929] 0 pages HighMem/MovableOnly [ 185.021395][ T8929] 427401 pages reserved [ 185.027199][ T8929] 0 pages cma reserved [ 185.154686][ T8952] lo speed is unknown, defaulting to 1000 [ 185.184130][ T8973] netlink: 'syz.4.787': attribute type 2 has an invalid length. [ 185.221813][ T8973] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 185.255265][ T8973] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 185.382256][ T8975] netlink: 'syz.4.787': attribute type 21 has an invalid length. [ 185.402686][ T8975] __nla_validate_parse: 7 callbacks suppressed [ 185.402706][ T8975] netlink: 128 bytes leftover after parsing attributes in process `syz.4.787'. [ 185.592704][ T8975] netlink: 'syz.4.787': attribute type 4 has an invalid length. [ 185.613974][ T8975] netlink: 'syz.4.787': attribute type 3 has an invalid length. [ 185.622225][ T8975] netlink: 3 bytes leftover after parsing attributes in process `syz.4.787'. [ 185.805817][ T8995] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.795'. [ 185.869222][ T8999] netlink: 9 bytes leftover after parsing attributes in process `syz.4.797'. [ 185.899445][ T8997] syzkaller0: entered promiscuous mode [ 185.911926][ T8997] syzkaller0: entered allmulticast mode [ 186.149624][ T9011] x_tables: duplicate underflow at hook 3 [ 186.341088][ T9014] syzkaller0: entered promiscuous mode [ 186.355207][ T9014] syzkaller0: entered allmulticast mode [ 186.562697][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 186.607867][ T5840] Bluetooth: hci3: link tx timeout [ 186.613206][ T5840] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 187.148885][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'. [ 187.985969][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 188.677389][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 189.465928][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 189.474019][ C0] lec:lec_tx_timeout: lec0 [ 189.478747][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 190.421285][ T9071] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 190.715914][ T9094] netlink: 'syz.2.826': attribute type 2 has an invalid length. [ 190.759664][ T9091] lo speed is unknown, defaulting to 1000 [ 190.798312][ T9097] netlink: 'syz.2.826': attribute type 2 has an invalid length. [ 190.884211][ T9102] netlink: 200 bytes leftover after parsing attributes in process `syz.3.828'. [ 190.911437][ T9099] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20004 [ 190.927001][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 192.062625][ T9141] dummy0: entered promiscuous mode [ 192.083600][ T9141] dummy0: left promiscuous mode [ 192.159574][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 192.364659][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 192.439456][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 194.674664][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.973477][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 195.309024][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 195.317216][ C0] lec:lec_tx_timeout: lec0 [ 195.322075][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 195.402921][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 195.424453][ T9169] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 195.454518][ T9186] netlink: 'syz.0.845': attribute type 3 has an invalid length. [ 195.490272][ T9186] nbd: nbd0 already in use [ 195.501026][ T9186] block nbd0: NBD_DISCONNECT [ 195.516383][ T9186] block nbd0: Send disconnect failed -32 [ 195.550084][ T9186] block nbd0: shutting down sockets [ 195.631543][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 195.676430][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 195.722606][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 195.771617][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.805276][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.852798][ T9183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.200761][ T9210] netlink: 'syz.2.852': attribute type 1 has an invalid length. [ 196.235601][ T9210] netlink: 'syz.2.852': attribute type 3 has an invalid length. [ 196.418301][ T9220] netlink: 'syz.0.853': attribute type 15 has an invalid length. [ 196.444622][ T9221] netlink: 'syz.0.853': attribute type 15 has an invalid length. [ 197.122465][ T9242] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 197.222490][ T9242] __nla_validate_parse: 1 callbacks suppressed [ 197.222511][ T9242] netlink: 244 bytes leftover after parsing attributes in process `syz.1.858'. [ 197.338129][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'. [ 197.385167][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'. [ 197.435950][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 197.491962][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 198.503752][ T9274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.866'. [ 199.278554][ T9315] lo speed is unknown, defaulting to 1000 [ 199.476316][ T9320] dummy0: left allmulticast mode [ 199.499711][ T9320] dummy0: left promiscuous mode [ 199.702916][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 199.744525][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 199.777676][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 199.812636][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 200.144855][ T9351] geneve1: entered promiscuous mode [ 200.161526][ T9354] team_slave_1: Caught tx_queue_len zero misconfig [ 200.329057][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 200.337369][ C0] lec:lec_tx_timeout: lec0 [ 200.342259][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 200.716423][ T9366] dummy0: entered promiscuous mode [ 200.767931][ T9366] dummy0: left promiscuous mode [ 200.939663][ T9384] tipc: Started in network mode [ 200.955428][ T9384] tipc: Node identity 9eb74549ab52, cluster identity 4711 [ 200.976235][ T9384] tipc: Enabled bearer , priority 0 [ 201.244878][ T9387] syzkaller0: entered promiscuous mode [ 201.250886][ T9407] xt_hashlimit: size too large, truncated to 1048576 [ 201.258149][ T9387] syzkaller0: entered allmulticast mode [ 201.271254][ T9387] tipc: Resetting bearer [ 201.397188][ T9402] –: renamed from dummy0 (while UP) [ 201.454431][ T9387] tipc: Resetting bearer [ 201.601156][ T9388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.620778][ T9388] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 201.660780][ T9388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.680303][ T9388] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 201.855012][ T9388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.865275][ T9388] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 201.904232][ T9388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.913151][ T9388] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 201.978725][ T9388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.991128][ T9388] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 205.199940][ T9387] tipc: Disabling bearer [ 205.215046][ T6603] tipc: Node number set to 904217929 [ 205.222801][ T9439] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 205.359025][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 205.376205][ C0] lec:lec_tx_timeout: lec0 [ 205.381151][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 205.495577][ T9503] warn_alloc: 2 callbacks suppressed [ 205.495598][ T9503] syz.0.907: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 205.525975][ T9503] CPU: 1 UID: 0 PID: 9503 Comm: syz.0.907 Not tainted syzkaller #0 PREEMPT(full) [ 205.526015][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.526028][ T9503] Call Trace: [ 205.526037][ T9503] [ 205.526046][ T9503] dump_stack_lvl+0xe8/0x150 [ 205.526084][ T9503] warn_alloc+0x249/0x340 [ 205.526118][ T9503] ? stack_trace_save+0xa9/0x100 [ 205.526147][ T9503] ? __pfx_warn_alloc+0x10/0x10 [ 205.526188][ T9503] ? kasan_save_track+0x4f/0x80 [ 205.526216][ T9503] ? kasan_save_track+0x3e/0x80 [ 205.526244][ T9503] ? __kasan_kmalloc+0x93/0xb0 [ 205.526262][ T9503] ? __kmalloc_cache_noprof+0x31c/0x660 [ 205.526290][ T9503] ? xskq_create+0x56/0x170 [ 205.526312][ T9503] ? xsk_setsockopt+0x54c/0x990 [ 205.526330][ T9503] ? do_sock_setsockopt+0x17c/0x1b0 [ 205.526357][ T9503] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 205.526379][ T9503] ? do_syscall_64+0x15f/0xf80 [ 205.526403][ T9503] __vmalloc_node_range_noprof+0x132/0x1730 [ 205.526457][ T9503] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.526488][ T9503] ? __kasan_kmalloc+0x93/0xb0 [ 205.526508][ T9503] vmalloc_user_noprof+0xad/0xe0 [ 205.526532][ T9503] ? xskq_create+0xbf/0x170 [ 205.526550][ T9503] xskq_create+0xbf/0x170 [ 205.526570][ T9503] xsk_init_queue+0x8a/0xe0 [ 205.526589][ T9503] xsk_setsockopt+0x54c/0x990 [ 205.526607][ T9503] ? __pfx_xsk_setsockopt+0x10/0x10 [ 205.526623][ T9503] ? __pfx_aa_sk_perm+0x10/0x10 [ 205.526647][ T9503] ? aa_sock_opt_perm+0xff/0x1a0 [ 205.526679][ T9503] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 205.526702][ T9503] ? __pfx_xsk_setsockopt+0x10/0x10 [ 205.526720][ T9503] do_sock_setsockopt+0x17c/0x1b0 [ 205.526748][ T9503] __x64_sys_setsockopt+0x13d/0x1b0 [ 205.526774][ T9503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.526791][ T9503] do_syscall_64+0x15f/0xf80 [ 205.526811][ T9503] ? trace_irq_disable+0x3b/0x140 [ 205.526830][ T9503] ? clear_bhb_loop+0x40/0x90 [ 205.526850][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.526866][ T9503] RIP: 0033:0x7fa094f9c819 [ 205.526883][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.526896][ T9503] RSP: 002b:00007fa095e63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.526916][ T9503] RAX: ffffffffffffffda RBX: 00007fa095215fa0 RCX: 00007fa094f9c819 [ 205.526928][ T9503] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 205.526944][ T9503] RBP: 00007fa095032c91 R08: 0000000000000004 R09: 0000000000000000 [ 205.526954][ T9503] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.526963][ T9503] R13: 00007fa095216038 R14: 00007fa095215fa0 R15: 00007fffc6301e98 [ 205.526991][ T9503] [ 205.527112][ T9503] Mem-Info: [ 205.859098][ T9503] active_anon:6409 inactive_anon:0 isolated_anon:0 [ 205.859098][ T9503] active_file:3293 inactive_file:39982 isolated_file:0 [ 205.859098][ T9503] unevictable:1118 dirty:285 writeback:0 [ 205.859098][ T9503] slab_reclaimable:10747 slab_unreclaimable:117713 [ 205.859098][ T9503] mapped:30085 shmem:1736 pagetables:1312 [ 205.859098][ T9503] sec_pagetables:0 bounce:0 [ 205.859098][ T9503] kernel_misc_reclaimable:0 [ 205.859098][ T9503] free:1305988 free_pcp:10772 free_cma:0 [ 206.020723][ T9503] Node 0 active_anon:25436kB inactive_anon:0kB active_file:13172kB inactive_file:159716kB unevictable:5136kB isolated(anon):0kB isolated(file):0kB mapped:122340kB dirty:1136kB writeback:0kB shmem:7608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13232kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.090543][ T9503] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.142395][ T9523] __nla_validate_parse: 9 callbacks suppressed [ 206.142415][ T9523] netlink: 68 bytes leftover after parsing attributes in process `syz.4.911'. [ 206.208574][ T9523] netlink: 64 bytes leftover after parsing attributes in process `syz.4.911'. [ 206.219357][ T9503] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.275273][ T9503] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 206.289183][ T9503] Node 0 DMA32 free:1271740kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25592kB inactive_anon:0kB active_file:13172kB inactive_file:159724kB unevictable:7516kB writepending:1152kB zspages:0kB present:3129332kB managed:2551528kB mlocked:5920kB bounce:0kB free_pcp:41596kB local_pcp:20376kB free_cma:0kB [ 206.375559][ T9503] lowmem_reserve[]: 0 0 0 0 0 [ 206.393911][ T9503] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 206.479419][ T9503] lowmem_reserve[]: 0 0 0 0 0 [ 206.493157][ T9503] Node 1 Normal free:3932628kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:692kB local_pcp:0kB free_cma:0kB [ 206.539212][ T9503] lowmem_reserve[]: 0 0 0 0 0 [ 206.544289][ T9503] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.579853][ T9503] Node 0 DMA32: 2007*4kB (UM) 1564*8kB (UME) 481*16kB (U) 301*32kB (UE) 106*64kB (UME) 79*128kB (UME) 30*256kB (UME) 16*512kB (UM) 4*1024kB (UM) 7*2048kB (UM) 288*4096kB (M) = 1268716kB [ 206.646139][ T9503] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 206.717990][ T9503] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 3*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3932628kB [ 206.802190][ T9503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.813207][ T9538] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 206.830523][ T9503] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.862495][ T9503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.877062][ T9538] bond0 (unregistering): Released all slaves [ 206.881178][ T9503] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.904976][ T9503] 44641 total pagecache pages [ 206.910255][ T9503] 0 pages in swap cache [ 206.917745][ T9503] Free swap = 124996kB [ 206.924697][ T9503] Total swap = 124996kB [ 206.931897][ T9503] 2097051 pages RAM [ 206.935988][ T9503] 0 pages HighMem/MovableOnly [ 206.947501][ T9503] 427401 pages reserved [ 206.957899][ T9503] 0 pages cma reserved [ 206.972205][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 206.986768][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 207.016285][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 207.028736][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 207.052414][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 207.117086][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 207.523486][ T9574] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 207.622155][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.926'. [ 207.657844][ T9574] netlink: 224 bytes leftover after parsing attributes in process `syz.3.925'. [ 207.856158][ T9588] lo speed is unknown, defaulting to 1000 [ 208.617021][ T9615] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 208.949741][ T9615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.985744][ T9621] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 209.244933][ T9623] lo speed is unknown, defaulting to 1000 [ 209.679171][ T9655] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 209.805811][ T9660] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 209.805811][ T9660] Please contact the netfilter-devel mailing list or update your nftables rules. [ 210.389034][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 210.397535][ C0] lec:lec_tx_timeout: lec0 [ 210.402410][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 210.736035][ T9689] syzkaller0: entered promiscuous mode [ 210.753215][ T9689] syzkaller0: entered allmulticast mode [ 211.267510][ T9708] raw_sendmsg: syz.2.952 forgot to set AF_INET. Fix it! [ 211.567334][ T9720] __nla_validate_parse: 17 callbacks suppressed [ 211.567357][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.956'. [ 211.811629][ T9728] lo speed is unknown, defaulting to 1000 [ 211.853816][ T9] IPVS: starting estimator thread 0... [ 211.950536][ T9738] IPVS: using max 26 ests per chain, 62400 per kthread [ 212.090007][ T9750] tipc: Failed to remove unknown binding: 66,1,1/0:3784093293/3784093295 [ 212.139631][ T9750] lo: Caught tx_queue_len zero misconfig [ 212.237171][ T9750] tipc: Failed to remove unknown binding: 66,1,1/0:3784093293/3784093295 [ 212.268749][ T9750] tipc: Failed to remove unknown binding: 66,1,1/0:3784093293/3784093295 [ 212.715661][ T9774] dummy0: entered promiscuous mode [ 212.750824][ T9774] bridge0: entered promiscuous mode [ 212.808818][ T9774] debugfs: 'hsr1' already exists in 'hsr' [ 212.851636][ T9774] Cannot create hsr debugfs directory [ 212.896044][ T9774] hsr1: entered allmulticast mode [ 212.905843][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 212.915302][ T9774] dummy0: entered allmulticast mode [ 212.928529][ T9774] bridge0: entered allmulticast mode [ 212.982036][ T9] [ 212.984961][ T9] ============================================ [ 212.991227][ T9] WARNING: possible recursive locking detected [ 212.997414][ T9] syzkaller #0 Not tainted [ 213.002035][ T9] -------------------------------------------- [ 213.008135][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 213.008377][ T9] kworker/0:0/9 is trying to acquire lock: [ 213.023257][ T9] ffff88802ba90fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 213.032725][ T9] [ 213.032725][ T9] but task is already holding lock: [ 213.040194][ T9] ffff8880523bcfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 213.049360][ T9] [ 213.049360][ T9] other info that might help us debug this: [ 213.057599][ T9] Possible unsafe locking scenario: [ 213.057599][ T9] [ 213.065137][ T9] CPU0 [ 213.068413][ T9] ---- [ 213.071876][ T9] lock(&hsr->seqnr_lock); [ 213.076643][ T9] lock(&hsr->seqnr_lock); [ 213.082056][ T9] [ 213.082056][ T9] *** DEADLOCK *** [ 213.082056][ T9] [ 213.091096][ T9] May be due to missing lock nesting notation [ 213.091096][ T9] [ 213.100143][ T9] 13 locks held by kworker/0:0/9: [ 213.105575][ T9] #0: ffff888031567540 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 213.117150][ T9] #1: ffffc900000e7c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 213.132414][ T9] #2: ffff88802c4eb530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 213.142799][ T9] #3: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 213.152335][ T9] #4: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 213.161583][ T9] #5: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 213.171881][ T9] #6: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 213.181112][ T9] #7: ffff8880523bcfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 213.190704][ T9] #8: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 213.200763][ T9] #9: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 213.210890][ T9] #10: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 213.220427][ T9] #11: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 213.230817][ T9] #12: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 213.240571][ T9] [ 213.240571][ T9] stack backtrace: [ 213.247268][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 213.247287][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.247296][ T9] Workqueue: mld mld_ifc_work [ 213.247324][ T9] Call Trace: [ 213.247331][ T9] [ 213.247339][ T9] dump_stack_lvl+0xe8/0x150 [ 213.247358][ T9] print_deadlock_bug+0x279/0x290 [ 213.247376][ T9] __lock_acquire+0x253f/0x2cf0 [ 213.247393][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 213.247414][ T9] ? skb_network_protocol+0x23d/0x400 [ 213.247438][ T9] ? hsr_dev_xmit+0x237/0x360 [ 213.247455][ T9] lock_acquire+0x106/0x350 [ 213.247469][ T9] ? hsr_dev_xmit+0x237/0x360 [ 213.247486][ T9] ? __pfx_netif_skb_features+0x10/0x10 [ 213.247496][ T9] ? lock_acquire+0x106/0x350 [ 213.247510][ T9] ? hsr_dev_xmit+0x237/0x360 [ 213.247525][ T9] _raw_spin_lock_bh+0x36/0x50 [ 213.247543][ T9] ? hsr_dev_xmit+0x237/0x360 [ 213.247559][ T9] hsr_dev_xmit+0x237/0x360 [ 213.247575][ T9] ? hsr_dev_xmit+0x2d/0x360 [ 213.247590][ T9] dev_hard_start_xmit+0x2cd/0x830 [ 213.247605][ T9] __dev_queue_xmit+0x14d9/0x3950 [ 213.247618][ T9] ? __dev_queue_xmit+0x2b6/0x3950 [ 213.247630][ T9] ? ebt_do_table+0x2665/0x2830 [ 213.247642][ T9] ? ebt_do_table+0x2665/0x2830 [ 213.247660][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 213.247677][ T9] ? br_nf_post_routing+0x219/0xfe0 [ 213.247693][ T9] ? lock_acquire+0x106/0x350 [ 213.247710][ T9] br_dev_queue_push_xmit+0x370/0x4b0 [ 213.247731][ T9] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 213.247748][ T9] NF_HOOK+0x360/0x3f0 [ 213.247764][ T9] ? NF_HOOK+0xa2/0x3f0 [ 213.247779][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 213.247794][ T9] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 213.247810][ T9] ? lock_acquire+0x106/0x350 [ 213.247826][ T9] br_forward_finish+0xd3/0x130 [ 213.247841][ T9] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 213.247857][ T9] ? __pfx_br_forward_finish+0x10/0x10 [ 213.247872][ T9] NF_HOOK+0x360/0x3f0 [ 213.247888][ T9] ? NF_HOOK+0xa2/0x3f0 [ 213.247905][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 213.247921][ T9] ? __pfx_br_forward_finish+0x10/0x10 [ 213.247938][ T9] ? __skb_clone+0x483/0x7a0 [ 213.247954][ T9] ? br_handle_vlan+0x61/0x530 [ 213.247968][ T9] __br_forward+0x397/0x540 [ 213.247983][ T9] ? __pfx_br_forward_finish+0x10/0x10 [ 213.248000][ T9] br_flood+0x6ee/0xb80 [ 213.248019][ T9] ? br_dev_xmit+0x193/0x1990 [ 213.248031][ T9] br_dev_xmit+0x12bd/0x1990 [ 213.248042][ T9] ? br_dev_xmit+0x193/0x1990 [ 213.248055][ T9] ? __pfx_br_dev_xmit+0x10/0x10 [ 213.248069][ T9] ? is_skb_forwardable+0xb0/0x200 [ 213.248087][ T9] dev_hard_start_xmit+0x2cd/0x830 [ 213.248101][ T9] __dev_queue_xmit+0x14d9/0x3950 [ 213.248114][ T9] ? __dev_queue_xmit+0x2b6/0x3950 [ 213.248126][ T9] ? trace_kmem_cache_alloc+0x29/0xe0 [ 213.248143][ T9] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 213.248160][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 213.248171][ T9] ? __asan_memcpy+0x40/0x70 [ 213.248185][ T9] ? __pskb_copy_fclone+0x9c8/0xff0 [ 213.248197][ T9] ? __asan_memcpy+0x40/0x70 [ 213.248212][ T9] ? __pskb_copy_fclone+0x9c8/0xff0 [ 213.248225][ T9] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 213.248237][ T9] ? hsr_addr_subst_dest+0x30d/0xa90 [ 213.248255][ T9] hsr_forward_skb+0x167e/0x2a80 [ 213.248267][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 213.248286][ T9] ? hsr_forward_skb+0xbb/0x2a80 [ 213.248298][ T9] ? __pfx_hsr_forward_skb+0x10/0x10 [ 213.248309][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.248322][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 213.248334][ T9] ? __pfx_netif_skb_features+0x10/0x10 [ 213.248344][ T9] ? hsr_dev_xmit+0x237/0x360 [ 213.248361][ T9] hsr_dev_xmit+0x242/0x360 [ 213.248382][ T9] ? hsr_dev_xmit+0x2d/0x360 [ 213.248399][ T9] dev_hard_start_xmit+0x2cd/0x830 [ 213.248414][ T9] __dev_queue_xmit+0x14d9/0x3950 [ 213.248427][ T9] ? __dev_queue_xmit+0x2b6/0x3950 [ 213.248441][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 213.248467][ T9] ? neigh_connected_output+0x1ea/0x460 [ 213.248482][ T9] ? eth_header+0x11b/0x200 [ 213.248493][ T9] ? __asan_memcpy+0x40/0x70 [ 213.248513][ T9] ? ip6_output+0x126/0x550 [ 213.248527][ T9] ip6_output+0x340/0x550 [ 213.248541][ T9] ? __pfx_ip6_output+0x10/0x10 [ 213.248555][ T9] NF_HOOK+0x177/0x4f0 [ 213.248571][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 213.248585][ T9] ? __pfx_dst_output+0x10/0x10 [ 213.248599][ T9] ? lockdep_hardirqs_on+0x7a/0x110 [ 213.248613][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 213.248629][ T9] ? icmp6_dst_alloc+0x3a6/0x440 [ 213.248644][ T9] mld_sendpack+0x8b4/0xe40 [ 213.248669][ T9] ? mld_sendpack+0x213/0xe40 [ 213.248683][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 213.248703][ T9] mld_ifc_work+0x835/0xe70 [ 213.248718][ T9] ? process_scheduled_works+0xa70/0x1860 [ 213.248734][ T9] process_scheduled_works+0xb5d/0x1860 [ 213.248757][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.248774][ T9] ? assign_work+0x3d5/0x5e0 [ 213.248789][ T9] worker_thread+0xa53/0xfc0 [ 213.248811][ T9] kthread+0x388/0x470 [ 213.248823][ T9] ? __pfx_worker_thread+0x10/0x10 [ 213.248842][ T9] ? __pfx_kthread+0x10/0x10 [ 213.248853][ T9] ret_from_fork+0x514/0xb70 [ 213.248870][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 213.248885][ T9] ? __switch_to+0xc79/0x1410 [ 213.248900][ T9] ? __pfx_kthread+0x10/0x10 [ 213.248913][ T9] ret_from_fork_asm+0x1a/0x30 [ 213.248934][ T9] [ 213.804580][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 213.814232][ T9784] netlink: 'syz.4.971': attribute type 5 has an invalid length. [ 213.940297][ T67] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.955346][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 213.976499][ T67] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.994108][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 214.003159][ T9784] netlink: 'syz.4.971': attribute type 5 has an invalid length. [ 214.012076][ T67] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.033120][ T67] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.409068][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 215.417856][ C0] lec:lec_tx_timeout: lec0 [ 215.422601][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 220.429064][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 220.437916][ C0] lec:lec_tx_timeout: lec0 [ 220.443444][ C0] lec:lec_start_xmit: lec0:No lecd attached