last executing test programs: 4.212263172s ago: executing program 2 (id=2213): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000027f00000101000000020000000000000028"], 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042dbd70000000001f00000000", @ANYRES32=r3, @ANYBLOB="46000600000000002400128009000100626f6e640000000014000280050001000200000005000e0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) 3.625868479s ago: executing program 2 (id=2220): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000700)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @ringbuf_query, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000780)='syzkaller\x00', 0xff, 0x1b, &(0x7f00000007c0)=""/27, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xe, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f00)=[{0x0, 0x1, 0x4, 0x3}], 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(r1, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYRES64=r3], 0x3c}, 0x1, 0x0, 0x0, 0x10004880}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket(0x1, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 3.415695852s ago: executing program 2 (id=2223): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1}, 0x14) (async, rerun: 64) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) 3.198117225s ago: executing program 3 (id=2225): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="35447122ffd41ae2dbec9eaab6a077baa87d850003cd23c3056faea14f9975e6e04ef2c11094acdefc99b9d98ff65d14b7183216d6f7a891b6eb293953ddbf5dba34b5f5cf92eeb9d6a93363c71a37e3ef43bc2fc7e81d6d61102ead8097750a6c8aa4ecd908ef2772109e0195079ce15c048ebdb38be9c0ebecb60e5c9a3a8f90d8fe7637ff81c396d50c2ac9cce9afb8efb6f10ab7d214ef3a5da3cd0e05c33db297bc53da48ab136b9151b84186b9cfded01c9a239c1a70ad1d8ee6063a1af63f8127c8fbffb94abfa9", @ANYRES32=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) socket$inet(0x2, 0x3, 0x9) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x16) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000002980)={0x2, 0x0, @broadcast}, &(0x7f0000003f00)=0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40080) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) 2.996974376s ago: executing program 2 (id=2226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b25bd700000000000033d00637700000008000100fe"], 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/119, 0x77}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000780)=""/232, 0xe8}], 0x5}}], 0x1, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000400000fcffffff0100000008000100020000002c0004808e5a03000200000005000300010000000500030000000000050003000500000005000300070000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004084) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmmsg$inet6(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001802000018000000090000000700000001000093080000000300000086000000a500005f0000000000000000001dcc7c4b6b6106f3935a2f7c541a08eb4a9118997e8b06681cd86bf03723f1a80fac5aa63f0b96443d0bad35185f3e72280cc03a6db6d407cccada9789dd631f7fc20e6fba92d3c33812a41a71b59026bbaeaffd77db25f581140998d741a724f5fa42be4a5f9498139acdda20af592d130541bdf12cc68fb721822b9e9209e269e4ba420ed5c6cd37140ed0ba3cedc8b5ef496ac147126d0f5f6ee8d3c26ba8d8c0df95d0897012e1e81f64ad82cf1f838b37659c8149474a00"/256], 0x0, 0x39, 0x0, 0x1, 0x3}, 0x28) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x400, 0x70bd21, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x615, 0x100000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x3ff}]}}}, @IFLA_LINK={0x8}]}, 0x54}, 0x1, 0xba01, 0x0, 0x40408e0}, 0x20004080) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x1, 0x1}) 2.874532822s ago: executing program 3 (id=2228): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x800, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204a39f}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x75da7cddc8f4a95) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000001680)={0x2, 0x0, @loopback}, 0x10) 2.746297539s ago: executing program 4 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005cc0)=@newlink={0x1cc, 0x10, 0x40d, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="063154a3e049"}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x0, 0x7, 0x10000}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'erspan0\x00'}, {0x14, 0x35, 'syz_tun\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'macvlan1\x00'}]}, @IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET6={0x7c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x18, 0x8, 0xe}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x0, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x0, 0x1b, 0x0, 0x0, 0xf45}, {0x0, 0x4, 0x0, 0x0, 0x80}, {0x0, 0x17, 0x0, 0x0, 0xd}, {0x0, 0x17, 0x0, 0x0, 0x7}, {0x0, 0x1f, 0x0, 0x0, 0x401}, {0x0, 0x17, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x0, 0x0, 0xb00000}]}}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c}}, @AF_BRIDGE={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) 2.488870385s ago: executing program 1 (id=2233): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$pppl2tp(r1, 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000540)=0x5, 0x4) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_eee={0x45, 0x10001, 0x5, 0x2, 0x81, 0xc0, 0x9, 0x8, [0x1, 0x10001]}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x76}, &(0x7f0000000040)=0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@frag={{0x30}, {[0x7fffffff, 0x50], 0x3, 0x0, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x5, 0x5, 0x33, 'netbios-ns\x00', 'syz1\x00', {0xd4c2}}}}, {{@ipv6={@private2, @local, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'pimreg1\x00', 'batadv0\x00', {0xff}, {}, 0x67, 0x5, 0x0, 0x72}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xe}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x0, 0x4e20, 0x6, 0x2, 0xa0, 0x80, 0x6a, r5, 0xee01}, {0x9, 0x0, 0x8, 0x380, 0xfff, 0x6, 0x2, 0x4}, {0x5, 0x1, 0x0, 0x7}, 0x6, 0x6e6bb4, 0x1, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x3501, 0x2, 0x1, 0x16, 0x2, 0x2d, 0x8001}}, 0xe8) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r7, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) unshare(0x22020400) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r8, 0xffffffffffffffff, 0x2c}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{r8, 0xffffffffffffffff}, &(0x7f0000002180), &(0x7f00000021c0)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7bff1384c28348a3}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x28, r11, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x19}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000f8ffff06040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000184b00"/48], &(0x7f0000000340)='GPL\x00', 0x3, 0x1000, &(0x7f0000001100)=""/4096, 0x41000, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000002140)={0x4, 0x2, 0x10000, 0x8001}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000022c0)=[r8, r9, r8, r8, r8, r10], &(0x7f0000002300)=[{0x0, 0x3, 0x10, 0x2}, {0x5, 0x1, 0xc, 0x3}, {0x2, 0x1, 0xc, 0x6}, {0x3, 0x3, 0x2, 0x2}, {0x0, 0x3, 0x1, 0xa}, {0x0, 0x5, 0x4, 0x4}], 0x10, 0x8}, 0x94) 2.426997102s ago: executing program 4 (id=2234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff13ecff0000000003850000002c050000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0x8000}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4100000000000000000000000000000000000000000000000000000000000000000000000000006838ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000040000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0xffe) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff13ecff0000000003850000002c050000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0x8000}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4100000000000000000000000000000000000000000000000000000000000000000000000000006838ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000040000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) (async) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0xffe) (async) 2.14426932s ago: executing program 1 (id=2237): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xffffffa7}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1f580}], 0x8}], 0x1, 0x20040800) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f00000004c0)={{r8, &(0x7f0000000200)='\xaa\xaa\xaa\xaa\xaa', 0x412842, &(0x7f0000000240)={@_ha_fsid={[0x3, 0x9]}, {0x5, 0x9, 0x8001, 0xa812}}, 0xfffffff7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xfffffffe}, {[0x1, 0xfffffffd, 0x5, 0xffffffff]}, 0x0, 0x5d, &(0x7f0000000300)=""/93}) sendmsg$kcm(r9, &(0x7f0000000b40)={&(0x7f0000000540)=@xdp={0x2c, 0x1, 0x0, 0x2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1, &(0x7f0000000a40)=[{0xc0, 0x115, 0x4, "dd8b3044c09e84558e4b9ab70215928197cc1941dbc8f9ec456b67d5ff6e96b9ad3d2b881d23ce32d13a47ee7ef110f1b1d484e9564c4c20a146783540e3b6b501c7b81e04be7c1a1d2d1cb7489fa09926eead87b461491b6aa118818300897edcf01b76fd9c3b0720f3630b7db7a3c8af0f1178692306824ac7c8ead90a29f76bcd0f563a021b47be5a4a6f750754070e4601fd44aa11e6cc6fb2b8aaa4a128cd134ab00642f58a276c34f3b973201e"}, {0x18, 0x10f, 0x32d1, 'w'}], 0xd8}, 0x8810) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@remote, @random="358bede0c77c", @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "b3add107e77e4cdd"}}}}, 0x0) 1.969490339s ago: executing program 3 (id=2238): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002580)=@newtfilter={0x131c, 0x2c, 0xd27, 0x170bd2c, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x0, 0x9}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x12ec, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29f}, @TCA_FLOW_ACT={0x12e0, 0x9, 0x0, 0x1, [@m_csum={0x124, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x1, 0x1, 0x6}, 0xa}}]}, {0xdb, 0x6, "755fe1353098031a82462de5f26e3cf2aae79cdf00274abdc7c3a4bcfcb7cf673819b31f095183aaa5010a86c31a1617161918554d0ab965867cac3a8ee0bebbe67f1eb3e61e36a5afa6db9856069ac7d1bceb9d85d5aed35357e727c1788d9588978cf027b3b3a8a4fbf8ca88e036afdf0b2a5dffa03ab27e3185e4c523e88f7f930956e6e3df5f959164867dea7fe7e27ee2abcff9540d2e1ee70c78d62e9a59fe9cbceff0ea0f6b7f23f91d0b498bab4a488edc1861623bab6d32d9bdc4f4fd62cad2553de59f3713b337df8b91bf3710d2a6a7b640"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x180, 0xc, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xda06}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7fffffff, 0x6, 0x7, 0x9, 0x6}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6239f}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0xb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa062}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0xed, 0x6, "7f5f598a6444aeccd18dec8b83494ec7e9e9e3f1dd496eaf239fb5c633656fb114b47a06baae9a3306ac03f45ff4f9ccc7dd4a14da50d445c56a76ede8eaa56418704e659b587ff60ea0d0df707e3f318631bb6da1fed015c2ba05b8dbad1959ca9b9a4d6b769e3d2d42add95ac9c3324c8446af1c478e6cf8953a09db7aed5c94c5b21670f765177c083063d3115b850b6dffcf2d0420495b537a47bb25ee4a55667ef295431cba9dc6f8ee95ac32d12882c4d9f49f1e38ea65c601f455e7ba137c3628c75e06183f857f355752fe61ff5c53374566d53754abbbe42c1a0a633840c09fddc59a09ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x1038, 0xf, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x131c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='Uf', 0x2}, {&(0x7f0000000100)="ff324d", 0x3}], 0x2, 0x0, 0x10b8}, 0xff00) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x4) r6 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async, rerun: 32) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) (rerun: 32) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (rerun: 32) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000340)=0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.919809366s ago: executing program 2 (id=2239): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x12, r0, 0xeb190000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={[0xff]}, 0x8) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x7fff, 0x7, 0x2, 0x1}, 0x8) 1.862241513s ago: executing program 4 (id=2240): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc, 0xb}, {0xfff1}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x10003, 0x4361, 0x9, 0x9, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x65, 0x4, 0x0, 0x7}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xa}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.737844583s ago: executing program 0 (id=2241): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x3498}, 0x10, 0x800) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000080000000000001000000097000100ffffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) 1.646289755s ago: executing program 2 (id=2242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)={0xc8, 0x35, 0x8, 0x70bd29, 0x25dfdbff, "", [@typed={0xc, 0xf8, 0x0, 0x0, @u64=0x4}, @generic="fe9e915fcd7a001241d8795e796a3560e55e431fd394fd0cfcd840ea7cb11073d7c1b22475bc21060cc407e97f63b3e0de3b9bc9889788f1584cd055e91c1564260e9e09ba5a7a7ac71d789fdf364904de70cc98b90abe68563c22ab326179a2ef0469aef644b7e67dfb749e8ca9307fc6a3111b23cd98472f81d1c625717c040b36c7fdf83b419850ecf4cc7ec72fdbb0067d85", @nested={0x18, 0xda, 0x0, 0x1, [@nested={0x4, 0x8b}, @typed={0x7, 0x15e, 0x0, 0x0, @str='\xff@\x00'}, @nested={0x4, 0x160}, @nested={0x4, 0x124}]}]}, 0xc8}], 0x1, 0x0, 0x0, 0x20000080}, 0x40001) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = epoll_create1(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00'}) r9 = socket(0x1d, 0x2, 0x6) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000f40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) getsockopt$inet_mreqn(r9, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRESOCT, @ANYRES32=r7], 0x1c}}, 0x24048400) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x10000000}) socket$inet(0x2, 0x4000000000000001, 0x0) r12 = gettid() ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000000)=r12) 1.533030001s ago: executing program 4 (id=2243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010014001200000005001500090000000500130003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f00000009c0)={0x12b4, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0xc, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffe7c, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0xf8, 0x3, "aaa8f5ac2a747903e2b8b3cab0ecb4dab6a58525e495aeffcc5474e60a8eb21fc25b0817edb580402ab9f140ab8d154e395940a95823b3d590712b76bfb3fe8edaad18d5fa0284c1d817c131a2864c913a0aec5a99a45dd9d6d8b334309611d96e9f20ea9cd4168c90358d70acbff14743d34ba95e36b350dcea965f9f6fba19ce03fa0ca81bb1eb4cf2f01832446f8bd0c760a63de78260e0fe2e222a88a6a4ec75604da28ece1ddf2d6e9c4945d2e36ff9a5a8ca4cb93cbe6aab1b2c252475df80bf2e36d484b7904e1e53f8693b08c7b8e05cf7b680a0538ec1e01431079238203c9ea3a64ca674826c2337f2c2f4c7886309"}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0x19, 0x3, "881950f3e91734c3dc15fd1027c77cc8740a3f0310"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0xb4, 0x3, "e3c895796c8348d68e5bbb31a32b09087816eb4cd77b35d8282c154d67065cc82e22bb72449203c1cfde19f67a1d5840881946f052b6d07b32eb1dab9679de2dfa9019752725a0fbe3d76c651df9d0c43cb9fba10b564cb8b871a5accc988ae00667f639deed373ffcf8501628d06b6b3e5f3d8c565d1cdf92e96cb26b176428fb72181f15dfe069cd5c08a62fe3d1c0b30bf10b9314e37cc5434bfbfdf75fc431799740f571e59229ed5efcd2a42390"}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010010}, 0x4000001) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'veth1_vlan\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x108, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x80) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x3, 0x104, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x100000}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000400)) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000080000001809000020206925000000000020e3207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c4000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffff58) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="120000000c40"], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.513869365s ago: executing program 1 (id=2244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100000000000275a5345f3206eebe2c87fe7122db4f4620f85b9429bbee8c717c781407b6f716f7a612a0d49ea5be3e99f8ea21431d28a1bf803f11fe550ea5dd844c6280e664d2d06438df8c9f6455fef327ca2a1a089fa8e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ppoll(&(0x7f0000000080)=[{r1, 0x1a0}], 0x1, &(0x7f0000000480), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xb3b}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f00000003c0)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e0008000000080005000000000000000000", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x200040cc) 1.487579825s ago: executing program 0 (id=2245): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x124, 0x41, 0x1, 0x70bd29, 0x4, {0x3}, [@nested={0x4, 0x47}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0x100, 0xd8, 0x0, 0x1, [@typed={0xbd, 0x15, 0x0, 0x0, @binary="364c9d21f5944d03b5240bd8151d9423cd1955cebd35862f2ec237057bc62f962ca70f2bd0b5b7cdb60c1f16befb36a8262636148f49f33217c05b11004a8f2e40e81fdeb88604782efedfed6121fced029273ef21e36d14b831847089950a55cb6e5c0387d6bacf89fadd08ef66e1d18867a1fe3fab5e3d2ffabb1c4594dfc22d8755a5ebc4e6f46d08c2c9c0ccbce141fb7d4dccc1e94d767da193f2982d94839810c4448eb75b1bf878f8a7eb3b3b7bfc0b9bdcc04a652a"}, @typed={0x39, 0xa2, 0x0, 0x0, @binary="2dc5aefc323a81ab9a3c4d7793625c4603dbf46b6f7423788ba822b81efcd2cf77d46fc49a80e811c55a39b91614eb718c16363041"}]}]}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x8d, 0x4) 1.250193833s ago: executing program 3 (id=2246): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003240)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bc27, 0x0, {0x0, 0x0, 0x0, r6, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r4, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r6, 0x7}, 0x14, 0x0}}], 0x1, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000046c0)=ANY=[@ANYRES32], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002980)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="10f9a44004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000da00"/20, @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000007380)=ANY=[@ANYBLOB="1800000021bf0000000000000300000018110000", @ANYRES32, @ANYBLOB="000000005b9cb70152ca669514000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000000000009a758085148dd04b1058f3"], 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 1.249644793s ago: executing program 0 (id=2247): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x11c0, 0x98, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x20, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x20, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x0, 'MARK\x00', 0x2, {0x31, 0x5}}}], {{'\x00', 0x0, 0x70, 0x1c}, {0x28}}}}, 0xfffffc62) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x7, 0x4, 0x900, 0x2, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.076040559s ago: executing program 1 (id=2248): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYRES32=r0], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 1.054685951s ago: executing program 4 (id=2249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="21000000694cc36edd000b000000000000000000080000000000000008000100010000be"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r1], 0x7c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c000000230000022abd7000ffdbdf2500000000060025000200000008001d00000000800800280001070000000000000000000010000a0028bd700028bd7000070000000800290009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x6400c0c4}, 0x80011) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0x10}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtfilter={0xb0, 0x2c, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xfff1, 0x5}, {0x9, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_POLICE={0x4c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0xfffffffc, 0x4, 0xe, {0x48, 0x0, 0x4, 0x80, 0x3, 0x4}, {0x3, 0x2, 0x5b25, 0xc66, 0x5, 0x4}, 0x80000001, 0x47e, 0x9}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc4}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20041090}, 0x4000008) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f0000000040)={'sit0\x00'}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000100)=[{&(0x7f0000000140)="3b010400000000420000000000000000b61779b6", 0x14}], 0x1, 0x6) r10 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r10, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r10, &(0x7f00000002c0)={0x2, 0x3, @multicast1}, 0x10) splice(r8, 0x0, r10, 0x0, 0x8000, 0x0) r11 = socket$netlink(0x10, 0x3, 0xf) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) ioctl$TUNGETDEVNETNS(r12, 0x5460, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r6, r12}) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000006400000a20000000180a01010000000000000000030000090c000540000000000000000130010000050a01010000000000000000050000010900010073797a3000000000080007006e617400080007006e61740008000b400000000385000c00c7669f03a93d0a6dd6538aa77a1acb621b454262464e74d285179ec70c7d89e9558d1c40a42cfdbb61580373e0915f001fb08f294af7d35a3c0da6db09c0e0d8e2163dcae916a7129bdbf105cfb34048c5d9c9eece4ddb7afad6dbb1fb96248f2ed5a8774c88192b258a98a0d630d6985ad1aae4743f9e78f64fbda8b675e9999300000061000c0043761a65f61a3699b1332319739348d100d8836569b805348f29c42c9122b509f6040a20710eaf1585aa3d36c2185b849fa22f07576ea9c98f8c1e369c00249cc72aedb6eb795760ee0e4d303e64fbb2955fe1b771deeece873459cecb0000000900010073797a31000000000c030000000a010200000000000000000300000af6000600dce1b3e9161541ca8247aec29b929728fca24559f9380fbe6fabcf486e61056b381056e435954def40f3934822254675f3f01fc1738d0038863126b15e76e12b76ed13155ec8e7ae9be4c5064cd91c225bc8cee12ac74671a7be4f6c7c07e3d078f663ea5f0bee8eb3c7fbfb6d162f38e5d83f38295ef8e53a25a4a7af6f35c15fe3c4ab69a96182c17893791c834c3fa3591a837ea180a1bb0457206231ad129b97381cd9365ce149912b7b6daab0f35799be072e0a75e42cd0499b2374e05deeeebdc93b789e29f70b289f0022230eea427c00d961b1c93fd57c4520fd2695c956d620e0f50504463a1aaeba6dfef7fe5b00000c000440000000000000000289000600253e86806fc754052911fb2c05d397f99dde00b6fc93e6acbf4256e707e186d538c5be1fab62bb950e13daf7c827ffc07d494b513374484cdeade52a54ed13059447387020082e6de43f8c5a6f9545ff17f500482648998d6cebdcc65f6535a535b56ec08c73206ab1bf692a1eecc9e801fed3fb0b3db050898957d464e294a0902dd2d97600000041000600333e01b810856b42a250758f5a4e35554b6bb65f6fa74f55fb4d1df92c207c5f771133f3b5e858786e205a511622fc7b70c4e391c7aa4b140269a46dce00000008000240000000010900010073797a30000000000800024000000000f6000600b2ded13049af3de91ef2e1ce896ab0f31fe24a96c223907e405dcb2e91d24c0800cb7833e17bf5185996c4e1b588c636feceb99e1963a1d4bb956408ee6de70d3d0cae50a31745468188ce24a0d61c40aa64964834c6936024f8ab23bdc76a8e9f14f2d9199f002498c966044fc08026d99dffcb693b237f5c1459bf8290d40a35200414d968a5bf2fde4473de6c5cbb8fcbb62aa23b75d1fe7d4fee13ee9e86d376cfff4bc484a4072d9166580b9d4b843b3a6a106ecc489cc9a0be204f08a89c4fac7ca9fd242d967da5e14e0da468ca24ddfc9973c361713ee1439b010913f506de2781e79ab9034f1f73698e71804e07d5bba9ee428aace471b9aa1914000008000240000000030800024000000001c0000000080a01010000000000000000000000070c00058008000240000000020c00034000000000000000030900020073797a30000000003c00058008000140000000880800024000000003080001400000005e08000140000008000800024000000003080002400000000308000140000000064c00058008000140000000320800014072e5a227080001400000003208000140000088f708000140000088ca080001400000002b080001400000000808000140000000020800014000000805b00200000e0a01020000000000000000050000000800044000000002080004400000000308000440000000020900010073797a31000000000900020073797a30000000006c020380680200800900090073797a30000000000c00044000000000000000074c020180410001003a45cbf4125d7eb39c0cff6b7cf357e30d580844173d1bcd10ae45ae25b1d70e9145017d10314ac019ebf95b99b20232f6a90eb7066f3a4d13540988b3000000240002800900020073797a30000000000900020073797a300000000008000180fffffffe04000280310001008f31d0fe2510e1b9504d79b9731fb5199c05db81cd62a8a7bfcad3ca7dbddad1b330438f563b29b35e25cbed5f000000180002800900020073797a310000000008000180fffffffc8d0101002d91a00235c52db9f6959738fd93109f9e11aff27fb7f7e7c92d7b9e7c07a4635a2ebcd9c7aeefca61fdc5f36575080e08b320d9907d07e5d5f78b8738d4e8094951c7d656bf1226acae29aed4841d9c36688987e2e3d4068199e3375ddbb1a762a8cb5c31d2472eda41839c81936ebadc18b1d8734e31ed8f97cf7d69eac086c8dffd8fc71fa0833545d0110f6e15c0acfaaf8bc767d051f0c0bce313f1c728e6919884182b077ce9b9ee336ac66e5faead59693e82ad97feb78e678e3667a747a386c8cdd68bd7fd425a606fa41b424af6c90c64f13a3e972c04b8c0c9fdc557450bde0afbbc48618080a6fa7dc4a583f25580ad02d8c42595bc6b4cf1c1c7c0f0cc08cea9cbf9e080d19e6446e295a5f77a856b1e5b424222087347305d72ea8a771db4adc5117057359523b9b307d36c0a0ab29872e1e2295279ddcfd142291d17435827fa0a3e831bd573af37daeb2b36845b7367fb413bae9891dda6886adada9c160088248586a2277a50f6fd209f4f06e16dc2c4a5c6d23dfaa159962ed13776353f0f86e9000000140000001100010000000000000000000100000a566e5338af649fcc09233c93aad55323ce16910de1d791c9c9dfb646d59bbe1bf133bf5fc24c984932001633d607bd9d9b37d4c6480dd2a55de9b65a82c2ac7faadfae5f9851d339ca6ebc8dcfe55c8ef2179fae57a43e66185c52263bd68291da8c3f0cc9c0dc59c8f7e5e81e047e4afcb438b19a713445ca414ed0"], 0x7f4}, 0x1, 0x0, 0x0, 0x4000091}, 0x10) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.002090229s ago: executing program 0 (id=2250): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r7, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 777.52288ms ago: executing program 1 (id=2251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) (rerun: 32) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000240)="94c0020187f2c020372deb2b10efa3f826", 0xfdef}], 0x1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x34, r2, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r6, 0x952de000) (async, rerun: 32) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0xc0, r2, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffb17, 0x3f}}}}, [@NL80211_ATTR_OPER_CLASS={0x57, 0xd6, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xfc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x857a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x82}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @chandef_params]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x84040) (rerun: 32) 776.235778ms ago: executing program 0 (id=2252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x0, 0x4, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x5}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f0000000040)='/dev/net/tun\x00', 0x500, &(0x7f0000000180)={@align=0x8, {0x8000, 0x5, 0xfffffffb, 0xb}}, 0x6, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x800}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x73d5, {{0x2, 0x4e21, @broadcast}}}, 0x88) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, [{0x39, 0x3, "669faeb9808aed37d12ec7a4a494b34ab0b263d63aa8"}]}}}}}}, 0x0) 625.397797ms ago: executing program 4 (id=2253): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @rand_addr=' \x01\x00', 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000680)={r1, @in={{0x2, 0x4e21, @empty}}, 0xfffe, 0xb92}, 0x90) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000300)={0x80}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd40effedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="20ec7e8627a5a481d75fd55d19fef7118843a9ed5d38920e0000008f1d6f0aba9e0a945b890ecdf3645f03b7f3ea17a816df15245dae471b9e94112bfff207f45780403b3ab5e754695a8fc73456bc9bff0f00000000000096a90a410a274faeb8913456382a1116b40a59e7ace64f0905e21b463dfd0be0af3248c0f996ac837ce2a18a5db9d900ca6f3009d91d", 0x80, 0x800, &(0x7f0000000000)={0x2, 0x4e1a, @multicast2}, 0xfffffecc) 554.108799ms ago: executing program 3 (id=2254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480200001800700010072740000140002800800014000000015080002400000000024000180090001006861736800000000140002800800024000000017080007"], 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 214.74196ms ago: executing program 3 (id=2255): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x1, 0x31, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x700, 0x4, 0x5}}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newneigh={0x5c, 0x1c, 0x8, 0x70bd29, 0x25dfdbfd, {0x1c, 0x0, 0x0, r2, 0x4, 0x1e, 0x1}, [@NDA_CACHEINFO={0x14, 0x3, {0x8, 0x3ff, 0x7, 0x1bb}}, @NDA_MASTER={0x8, 0x9, 0x8}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_DST_MAC={0xa}, @NDA_PROBES={0x8, 0x4, 0x10000}, @NDA_FLAGS_EXT={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x40) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x80000000) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) close(0x3) 98.625553ms ago: executing program 0 (id=2256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000440)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649ff9", 0x68}], 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r4], 0x7c}, 0x1, 0x0, 0x0, 0x60000005}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x5, 0x2, 0x0, 0x0, @binary=';'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) r7 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@caif, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7ff, 0x1, [0x6]}, &(0x7f0000000180)=0xa) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000001c0)={r8, 0x8, 0x30}, &(0x7f0000000240)=0xc) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0800080005"], 0xfdef) 0s ago: executing program 1 (id=2257): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) syz_emit_ethernet(0x1a, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa810019008864abaa00fd27a700f8ab10babceae0973187147feac889af7153a3d58240919942b47a98e6db2ea4901f18b530717090578264778470e5e21e97dd6d4c1432e460ab47ab5a3ab1c724c506a6bd9ba0340e8acdf8be2dc3"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = accept4$phonet_pipe(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x40000) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="e857f50a167e91384e83c5c5000000000806000186dd06100008aaaaaaaaaa21805eff010000000000000000000000000001bbbbbbbbbbbbfe800000000000000000000000000041"], &(0x7f0000000180)={0x1, 0x2, [0xd9e, 0xf2e, 0xccf, 0x21d]}) syz_emit_ethernet(0x33, &(0x7f0000001dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6510b4c9dddf6faf573273dd2513f950d08a603b2bef4f04800ecb85fff7611553575c6b1f8e600cf2880319fe62d7908fd885c055c750740e3a2b9f9b1fc0fc5639a03f09ceac70f9ec5f39ce75bfd7c4f860c470eb48686cbeea7932fbd97afe6741f01d8c368961c21d9f2f9b4d15a0a279061ff5a33e6ca66c1244e4b90b51cb", @ANYBLOB="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", @ANYRES8=r2, @ANYRES64=r3], 0x0) syz_emit_ethernet(0x31, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa1f0800450000230000000200119078000040000000000000004e20000f9078cc30e06ad1b756bf78b94e97fb7578c9e492298b58da4abf7815d594156167f7597c0958ef1e98a334c8bc2e7c71aa30d62b9177c05267a7ef"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r9], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r13], 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000000) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYRES64=r11, @ANYRESDEC=r5, @ANYRES64=r10, @ANYRESOCT=r0, @ANYRESOCT=r13], 0x160c}, 0x1, 0x0, 0x0, 0x4c040}, 0x8000) kernel console output (not intermixed with test programs): T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.591634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.772552][T10308] __nla_validate_parse: 4 callbacks suppressed [ 229.772576][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1047'. [ 229.772616][T10308] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 229.904828][T10310] batadv1: entered promiscuous mode [ 229.904854][T10310] batadv1: entered allmulticast mode [ 229.965794][T10316] tun0: tun_chr_ioctl cmd 1074025677 [ 229.965917][T10316] tun0: linktype set to 0 [ 229.991833][T10319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.209972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.327035][T10331] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 230.492663][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.493094][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.544408][T10371] netlink: Conntrack attr has 8 unknown bytes [ 231.877933][T10377] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1062'. [ 232.018004][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 232.032630][T10385] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 232.412201][T10395] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 232.415283][T10395] bond2 (unregistering): Released all slaves [ 232.745193][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 232.975440][T10408] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.975642][T10408] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.279690][T10444] nbd: couldn't find device at index 65536 [ 233.301853][ T31] audit: type=1804 audit(1789234365.510:4): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1073" name="/newroot/211/cgroup.controllers" dev="tmpfs" ino=1105 res=1 errno=0 [ 233.302381][ T31] audit: type=1800 audit(1789234365.510:5): pid=10446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1073" name="cgroup.controllers" dev="tmpfs" ino=1105 res=0 errno=0 [ 233.305672][T10421] bridge5: port 1(veth5) entered blocking state [ 233.305802][T10421] bridge5: port 1(veth5) entered disabled state [ 233.305977][T10421] veth5: entered allmulticast mode [ 233.338068][T10421] veth5: entered promiscuous mode [ 233.401115][T10448] netlink: 'syz.0.1074': attribute type 15 has an invalid length. [ 233.401139][T10448] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1074'. [ 233.468184][T10423] bridge5: port 2(veth7) entered blocking state [ 233.468360][T10423] bridge5: port 2(veth7) entered disabled state [ 233.468614][T10423] veth7: entered allmulticast mode [ 233.489116][T10423] veth7: entered promiscuous mode [ 233.934997][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 234.474677][T10492] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1084'. [ 234.783260][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1086'. [ 234.807331][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1087'. [ 235.256572][T10516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'. [ 235.256816][T10516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'. [ 235.257059][T10516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'. [ 235.257261][T10516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'. [ 235.257491][T10516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'. [ 235.257685][T10516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'. [ 235.257889][T10516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'. [ 235.261910][T10515] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'. [ 235.330187][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.541145][T10522] pim6reg: entered allmulticast mode [ 235.568569][T10522] pim6reg: left allmulticast mode [ 235.843563][T10529] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 236.009441][T10535] bridge6: entered allmulticast mode [ 236.132778][T10538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.182226][T10540] net_ratelimit: 4 callbacks suppressed [ 236.182254][T10540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.183976][T10538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.236322][T10546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.915151][T10574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.958334][T10574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.385018][T10583] pim6reg1: entered promiscuous mode [ 237.385063][T10583] pim6reg1: entered allmulticast mode [ 237.916824][ T6695] udevd[6695]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 237.938323][ T6695] udevd[6695]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 238.056691][T10592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.057642][T10592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.058034][T10592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.092445][T10590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.108448][T10590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.126369][T10590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.127405][T10590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.371676][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.531777][T10428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.636196][T10614] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 238.791454][T10614] bond10: entered promiscuous mode [ 238.791934][T10614] 8021q: adding VLAN 0 to HW filter on device bond10 [ 238.856490][T10614] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 239.001334][T10620] nbd: device at index 64 is going down [ 239.055638][T10629] IPVS: set_ctl: invalid protocol: 62872 224.0.0.2:20004 [ 239.142568][T10636] nbd: device at index 64 is going down [ 239.374335][ T6695] udevd[6695]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 239.724392][T10662] v: renamed from veth0_vlan (while UP) [ 239.824298][T10664] sctp: [Deprecated]: syz.2.1133 (pid 10664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.824298][T10664] Use struct sctp_sack_info instead [ 240.207099][T10675] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.237971][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.238846][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.734743][T10700] __nla_validate_parse: 69 callbacks suppressed [ 240.734766][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 240.734881][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 241.205738][T10705] net_ratelimit: 122 callbacks suppressed [ 241.205763][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.206773][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.207385][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.208068][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.208676][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.271149][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.272254][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.273200][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.273967][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.274633][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.096013][T10722] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1145'. [ 242.985457][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 242.987221][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 243.462971][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1154'. [ 243.936791][T10757] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.936963][T10757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.937328][T10757] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.937458][T10757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.007875][T10757] dummy0: left promiscuous mode [ 244.123524][T10757] macvlan0: left promiscuous mode [ 244.195169][T10757] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 244.238069][T10757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.283539][T10757] syzkaller0: left promiscuous mode [ 244.318924][T10757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.339145][T10757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.380098][T10757] bridge0: port 3(wlan1) entered blocking state [ 244.380241][T10757] bridge0: port 3(wlan1) entered forwarding state [ 244.389200][T10757] geneve2: left promiscuous mode [ 244.464408][T10757] virt_wifi0: entered promiscuous mode [ 244.464432][T10757] virt_wifi0: entered allmulticast mode [ 244.464776][T10757] macsec1: left promiscuous mode [ 244.508123][T10757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.669997][T10757] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.674328][T10757] bond10: left promiscuous mode [ 244.828348][ T1123] bond7: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 244.857715][ T1123] bond7: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 244.858189][ T1123] bond7: (slave veth11): making interface the new active one [ 244.921223][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 244.921441][ T1123] bond7: active interface up! [ 244.971308][ T12] bridge0: port 3(wlan1) entered disabled state [ 245.117005][T10789] vlan2: entered promiscuous mode [ 245.117033][T10789] team0: entered promiscuous mode [ 245.117047][T10789] team_slave_0: entered promiscuous mode [ 245.117266][T10789] team_slave_1: entered promiscuous mode [ 245.131054][T10789] batadv1: entered promiscuous mode [ 245.403877][ T50] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 245.442668][ T50] bond5: (slave veth5): making interface the new active one [ 245.470870][T10808] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 245.493581][ T50] bond5: active interface up! [ 246.331985][T10837] syzkaller0: entered promiscuous mode [ 246.332029][T10837] syzkaller0: entered allmulticast mode [ 246.382829][T10837] tipc: Started in network mode [ 246.382866][T10837] tipc: Node identity 622e6cfc3e9, cluster identity 4711 [ 246.414050][T10837] tipc: Enabled bearer , priority 0 [ 246.426523][T10835] tipc: Resetting bearer [ 246.489031][T10835] tipc: Disabling bearer [ 246.514356][T10844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'. [ 246.566510][T10844] x_tables: unsorted underflow at hook 2 [ 246.589194][T10846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1174'. [ 246.658392][T10846] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 246.792234][T10846] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.814017][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 246.814077][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 246.814122][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 246.814166][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 246.814211][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 246.814264][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 246.814314][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 246.814358][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 247.128471][T10865] net_ratelimit: 22 callbacks suppressed [ 247.128494][T10865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.128862][T10866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.405074][T10880] ip6gretap1: entered allmulticast mode [ 247.416324][T10880] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 247.417018][T10880] batman_adv: batadv0: Adding interface: ip6gretap1 [ 247.417032][T10880] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.417065][T10880] batman_adv: batadv0: Interface activated: ip6gretap1 [ 247.657522][T10887] ip_tables: iptables: counters copy to user failed while replacing table [ 247.868899][T10887] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 247.888987][T10887] bond2 (unregistering): Released all slaves [ 248.337058][T10899] bridge0: port 3(wlan1) entered disabled state [ 248.350805][T10908] syzkaller1: entered promiscuous mode [ 248.350830][T10908] syzkaller1: entered allmulticast mode [ 248.398763][T10914] Bluetooth: hci0: unsupported parameter 512 [ 248.398788][T10914] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 248.477237][T10916] syzkaller0: entered promiscuous mode [ 249.178447][T10938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.294091][T10949] Unknown options in mask 6 [ 249.376866][T10938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.717180][T10948] tipc: Enabling of bearer rejected, already enabled [ 249.718445][T10961] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 249.743476][T10952] erspan0: entered promiscuous mode [ 249.796621][T10951] syzkaller1: entered promiscuous mode [ 249.796641][T10951] syzkaller1: entered allmulticast mode [ 250.074586][T10973] tipc: Enabling of bearer rejected, already enabled [ 250.586281][T11013] netlink: 'syz.1.1207': attribute type 3 has an invalid length. [ 251.290492][T11033] syzkaller0: left promiscuous mode [ 251.290516][T11033] syzkaller0: left allmulticast mode [ 251.715827][T11049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.867434][T11055] Bluetooth: MGMT ver 1.23 [ 252.295450][T11073] hsr0: entered allmulticast mode [ 252.295479][T11073] hsr_slave_0: entered allmulticast mode [ 252.295499][T11073] hsr_slave_1: entered allmulticast mode [ 252.317778][T11073] __nla_validate_parse: 62 callbacks suppressed [ 252.317804][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 252.477559][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 252.526506][T11073] hsr0 (unregistering): left allmulticast mode [ 253.060781][T11095] netlink: 'syz.2.1229': attribute type 171 has an invalid length. [ 253.312024][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 253.508030][T11106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1232'. [ 253.911041][T11117] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 253.911080][T11117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.014137][T11125] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 254.118822][T11129] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 254.240865][T11125] 8021q: adding VLAN 0 to HW filter on device bond11 [ 254.651996][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 254.804007][T11150] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 254.804049][T11150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.124330][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1244'. [ 255.185450][T11158] netlink: zone id is out of range [ 255.185653][T11158] netlink: zone id is out of range [ 255.347757][T11163] tc_dump_action: action bad kind [ 255.401001][T11166] sock: sock_timestamping_bind_phc: sock not bind to device [ 255.623368][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 255.820803][T11175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1250'. [ 255.856653][T11175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.994473][T11178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.574332][T11189] ipvlan2: entered promiscuous mode [ 256.594703][T11189] team0: Device ipvlan2 failed to register rx_handler [ 256.775559][T11193] netlink: 'syz.4.1254': attribute type 15 has an invalid length. [ 256.775585][T11193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1254'. [ 256.810020][T11197] netlink: 'syz.4.1254': attribute type 15 has an invalid length. [ 256.810086][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1254'. [ 256.872217][T11188] sctp: [Deprecated]: syz.2.1252 (pid 11188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.872217][T11188] Use struct sctp_sack_info instead [ 257.496028][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 257.674930][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 258.041706][T11238] bond4: option packets_per_slave: invalid value (18446744072277895850) [ 258.041738][T11238] bond4: option packets_per_slave: allowed values 0 - 65535 [ 258.088906][T11238] bond4 (unregistering): Released all slaves [ 259.626977][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 259.740296][T11304] netlink: zone id is out of range [ 259.740315][T11304] netlink: zone id is out of range [ 259.740325][T11304] netlink: zone id is out of range [ 259.740335][T11304] netlink: zone id is out of range [ 259.740345][T11304] netlink: zone id is out of range [ 259.740354][T11304] netlink: zone id is out of range [ 259.740633][T11304] netlink: zone id is out of range [ 259.740644][T11304] netlink: zone id is out of range [ 259.740653][T11304] netlink: zone id is out of range [ 259.740663][T11304] netlink: zone id is out of range [ 259.814665][T11309] netlink: 'syz.3.1284': attribute type 21 has an invalid length. [ 259.956853][T11298] bridge0: port 3(dummy0) entered disabled state [ 259.957210][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.180121][T11298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.348391][T11298] bond2: left promiscuous mode [ 260.348547][T11298] bond2: left allmulticast mode [ 260.364774][T11298] geneve3: left promiscuous mode [ 260.365001][T11298] gretap1: left promiscuous mode [ 260.419166][T11309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1284'. [ 260.419211][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1284'. [ 260.425114][T10910] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 260.500453][ T1014] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 260.500515][ T1014] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 260.500557][ T1014] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 261.870514][T11374] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1302'. [ 261.976381][T11376] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1303'. [ 262.084805][T11381] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1305'. [ 262.266439][T11389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1308'. [ 262.403741][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 262.505717][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 262.744579][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 263.174444][T11423] netlink: 'syz.3.1316': attribute type 21 has an invalid length. [ 263.174508][T11423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1316'. [ 263.362437][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 263.365152][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 263.526130][T11410] dvmrp8: entered allmulticast mode [ 263.584884][T11437] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1319'. [ 263.610866][T11438] sctp: [Deprecated]: syz.4.1320 (pid 11438) Use of int in max_burst socket option deprecated. [ 263.610866][T11438] Use struct sctp_assoc_value instead [ 264.088634][T11464] tc_dump_action: action bad kind [ 264.551423][T11486] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 264.601290][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 264.636483][T11496] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 264.756117][T11496] bond5: option mode: invalid value (10) [ 264.769332][T11496] bond5 (unregistering): Released all slaves [ 264.894204][T11506] batadv1: entered promiscuous mode [ 264.894230][T11506] batadv1: entered allmulticast mode [ 264.957988][T11509] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1333'. [ 265.797699][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 265.858013][T11531] syzkaller0: entered promiscuous mode [ 265.858044][T11531] syzkaller0: entered allmulticast mode [ 265.931903][T10909] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 265.931958][T10909] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 265.931997][T10909] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 265.932037][T10909] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 266.119110][T11563] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1347'. [ 266.467976][T11576] netlink: 'syz.2.1349': attribute type 2 has an invalid length. [ 266.823643][T11591] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 269.583232][T11576] : entered promiscuous mode [ 269.585428][T11591] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 269.873195][T11595] net_ratelimit: 500 callbacks suppressed [ 269.873222][T11595] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 269.873397][ T5278] veth1_vlan: left promiscuous mode [ 270.355786][T11631] __nla_validate_parse: 4 callbacks suppressed [ 270.355810][T11631] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1360'. [ 270.730844][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 270.752105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.102541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.207826][T11648] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 271.633922][T11673] tipc: Can't bind to reserved service type 1 [ 271.851370][T11681] ovs-s!: entered promiscuous mode [ 271.993665][T11689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1371'. [ 272.422183][T11705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.628772][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 272.648214][T11711] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1375'. [ 272.759238][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 272.983992][T11674] bond0: (slave bond_slave_1): Releasing backup interface [ 273.085453][T11732] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1380'. [ 273.396724][T11742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.483224][T11742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.725901][T11760] Cannot find del_set index 2 as target [ 273.729109][T11760] nbd2: detected capacity change from 0 to 127 [ 273.852457][T11767] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1389'. [ 273.986955][T11777] xt_esp: unknown flags DD [ 274.272292][ T5623] block nbd2: Receive control failed (result -104) [ 274.459022][T11792] bond5: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 274.459055][T11792] bond5: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 274.482278][T11792] bond5: entered allmulticast mode [ 274.483422][T11792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.835840][ T5632] block nbd3: Receive control failed (result -32) [ 274.849795][ T5623] block nbd3: Receive control failed (result -32) [ 274.926644][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 275.103222][T11824] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1401'. [ 275.691619][T11844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1407'. [ 275.784080][T11846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1408'. [ 276.063865][T11855] ip6gretap1: entered allmulticast mode [ 276.067212][T11855] batman_adv: batadv0: Adding interface: ip6gretap1 [ 276.067232][T11855] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.067424][T11855] batman_adv: batadv0: Interface activated: ip6gretap1 [ 276.122058][T11855] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 276.128740][T11855] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 276.502879][T11849] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 276.519215][T11849] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 277.179056][T11883] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1416'. [ 278.411675][T11933] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1427'. [ 278.533959][T11934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'. [ 278.598527][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 278.598561][T11937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1428'. [ 278.741648][T11946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 279.537137][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 279.566332][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 279.923429][T11995] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 279.993548][T11999] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 280.133063][ T1688] block nbd2: Connection timed out, retrying (0/1 alive) [ 280.133639][ T1688] block nbd2: Connection timed out, retrying (0/1 alive) [ 280.135109][ T1688] block nbd2: Connection timed out, retrying (0/1 alive) [ 280.135156][ T1688] block nbd2: Connection timed out, retrying (0/1 alive) [ 280.136023][ T1688] block nbd2: Dead connection, failed to find a fallback [ 280.180950][T11995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.594303][T12001] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 280.963091][T12019] __nla_validate_parse: 32 callbacks suppressed [ 280.963117][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 281.012093][T12019] batman_adv: batadv0: Interface deactivated: macvlan2 [ 281.073036][T12019] batman_adv: batadv0: Removing interface: macvlan2 [ 281.235480][T12029] netlink: 'syz.1.1450': attribute type 29 has an invalid length. [ 281.235701][T12028] openvswitch: netlink: IP tunnel TTL not specified. [ 281.256585][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 281.256613][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'. [ 281.256644][T12029] netlink: 'syz.1.1450': attribute type 11 has an invalid length. [ 281.297765][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 281.297793][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'. [ 281.297818][T12029] netlink: 'syz.1.1450': attribute type 11 has an invalid length. [ 281.601831][T12041] IPVS: sh: FWM 3 0x00000003 - no destination available [ 281.777205][T12047] netlink: 'syz.2.1456': attribute type 30 has an invalid length. [ 282.334376][T12038] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 283.713192][T12118] sock: sock_timestamping_bind_phc: sock not bind to device [ 284.113817][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 284.246581][T12139] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1480'. [ 284.574239][T12149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1483'. [ 286.068003][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1495'. [ 286.114579][T12204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1497'. [ 286.520578][T12216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1500'. [ 286.551317][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 286.633974][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 286.666664][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1503'. [ 287.236511][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1507'. [ 287.253277][T12245] netlink: 'syz.4.1507': attribute type 1 has an invalid length. [ 287.447025][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 287.447058][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 287.657512][T12258] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1508'. [ 288.635013][T12296] sctp: [Deprecated]: syz.3.1517 (pid 12296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.635013][T12296] Use struct sctp_sack_info instead [ 290.269954][T12361] erspan0: left promiscuous mode [ 290.390104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.457405][T12361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 290.721094][T12376] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 290.998357][T12381] bond8: option arp_validate: invalid value (1048579) [ 291.094124][T12381] bond8 (unregistering): Released all slaves [ 291.229017][T12389] __nla_validate_parse: 22 callbacks suppressed [ 291.229043][T12389] netlink: 400 bytes leftover after parsing attributes in process `syz.4.1535'. [ 291.252206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.428039][T12386] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 291.514451][T12376] bridge9: entered promiscuous mode [ 292.367681][T12434] syzkaller0: entered promiscuous mode [ 292.367709][T12434] syzkaller0: entered allmulticast mode [ 292.522879][T12437] xt_CT: No such helper "snmp_trap" [ 292.933889][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 292.951117][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 293.289056][T12456] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 293.300379][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1551'. [ 293.376291][T12465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1552'. [ 293.501657][T12456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.570040][T12457] bond3: (slave geneve0): making interface the new active one [ 293.601658][T12457] bond3: (slave geneve0): Enslaving as an active interface with an up link [ 293.876947][T12486] netlink: 'syz.4.1558': attribute type 21 has an invalid length. [ 293.876975][T12486] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1558'. [ 293.985395][T12486] netlink: 'syz.4.1558': attribute type 4 has an invalid length. [ 293.985423][T12486] netlink: 'syz.4.1558': attribute type 3 has an invalid length. [ 293.985438][T12486] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1558'. [ 294.089241][T12442] syz0: rxe_newlink: already configured on bond0 [ 294.435102][T12511] bond4 (unregistering): Released all slaves [ 294.527616][T12524] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1564'. [ 295.067686][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1573'. [ 295.085133][T12543] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 295.087781][T12544] bridge_slave_0: left allmulticast mode [ 295.087812][T12544] bridge_slave_0: left promiscuous mode [ 295.088121][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.123597][T12544] bridge_slave_1: left allmulticast mode [ 295.123627][T12544] bridge_slave_1: left promiscuous mode [ 295.123808][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.200006][T12544] team0: Port device team_slave_0 removed [ 295.240100][T12544] team0: Port device team_slave_1 removed [ 295.241712][T12544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.241734][T12544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.263094][T12544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.263123][T12544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.294639][T12544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.774985][T12566] netlink: 'syz.3.1578': attribute type 2 has an invalid length. [ 296.213898][T12576] syzkaller1: entered allmulticast mode [ 296.324182][T12578] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1581'. [ 296.348754][T12578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'. [ 296.732459][T12593] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 296.785086][T12593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.837014][T12593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.850681][T12593] bond6: (slave batadv0): Enslaving as a backup interface with an up link [ 296.911412][ T60] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 296.946097][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 297.008224][T12607] netlink: 'syz.3.1588': attribute type 5 has an invalid length. [ 297.008248][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 297.040186][ T50] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.087987][T12611] bond12: Unable to set up delay as MII monitoring is disabled [ 297.106838][T12611] bond12 (unregistering): Released all slaves [ 297.156767][T12613] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 297.178270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.278017][T12617] netlink: 'syz.1.1590': attribute type 25 has an invalid length. [ 297.289993][T12617] bridge0: port 4(bond0) entered blocking state [ 297.290239][T12617] bridge0: port 4(bond0) entered disabled state [ 297.290436][T12617] bond0: entered allmulticast mode [ 297.290456][T12617] bond_slave_0: entered allmulticast mode [ 297.295433][T12619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1590'. [ 297.297904][T12617] bond0: entered promiscuous mode [ 297.297958][T12617] bond_slave_0: entered promiscuous mode [ 297.346803][T12617] bridge0: port 4(bond0) entered blocking state [ 297.347815][T12617] bridge0: port 4(bond0) entered forwarding state [ 297.367850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.422971][T12619] hsr_slave_1 (unregistering): left promiscuous mode [ 297.692312][T12630] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 297.824550][T12634] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1594'. [ 297.965401][T12640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1596'. [ 298.132611][T12651] x_tables: duplicate underflow at hook 3 [ 298.465797][T12658] netlink: 'syz.4.1599': attribute type 9 has an invalid length. [ 298.512251][T12663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1599'. [ 299.491417][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1609'. [ 299.493416][T12691] netlink: 'syz.3.1609': attribute type 1 has an invalid length. [ 300.120121][T12712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1616'. [ 300.387293][T12726] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 300.447324][T12726] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.463161][T12729] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 300.468620][T12726] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 300.536302][T12726] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.174442][T12756] syzkaller0: entered promiscuous mode [ 301.174469][T12756] syzkaller0: entered allmulticast mode [ 301.656922][T12780] __nla_validate_parse: 7 callbacks suppressed [ 301.656974][T12780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1633'. [ 301.717395][T12774] bridge0: port 4(bond0) entered disabled state [ 301.717629][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.719317][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.794000][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 301.852764][T12784] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 301.875188][T12787] xt_IDLETIMER: label is empty or not nul-terminated [ 301.931007][T12787] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 301.931032][T12787] netlink: 'syz.4.1635': attribute type 4 has an invalid length. [ 301.931046][T12787] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1635'. [ 301.931351][T12787] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 301.931368][T12787] netlink: 'syz.4.1635': attribute type 4 has an invalid length. [ 301.931382][T12787] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1635'. [ 301.931662][T12787] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1635'. [ 301.934734][T12787] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1635'. [ 301.935128][T12787] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1635'. [ 301.935389][T12787] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1635'. [ 301.935751][T12787] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1635'. [ 301.936076][T12787] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1635'. [ 302.062063][T12784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.471079][T12804] erspan0: entered promiscuous mode [ 302.471103][T12804] erspan0: entered allmulticast mode [ 302.714158][T12832] sctp: [Deprecated]: syz.3.1642 (pid 12832) Use of int in max_burst socket option. [ 302.714158][T12832] Use struct sctp_assoc_value instead [ 303.037371][T12844] syzkaller0: entered promiscuous mode [ 303.037396][T12844] syzkaller0: entered allmulticast mode [ 303.657406][T12867] netdevsim0: mtu greater than device maximum [ 303.839724][T12875] validate_nla: 36 callbacks suppressed [ 303.839751][T12875] netlink: 'syz.4.1652': attribute type 1 has an invalid length. [ 303.948720][T12873] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.964406][T12873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.988128][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.001140][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.020736][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.022617][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.023673][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.068738][T12873] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 304.095644][T12884] netlink: Unknown nat attribute (0) [ 304.095685][T12884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.603885][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.977369][T12917] ip6tnl3: entered promiscuous mode [ 304.977398][T12917] ip6tnl3: entered allmulticast mode [ 305.635866][T12484] bond6: (slave batadv0): link status definitely down, disabling slave [ 305.682746][T12950] vlan2: left allmulticast mode [ 305.682783][T12950] geneve0: left allmulticast mode [ 305.682804][T12950] vlan2: left promiscuous mode [ 305.682818][T12950] geneve0: left promiscuous mode [ 305.683498][T12950] bridge0: port 4(vlan2) entered disabled state [ 305.754073][T12950] dummy0: left allmulticast mode [ 305.754097][T12950] dummy0: left promiscuous mode [ 305.754280][T12950] bridge0: port 3(dummy0) entered disabled state [ 305.794329][T12950] bridge_slave_1: left allmulticast mode [ 305.794371][T12950] bridge_slave_1: left promiscuous mode [ 305.794595][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.825436][T12950] bridge_slave_0: left allmulticast mode [ 305.825467][T12950] bridge_slave_0: left promiscuous mode [ 305.829048][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.731008][T12980] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 306.818532][T12980] 8021q: adding VLAN 0 to HW filter on device bond12 [ 306.913315][T12982] __nla_validate_parse: 33 callbacks suppressed [ 306.913342][T12982] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1673'. [ 306.913545][T12982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1673'. [ 307.980438][T13007] netlink: 'syz.4.1680': attribute type 9 has an invalid length. [ 308.230592][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 308.604990][T13033] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1688'. [ 308.761073][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 308.761161][T13035] bond1: left allmulticast mode [ 308.761315][T13035] bond1: left promiscuous mode [ 308.761706][T13035] bridge0: port 3(bond1) entered disabled state [ 308.799746][T13035] bridge_slave_1: left allmulticast mode [ 308.799777][T13035] bridge_slave_1: left promiscuous mode [ 308.801766][T13035] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.839102][T13035] bridge_slave_0: left allmulticast mode [ 308.839132][T13035] bridge_slave_0: left promiscuous mode [ 308.852735][T13035] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.121815][ T13] net_ratelimit: 9 callbacks suppressed [ 309.121840][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.122177][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.363409][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 309.364530][T13064] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 309.433787][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1692'. [ 309.475998][T13064] 8021q: adding VLAN 0 to HW filter on device bond13 [ 309.547506][T13067] bond13: (slave geneve4): making interface the new active one [ 309.560913][T13067] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 309.567821][T13060] syzkaller0: entered promiscuous mode [ 309.567848][T13060] syzkaller0: entered allmulticast mode [ 309.570662][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.571054][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.571491][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.588552][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.599024][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.778634][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 309.978822][T13078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.008574][T13081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1698'. [ 310.008632][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 310.220768][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.221008][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.707215][T13102] 0: renamed from hsr0 (while UP) [ 310.716295][T13102] 0: entered allmulticast mode [ 310.716322][T13102] hsr_slave_0: entered allmulticast mode [ 310.717033][T13102] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 310.809820][T13107] syzkaller1: entered promiscuous mode [ 310.809847][T13107] syzkaller1: entered allmulticast mode [ 311.404300][T13131] veth0: entered promiscuous mode [ 311.548240][T13134] syz.3.1717: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 311.548939][T13134] CPU: 1 UID: 0 PID: 13134 Comm: syz.3.1717 Not tainted syzkaller #0 PREEMPT(full) [ 311.548969][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.548996][T13134] Call Trace: [ 311.549007][T13134] [ 311.549018][T13134] dump_stack_lvl+0xe8/0x150 [ 311.549061][T13134] warn_alloc+0x24d/0x270 [ 311.549086][T13134] ? kasan_save_track+0x4f/0x80 [ 311.549111][T13134] ? kasan_save_track+0x3e/0x80 [ 311.549138][T13134] ? __pfx_warn_alloc+0x10/0x10 [ 311.549159][T13134] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 311.549194][T13134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.549263][T13134] __vmalloc_node_range_noprof+0x127/0x1540 [ 311.549322][T13134] ? rcu_is_watching+0x16/0xb0 [ 311.549356][T13134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.549391][T13134] ? __kmalloc_cache_noprof+0x321/0x600 [ 311.549414][T13134] ? __kmalloc_cache_noprof+0x14d/0x600 [ 311.549436][T13134] ? xskq_create+0x56/0x220 [ 311.549475][T13134] xskq_create+0x148/0x220 [ 311.549497][T13134] ? xsk_init_queue+0x8a/0xe0 [ 311.549536][T13134] xsk_init_queue+0x8a/0xe0 [ 311.549574][T13134] xsk_setsockopt+0x52a/0x960 [ 311.549612][T13134] ? __pfx_xsk_setsockopt+0x10/0x10 [ 311.549648][T13134] ? __pfx_aa_sk_perm+0x10/0x10 [ 311.549688][T13134] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 311.549717][T13134] ? __pfx_xsk_setsockopt+0x10/0x10 [ 311.549753][T13134] do_sock_setsockopt+0x17c/0x1b0 [ 311.549788][T13134] __x64_sys_setsockopt+0x13d/0x1b0 [ 311.549824][T13134] do_syscall_64+0x166/0x520 [ 311.549849][T13134] ? trace_irq_disable+0x3b/0x140 [ 311.549871][T13134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.549895][T13134] ? clear_bhb_loop+0x70/0xc0 [ 311.549924][T13134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.549948][T13134] RIP: 0033:0x7f301839e159 [ 311.549970][T13134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.549992][T13134] RSP: 002b:00007f3019280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.550018][T13134] RAX: ffffffffffffffda RBX: 00007f3018625fa0 RCX: 00007f301839e159 [ 311.550035][T13134] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 311.550049][T13134] RBP: 00007f301843503b R08: 0000000000000004 R09: 0000000000000000 [ 311.550064][T13134] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.550080][T13134] R13: 00007f3018626038 R14: 00007f3018625fa0 R15: 00007fffc4007968 [ 311.550118][T13134] [ 311.671882][T13140] geneve5: entered promiscuous mode [ 311.671955][T13140] geneve5: entered allmulticast mode [ 311.685160][T13134] Mem-Info: [ 311.685178][T13134] active_anon:5874 inactive_anon:0 isolated_anon:0 [ 311.685178][T13134] active_file:3 inactive_file:43112 isolated_file:0 [ 311.685178][T13134] unevictable:0 dirty:105 writeback:0 [ 311.685178][T13134] slab_reclaimable:10973 slab_unreclaimable:105819 [ 311.685178][T13134] mapped:29594 shmem:569 pagetables:1626 [ 311.685178][T13134] sec_pagetables:0 bounce:0 [ 311.685178][T13134] kernel_misc_reclaimable:0 [ 311.685178][T13134] free:1275985 free_pcp:19383 free_cma:0 [ 311.686453][T13134] Node 0 active_anon:23496kB inactive_anon:0kB active_file:12kB inactive_file:172248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118376kB dirty:416kB writeback:0kB shmem:2276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14428kB pagetables:6356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 311.686522][T13134] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 311.686582][T13134] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.686651][T13134] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 311.686694][T13134] Node 0 DMA32 free:1152460kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23496kB inactive_anon:0kB active_file:12kB inactive_file:172248kB unevictable:0kB writepending:416kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:72504kB local_pcp:26612kB free_cma:0kB [ 311.686764][T13134] lowmem_reserve[]: 0 0 0 0 0 [ 311.686805][T13134] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.686868][T13134] lowmem_reserve[]: 0 0 0 0 0 [ 311.686935][T13134] Node 1 Normal free:3936120kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5028kB local_pcp:1000kB free_cma:0kB [ 311.687009][T13134] lowmem_reserve[]: 0 0 0 0 0 [ 311.687051][T13134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.687182][T13134] Node 0 DMA32: 815*4kB (ME) 234*8kB (UME) 1150*16kB (UM) 1348*32kB (UME) 832*64kB (UM) 556*128kB (UME) 467*256kB (UM) 294*512kB (UME) 147*1024kB (UME) 4*2048kB (UME) 130*4096kB (UM) = 1152364kB [ 311.687367][T13134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.687485][T13134] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3936080kB [ 311.687664][T13134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.687684][T13134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.687703][T13134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.687723][T13134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.687742][T13134] 43680 total pagecache pages [ 311.687751][T13134] 0 pages in swap cache [ 311.687759][T13134] Free swap = 124996kB [ 311.687768][T13134] Total swap = 124996kB [ 311.687777][T13134] 2097051 pages RAM [ 311.687785][T13134] 0 pages HighMem/MovableOnly [ 311.687793][T13134] 428780 pages reserved [ 311.687801][T13134] 0 pages cma reserved [ 311.908903][T10911] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.916690][T13131] veth0: left promiscuous mode [ 311.957764][T10911] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.957899][T10911] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.958078][T10911] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.337816][T13134] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 312.554769][T13152] __nla_validate_parse: 5 callbacks suppressed [ 312.554792][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 312.799130][T13166] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 312.799161][T13166] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1724'. [ 312.799191][T13166] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 312.811869][T13163] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 312.848265][T13163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1723'. [ 313.031795][T13169] syzkaller0: entered promiscuous mode [ 313.031825][T13169] syzkaller0: entered allmulticast mode [ 314.095531][T13192] netlink: 'syz.2.1729': attribute type 10 has an invalid length. [ 314.131119][ C0] net_ratelimit: 12 callbacks suppressed [ 314.131147][ C0] TC_ACT_REPEAT abuse ? [ 314.290408][ C0] TC_ACT_REPEAT abuse ? [ 314.293595][T13225] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1737'. [ 314.295176][T13223] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1737'. [ 314.350956][T13225] syzkaller1: entered promiscuous mode [ 314.350982][T13225] syzkaller1: entered allmulticast mode [ 314.437069][T13224] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1736'. [ 314.534435][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 314.578271][T13232] x_tables: duplicate underflow at hook 2 [ 314.644912][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.645162][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.673162][T13228] bond4: entered allmulticast mode [ 314.673513][T13232] v: renamed from vlan0 [ 315.331948][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.332103][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.332425][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.332563][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.333135][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.750871][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.180318][ T50] net_ratelimit: 8 callbacks suppressed [ 320.180342][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.180553][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.092788][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.093210][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.093577][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.093929][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.094652][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.300842][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.301110][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.400175][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.699715][T10911] net_ratelimit: 6 callbacks suppressed [ 325.699740][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.699957][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.210101][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.810486][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.810660][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.850018][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.850466][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.851958][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.853506][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.492892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.230373][ T50] net_ratelimit: 6 callbacks suppressed [ 331.230392][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.230559][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.330802][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.969950][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.970135][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.339936][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.340156][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.614510][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.616463][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.439751][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.185513][ T4983] udevd[4983]: worker [6695] /devices/virtual/block/nbd2 is taking a long time [ 336.760854][ T13] net_ratelimit: 5 callbacks suppressed [ 336.760873][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.761141][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.010596][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.090035][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.733468][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.870869][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.871072][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.370086][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.370518][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.969686][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.210401][ T1123] net_ratelimit: 7 callbacks suppressed [ 342.210424][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.270997][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.271181][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.850630][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.379783][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.380005][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.490018][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.131474][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.132605][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.511159][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.249775][ T59] net_ratelimit: 5 callbacks suppressed [ 347.249793][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.839875][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.841791][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.972496][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.950452][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.950690][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.170525][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.250517][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.891932][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.051657][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.634061][T13247] Bluetooth: hci0: unsupported parameter 5134 [ 350.634086][T13247] Bluetooth: hci0: unsupported parameter 8192 [ 350.634101][T13247] Bluetooth: hci0: unsupported parameter 5134 [ 350.634115][T13247] Bluetooth: hci0: unsupported parameter 8192 [ 350.678017][T13245] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 351.026234][T13261] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 351.372713][T13290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1754'. [ 351.505000][T13293] ip6gre1: entered promiscuous mode [ 351.505043][T13293] ip6gre1: entered allmulticast mode [ 351.767107][T13311] netlink: 'syz.0.1753': attribute type 34 has an invalid length. [ 351.767134][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 351.864247][T13311] bond9: option lacp_strict: invalid value (71) [ 352.259816][ T13] net_ratelimit: 4 callbacks suppressed [ 352.259841][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.260062][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.417773][T13311] bond9 (unregistering): Released all slaves [ 352.452114][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.832042][T13330] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 352.862617][T13330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1763'. [ 352.936349][T13333] syz.0.1761: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 352.936428][T13333] CPU: 1 UID: 0 PID: 13333 Comm: syz.0.1761 Not tainted syzkaller #0 PREEMPT(full) [ 352.936455][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.936471][T13333] Call Trace: [ 352.936479][T13333] [ 352.936490][T13333] dump_stack_lvl+0xe8/0x150 [ 352.936531][T13333] warn_alloc+0x24d/0x270 [ 352.936557][T13333] ? kasan_save_track+0x4f/0x80 [ 352.936592][T13333] ? kasan_save_track+0x3e/0x80 [ 352.936619][T13333] ? __pfx_warn_alloc+0x10/0x10 [ 352.936639][T13333] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 352.936668][T13333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.936712][T13333] __vmalloc_node_range_noprof+0x127/0x1540 [ 352.936772][T13333] ? rcu_is_watching+0x16/0xb0 [ 352.936807][T13333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 352.936841][T13333] ? __kmalloc_cache_noprof+0x321/0x600 [ 352.936864][T13333] ? __kmalloc_cache_noprof+0x14d/0x600 [ 352.936888][T13333] ? xskq_create+0x56/0x220 [ 352.936917][T13333] xskq_create+0x148/0x220 [ 352.936937][T13333] ? xsk_init_queue+0x8a/0xe0 [ 352.936972][T13333] xsk_init_queue+0x8a/0xe0 [ 352.937007][T13333] xsk_setsockopt+0x52a/0x960 [ 352.937042][T13333] ? __pfx_xsk_setsockopt+0x10/0x10 [ 352.937077][T13333] ? __pfx_aa_sk_perm+0x10/0x10 [ 352.937114][T13333] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 352.937149][T13333] ? __pfx_xsk_setsockopt+0x10/0x10 [ 352.937186][T13333] do_sock_setsockopt+0x17c/0x1b0 [ 352.937227][T13333] __x64_sys_setsockopt+0x13d/0x1b0 [ 352.937261][T13333] do_syscall_64+0x166/0x520 [ 352.937286][T13333] ? trace_irq_disable+0x3b/0x140 [ 352.937309][T13333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.937332][T13333] ? clear_bhb_loop+0x70/0xc0 [ 352.937361][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.937380][T13333] RIP: 0033:0x7f5f0879e159 [ 352.937400][T13333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.937416][T13333] RSP: 002b:00007f5f096de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 352.937437][T13333] RAX: ffffffffffffffda RBX: 00007f5f08a25fa0 RCX: 00007f5f0879e159 [ 352.937450][T13333] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 352.937463][T13333] RBP: 00007f5f0883503b R08: 0000000000000004 R09: 0000000000000000 [ 352.937476][T13333] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.937488][T13333] R13: 00007f5f08a26038 R14: 00007f5f08a25fa0 R15: 00007ffc073c2618 [ 352.937518][T13333] [ 352.937548][T13333] Mem-Info: [ 352.937557][T13333] active_anon:5922 inactive_anon:0 isolated_anon:0 [ 352.937557][T13333] active_file:3 inactive_file:43126 isolated_file:0 [ 352.937557][T13333] unevictable:0 dirty:69 writeback:0 [ 352.937557][T13333] slab_reclaimable:10849 slab_unreclaimable:110274 [ 352.937557][T13333] mapped:29567 shmem:580 pagetables:1540 [ 352.937557][T13333] sec_pagetables:0 bounce:0 [ 352.937557][T13333] kernel_misc_reclaimable:0 [ 352.937557][T13333] free:1280370 free_pcp:10592 free_cma:0 [ 352.937614][T13333] Node 0 active_anon:23688kB inactive_anon:0kB active_file:12kB inactive_file:172304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118268kB dirty:276kB writeback:0kB shmem:2320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14484kB pagetables:6012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 352.937666][T13333] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 352.937713][T13333] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.937771][T13333] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 352.937809][T13333] Node 0 DMA32 free:1165764kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23688kB inactive_anon:0kB active_file:12kB inactive_file:172304kB unevictable:0kB writepending:276kB zspages:0kB present:3129332kB managed:2546620kB mlocked:0kB bounce:0kB free_pcp:41616kB local_pcp:16380kB free_cma:0kB [ 352.937971][T13333] lowmem_reserve[]: 0 0 0 0 0 [ 352.938008][T13333] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.938062][T13333] lowmem_reserve[]: 0 0 0 0 0 [ 352.938102][T13333] Node 1 Normal free:3940356kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 352.938158][T13333] lowmem_reserve[]: 0 0 0 0 0 [ 352.938193][T13333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 352.938308][T13333] Node 0 DMA32: 2539*4kB (UME) 1427*8kB (UME) 1426*16kB (UME) 768*32kB (UME) 873*64kB (UME) 591*128kB (UME) 473*256kB (UM) 293*512kB (UME) 148*1024kB (UME) 3*2048kB (ME) 131*4096kB (UM) = 1165860kB [ 352.938476][T13333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 352.938594][T13333] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 10*32kB (UM) 9*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3940356kB [ 352.938774][T13333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.938791][T13333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.938807][T13333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.938823][T13333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.938839][T13333] 43705 total pagecache pages [ 352.938848][T13333] 0 pages in swap cache [ 352.938855][T13333] Free swap = 124996kB [ 352.938864][T13333] Total swap = 124996kB [ 352.938873][T13333] 2097051 pages RAM [ 352.938880][T13333] 0 pages HighMem/MovableOnly [ 352.938922][T13333] 428780 pages reserved [ 352.938931][T13333] 0 pages cma reserved [ 353.092680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.371298][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.373593][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.733291][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.797145][T13344] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 353.815391][T13345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1761'. [ 353.876247][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 353.966511][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1766'. [ 354.371570][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.479907][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.480159][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.927833][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 354.951243][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 354.954117][T13373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1774'. [ 355.337876][T13388] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1775'. [ 355.725077][T13409] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 356.007081][T13422] netlink: 'syz.3.1787': attribute type 15 has an invalid length. [ 356.054245][T13422] netlink: 'syz.3.1787': attribute type 15 has an invalid length. [ 356.061174][ T59] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 356.069981][ T59] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 356.071065][ T59] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 356.071172][ T59] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 357.810627][ T1123] net_ratelimit: 6 callbacks suppressed [ 357.810652][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.810874][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.217865][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.942911][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.943141][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.183448][T13433] dvmrp0: entered allmulticast mode [ 359.241317][T13433] __nla_validate_parse: 8 callbacks suppressed [ 359.241340][T13433] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1790'. [ 359.331878][T13434] dvmrp0: left allmulticast mode [ 359.352205][T13443] FAULT_INJECTION: forcing a failure. [ 359.352205][T13443] name failslab, interval 1, probability 0, space 0, times 1 [ 359.352272][T13443] CPU: 0 UID: 0 PID: 13443 Comm: syz.0.1791 Not tainted syzkaller #0 PREEMPT(full) [ 359.352299][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.352313][T13443] Call Trace: [ 359.352322][T13443] [ 359.352332][T13443] dump_stack_lvl+0xe8/0x150 [ 359.352371][T13443] should_fail_ex+0x410/0x560 [ 359.352403][T13443] should_failslab+0xa8/0x100 [ 359.352437][T13443] __kvmalloc_node_noprof+0x176/0x820 [ 359.352466][T13443] ? __kvmalloc_node_noprof+0x345/0x820 [ 359.352498][T13443] ? bpf_compute_postorder+0x131/0x970 [ 359.352520][T13443] ? bpf_compute_postorder+0x131/0x970 [ 359.352551][T13443] bpf_compute_postorder+0x131/0x970 [ 359.352576][T13443] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 359.352607][T13443] ? add_kfuncs+0x251/0x2e0 [ 359.352638][T13443] bpf_check+0x24d6/0x2e10 [ 359.352676][T13443] ? ktime_get_with_offset+0x93/0x2d0 [ 359.352706][T13443] ? __pfx_bpf_check+0x10/0x10 [ 359.352734][T13443] ? bpf_obj_name_cpy+0x194/0x1e0 [ 359.352772][T13443] bpf_prog_load+0x14d6/0x1c20 [ 359.352813][T13443] ? __pfx_bpf_prog_load+0x10/0x10 [ 359.352869][T13443] __sys_bpf+0xd0d/0xd90 [ 359.352904][T13443] ? __pfx___sys_bpf+0x10/0x10 [ 359.352944][T13443] ? __fget_files+0x2a/0x420 [ 359.352995][T13443] ? ksys_write+0x242/0x270 [ 359.353033][T13443] ? __pfx_ksys_write+0x10/0x10 [ 359.353074][T13443] __x64_sys_bpf+0xba/0xd0 [ 359.353100][T13443] do_syscall_64+0x166/0x520 [ 359.353125][T13443] ? trace_irq_disable+0x3b/0x140 [ 359.353147][T13443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.353172][T13443] ? clear_bhb_loop+0x70/0xc0 [ 359.353201][T13443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.353229][T13443] RIP: 0033:0x7f5f0879e159 [ 359.353250][T13443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.353270][T13443] RSP: 002b:00007f5f096de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.353295][T13443] RAX: ffffffffffffffda RBX: 00007f5f08a25fa0 RCX: 00007f5f0879e159 [ 359.353312][T13443] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 359.353327][T13443] RBP: 00007f5f096de090 R08: 0000000000000000 R09: 0000000000000000 [ 359.353342][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.353356][T13443] R13: 00007f5f08a26038 R14: 00007f5f08a25fa0 R15: 00007ffc073c2618 [ 359.353393][T13443] [ 359.507411][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.052409][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.081379][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.081624][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.131854][T12484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.697124][T13483] FAULT_INJECTION: forcing a failure. [ 360.697124][T13483] name failslab, interval 1, probability 0, space 0, times 0 [ 360.697163][T13483] CPU: 1 UID: 0 PID: 13483 Comm: syz.0.1803 Not tainted syzkaller #0 PREEMPT(full) [ 360.697189][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.697203][T13483] Call Trace: [ 360.697213][T13483] [ 360.697223][T13483] dump_stack_lvl+0xe8/0x150 [ 360.697261][T13483] should_fail_ex+0x410/0x560 [ 360.697294][T13483] should_failslab+0xa8/0x100 [ 360.697336][T13483] __kvmalloc_node_noprof+0x176/0x820 [ 360.697362][T13483] ? kasan_save_track+0x3e/0x80 [ 360.697387][T13483] ? __kvmalloc_node_noprof+0x50f/0x820 [ 360.697410][T13483] ? bpf_stack_liveness_init+0x29/0x90 [ 360.697435][T13483] ? bpf_check+0x24f6/0x2e10 [ 360.697457][T13483] ? bpf_compute_const_regs+0x18f/0x3450 [ 360.697485][T13483] ? bpf_compute_const_regs+0x18f/0x3450 [ 360.697521][T13483] bpf_compute_const_regs+0x18f/0x3450 [ 360.697573][T13483] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 360.697602][T13483] ? check_attach_btf_id+0x325/0x1a30 [ 360.697636][T13483] ? rcu_is_watching+0x16/0xb0 [ 360.697664][T13483] ? bpf_stack_liveness_init+0x29/0x90 [ 360.697688][T13483] ? trace_kmalloc+0x2a/0xf0 [ 360.697723][T13483] ? __pfx_check_attach_btf_id+0x10/0x10 [ 360.697750][T13483] ? bpf_stack_liveness_init+0x29/0x90 [ 360.697775][T13483] ? __kvmalloc_node_noprof+0x52f/0x820 [ 360.697836][T13483] ? __asan_memset+0x22/0x50 [ 360.697877][T13483] bpf_check+0x255d/0x2e10 [ 360.697929][T13483] ? ktime_get_with_offset+0x93/0x2d0 [ 360.697959][T13483] ? __pfx_bpf_check+0x10/0x10 [ 360.697988][T13483] ? bpf_obj_name_cpy+0x194/0x1e0 [ 360.698026][T13483] bpf_prog_load+0x14d6/0x1c20 [ 360.698067][T13483] ? __pfx_bpf_prog_load+0x10/0x10 [ 360.698124][T13483] __sys_bpf+0xd0d/0xd90 [ 360.698159][T13483] ? __pfx___sys_bpf+0x10/0x10 [ 360.698198][T13483] ? __fget_files+0x2a/0x420 [ 360.698251][T13483] ? ksys_write+0x242/0x270 [ 360.698289][T13483] ? __pfx_ksys_write+0x10/0x10 [ 360.698338][T13483] __x64_sys_bpf+0xba/0xd0 [ 360.698365][T13483] do_syscall_64+0x166/0x520 [ 360.698390][T13483] ? trace_irq_disable+0x3b/0x140 [ 360.698413][T13483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.698437][T13483] ? clear_bhb_loop+0x70/0xc0 [ 360.698466][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.698490][T13483] RIP: 0033:0x7f5f0879e159 [ 360.698511][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.698531][T13483] RSP: 002b:00007f5f096de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.698557][T13483] RAX: ffffffffffffffda RBX: 00007f5f08a25fa0 RCX: 00007f5f0879e159 [ 360.698575][T13483] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 360.698590][T13483] RBP: 00007f5f096de090 R08: 0000000000000000 R09: 0000000000000000 [ 360.698605][T13483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.698619][T13483] R13: 00007f5f08a26038 R14: 00007f5f08a25fa0 R15: 00007ffc073c2618 [ 360.698657][T13483] [ 361.155849][T13459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1797'. [ 361.248506][T13488] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1804'. [ 361.848280][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 362.073829][T13523] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.073970][T13523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.073983][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 362.074024][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 362.074050][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 362.074633][T13523] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1813'. [ 362.128966][T13525] sctp: [Deprecated]: syz.4.1812 (pid 13525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.128966][T13525] Use struct sctp_sack_info instead [ 362.152032][T13523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.152052][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 362.152095][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 362.152121][T13523] IPv6: NLM_F_CREATE should be set when creating new route [ 362.152613][T13523] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1813'. [ 362.604269][T13541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1815'. [ 362.638218][T13541] IPVS: set_ctl: invalid protocol: 2 172.20.20.34:20003 [ 363.399487][T13570] net_ratelimit: 5 callbacks suppressed [ 363.399510][T13570] openvswitch: netlink: IP tunnel dst address not specified [ 363.476222][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.476462][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.973151][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.213731][T13584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1827'. [ 364.543216][T13588] syzkaller0: entered promiscuous mode [ 364.543242][T13588] syzkaller0: entered allmulticast mode [ 364.602938][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.603177][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.614414][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.803189][T13598] FAULT_INJECTION: forcing a failure. [ 364.803189][T13598] name failslab, interval 1, probability 0, space 0, times 0 [ 364.803241][T13598] CPU: 0 UID: 0 PID: 13598 Comm: syz.0.1831 Not tainted syzkaller #0 PREEMPT(full) [ 364.803270][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.803288][T13598] Call Trace: [ 364.803300][T13598] [ 364.803311][T13598] dump_stack_lvl+0xe8/0x150 [ 364.803350][T13598] should_fail_ex+0x410/0x560 [ 364.803381][T13598] should_failslab+0xa8/0x100 [ 364.803418][T13598] __kvmalloc_node_noprof+0x176/0x820 [ 364.803444][T13598] ? bpf_compute_postorder+0x87c/0x970 [ 364.803470][T13598] ? bpf_stack_liveness_init+0x29/0x90 [ 364.803494][T13598] ? bpf_stack_liveness_init+0x29/0x90 [ 364.803535][T13598] bpf_stack_liveness_init+0x29/0x90 [ 364.803563][T13598] bpf_check+0x24f6/0x2e10 [ 364.803601][T13598] ? ktime_get_with_offset+0x93/0x2d0 [ 364.803631][T13598] ? __pfx_bpf_check+0x10/0x10 [ 364.803660][T13598] ? bpf_obj_name_cpy+0x194/0x1e0 [ 364.803697][T13598] bpf_prog_load+0x14d6/0x1c20 [ 364.803738][T13598] ? __pfx_bpf_prog_load+0x10/0x10 [ 364.803793][T13598] __sys_bpf+0xd0d/0xd90 [ 364.803829][T13598] ? __pfx___sys_bpf+0x10/0x10 [ 364.803868][T13598] ? __fget_files+0x2a/0x420 [ 364.803919][T13598] ? ksys_write+0x242/0x270 [ 364.803958][T13598] ? __pfx_ksys_write+0x10/0x10 [ 364.803998][T13598] __x64_sys_bpf+0xba/0xd0 [ 364.804025][T13598] do_syscall_64+0x166/0x520 [ 364.804050][T13598] ? trace_irq_disable+0x3b/0x140 [ 364.804072][T13598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.804097][T13598] ? clear_bhb_loop+0x70/0xc0 [ 364.804124][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.804147][T13598] RIP: 0033:0x7f5f0879e159 [ 364.804168][T13598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.804187][T13598] RSP: 002b:00007f5f096de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.804212][T13598] RAX: ffffffffffffffda RBX: 00007f5f08a25fa0 RCX: 00007f5f0879e159 [ 364.804229][T13598] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 364.804243][T13598] RBP: 00007f5f096de090 R08: 0000000000000000 R09: 0000000000000000 [ 364.804258][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.804271][T13598] R13: 00007f5f08a26038 R14: 00007f5f08a25fa0 R15: 00007ffc073c2618 [ 364.804307][T13598] [ 365.062098][T13600] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1832'. [ 365.062126][T13600] netlink: 'syz.1.1832': attribute type 9 has an invalid length. [ 365.170917][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.564621][T13608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1834'. [ 365.710810][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.712374][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.784947][T13631] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1838'. [ 365.945906][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1838'. [ 366.158036][T13644] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1839'. [ 366.531379][T13659] netlink: 'syz.3.1842': attribute type 11 has an invalid length. [ 366.583813][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 366.583843][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 366.618369][T13662] netlink: 'syz.1.1843': attribute type 4 has an invalid length. [ 366.828908][T13669] sctp: [Deprecated]: syz.3.1845 (pid 13669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.828908][T13669] Use struct sctp_sack_info instead [ 367.190478][ T31] audit: type=1804 audit(1789234499.390:6): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1850" name="/newroot/370/cgroup.controllers" dev="tmpfs" ino=1930 res=1 errno=0 [ 367.190534][ T31] audit: type=1800 audit(1789234499.390:7): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1850" name="cgroup.controllers" dev="tmpfs" ino=1930 res=0 errno=0 [ 367.375831][T13682] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 367.397762][T13682] gretap1: left promiscuous mode [ 367.415392][T13682] ip6tnl3: left promiscuous mode [ 367.430702][T13682] ip6gre1: left promiscuous mode [ 367.818571][ T31] audit: type=1804 audit(1789234500.020:8): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1854" name="/newroot/398/memory.events" dev="tmpfs" ino=2058 res=1 errno=0 [ 367.818626][ T31] audit: type=1800 audit(1789234500.020:9): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1854" name="memory.events" dev="tmpfs" ino=2058 res=0 errno=0 [ 367.844729][ T31] audit: type=1804 audit(1789234500.030:10): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1854" name="/newroot/398/memory.events" dev="tmpfs" ino=2058 res=1 errno=0 [ 367.910823][ T31] audit: type=1804 audit(1789234500.120:11): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1854" name="/newroot/398/memory.events" dev="tmpfs" ino=2058 res=1 errno=0 [ 367.945919][T13716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1853'. [ 368.035962][T13723] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1856'. [ 368.175724][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 368.710675][T13750] net_ratelimit: 8 callbacks suppressed [ 368.710699][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.710863][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.711031][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.711187][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.711350][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.711507][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.711760][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.711952][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.712114][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.712278][T13750] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 368.847701][T13758] netlink: 'syz.3.1867': attribute type 2 has an invalid length. [ 368.848800][T13755] netlink: 'syz.0.1865': attribute type 1 has an invalid length. [ 368.894086][T13758] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 369.053185][T13767] netlink: 'syz.1.1868': attribute type 21 has an invalid length. [ 369.594365][T13792] netlink: 'syz.1.1876': attribute type 21 has an invalid length. [ 369.594472][T13792] netlink: 'syz.1.1876': attribute type 4 has an invalid length. [ 369.594489][T13792] netlink: 'syz.1.1876': attribute type 5 has an invalid length. [ 369.703567][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034115c00: rx timeout, send abort [ 369.924817][T13802] veth0: entered promiscuous mode [ 369.954953][T13801] veth0: left promiscuous mode [ 370.203914][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034116400: rx timeout, send abort [ 370.205345][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034115c00: abort rx timeout. Force session deactivation [ 370.434995][T13824] __nla_validate_parse: 13 callbacks suppressed [ 370.435022][T13824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1884'. [ 370.438888][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 370.520980][ T50] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 370.543308][ T50] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 370.543361][ T50] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 370.543400][ T50] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 370.694993][T13828] syzkaller1: entered promiscuous mode [ 370.695020][T13828] syzkaller1: entered allmulticast mode [ 370.704007][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034116400: abort rx timeout. Force session deactivation [ 371.256790][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 371.363220][T13836] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1885'. [ 372.007455][T13872] syzkaller0: entered promiscuous mode [ 372.007481][T13872] syzkaller0: entered allmulticast mode [ 372.293456][T13882] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1899'. [ 372.340333][T13881] syzkaller0: entered promiscuous mode [ 372.340374][T13881] syzkaller0: entered allmulticast mode [ 372.951223][T13893] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 373.341477][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 373.345235][T13913] netlink: 'syz.0.1907': attribute type 1 has an invalid length. [ 373.375552][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 373.376502][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 373.402067][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 373.571716][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.712676][ T31] audit: type=1804 audit(1789234505.920:12): pid=13930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1911" name="/newroot/356/cgroup.controllers" dev="tmpfs" ino=1857 res=1 errno=0 [ 373.712741][ T31] audit: type=1800 audit(1789234505.920:13): pid=13930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1911" name="cgroup.controllers" dev="tmpfs" ino=1857 res=0 errno=0 [ 374.211742][ C0] net_ratelimit: 58 callbacks suppressed [ 374.211767][ C0] TC_ACT_REPEAT abuse ? [ 374.298728][T13939] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 374.315582][T13940] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 374.427560][T13937] x_tables: duplicate underflow at hook 1 [ 374.428376][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1906'. [ 374.991598][T13962] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 375.117411][T13966] netlink: 'syz.2.1918': attribute type 32 has an invalid length. [ 375.287915][T13978] netlink: 'syz.3.1921': attribute type 1 has an invalid length. [ 375.392038][T13978] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.491183][T13979] bond7: (slave veth11): Enslaving as an active interface with a down link [ 375.491307][T13980] netlink: 'syz.3.1921': attribute type 4 has an invalid length. [ 375.523778][T13982] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 375.526981][T13982] bond7: (slave batadv2): making interface the new active one [ 375.536825][T13982] batadv2: entered promiscuous mode [ 375.544849][T13982] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 375.565438][T13983] veth0_macvtap: left promiscuous mode [ 375.686619][T13991] __nla_validate_parse: 2 callbacks suppressed [ 375.686641][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 376.278451][T14024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1928'. [ 376.278480][T14024] nbd: must specify at least one socket [ 376.482541][T14014] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1927'. [ 376.584814][T14038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.976296][T14068] netlink: Conntrack attr has 4 unknown bytes [ 377.012205][T14071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.041435][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 377.041477][T14069] netlink: 'syz.4.1932': attribute type 30 has an invalid length. [ 377.048780][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 377.048819][T14071] netlink: 'syz.4.1932': attribute type 30 has an invalid length. [ 377.139563][T14069] vxlan1: entered promiscuous mode [ 377.139589][T14069] vxlan1: entered allmulticast mode [ 377.241688][T14071] vxlan1: entered promiscuous mode [ 377.241714][T14071] vxlan1: entered allmulticast mode [ 377.292764][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 377.292802][T14071] netlink: 'syz.4.1932': attribute type 30 has an invalid length. [ 377.333510][T14071] vxlan1: entered promiscuous mode [ 377.333537][T14071] vxlan1: entered allmulticast mode [ 377.381449][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 377.381488][T14071] netlink: 'syz.4.1932': attribute type 30 has an invalid length. [ 377.532661][T14071] vxlan1: entered promiscuous mode [ 377.532689][T14071] vxlan1: entered allmulticast mode [ 377.606280][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 377.606321][T14071] netlink: 'syz.4.1932': attribute type 30 has an invalid length. [ 377.652416][T14092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1937'. [ 377.652450][T14092] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1937'. [ 377.657243][T14071] vxlan1: entered promiscuous mode [ 377.657270][T14071] vxlan1: entered allmulticast mode [ 377.798924][T14071] vxlan1: entered promiscuous mode [ 377.798951][T14071] vxlan1: entered allmulticast mode [ 377.826949][T14095] tipc: Enabling of bearer rejected, failed to enable media [ 377.828262][T14094] batman_adv: batadv0: Adding interface: dummy0 [ 377.828279][T14094] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.828316][T14094] batman_adv: batadv0: Interface activated: dummy0 [ 377.918456][T14094] batadv0: mtu less than device minimum [ 377.921309][T14094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.922802][T14094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.924320][T14094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.925799][T14094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.927265][T14094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.937115][T14100] x_tables: duplicate underflow at hook 3 [ 378.056243][T14071] vxlan1: entered promiscuous mode [ 378.056270][T14071] vxlan1: entered allmulticast mode [ 378.155634][T14109] nbd: illegal input index -1721480071 [ 378.276539][T14109] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 378.348280][T14071] vxlan1: entered promiscuous mode [ 378.348307][T14071] vxlan1: entered allmulticast mode [ 378.435030][T14071] validate_nla: 4 callbacks suppressed [ 378.435054][T14071] netlink: 'syz.4.1932': attribute type 30 has an invalid length. [ 378.521957][T14061] smc: removing ib device syz0 [ 378.563231][T14114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.623386][T14114] bond0 (unregistering): (slave c@0): Releasing backup interface [ 378.661245][T14114] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 378.689068][T14114] bond0 (unregistering): Released all slaves [ 378.756456][T14061] smbdirect: ib_dev[syz0] removed [ 378.784583][T14071] vxlan1: entered promiscuous mode [ 378.784608][T14071] vxlan1: entered allmulticast mode [ 378.836220][T14137] netlink: 'syz.0.1949': attribute type 2 has an invalid length. [ 378.863563][T14071] netlink: 'syz.4.1932': attribute type 30 has an invalid length. [ 378.894783][T14071] vxlan1: entered promiscuous mode [ 378.894810][T14071] vxlan1: entered allmulticast mode [ 379.744963][ T31] audit: type=1804 audit(1789234511.950:14): pid=14158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1955" name="/newroot/362/cgroup.controllers" dev="tmpfs" ino=1894 res=1 errno=0 [ 379.745214][ T31] audit: type=1800 audit(1789234511.950:15): pid=14158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1955" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 379.864502][T14164] syzkaller0: entered promiscuous mode [ 379.864541][T14164] syzkaller0: entered allmulticast mode [ 380.992807][ T31] audit: type=1804 audit(1789234513.200:16): pid=14198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1963" name="/newroot/397/memory.events" dev="tmpfs" ino=2066 res=1 errno=0 [ 381.327388][T14205] : renamed from bond_slave_0 (while UP) [ 381.540300][T14209] sch_fq: defrate 8 ignored. [ 381.639129][T14200] syzkaller1: entered promiscuous mode [ 381.639158][T14200] syzkaller1: entered allmulticast mode [ 381.802862][T14224] __nla_validate_parse: 7 callbacks suppressed [ 381.802884][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1968'. [ 381.802908][T14224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1968'. [ 381.855776][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 382.137749][T14225] team_slave_0 (unregistering): left promiscuous mode [ 382.148627][T14225] team0: Port device team_slave_0 removed [ 382.196272][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1970'. [ 382.196376][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1970'. [ 382.196396][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1970'. [ 382.196762][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1970'. [ 382.197102][T14226] syzkaller1: entered promiscuous mode [ 382.197123][T14226] syzkaller1: entered allmulticast mode [ 382.637657][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 382.651688][T14252] netlink: 'syz.0.1973': attribute type 1 has an invalid length. [ 383.302560][T14280] netlink: 4708 bytes leftover after parsing attributes in process `syz.1.1978'. [ 383.777277][T14303] tipc: Cannot configure node identity twice [ 383.778144][T14303] tipc: Enabled bearer , priority 10 [ 384.012345][T14309] netlink: 'syz.1.1984': attribute type 178 has an invalid length. [ 384.031182][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 384.256362][ T31] audit: type=1804 audit(1789234516.460:17): pid=14322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1988" name="/newroot/405/cgroup.controllers" dev="tmpfs" ino=2108 res=1 errno=0 [ 384.256866][ T31] audit: type=1800 audit(1789234516.460:18): pid=14322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1988" name="cgroup.controllers" dev="tmpfs" ino=2108 res=0 errno=0 [ 384.431566][T14319] bridge0: entered promiscuous mode [ 384.734201][T14339] net_ratelimit: 14 callbacks suppressed [ 384.734226][T14339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.902712][T14353] netlink: 'syz.2.1991': attribute type 4 has an invalid length. [ 388.218345][T14344] __nla_validate_parse: 1 callbacks suppressed [ 388.218362][T14344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1991'. [ 388.218493][T11325] tipc: Node number set to 1555983612 [ 388.232273][T14353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.321526][T14064] batadv2: left promiscuous mode [ 388.592434][T14402] netlink: 'syz.2.1994': attribute type 2 has an invalid length. [ 388.616208][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 388.658392][T14409] ipvlan2: entered allmulticast mode [ 388.658416][T14409] syz_tun: entered allmulticast mode [ 389.115644][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'. [ 389.115671][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 389.121414][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2002'. [ 389.204302][T14435] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 389.223340][T14434] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2001'. [ 389.282153][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'. [ 389.282182][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 389.681228][T14050] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.681286][T14050] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.681328][T14050] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.681368][T14050] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.789046][T14451] netlink: 'syz.4.2005': attribute type 13 has an invalid length. [ 389.789076][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 390.162348][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 392.877747][T14506] netlink: 'syz.3.2014': attribute type 3 has an invalid length. [ 392.893096][T14505] netlink: 'syz.4.2012': attribute type 13 has an invalid length. [ 393.508215][T14527] __nla_validate_parse: 3 callbacks suppressed [ 393.508240][T14527] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2019'. [ 393.554404][T14529] netlink: 'syz.4.2020': attribute type 16 has an invalid length. [ 393.554443][T14529] netlink: 'syz.4.2020': attribute type 17 has an invalid length. [ 393.686710][T14529] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 393.717585][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 393.717603][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2021'. [ 393.764515][T14529] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 393.764541][T14529] netlink: 1368 bytes leftover after parsing attributes in process `syz.4.2020'. [ 393.791545][T14531] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 393.793194][T14531] bond8 (unregistering): Released all slaves [ 393.837548][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 393.864928][T14532] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2020'. [ 394.138901][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 394.138938][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 394.138956][T14545] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 394.622829][T14571] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 394.656612][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2030'. [ 394.751593][T14571] 8021q: adding VLAN 0 to HW filter on device bond14 [ 394.760422][T14565] 8021q: VLANs not supported on vxcan0 [ 394.826488][T14576] bond14: (slave gretap4): making interface the new active one [ 394.843181][T14576] bond14: (slave gretap4): Enslaving as an active interface with an up link [ 394.843532][T14574] syzkaller0: entered promiscuous mode [ 394.843553][T14574] syzkaller0: entered allmulticast mode [ 394.848942][T14575] syzkaller1: entered promiscuous mode [ 394.848966][T14575] syzkaller1: entered allmulticast mode [ 395.115544][T14583] syzkaller0: entered promiscuous mode [ 395.115573][T14583] syzkaller0: entered allmulticast mode [ 396.026713][T14604] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2041'. [ 396.251043][T14621] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 396.324692][T14621] bond8: entered promiscuous mode [ 396.325178][T14621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.412230][T14621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.412721][T14621] bond8: (slave ipip1): The slave device specified does not support setting the MAC address [ 396.412744][T14621] bond8: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 396.458113][T14621] bond8: (slave ipip1): making interface the new active one [ 396.458139][T14621] ipip1: entered promiscuous mode [ 396.484841][T14621] bond8: (slave ipip1): Enslaving as an active interface with an up link [ 396.629409][T14047] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 396.630426][T14049] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 396.630482][T14049] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 396.630576][T14049] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 396.747165][T14635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.622191][T14657] __nla_validate_parse: 3 callbacks suppressed [ 399.622215][T14657] netlink: 564 bytes leftover after parsing attributes in process `syz.4.2055'. [ 399.736456][T14665] IPVS: set_ctl: invalid protocol: 22 100.1.129.0:20004 [ 400.062329][T14677] trusted_key: syz.0.2062 sent an empty control message without MSG_MORE. [ 400.410707][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.561831][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.565391][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.565940][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.566247][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.566485][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.566726][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.567282][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.577045][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2063'. [ 400.942297][T14707] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20001 [ 402.261758][T14739] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 402.299352][T14738] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 403.280200][T14778] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 404.214607][T14819] netlink: 'syz.4.2092': attribute type 8 has an invalid length. [ 404.329005][T14808] xt_IDLETIMER: label is empty or not nul-terminated [ 404.481925][ T5717] udevd[5717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 404.754816][T14842] __nla_validate_parse: 99 callbacks suppressed [ 404.754842][T14842] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2095'. [ 405.007611][T14850] x_tables: duplicate underflow at hook 2 [ 405.119063][T14854] tc_dump_action: action bad kind [ 405.147295][T14854] netlink: 'syz.3.2098': attribute type 2 has an invalid length. [ 405.147321][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 405.164328][T14855] netlink: 'syz.3.2098': attribute type 21 has an invalid length. [ 405.441575][T14061] tipc: Subscription rejected, illegal request [ 405.448630][T14872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2101'. [ 405.482703][T14872] xt_bpf: check failed: parse error [ 405.488099][T14866] syz_tun: entered promiscuous mode [ 405.488364][T14866] vlan2: entered promiscuous mode [ 405.686258][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'. [ 406.003302][T14888] can: request_module (can-proto-0) failed. [ 406.134178][T14888] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 406.137369][T14888] bond5 (unregistering): Released all slaves [ 406.174597][T14902] syz_tun: entered allmulticast mode [ 406.186296][T14900] lo speed is unknown, defaulting to 1000 [ 406.197405][T14904] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2111'. [ 406.244602][T14900] lo speed is unknown, defaulting to 1000 [ 406.245742][T14900] lo speed is unknown, defaulting to 1000 [ 406.744760][T11327] lo speed is unknown, defaulting to 1000 [ 406.744948][T14900] infiniband syz0: set active [ 406.744967][T14900] infiniband syz0: added lo [ 406.892865][T14900] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 406.892908][T14900] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 406.892954][T14900] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 406.986953][T14931] netlink: 'syz.3.2117': attribute type 12 has an invalid length. [ 406.998016][T14930] netlink: 'syz.3.2117': attribute type 12 has an invalid length. [ 407.007882][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2117'. [ 407.048621][T14900] RDS/IB: syz0: added [ 407.048683][T14900] smc: adding ib device syz0 with port count 1 [ 407.048706][T14900] smc: ib device syz0 port 1 has no pnetid [ 407.048792][ T5618] lo speed is unknown, defaulting to 1000 [ 407.081878][T14900] lo speed is unknown, defaulting to 1000 [ 407.366823][T14900] lo speed is unknown, defaulting to 1000 [ 407.836189][T14900] lo speed is unknown, defaulting to 1000 [ 408.033505][T14900] lo speed is unknown, defaulting to 1000 [ 408.229573][T14900] lo speed is unknown, defaulting to 1000 [ 408.599046][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 409.704152][T14921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.704179][T14921] nci: nci_start_poll: failed to set local general bytes [ 409.722712][T14917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.025962][T14970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2126'. [ 410.045419][T14966] netlink: ct family unspecified [ 410.045455][T14966] openvswitch: netlink: Actions may not be safe on all matching packets [ 410.515307][T14995] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 410.563755][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'. [ 410.626706][T14998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2136'. [ 410.687808][T14995] 8021q: adding VLAN 0 to HW filter on device bond9 [ 410.741829][T14995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2136'. [ 411.203369][T15015] syzkaller0: entered promiscuous mode [ 411.203400][T15015] syzkaller0: entered allmulticast mode [ 411.247641][T15025] netlink: 'syz.4.2143': attribute type 3 has an invalid length. [ 411.254717][T15019] ipip2: entered promiscuous mode [ 411.533797][T15033] lo speed is unknown, defaulting to 1000 [ 411.551178][T15037] netlink: zone id is out of range [ 411.552431][T15037] netlink: zone id is out of range [ 411.984669][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2151'. [ 412.007315][T15050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2150'. [ 414.585233][T15045] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 414.587484][T15046] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 414.626563][T15049] netlink: 'syz.4.2151': attribute type 8 has an invalid length. [ 414.634465][T15055] netlink: 'syz.2.2152': attribute type 14 has an invalid length. [ 415.222197][T15081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2156'. [ 415.364126][T15081] ip6gre1: entered promiscuous mode [ 415.364154][T15081] ip6gre1: entered allmulticast mode [ 415.656992][T15088] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2159'. [ 415.744373][T15091] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 415.744879][T15091] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 415.747245][T15088] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2159'. [ 416.006098][T15091] bond10: entered promiscuous mode [ 416.006846][T15091] 8021q: adding VLAN 0 to HW filter on device bond10 [ 416.028565][T15088] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2159'. [ 416.401633][T15113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2163'. [ 416.449944][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2165'. [ 416.518498][T15111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.757913][T15111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.776323][T15111] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 416.807726][T15126] syzkaller0: entered promiscuous mode [ 416.807753][T15126] syzkaller0: entered allmulticast mode [ 416.974801][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 417.232846][ T31] audit: type=1800 audit(1789234549.440:19): pid=15155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2169" name="cgroup.controllers" dev="tmpfs" ino=2194 res=0 errno=0 [ 417.313548][T15157] syzkaller0: left promiscuous mode [ 417.313575][T15157] syzkaller0: left allmulticast mode [ 417.438337][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2172'. [ 417.608264][T15167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2175'. [ 417.667482][T15172] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 418.048495][T15184] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2179'. [ 418.275812][T15191] ip_tables: iptables: counters copy to user failed while replacing table [ 418.437526][T15200] tipc: Enabling of bearer rejected, failed to enable media [ 418.506671][T15202] syzkaller0: entered promiscuous mode [ 418.506696][T15202] syzkaller0: entered allmulticast mode [ 418.590723][T14049] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.590765][T14049] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.896653][T15210] FAULT_INJECTION: forcing a failure. [ 418.896653][T15210] name failslab, interval 1, probability 0, space 0, times 0 [ 418.896691][T15210] CPU: 0 UID: 0 PID: 15210 Comm: syz.3.2184 Not tainted syzkaller #0 PREEMPT(full) [ 418.896716][T15210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.896731][T15210] Call Trace: [ 418.896740][T15210] [ 418.896750][T15210] dump_stack_lvl+0xe8/0x150 [ 418.896789][T15210] should_fail_ex+0x410/0x560 [ 418.896820][T15210] should_failslab+0xa8/0x100 [ 418.896849][T15210] __kmalloc_cache_noprof+0xa3/0x600 [ 418.896875][T15210] ? bpf_int_jit_compile+0x1c4/0x17e0 [ 418.896909][T15210] ? bpf_int_jit_compile+0x1c4/0x17e0 [ 418.896950][T15210] bpf_int_jit_compile+0x1c4/0x17e0 [ 418.897004][T15210] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 418.897043][T15210] ? rcu_is_watching+0x16/0xb0 [ 418.897071][T15210] ? trace_kmalloc+0x2a/0xf0 [ 418.897115][T15210] __bpf_prog_select_runtime+0x53e/0xbf0 [ 418.897165][T15210] bpf_check+0x23e7/0x2e10 [ 418.897202][T15210] ? ktime_get_with_offset+0x93/0x2d0 [ 418.897231][T15210] ? __pfx_bpf_check+0x10/0x10 [ 418.897259][T15210] ? bpf_obj_name_cpy+0x194/0x1e0 [ 418.897296][T15210] bpf_prog_load+0x14d6/0x1c20 [ 418.897337][T15210] ? __pfx_bpf_prog_load+0x10/0x10 [ 418.897391][T15210] __sys_bpf+0xd0d/0xd90 [ 418.897425][T15210] ? __pfx___sys_bpf+0x10/0x10 [ 418.897462][T15210] ? __fget_files+0x2a/0x420 [ 418.897514][T15210] ? ksys_write+0x242/0x270 [ 418.897551][T15210] ? __pfx_ksys_write+0x10/0x10 [ 418.897590][T15210] __x64_sys_bpf+0xba/0xd0 [ 418.897615][T15210] do_syscall_64+0x166/0x520 [ 418.897645][T15210] ? trace_irq_disable+0x3b/0x140 [ 418.897668][T15210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.897691][T15210] ? clear_bhb_loop+0x70/0xc0 [ 418.897720][T15210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.897747][T15210] RIP: 0033:0x7f301839e159 [ 418.897768][T15210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.897787][T15210] RSP: 002b:00007f3019280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.897813][T15210] RAX: ffffffffffffffda RBX: 00007f3018625fa0 RCX: 00007f301839e159 [ 418.897831][T15210] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 418.897846][T15210] RBP: 00007f3019280090 R08: 0000000000000000 R09: 0000000000000000 [ 418.897860][T15210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.897873][T15210] R13: 00007f3018626038 R14: 00007f3018625fa0 R15: 00007fffc4007968 [ 418.897909][T15210] [ 419.394467][T15215] SET target dimension over the limit! [ 419.961778][T15245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.027458][T15231] syzkaller0: entered promiscuous mode [ 420.027484][T15231] syzkaller0: entered allmulticast mode [ 420.754720][T15275] 8021q: VLANs not supported on team0 [ 420.765708][T15275] __nla_validate_parse: 6 callbacks suppressed [ 420.765730][T15275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2202'. [ 420.930080][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2204'. [ 420.973729][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2204'. [ 421.990584][T15316] netlink: 'syz.3.2211': attribute type 4 has an invalid length. [ 422.355937][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2214'. [ 422.579000][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2215'. [ 422.604550][T15332] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 422.608612][T15332] bond11: (slave lo): Enslaving as an active interface with an up link [ 422.660217][T15332] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 422.748209][T15340] vlan6: entered allmulticast mode [ 422.748245][T15340] bridge12: entered allmulticast mode [ 422.944074][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'. [ 423.016648][T15352] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 423.232751][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 423.232846][T15355] bond0: left allmulticast mode [ 423.232866][T15355] : left allmulticast mode [ 423.232971][T15355] bond0: left promiscuous mode [ 423.232987][T15355] : left promiscuous mode [ 423.233461][T15355] bridge0: port 4(bond0) entered disabled state [ 423.287469][T15355] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 423.287505][T15355] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 423.287774][T15355] bridge0: port 3(wlan1) entered disabled state [ 423.315583][T15355] bridge_slave_1: left allmulticast mode [ 423.315614][T15355] bridge_slave_1: left promiscuous mode [ 423.315829][T15355] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.331568][T15362] netlink: 'syz.1.2222': attribute type 83 has an invalid length. [ 423.357834][T15355] bridge_slave_0: left allmulticast mode [ 423.357868][T15355] bridge_slave_0: left promiscuous mode [ 423.358113][T15355] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.483680][T15368] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2225'. [ 423.689499][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'. [ 423.799126][T15382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2226'. [ 423.935672][T15389] netlink: 'syz.4.2230': attribute type 8 has an invalid length. [ 424.375684][T15413] netlink: 'syz.0.2236': attribute type 8 has an invalid length. [ 424.375951][T15414] netlink: 'syz.0.2236': attribute type 8 has an invalid length. [ 425.096136][T15451] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 425.182443][T15452] sctp: [Deprecated]: syz.4.2243 (pid 15452) Use of int in max_burst socket option deprecated. [ 425.182443][T15452] Use struct sctp_assoc_value instead [ 425.485238][T15458] ip6gretap2: entered promiscuous mode [ 426.055293][ T31] audit: type=1804 audit(1789234558.260:20): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2251" name="/newroot/466/memory.events" dev="tmpfs" ino=2429 res=1 errno=0 [ 426.055353][ T31] audit: type=1800 audit(1789234558.260:21): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.114125][ T31] audit: type=1800 audit(1789234558.320:22): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.154168][ T31] audit: type=1800 audit(1789234558.360:23): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.205750][ T31] audit: type=1800 audit(1789234558.410:24): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.205810][ T31] audit: type=1800 audit(1789234558.410:25): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.217582][ T31] audit: type=1800 audit(1789234558.420:26): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.254003][ T31] audit: type=1800 audit(1789234558.440:27): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.312782][ T31] audit: type=1800 audit(1789234558.490:28): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.315494][ T31] audit: type=1800 audit(1789234558.520:29): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2251" name="memory.events" dev="tmpfs" ino=2429 res=0 errno=0 [ 426.485232][T15503] netlink: 'syz.0.2256': attribute type 10 has an invalid length. [ 426.485258][T15503] __nla_validate_parse: 9 callbacks suppressed [ 426.485270][T15503] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2256'. [ 426.689592][ T32] INFO: task kworker/1:1H:1688 blocked for more than 143 seconds. [ 426.689621][ T32] Not tainted syzkaller #0 [ 426.689634][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 426.689645][ T32] task:kworker/1:1H state:D stack:25928 pid:1688 tgid:1688 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 426.689715][ T32] Workqueue: kblockd blk_mq_requeue_work [ 426.689749][ T32] Call Trace: [ 426.689758][ T32] [ 426.689772][ T32] __schedule+0x17db/0x58f0 [ 426.689828][ T32] ? __pfx___schedule+0x10/0x10 [ 426.689877][ T32] ? __pfx___schedule+0x10/0x10 [ 426.689925][ T32] ? schedule+0x90/0x2b0 [ 426.689951][ T32] schedule+0x164/0x2b0 [ 426.689976][ T32] schedule_timeout+0x152/0x2c0 [ 426.690010][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 426.690046][ T32] ? __pfx_process_timeout+0x10/0x10 [ 426.690088][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 426.690125][ T32] ? prepare_to_wait_event+0x436/0x480 [ 426.690166][ T32] nbd_queue_rq+0x96f/0xff0 [ 426.690206][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 426.690232][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 426.690277][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 426.690320][ T32] ? sbitmap_get+0x229/0x390 [ 426.690356][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 426.690384][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 426.690420][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 426.690471][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 426.690508][ T32] ? lock_acquire+0x115/0x350 [ 426.690538][ T32] ? lock_acquire+0x115/0x350 [ 426.690575][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 426.690606][ T32] ? blk_mq ** replaying previous printk message ** [ 426.690606][ T32] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 426.690629][ T32] blk_mq_run_hw_queue+0x34a/0x4f0 [ 426.690658][ T32] blk_mq_run_hw_queues+0x268/0x3f0 [ 426.690694][ T32] blk_mq_requeue_work+0x703/0x760 [ 426.690729][ T32] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 426.690758][ T32] ? rcu_is_watching+0x16/0xb0 [ 426.690783][ T32] ? process_scheduled_works+0x97a/0x1630 [ 426.690809][ T32] process_scheduled_works+0xc3d/0x1630 [ 426.690866][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 426.690899][ T32] ? assign_work+0x3cf/0x5d0 [ 426.690930][ T32] worker_thread+0xa47/0xfb0 [ 426.690969][ T32] ? __kthread_parkme+0x71/0x1f0 [ 426.691008][ T32] kthread+0x38b/0x480 [ 426.691053][ T32] ? __pfx_worker_thread+0x10/0x10 [ 426.691080][ T32] ? __pfx_kthread+0x10/0x10 [ 426.691101][ T32] ret_from_fork+0x514/0xb70 [ 426.691124][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 426.691162][ T32] ? __switch_to+0xc89/0x1420 [ 426.691197][ T32] ? __pfx_kthread+0x10/0x10 [ 426.691222][ T32] ret_from_fork_asm+0x1a/0x30 [ 426.691276][ T32] [ 426.691466][ T32] [ 426.691466][ T32] Showing all locks held in the system: [ 426.691479][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 426.691495][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 426.691571][ T32] locks held by kworker/1:1H/1688: 4, on CPU#1: [ 426.691595][ T32] #0: ffff88801eaf8540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 426.691659][ T32] #1: ffffc90006327c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 426.691712][ T32] #2: ffff888026bc8998 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x321/0x4f0 [ 426.691750][ T32] #3: ffff8880275c76b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 426.691799][ T32] locks held by getty/5374: 2, on CPU#1: [ 426.691810][ T32] #0: ffff888035d240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 426.691857][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 426.691950][ T32] locks held by udevd/6695: 1, on CPU#1: [ 426.691961][ T32] #0: ffff8880261ee350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 426.692010][ T32] locks held by syz.3.2255/15504: 1, on CPU#1: [ 426.692022][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa6/0x130 [ 426.692068][ T32] locks held by syz.0.2256/15503: 2, on CPU#1: [ 426.692079][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 426.692119][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 426.692163][ T32] locks held by syz.0.2256/15505: 2, on CPU#1: [ 426.692175][ T32] #0: ffff8880260cb6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 426.692219][ T32] #1: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_dump_one+0x308/0xd50 [ 426.692258][ T32] locks held by syz.0.2256/15508: 1, on CPU#1: [ 426.692269][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 426.692310][ T32] locks held by syz.1.2257/15507: 1, on CPU#0: [ 426.692321][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 426.692389][ T32] [ 426.692395][ T32] ============================================= [ 426.692395][ T32] [ 426.692413][ T32] NMI backtrace for cpu 0 [ 426.692428][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 426.692452][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.692466][ T32] Call Trace: [ 426.692475][ T32] [ 426.692485][ T32] dump_stack_lvl+0xe8/0x150 [ 426.692528][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 426.692560][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 426.692599][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 426.692635][ T32] sys_info+0x135/0x170 [ 426.692662][ T32] watchdog+0xfd7/0x1030 [ 426.692694][ T32] ? watchdog+0x1c7/0x1030 [ 426.692724][ T32] kthread+0x38b/0x480 [ 426.692746][ T32] ? __pfx_watchdog+0x10/0x10 [ 426.692766][ T32] ? __pfx_kthread+0x10/0x10 [ 426.692790][ T32] ret_from_fork+0x514/0xb70 [ 426.692815][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 426.692850][ T32] ? __switch_to+0xc89/0x1420 [ 426.692886][ T32] ? __pfx_kthread+0x10/0x10 [ 426.692910][ T32] ret_from_fork_asm+0x1a/0x30 [ 426.692962][ T32] [ 426.692970][ T32] Sending NMI from CPU 0 to CPUs 1: [ 426.693009][ C1] NMI backtrace for cpu 1 [ 426.693023][ C1] CPU: 1 UID: 0 PID: 15503 Comm: syz.0.2256 Not tainted syzkaller #0 PREEMPT(full) [ 426.693045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.693056][ C1] RIP: 0010:__rcu_read_unlock+0x8/0xe0 [ 426.693087][ C1] Code: c1 7c dc 48 89 df e8 77 b9 8a 00 eb d2 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <41> 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d b9 de e7 [ 426.693104][ C1] RSP: 0018:ffffc90005676888 EFLAGS: 00000282 [ 426.693121][ C1] RAX: f93c9cde005c6400 RBX: ffffc90005676958 RCX: 0000000000000046 [ 426.693135][ C1] RDX: ffffc90005676901 RSI: ffffffff8e6fe025 RDI: ffffffff8c6d9c80 [ 426.693150][ C1] RBP: 1ffffffff229b801 R08: ffffc90005676bb0 R09: 0000000000000000 [ 426.693163][ C1] R10: ffffc90005676998 R11: fffff52000aced35 R12: ffffc90005670000 [ 426.693178][ C1] R13: ffffffff8177f1df R14: ffffc90005676948 R15: ffffc90005676bc0 [ 426.693192][ C1] FS: 00007f5f096de6c0(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 426.693209][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.693222][ C1] CR2: 00007f5f087eb840 CR3: 000000003b8ba000 CR4: 00000000003526f0 [ 426.693239][ C1] Call Trace: [ 426.693245][ C1] [ 426.693253][ C1] unwind_next_frame+0x1baf/0x2550 [ 426.693280][ C1] ? ref_tracker_free+0x11e/0x830 [ 426.693302][ C1] ? unwind_next_frame+0x8f/0x2550 [ 426.693325][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 426.693344][ C1] arch_stack_walk+0x11b/0x150 [ 426.693368][ C1] ? rx_queue_release+0x110/0x180 [ 426.693389][ C1] stack_trace_save+0xa9/0x100 [ 426.693418][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 426.693453][ C1] ref_tracker_free+0x11e/0x830 [ 426.693475][ C1] ? call_rcu+0x64d/0x8b0 [ 426.693498][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 426.693538][ C1] rx_queue_release+0x110/0x180 [ 426.693558][ C1] kobject_put+0x222/0x550 [ 426.693585][ C1] net_rx_queue_update_kobjects+0x6bf/0x780 [ 426.693623][ C1] netdev_unregister_kobject+0xff/0x450 [ 426.693656][ C1] unregister_netdevice_many_notify+0x1be1/0x2140 [ 426.693695][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 426.693727][ C1] ? netdev_upper_dev_unlink+0x99/0xe0 [ 426.693748][ C1] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 426.693771][ C1] ? macvlan_dellink+0x3e4/0x470 [ 426.693802][ C1] macvlan_device_event+0x93a/0x9e0 [ 426.693822][ C1] ? __pfx_ipvlan_device_event+0x10/0x10 [ 426.693846][ C1] ? __pfx_macvlan_device_event+0x10/0x10 [ 426.693872][ C1] notifier_call_chain+0x1a5/0x3d0 [ 426.693907][ C1] unregister_netdevice_many_notify+0x17f9/0x2140 [ 426.693945][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 426.693974][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.694004][ C1] ? __dev_queue_xmit+0x14c0/0x3820 [ 426.694038][ C1] ? __pfx_veth_dellink+0x10/0x10 [ 426.694066][ C1] ? __pfx_veth_dellink+0x10/0x10 [ 426.694093][ C1] rtnl_dellink+0x5be/0x810 [ 426.694116][ C1] ? __pfx_rtnl_dellink+0x10/0x10 [ 426.694185][ C1] ? lock_acquire+0x115/0x350 [ 426.694203][ C1] ? __pfx_rtnl_dellink+0x10/0x10 [ 426.694232][ C1] ? __pfx_rtnl_dellink+0x10/0x10 [ 426.694252][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 426.694276][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 426.694296][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.694317][ C1] ? ref_tracker_free+0x689/0x830 [ 426.694340][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 426.694369][ C1] netlink_rcv_skb+0x226/0x4a0 [ 426.694396][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.694418][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.694453][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.694480][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.694515][ C1] netlink_unicast+0x7bd/0x940 [ 426.694547][ C1] netlink_sendmsg+0x813/0xb40 [ 426.694580][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.694612][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 426.694635][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.694661][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 426.694693][ C1] ____sys_sendmsg+0x54e/0x850 [ 426.694721][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.694751][ C1] ? import_iovec+0x73/0xa0 [ 426.694776][ C1] ___sys_sendmsg+0x2a5/0x360 [ 426.694799][ C1] ? __lock_acquire+0x747/0x2de0 [ 426.694820][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.694846][ C1] ? futex_wait+0x2a2/0x390 [ 426.694893][ C1] ? __fget_files+0x2a/0x420 [ 426.694920][ C1] ? __fget_files+0x3a2/0x420 [ 426.694952][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 426.694978][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.695021][ C1] do_syscall_64+0x166/0x520 [ 426.695040][ C1] ? trace_irq_disable+0x3b/0x140 [ 426.695058][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.695078][ C1] ? clear_bhb_loop+0x70/0xc0 [ 426.695100][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.695118][ C1] RIP: 0033:0x7f5f0879e159 [ 426.695134][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.695150][ C1] RSP: 002b:00007f5f096de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.695170][ C1] RAX: ffffffffffffffda RBX: 00007f5f08a25fa0 RCX: 00007f5f0879e159 [ 426.695184][ C1] RDX: 0000000004000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 426.695196][ C1] RBP: 00007f5f0883503b R08: 0000000000000000 R09: 0000000000000000 [ 426.695208][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.695220][ C1] R13: 00007f5f08a26038 R14: 00007f5f08a25fa0 R15: 00007ffc073c2618 [ 426.695245][ C1] [ 426.875851][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 427.871393][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 427.880537][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.890644][ T32] Call Trace: [ 427.895038][ T32] [ 427.898014][ T32] vpanic+0x56d/0xa60 [ 427.902060][ T32] ? __pfx___schedule+0x10/0x10 [ 427.907056][ T32] ? __pfx_vpanic+0x10/0x10 [ 427.911617][ T32] panic+0xc5/0xd0 [ 427.915397][ T32] ? __pfx_panic+0x10/0x10 [ 427.919868][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 427.925363][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 427.930782][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 427.937038][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 427.943268][ T32] watchdog+0x1030/0x1030 [ 427.947647][ T32] ? watchdog+0x1c7/0x1030 [ 427.952115][ T32] kthread+0x38b/0x480 [ 427.956222][ T32] ? __pfx_watchdog+0x10/0x10 [ 427.960938][ T32] ? __pfx_kthread+0x10/0x10 [ 427.965568][ T32] ret_from_fork+0x514/0xb70 [ 427.970195][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 427.975359][ T32] ? __switch_to+0xc89/0x1420 [ 427.980096][ T32] ? __pfx_kthread+0x10/0x10 [ 427.984730][ T32] ret_from_fork_asm+0x1a/0x30 [ 427.989749][ T32] [ 427.993414][ T32] Kernel Offset: disabled [ 427.997761][ T32] Rebooting in 86400 seconds..