last executing test programs: 3.081839928s ago: executing program 0 (id=1598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) socket$unix(0x1, 0x2, 0x0) (async) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r0, 0x1}, 0x20) 2.984391534s ago: executing program 0 (id=1600): socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000240], 0x0, &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000040000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x8, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r6, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x481}, 0x800) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) getpid() syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000c40)={@local}, &(0x7f0000000c80)=0x14) close(0x3) socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) 2.15876269s ago: executing program 2 (id=1609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1, 0x8000009, 0x9) sendfile(r0, r1, 0x0, 0xf03a000d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) r4 = socket(0xa, 0x3, 0x8) unshare(0x20000400) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r5, 0xff31, &(0x7f0000000440)={&(0x7f0000001bc0)=""/4077, 0xff1, 0x0, 0x0}}, 0x36) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x2}}) pipe(&(0x7f0000019480)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000001180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x33339367f087ac41, 0x63, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x3, 0x400008}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) pwritev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1, 0x8000009, 0x9) (async) sendfile(r0, r1, 0x0, 0xf03a000d) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) (async) socket(0xa, 0x3, 0x8) (async) unshare(0x20000400) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r5, 0xff31, &(0x7f0000000440)={&(0x7f0000001bc0)=""/4077, 0xff1, 0x0, 0x0}}, 0x36) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x2}}) (async) pipe(&(0x7f0000019480)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000001180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x33339367f087ac41, 0x63, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x3, 0x400008}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) 2.111947s ago: executing program 4 (id=1610): socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000280)="d5febf1750f57a1c2594d750aa6062a523be2baf6642e278b9b26be90abe96271fb0b50124ecb88389e22523c2acd0f7dfe225d2c9f46b619f2ae327814ba614e02a352c4afb044af09e5bd0668b9c7e33fbac9085a8b3f20e3c31041f701d7c6cfe9c96acf2f8e0e1bc1c1bf6263e15763faf9d194c11fdc35042b20a3ee180e65679dd128c0d92b8b8", 0x8a}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="171a8a27bd73a31dc2e7eb84ba25bd9529509d6089", 0x15}, {&(0x7f0000001a40)="84148b1d657887c7b09c504b724dbbf46014a1429437bc22558139d9df4b4151c944cbdb11651d603d2df9c0e03fa18f0a0f22eb82554ed39741579a07a84ba0aef58a4b418bf0a61a52ff89cade5ea12ad4024b449184f3263eb2", 0x5b}, {&(0x7f0000001ac0)="ef992d8e70ff06632e26eafc241439ff21f49d8cd9a3352058588d0f88acca153a2f2bd1e287ee040d6d143ebf4af6fdea1338a5a02ec1717691dee058ecddcc2f6becdb6263078166516e91cd8fd0297c82a5d2f0454c7686b629180c055a6fc119eb401c", 0x65}], 0x5, &(0x7f0000001bc0)=[{0x80, 0xff, 0x9, "0d994ea4070f6d4342dab126dbadc6d3c2e0fe17ede11d23d8ae10c2bd34720d35918893b309146f9d6a59293221d740d9d4f8c61fd8cfd4804a74b1b9af95f73cee0fab122abe6ef4e8f8596e4c1f216c43ac11b8866e037abbffe8e50972b3265cdd12a3d46b8d354b"}, {0x68, 0x110, 0x7ff, "69e51e3dadfb5120c6748c2b82d25dd7935ed8fca0babba7185eaa18b45723d031ce256e835222315130c7835bb98d0275467bb46a3eea055263ac0fc68705d14c09be427d468b855d3dae90a64f6467d7652e52988b966a"}], 0xe8}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.053685946s ago: executing program 0 (id=1611): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x110, 0x0, 0x238, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x10, "dffa", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x10}, @multicast1, 0x0, 0xff000000, 'vlan0\x00', 'pim6reg1\x00', {0xff}, {}, 0x32, 0x0, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x2, 0x5, 0x0, 0x2, 0x6], 0x3, 0x1}, {0x1, [0x4, 0x2, 0x6, 0x5, 0x4, 0x5], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x9, 0xb, [0x1c, 0xa, 0x23, 0x11, 0x3, 0x13, 0x24, 0x3a, 0x4, 0x4, 0x28, 0x15, 0x3f, 0xd, 0x4, 0x1c], 0x2, 0x1, 0xfffffffffffffffa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800b0ffb50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.997976131s ago: executing program 0 (id=1612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}]}, 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) r5 = socket(0x11, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x1, 0x5, 0x20, @mcast1, @empty, 0x8, 0x20, 0xd, 0x5}}) (async) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000500)={@loopback, 0x0}, &(0x7f0000000540)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r11, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.907492146s ago: executing program 2 (id=1613): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.833085183s ago: executing program 0 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xe, 0x14, &(0x7f0000000080)=@raw=[@generic={0x8, 0x3, 0x6, 0x3, 0x200}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffa}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.782086163s ago: executing program 2 (id=1615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x57}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.691701568s ago: executing program 0 (id=1616): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0xff}, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x9, 0x40, 0x0, 0x100, 0x0, 0x0, r1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001fc0)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001400], 0x0, 0x0, &(0x7f0000001400)=[{}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x108) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000020000000100000f03deffff01000000010000000300000044942d000000000000000f010004008400002e"], &(0x7f00000014c0)=""/2, 0x46, 0x2, 0x1}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x8, 0x7, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x65, 0x0, 0x1, 0x4, 0x0, @empty, @empty}}}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000dc0)={'tunl0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x8000, 0x80, 0x6, 0x0, {{0x3f, 0x4, 0x0, 0x1, 0xfc, 0x68, 0x0, 0x6, 0x29, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x18, [@broadcast, @rand_addr=0x64010100, @remote, @empty]}, @generic={0x7, 0x8, "31b9f6039d17"}, @cipso={0x86, 0x6a, 0x1, [{0x2, 0x8, "6762a50a0b70"}, {0x6, 0x11, "4b77e0798fc911912cbafa404b71e7"}, {0x4, 0x5, "cdd3db"}, {0x2, 0x3, 'S'}, {0x2, 0xa, "5787a479d73fc6b0"}, {0x1, 0x12, "140ad8e9615bda32ffc24a034cdcdf29"}, {0x1, 0xf, "3fd1306eed8215ca10888361eb"}, {0x6, 0x4, "edc4"}, {0x7, 0x5, "96adf2"}, {0x5, 0xf, "3134fcfcd36aeae3b65130c287"}]}, @rr={0x7, 0xb, 0xfa, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x98, [@dev={0xac, 0x14, 0x14, 0x32}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x12, "7868d348c10c32eb68ad4e98fc044d72"}, @timestamp={0x44, 0x2c, 0x6b, 0x0, 0x7, [0x5, 0x7, 0x2, 0xf, 0x6, 0x8000, 0x3, 0x800, 0x101, 0x20000]}, @generic={0x7, 0x4, "03ab"}]}}}}}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0xc, &(0x7f0000000e40)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0x4, 0x2, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0xd, 0x1, 0x3, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x11, &(0x7f0000000f00)=""/17, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0xb, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000fc0)=[{0x2, 0x5, 0x9, 0x9}, {0x2, 0x3, 0xe, 0x4}, {0x1, 0x5, 0xc, 0x6}, {0x2, 0x3, 0xd, 0x3}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x5, 0x1d, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x1000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x1d}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x6, 0x9, 0xb, 0x50, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0xaf, &(0x7f0000000bc0)=""/175, 0x40f00, 0x0, '\x00', r9, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x6, &(0x7f00000010c0)=[r4, r4, r4], &(0x7f0000001100)=[{0x3, 0x5, 0xe, 0x3}, {0x3, 0x4, 0xe, 0xb}, {0x0, 0x1, 0x6, 0x8}, {0x2, 0x1, 0x7, 0x2}, {0x3, 0x1, 0x9, 0x4}, {0x1, 0x1, 0xb, 0x5}], 0x10, 0x5}, 0x94) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) sendmmsg$alg(r5, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="d01e6829f3c3876ef77deafb1e63583a3751fc4fd019b9a1cec506456ae546579275dab97641a6552dfc86a8911fa5c4625aade406ca17e8c0ae19924b087904115fbe302ee4ecb9d6605d589908868984dc29a965759b317644c1994381e08466b6bb45bc82f60528bcd85aac28a3b1ab86c8dabda29bc84fe543cc041373dc7ad1daa99657e0035283f52d6aec", 0x8e}, {&(0x7f0000000280)="0e0d3b5c6a52e3c1c41da6fe7cf3e608cd437f9b8df2b797b3f4a2e45d41cd43b204bc75ed81ff95bfeb980247075af82469e8c0307dd7b13c8376f6d2a260eacc7773f572b0ca26f8fbbfc9ddb87597c1f7e3054dd02e9910c11e3f154befbe243e76fb7d0361c67abeea43a4eb6b1fe02f8c04636cb3c3b4a1540fafdfc69c11bce1a51e0972d76e6ac736fb00b1aff38812c06485c55aa8301d63f1c2ecf1e236a39417d3c7d1042cddfe89", 0xad}, {&(0x7f0000000340)="5e1ab010862ec377bb55ee42b35207bd5794aa4c21b838a767ab68187f1042c9fb381afc8e9880e981fd03ff6b1892ea766ee73bfa4aeb11813007bb101128c27022bef113b4f13321d24cc08cfd5d9680af866de437ffb0a672ba51c1a574e069b8b3599d37c7e3097b1061c48ceeda86c2c5e9e7205af6979f0787dfbfe7e639757132b46a9664606de03026b40ecae703e58d01d3e5184b479e4aec3560ab8a281833ead80b1b72723fededafb39da88d8522b7733db50ec4d5bb0b1a99fff7038e284351c0da", 0xc8}, {&(0x7f00000004c0)="342afd35137c7ddc201ddb1257b24fa2d71cf455a5e941d59b349236e935f41f662775870b8802a1cc473cc283d9170d853ce00e15198fd0d999e2dc9db7c35a2300cc8ffd26eed37460b6bd63c51272dd344123252580876dd48fafb59162c9cc70ba4793c64a0834b5306645f0c667e946c3aa08c52fe528e14f78e8982ac12660d473827054288909fb749f4cb41d5539910ebd", 0x95}, {&(0x7f0000000780)="6b5a9d0d5f0dff0cc2d84b295109131e28f5cead0ca5a2bf914148f3a496cb7f48e0ec4917cff24b2f2a906a6eaf143214ce7cba7ba82c71f3a4022fe0a4919a3c6e0525690e79b18b134fe26eb9c6848285cd9ad0391970bbe1d4b781e1272812156f0af1a9b0a833fcd85e4b03b3797caa42e67fc6d09edd3b85f65a7d643e0d9df58d4edb2945747a7dde211c5c37484cffb92fe5f5befc1e9d0d49026c08ee9c76d5d245f75723d12b9e33548f8b4eddfba9575ca107fe0e6cec702cb2f336e1137972051a2122bcfadd35e10626a67646671e1f5899c4cd22693b1b", 0xde}, {&(0x7f0000000880)="ba7b8a0f760e2a58ab32b48d3e68c3fdfca9217c1475284b7d4d9dd29c2065afb7cc732ff43bf6d1a8414e6552fffeff239244750a76188bd31a142589240facc175b82f09a8a22aaad43369137d067993cbfecb47d6ad5c415253da906d0545c8bfafdb4df5edfef00199b0", 0x6c}], 0x6, &(0x7f0000000980)=[@iv={0x88, 0x117, 0x2, 0x6d, "b5ccdcc8ca733088304c276c1f21b94cb1a34b4a7a3548cfaf3e43a61110326f65a290b13787f2e4bf98c075e52de640a746eca600c4924a50dd5d62f240e0830ed896797432aadb286949358f2121581a2ba224e3acacd13ab5d6878fbf61da2be3971ab2623e6a2a9536e3b8"}], 0x88, 0x40}], 0x1, 0xc881) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.590120413s ago: executing program 2 (id=1617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000049000000009500"/25], &(0x7f0000000280)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) unshare(0x20000400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x10, 0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x7}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x10, 0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x7}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500"/20, @ANYRES32=0x0, @ANYBLOB="255603000106040008adfeabd4f14dbb17ea0cac0e4eb1000d00780a00001400350077673200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) (async) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x6c}, {0x8, 0x800000000000000, 0x4, 0x0, 0x10000000, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x10000000, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x1}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x6c}, {0x8, 0x800000000000000, 0x4, 0x0, 0x10000000, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x10000000, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001a0001ea0024bd70000000000002754a3f44020007020000b07bd32508000300", @ANYRESDEC=r4, @ANYBLOB="08000100e0000001080002007f000001"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xea5bc50b6199d7fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1, 0xfffe}, 0x90) socket(0x5, 0x2, 0x1) (async) socket(0x5, 0x2, 0x1) 1.523248112s ago: executing program 4 (id=1618): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x2c, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xb, @private1, 0x1}]}, &(0x7f00000004c0)=0x10) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 1.095198272s ago: executing program 3 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getqdisc={0x34, 0x26, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0x8}, {0x3, 0xe}, {0x6, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000480)={r3, &(0x7f0000000100)='ip6tnl0\x00', 0x50000, &(0x7f0000000200)={@align=0xfffffffffffffff5, {0x37ea, 0xa, 0x4, 0x2}}, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.094107163s ago: executing program 1 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 1.055102311s ago: executing program 3 (id=1624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x3, 0x1a, &(0x7f0000000080)=""/26, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x8, 0xeb, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x1, 0x3, 0x9, 0xc}, {0x4, 0x2, 0x1, 0x5}, {0x2, 0x3, 0xc, 0x7}, {0x0, 0x4, 0x5, 0x6}, {0x1, 0x2, 0x9, 0x5}], 0x10, 0x9}, 0x94) writev(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="61bb908544b50bf6acda2f0caa48da103f19aff34a4256a43bd4481d76132bb3cfb84ea23319191a499ea0377c537f26e28157f2101be2548186b53e505fd366aaf14f93cc38b84a7c8a62ea3b8ddfe76ff092c33b5ac8d98de6e93f2509986003c881e5682c350b4df8187678493cf4f38ba3172e1db2a844e8b98f8f5badc27970752f2f69086b2b0e2d475df90920a94190383e14e4dda6c44321a7af5aaa1f3c3b5fec5530793d1d3fc564aeba8cbde1f7fb05fcba66dc651911997c4af07517b574277c709bba97e89fcfe20e4a0c88b1f0263d9f3f2a8729b6b8d069a82c", 0xe1}, {&(0x7f00000004c0)="b67d2fe3b437bf9b3c1e677c7ddb8caffee6bf5269b0485924537a819f852ec97ffc4f03", 0x24}, {&(0x7f0000000500)="57adefb2b493c7da6aec11", 0xb}, {&(0x7f0000000540)="6455e665ae9f3be80e1b89dc94c5c176d74a44ebf9a74d86de3f457f28d86ece11caa5e1e99ba7e2d044651e53a58dec95731dffbd08a844854243ea0904066a4a77a8ea3b21b142b4a3d928ad2673d330ba07f1f5554add93271cc55c6e44c79e51a83360ff0f2e2ec4aa0d59652821cafdd64ab4894fc25ea73be9175b023d4b27254024be5506f967b6342e53c2930bb1ac3588f62a6fcad1d79206796245b26ac83b5934bb035ab090998997887e58ceceed2fcf46303e37ab839cd31f0d92bf43263c8a3455423fa989da4439393dede0d4f5009fdb066f8679d55d47ad", 0xe0}, {&(0x7f0000000640)="ff0600508400ca49daddbe0150a73d5d4751b67c51bb7bdf3bd584eb863517c60c73c4c0b4b29fa40c751a8cf4da28d9095e0c74d0a9630418af936090", 0x3d}, {&(0x7f0000000680)="59717bb863601ce141117ae6063270a4cad5167301620fc76d75e829505f9062f2b09f6964d50a86f9f6ffb0e09a5721f1c54b60caf1a7ee1c7e5262481c4e301a1ca825032b365a36df76b7e268d5cefcb287e1918520d4c6efaee6afd6094d351d1b334011f17373a262d78ca03562", 0x70}, {&(0x7f0000000700)="2d4598bda210fd08e0a87c", 0xb}], 0x8) 984.052676ms ago: executing program 1 (id=1625): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x7, 0x4, 0x2, 0x14}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f00000000c0)="a931", &(0x7f0000000100)=@udp6=r0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvtap0\x00', 0x0}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r3}, 0x94) syz_emit_ethernet(0x86, &(0x7f00000004c0)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0xff, "191e", '\x00\b\x00', 0x86dd, "4dfddbe063f80434ab142033bb239498dad2b3260849a1c08d51db6b69fd83d1b4aa3fe940f0a93ee0e0e21f7fcfadd5a3c571696a6a772f51512041b4081e7120c073a7de3308fd5dd0495a1397cb8cd439f185efda02b4c500"/107}}}}}, 0x0) accept4(r0, 0x0, &(0x7f0000000200), 0x0) 980.183567ms ago: executing program 3 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x0, 0x401, 0x401}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10001, '\x00', 0x0, r2, 0x5, 0x2, 0x3}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x2, 0x8, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x7, 0x0, 0x0, "00000000000001fe"}, 0x2}}]}, 0x14c}}, 0x4c8c8) 948.606105ms ago: executing program 1 (id=1627): socket(0x2a, 0x4, 0x9d32) r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x98, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x5, 0x5, 0x2, 0x7fffffff, 0x7a, 0x4}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x7, 0x7634, 0x2, 0x9, 0x3}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0xf3, 0x4, 0x6}}]}]}}}]}, 0x98}}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="deeb25e1e406bab74d076cf4d45fb4ffbffa03011975c797998ab5cff5377fbc7f1236f5fea8525740c6d18bcd76aaec7fc662842f688e91a6f9359a84bb6bd81f71a1761b33f43b824d9d730d0746b9b241e32fefb0a9a6f711ce895b97aa800b85287d8efe980e66508536f76b06c726237e9ebb50f0b578eeb7443a47da98cf87ed92565d914b965bb3882b9a0a03d4331192c520f59e0f1562d4367889ef00"/171, @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r10], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r9, 0x200, 0x70bd25, 0x3, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbcb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 927.016081ms ago: executing program 3 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000040200002500000005002b0003010000000001007770616e3000000005002e0015000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) 827.978692ms ago: executing program 1 (id=1629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000440)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 826.898996ms ago: executing program 3 (id=1630): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="20004b4a08d3a2dd2200ada7f512fdab731b5e660001d55673000000f5855280e97cb3b1884687b219482b00f0030a00000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) 800.274458ms ago: executing program 1 (id=1631): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a99039"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@remote, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120300", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000040000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006e00000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00C/\t\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e"], 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x5, 0xd9, &(0x7f0000000900)=""/217, 0x41100, 0x42}, 0x94) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x32, "1ef8323733db00642df3930f4929900243e543b992ed6811a36608d5e4edf94204c1aa8c2d71043742ace631f57b7751d1d1"}, &(0x7f00000001c0)=0x3a) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={r5, 0x2, 0x10, 0x8, 0x7ae3}, &(0x7f0000000240)=0x18) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000740)=0xffffffffffffff82) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000040)=0x7, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r8, &(0x7f0000000580), 0x0, 0xc011, &(0x7f0000000280)={0xa, 0x4e22, 0x57, @loopback, 0x81}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r7, 0x0, 0x0, 0x800}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7820000000000008500000086000000950000000000004363e7a2365e09df0a9197450000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x3fff, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x801, 0x4) 624.837022ms ago: executing program 4 (id=1632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff000000000000108a15df", 0xe}, {&(0x7f0000000500)="ce03be93f6b49fe72c169c8dd7", 0xd}, {&(0x7f0000000100)="f244f837c3c9df25a38f615b9aaede7359e971aaa4cee6e01091d5fe5f9323619cca39d06ff50b3a4d48fca297dd2502efb8a62f5e46ac33fe7122305beb4629acc42e67bea3e73eb9a39547e437ec1832595fb9bb", 0x55}], 0x4) 527.860037ms ago: executing program 2 (id=1633): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x60}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) 518.927134ms ago: executing program 4 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003600)={0x28, 0x1c, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r0}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x840) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xe, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={@dev, @rand_addr, 0x0}, &(0x7f00000007c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bind$xdp(r9, &(0x7f0000000340)={0x2c, 0x3, r11, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x8, 0x80, 0x100, 0x1000, {{0x18, 0x4, 0x0, 0x5, 0x60, 0x64, 0x0, 0xf9, 0x4, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x8, 0x5e, 0x0, 0x8, [0x1]}, @timestamp={0x44, 0x8, 0x85, 0x0, 0x1, [0x1]}, @generic={0x88, 0x10, "b8a3e8e644bc91a05bc07ad961fd"}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0x4, [{@private=0xa010101, 0x4}]}, @ssrr={0x89, 0x1b, 0x8d, [@private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @private=0xa010102]}]}}}}}) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x38}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0xfff3, 0x8}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000940)={0x924, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x38fb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2ef1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x9, 0xd1, 0x8}, {0x6, 0x6, 0xd, 0x401}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x18f9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8a78}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff3, 0x1, 0x9}, {0xf, 0x7, 0x0, 0xb}, {0x846, 0xe, 0xc9, 0x4}]}}}]}}, {{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x44004}, 0x8000) 407.496989ms ago: executing program 2 (id=1635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xffffff59, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)=0x3) getpeername$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom$inet(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) listen(r3, 0xda90) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r5}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x6, 0x4, 0x10, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x3, 0x34}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000600)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x14, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "de781887"}}}}}}}, 0x3e) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x44, 0x6, 0xc80, 0x138, 0x138, 0x9b0, 0x9b0, 0xb48, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10, 0x3}, {0xffffffff, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x9, 0x3}, {0x9, 0x1}], [{0x6, 0x80000001}, {0xffffffc7, 0x4}, {0x7, 0x2}, {0x8, 0xffff}, {0x7, 0x81}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0xfff}, {0x800, 0x1}], 0x9, 0x3}, {[{0x19008000}, {0x26bb, 0x2}, {0x7b3, 0x3}, {0x1}, {0xe, 0x2}, {}, {0x9, 0x2}, {0x10000, 0x1}, {0x0, 0x2}, {0x2fab, 0x1}, {0x597, 0x1}], [{0x7, 0x1}, {0x1, 0x5}, {0x7, 0x401}, {0x8, 0x9}, {0x8, 0x8}, {0x0, 0x4}, {0xfff, 0x4}, {0xd, 0x7ff}, {0x4, 0x6}, {0x3d, 0x5}, {0x942f}], 0x8, 0xa}, {[{0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x7}, {0x4, 0x2}, {0x7, 0x2}, {0xffff, 0x1}, {0x4, 0x1}, {0xfffffff7, 0x2}], [{0xe547, 0x10000}, {0x4, 0xf78}, {0x81, 0x1c10}, {0x3}, {0x8000200, 0x5}, {0x4, 0x9}, {0x80000001, 0xffff}, {0xaf3d, 0x2}, {0x3c, 0xc}, {0x3e, 0x9}, {0x3, 0x4}], 0x0, 0x3}, {[{0x6, 0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0xdeca, 0x1}, {0xfd}, {0x401, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x8, 0x2}, {0x81}], [{0x1, 0xfd0d}, {0x9, 0x4}, {0x80000001}, {0x4, 0x400}, {0x9, 0x3}, {0xa, 0xfffffff0}, {0x9, 0x4}, {0x4, 0x2}, {0x10, 0x59d}, {0x7, 0x1ff}, {0x4}], 0x8, 0xb}, {[{0xffffff11, 0x2}, {0x6, 0x2}, {0x902, 0x1}, {0xffffff00}, {0x9}, {0x1, 0x2}, {0xffff, 0x1}, {0x9, 0x3}, {0x4, 0x2}, {0x70c8}, {0x7, 0x3}], [{0x3b8a6dc3, 0x7}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x3}, {0x5, 0xffffffff}, {0x1ff, 0xff}, {0x3, 0x96e}, {0xffffffff, 0x400}, {}, {0x3, 0x934}, {0x5, 0x7}], 0xb, 0x9}, {[{0x20c, 0x2}, {0x72, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x8, 0x1}, {0x5}, {0xffffbc3b, 0x1}, {0x7fffffff, 0x3}, {0x42, 0x2}, {0x8, 0x1}], [{0xe43}, {0xb, 0x8000}, {0x2, 0x5}, {0x3, 0xe9c0}, {0x5, 0x7f}, {0x9, 0x3}, {0x6, 0x40}, {0x11f, 0xffffffe9}, {0xc35a, 0xd16}, {0x6, 0x4}, {0x9, 0x18a}], 0x8, 0x3}, {[{0x7, 0x3}, {}, {0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x401, 0x2}, {0x6}, {0x9, 0x2}, {0x7c42, 0x3}, {0x40000000, 0x2}], [{0xdff, 0x4e}, {0x3, 0x7}, {0x1000, 0x1}, {0xfffffff8, 0x8001}, {0x9, 0xb34}, {0xfffffffa, 0xa}, {0xae9c, 0x7}, {0xe, 0x8}, {0x8, 0x7}, {0x6, 0x3}, {0x9, 0x92b}], 0xc, 0x7}, {[{0xfff}, {0x1, 0x2}, {0x2, 0x2}, {0xa640}, {0x0, 0x2}, {0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x80000001, 0x3}, {0x0, 0x1}, {0x8}], [{0x1, 0x73}, {0x10000, 0x9}, {0xc, 0x3}, {0x8, 0xffffffff}, {0x7, 0x5}, {0x86, 0xf}, {0x3, 0x2fc3}, {0xf65, 0xa2f}, {0x15064f6, 0xede}, {0x8a2}, {0x2, 0x6}], 0x7}, {[{0x80000001}, {0x5, 0x2}, {0x687, 0x2}, {0x20000, 0x1}, {0xab50, 0x2}, {0x0, 0x3}, {0x7}, {}, {0x5, 0x1}, {0x5}, {0x7}], [{0x64d, 0x3}, {0x7, 0x7}, {0x10001, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xcba}, {0x40, 0x4}, {0x2, 0x4}, {0x2ca6, 0x9}, {0x80000000, 0xc9}, {0x6, 0x7}], 0x9, 0x3}, {[{0x9, 0x1}, {0xe35, 0x1}, {0xffffffab, 0x1}, {0x401, 0x3}, {0x4, 0x2}, {0xa}, {0xfffffeff, 0x1}, {0xc9, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x3, 0x1}], [{0xb6f2, 0x80000000}, {0x0, 0x9}, {0x65, 0x4}, {0x3, 0x982}, {0x5, 0x7f}, {0x7, 0x9}, {0x6, 0x4}, {0x3ff, 0x4}, {0x1, 0x7ff}, {0x7, 0xffff}, {0x3, 0x1}], 0x6, 0x1}, {[{0x6cd8867f, 0x1}, {0xb42}, {0x7fff}, {0x4, 0x2}, {0x65b, 0x1}, {0x61, 0x3}, {0x78a8}, {0x4, 0x3}, {0x8001, 0x2}, {0x3, 0x2}, {0x5, 0x3}], [{0x4, 0xff6}, {0x0, 0x3}, {0x4, 0xe8aa}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0xfffffffc, 0x3}, {0x15c, 0x80000000}, {0x9, 0x3}, {0x91, 0x80000001}, {0xfffffff6, 0xbd}], 0x0, 0x5}], 0x9, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xce0) socket(0x2a, 0x2, 0x0) 135.566287ms ago: executing program 4 (id=1636): syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a0500230800003c0012800b00010069703667726500002c0002801400060000000000000003000000000000000001140006feff00000000000000000000000000000108000400050000004fc1a1848edd876280840f5aaf7b0ac88b341c5d82cfb07fc8c212cb8231113cbd044d09c7df54acce1b4f47544a134c023d7638525f7111b37fc1b13c1cb1e32eef673281291ea2f269a3bb5c154c14518c0044e779caac2b52ab83544159fdb993b07e35439f5c43e7df0bc5771d8784c32cc7720f3cab2ebd16c6de9d8c"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r4, 0xc3ceb000) sendmmsg(r4, &(0x7f00000016c0)=[{{&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="4b149cf00c72106d25c4d8f8c50a0f4b92c4388cf20242d4f13e4e895fbd1ecac736c8d7cc1c609f7c0f4bb572f2", 0x2e}, {&(0x7f0000000280)="7635267e00cec9ddf304fc8fdd5db7f7008ad1cf461b6143c344a9bd31a2152346bd97a16121310741631b6943991f52f0614bf3f161c3f0d831eec40585b437f6d947cf22faf27a0678309726b1b72e8578be5ae6d87e5e5fadc2bd9623fd3256bee7ea33e6e0423767dcbcc84bfb802c9ae4be23a7c59ce771ca58496a0281cf768c3eefcbcb983b1df4b76b24f6d7ff13f8080009e81b13524d3a6cdee20d1a7e27b774d7785dec67501d3d12c36d7eab", 0xb2}, {&(0x7f00000017c0)="0f52f6af18f20162b5034ac0f984a3311b658295ed69b3c5a7108880bc62f7f2c80607dd425f3719a39812e2ecd325e950ab8aa058c43b4aa43341157f3e8104ecd4ef10de7a7e00be6aab09a1fb5c5268914ad304c155cf7078e6d8019b835c5f3ab9881ca1feb540210ffe86f331338a8afb4573a865d41b281f9859ee6ea5e1cdada6cd7c96af5c4b70c9", 0x8c}], 0x3, &(0x7f0000000400)=[{0x78, 0x3a, 0x40, "56cdcbcd82d4ba0052cb47b9883877d51980dbcfe5142aa86d5662398a04f7b50586a0a780d692bd2c7cbf520997f49baf07cb718066e7681f8106319d911ab9d7f76809ab331bf52034edf960c5fbbf3b5d6caa19b4f41ad692f19ec3626b4a0dd5fd"}, {0x98, 0x10d, 0x6832, "dc5dce132d95d514fc88abb517fa158140bf3d2dfa03f04d1b90d5de329a89542924f208506644cc8f428d58d2239e7f6de00f0ed0df60a456f698a583f8be4bf891f05636699e25905571e5965021701e64fb3821989a052ba5cefa3330bebef4b8692b4c0c0602e7efab4135a9ca97891250f0ea6c6bd0b755d8388c5354e6078b"}, {0x68, 0x15b, 0x1ff, "afd94209c4164808d8f8975ed7ee032747197080b27f8b331eab8bc44b7539c531c621ee7e50afbd20dd07400c56179e8e218113218fbd11766a66f03f82340b750f703cf0134be4445e16ba05de053ab36ede"}, {0x1010, 0x10b, 0x1ff, "23b07bcdaf57cd9b1c9c8d53f3dec3bf748de4167520bdcf88e36df57d52ce070a04b09b581e0617f604df44a2838742172aa169b9e0b0a354b78e1003ba7a3d563c2459e07d00d353719fac3845e245d2318a4283330f3d2d27e69d20ba629ca8420252b8b06ebfe25be333b8b915752400908fa316e871fdb3a8038fceeaab972076873ac649c2d530da398c937ccafd963d913ceb9d80187b32e8e2e8b35901be83e62c76d0306d958581a4b4e629e94cb7d94bf2df299a5613657640e408814ffe8d48f8106cf2833ce89e87b8f3e5888754c3efe9d82c9691c2b43ca98f1328f2784fdfef1292cb76bc3238f80a6c824b29f018c0f95f0feccc6d1d3f680931687364fb227b985d36fff5aba1158a184c2ad57ac94e020305add5f91061508e47bb0dde296803a4d88d296a4b2ecc06c4ecf8c5c81fcbeb1eb6d693214aa48374af3fb6d231b1c293918a31a59fc520a9a7363d4b1300e946b4a8c0f1985ccc470b8343713c37301734b8b08f41ce42cb577bdca2770f49a0afc3fa466e47479e0ffd8326f642dd144c5a86678f2f8fdec27fcbb7a0f83fce00cae10462604eb8adafa1e6d5a2b015381388b7ae8d317c41dae5e0fc7d7a9c8769945f285f92164f635d42d01407c1e41ccb181d94d5a3e594d366638a63c3d4e53cea6b73531dad545c969ab2cb0e77f43ec7dbd4098a9db0452f8fe0a74b34cc5b0e4cb945c455ed0660c9d258a74aa35b2067af23a2e926e486559a43e8fa4a6ae5664750393ba9252a866fdf0b45b92c11aeef72105add9d9c3adf6d0ac9cdab9e56a4db7600dd0b10ac632a01d9bcb5995cfe1361cf2a39789daa843a7fe09624c85041ed59fe04d968b08e3d3a936c7f652540e3bc2c4012f920a525948786b89a457fdd237581f4997bef8e43334a3d5d98e9b158f0ad267aaed0ed1707d5c3bdcc54e9be3f7f9e0a1298eb0646ac26d794eb903be1bede14fc894e35f276245ff0908435f249a5c35860ad54417e098428ef22ba654ccf4084bc0b51b30677af3d0b5cddabde963c93659d4f676207e702b0e45a98f1ddaf15e5b3f160a898c99957f0b71381769d256529f0e8b285f798701f1047cd30fb1fe6bd1d8b8764a2b7adb0eae2365179d8d62c8782035ecbefcfa5fd2a92fd571c01a2c08163bc24d7e1eb5f39ccaf2e06552a3c01c5b60ad9ef0567199d0570bc50f66ef7fc1da38d6787c6cb4db510fae1842f2b82abafe09c6cc2d4c753dc6cb53b1233a3cdd0f46dfcf19b56a9169df8334ffed3b584a0096bd6e83da1bf849aa664d75595e2e10d98f10fc2dfd73c42627749ac7489de76fb1ffc8b939ff3594c94c7374483a3dbf6137e52fb154413be07e681b7f2a2bce7001295c0b50df810704e88ec50ccc7fe1f3d8b42121d980966d71a96a63f1ccddba9637e8e7c626667306cc56735bb5e94fb7fc67f5f2b1dc779185725fb1699ca9cf47df317c1ed928447dbe48aafc0826e8a9d4402e1cad9e8a3a4f9775a9245bd489adbdc9caa12c46c6fd11e0d7cf959c12cb0222a7996fe483e902e617e9ca4695c90d65289f6980f1170509e45f26e7967d7c8639b99ca1764ccc62f50adab52a24f54e3dccf9a10e9f30019d815e8fe4ec2bc78fbf53f4452bd4304c7d98e37918883a8c100fb9c2a5a60170a48e2f9ea04e98674621a70b194f542dcc32a8760895c77c2430e6e74c4cacccffa23d6f3442d3193df01469d6ac387982353914c1bba6aa7458e9f1cfc7280e05d82062e3ca49b3c43bb8ce6853a7d1feecd6405f1e30bb0103b9bd862fb28db0d5b476d91266769ad1457435953c5f74052d993c209ae610f3d9e7847b57f4b8b1442b7d554c5152f118dcb04d3ad6925ce3eca22000e327ee06053e204d3383e2353852e417aeb1274cb547282036715ea37704295d61bda3f9612d8e81e18921e1a0681f6ff4271a91d07a9e06fae8cc09e7486bd868026212eba1b7a761a32e4fccb7b25806b5fd3f9dbd8c2a51703a8e5556ac45e387c58fb69299f2f6301a63e6697ddaee5c3c5b1a7034a657e23e6e76aa754e0f56b5e37133efb7d08a810e0985a6be1a7edc5ba1e5561378fa4c276b25ffa6943c783ce1791d7c0783479fca7ea13eebaa5194324bd05dd56c99b24c5b3d74b001398516ec792d36e2eb1ac3c42334582fabcaf24b7d8f647d898efe661ea73fc30e458dae7344ad876924eefd8d5c7b54891f5901a049d805e20d4f7c4ce643564b7fede97cbd2cca7b01150e8bb09740a99760792ffd2aee1a1a2e20191a7e21b7e3a338a2de0976294b0b7d06eb29d95f296bb0dee81e9b5869c0d1e43e492c7b984029158a1f21d175ee27767886069cac62731760dbcd77b7fd8a817d0922fcc42cafae53f9e71c4d59578953ef436c5968b978b1ecb086a02cf3cea67a47dd2d621f7a18f58ec9d4dbf320af07abf83c304d96e4c2bb4fab32fed3e47b041fdaead1f6f3a4c77a210396fd7f55e820bd58c5a959f99076b0a842b92d5eeb542439e84d4102638c28528af394bad1a8449e564096f9699b6113699b9f58891683174ee83a8f16bae8b3314927e52fd7682c39e6ecd6d2c08df69aa427d0c43e7adf1029be4fa03644f109c600aa7f1f19d831815eac09a0cb60333f36b19afa572d902bbdadf0a290f330969fa54f672c29386502520ea3c2872c07ecfc1da336ade718d3a0dfdf73e7161e35913a3548588d53fc1c6c15be180e2859a0740ca1ea92c04ae4cdf2b01ad192202e307fa20b44dfd4c5489a835182b4eb11834cdd76f73b5a3b1e9227184c53b2dd94d9bd9800267501c188a11d47cb98b169bed3ede7f50887f0fb0c62e556da9a6833bd98770c4863df55df87bfecd1071b77e74fe2c89f9a03f45d1a162d97898b366e947e8ea52330d202c2c7d8f2eb70c519888e1e11217a77a4f6ca17a60e34e4b8786d625124cb4e261eb2d7ed645d6cc8d139a5ee701e628afc97d98fc2225870b6af7e0f2ae95272a03e7e7601e40435f6416eb8418724648f937797666d65fc929b2f903b278f910711e7c662a394f4daac8d0299bb3392b004887341752cfc485e20e0d982ed2ee0340c619becba2331c53a70b6977d3acca3bebfaa5a0b7d1b0a8feb390ee820d033ec1051e62412eabe22d95afe9395f0586ddeb470bca88e45df59f5837863090c7a9cdf492d29e6bd9a35a6d33766c893b0519f4e162156f548c0c60fa8f886e462600d872c606d36caf63f702caf370113cc246364d090c894a55020b42140d8cc97ef66b8a88e1e877433ed15bdf5f376d0aee3bcf5672f72e0cc6125baa3cabe92aa2e0fdf9a6f610728aefc51bd0c323dd5950ab58e8a939f8ee6df0addb5c5386b26569258f3e07062b711b50da3d33947ba38a29c46e85821ecf837ce1b32c0207cf08d3b8ac5aea6e61032c25049cce64a1bb12eb19953d55a393a3d543c59477fe00c1c721c70811fd7de28a634b6d0baf68264b323d68a6752dd6dfbda705a94a1290d36b82debdb9fdb6166c3916fb9124d5b4fc074e7fec12ac2084559fc67b75a8fa7198029c5076f7927421bc7149175b73aa9b691bc815f74f0fd60c59bfff0b417303d9ec8bfc3da291490907d3937b53d0b904ed9f37e21ebec354f6130ebc7dc22dfb3f257cc6da49b9a2cc91440b8a4939945bc9e22f5c19c284a6db79aed5c280ad1c77d88a00a95490aeddba84696b7c4e67e7e740199dd39594d7c5aa8572a3da37333e920fb5d4ec3a184fb00d7a903b144b9d47cd6a6ceba1cd3b130aa6809d2a981ef01e5c14105052568fa9debfa69f50c2ef5aa3dae1a4302ecfad490097237e535c206e40e8baff096ab9a813759e382881ca71c46aae4e0fcd3c37b656daecbe270d59330ddc09143c43cd6f3556b6ca6fd492d363504adecf9d8525a302b81712f4a7b86df2953ffb8b087f31306e3e7938588ddf87147d34ae1bb604e1ef74df323b097bad1190b0b43f2693c76e99ff7b6496676b49013f5e806569ee26ff3d69fba90b60c09cf21a72618633c5550d8e8317ae359e30b0e42ea3a6c7d2356c6b6132b76508f1e80262cfe0a8ab0047d026aa2d0375e38df119cf735032da5852555f1acce2e1d234cfc7a5e57a484c1ed933ca57c4a1319985bdcf0c6f2afd7f3b745a267123ad0a39b247af85425a9b0787b6f14e4bfc85ba514996646c93b27e80333250891778e741ee04142b2eb874f4f24d232599a9c1af3ee6b98802befe06400d3878d33cc2bad5255e69a0da3a5b3adce4ddcde89db8dd9659e3ef73716137040c5cc9e833c27b46955bed56ba3b306bf257071c5211902fae51c9dd83c6998ff03ac866ec845c790ec5549cda40b3c6c0a2641c371de44dc525b06cb57a91f9901eb63b66cfe55500d31fc1be9b6f86d5689763b375fed6a9bde881af4089f84cf9a45b7f98bf6fddca857b416e8c766514325c053bbb6ca4e8a2d81930b10196f1375dab1ebc138815f81616aa562eda9e5e9461cb07ca62412396d87c005c9cd02c7ad21a1998ef9e861641c01a369f1ff9708be6cfbe880f4203f0973594abd3b5670108b9307da485308513140bf8fa0e891bc1792243a63be48d602f0b9dd332143afdc38a8400566c2ae9a80d494c8379bc5fe46d434f87fcee4aac8d327387aca844572e59483e924d52066733db0913e8cae6f999f17c5c96a2f52f755c10af30c8afc8572f1c3ba1ed75e89ebe76001d435f493736d3add0e81dbcdbfce5318b6c739a1734f9433f18cbdcd75fbc3b6109d19d6d13c8c7792b8d05c6d1f49fe2e4a56c1523f5400f8fc89d7581a8bf128379aee4bcfdc085bd1c9d0715c9718398022a06a464076f819cfa03d64fb8c3140de312c67ef4c0210a16caccb9d1f5e7ffcc206fcfa6ae87b19e8c4db45a1e79e1ecce5c09e849f926232788215b406b8e7abfcfdf69ad1d9aab7838c4ce367559eb0bd6f7db909fdff6ecca2ede51c1a6f36b8fc5141857b8f3acce6cb8d2090932b4828091e0840f1931f757bc2c040e69b09deb8e83a53bfad92ff941fdf1dabb9aecfabd13818557f14a54f154d7cefb25c8aaf15088ef19540f05d25e6faf685059ee1b41e1fbae6072fa38baf369bdb2d7100d090bc40199a8e583ea6803cd7e06a76ba5761cd739a148effedc4f67f95b698202aa977f5dcdee47b0721454bede007907a81eb9d73ee895446ffd88733959d7013883dc3f6b31008f67e6c84fb6101981017a2c19b911b587a86a0db631873d8f30a7e07f62306d47f3bea98a08f17fe7377ffe9830a833f2dde8bfb753d74a56d56f8b3759e52696fbd8336362a8f99a5f1f319caf9670edf288e10003ec0d86e6cdb9954b5e90aa598b09358e269e9118b354c4d8483fd2eca2f9d13b99c151fabbaf382a67e2a2fbc39778f3a1db26b93ae6ce8e96fb49b6225860201d80d0278d7d5100d470b2cef911a260ad37527f948cec87233fcf22f93469a6c51804e9ef45fae3ecb7989e60ac0d3ad4fe58b598f77520548dc741975d16bd99f5beacde50b343b531bae5d6e95876b7ff24f8d90ddc6e7d1e0f5f3b6b83db19a2677c90bd774e3e06d8a3b835be47e729bf1ef55ed9259dbc6d0302fdfc49fa4f324ddd528cd5f572be5946d8207ef801681c356db173011351ec60d3cc8049000fafd5f57f41f0bbb76c8bcd7bb4145d07727277a000cb68bf9926ded7c769177b365a2207ec675985fad69ba77ff8ac2f91fd98854f1d5478a926ab780434d42543b640a1783366b8"}, {0x30, 0x113, 0x1, "e2385985a74e31768266585c4ff9c164b21f935dcd70a2a22d2e57fcae20"}, {0xd8, 0x102, 0x5, "64a16775c58e0a73405b5940f649d954adb7e938a59d1402203c519f19bba708114af8c957a494b071276f62527ea2fc314a117aac774303cf9b07340a0889e1fbb20367088814112d1ce140dc8dbfc78cc471f65b84632af12f7187f9f941616b0cce54f03584208e07bea8872571d08104a4b59fc54e2417f4d5c5f44f0ec040348a00fbab009b933ba0bab28665411fb2cdf950a92d68ac3368d6342ab4f4ff06d58c15958b4fb2e2d2015ad0a6617695e7e1eb19f56373dc19a2ef02f0088ccd"}], 0x1290}}], 0x1, 0x24048084) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x8, 0x80000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xe6, 0x0}, 0x8) r10 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_buf(r10, 0x29, 0x32, &(0x7f00000000c0)="ff02040000b5ffffffffffffffff2c2be82db1af", 0x14) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @private2, 0xae3c}, 0x1c) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1c, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xd4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6}]}, &(0x7f0000000540)='syzkaller\x00', 0x5b, 0xb8, &(0x7f0000000580)=""/184, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x7, 0x7169, 0x8001}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x4, 0x5, 0xe, 0x3}, {0x2, 0x3, 0x7}, {0x1, 0x5, 0xa, 0xa}, {0x3, 0x4, 0xf, 0x7}, {0x3, 0x1, 0xa, 0xff73705fe8a79823}, {0x0, 0x5, 0xc, 0xa}], 0x10, 0x8}, 0x94) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r12, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r12, 0x0, 0x200000000000c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, r11, 0x2, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0xa, 0x5}, {0x2, 0x1, 0x2, 0x2}], 0x10, 0x10}, 0x94) 129.904732ms ago: executing program 3 (id=1637): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 71.639126ms ago: executing program 4 (id=1638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d12", 0x5}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r1, 0x1) getpeername(r1, 0x0, &(0x7f00000002c0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x7, 0xffff}, {0xb, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000040000001800000e04f1ffffff0000000000300000"], 0x0, 0x2d}, 0x28) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="fb9bee87840e3ddac14fb8921b2e077ccfe2211fa791f085a8810731178031ea3f6e5c0079c73a568f527386f20931e1661637466cb1e585deb0107f534132063e6e1fa7c6726934a4527c9b70f40291040810", @ANYRES64=0x0], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, 0x0, 0x25, 0x19, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x81}, 0x8) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000480)=0x4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000002000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c22a4ad19213865d2f1c0000000000019003001e0001e00900000000000000020000"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000000700000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0x46, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r8}, 0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r6], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 1 (id=1639): bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="15"], 0x11) r0 = socket(0x2, 0x803, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x99d1, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x80, 0x10, 0x4, 0xffffffff, {{0x9, 0x4, 0x2, 0x1, 0x24, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @remote, {[@rr={0x7, 0xf, 0x40, [@multicast1, @remote, @loopback]}]}}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0x0, 0x1400000, 0x1, 0x5, 0x515}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}]}, 0x50}}, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e21, @multicast1}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)='geneve1\x00', 0x9, 0x5, 0x3}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x11}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x44811) kernel console output (not intermixed with test programs): syz.4.47': attribute type 3 has an invalid length. [ 92.463121][ T6189] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 92.487088][ T6189] netlink: 224 bytes leftover after parsing attributes in process `syz.4.47'. [ 92.542314][ T6189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.47'. [ 92.782347][ T6204] netlink: 'syz.4.51': attribute type 13 has an invalid length. [ 92.790099][ T6204] netlink: 'syz.4.51': attribute type 17 has an invalid length. [ 92.881954][ T29] audit: type=1804 audit(1776241557.686:2): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.53" name="/newroot/4/memory.events" dev="tmpfs" ino=39 res=1 errno=0 [ 92.927273][ T29] audit: type=1800 audit(1776241557.686:3): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="memory.events" dev="tmpfs" ino=39 res=0 errno=0 [ 93.421304][ T6233] netlink: 'syz.1.42': attribute type 12 has an invalid length. [ 93.437800][ T6233] netlink: 120 bytes leftover after parsing attributes in process `syz.1.42'. [ 93.602337][ T10] net_ratelimit: 13 callbacks suppressed [ 93.602356][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.692253][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.714044][ T6262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.861539][ T6269] netlink: 'syz.4.59': attribute type 89 has an invalid length. [ 93.864394][ T6262] syzkaller0: entered promiscuous mode [ 93.885715][ T6262] syzkaller0: entered allmulticast mode [ 94.163809][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 94.729556][ T6295] netlink: 'syz.2.64': attribute type 3 has an invalid length. [ 94.755655][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.525832][ T6332] x_tables: duplicate underflow at hook 2 [ 95.533891][ T6334] netlink: 'syz.3.71': attribute type 29 has an invalid length. [ 95.544589][ T6334] netlink: 'syz.3.71': attribute type 29 has an invalid length. [ 95.602612][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.611752][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.620655][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.763818][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.324400][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.333315][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.713895][ T6295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.955294][ T6348] netlink: 348 bytes leftover after parsing attributes in process `syz.1.75'. [ 98.195808][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.77'. [ 98.207431][ T6359] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 98.216234][ T6359] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 98.227058][ T6359] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.77'. [ 98.820113][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 98.856202][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.85'. [ 98.901113][ T10] net_ratelimit: 5 callbacks suppressed [ 98.901133][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.253207][ T6398] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 99.301973][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 99.447797][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.558521][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.482597][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.642573][ T539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.651300][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.660635][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.443848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.522424][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.740750][ T6385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.929817][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.941659][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 102.076899][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 102.149301][ T6442] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 102.250010][ T5896] IPVS: starting estimator thread 0... [ 102.342273][ T6446] IPVS: using max 33 ests per chain, 79200 per kthread [ 102.719086][ T5927] IPVS: starting estimator thread 0... [ 102.832255][ T6473] IPVS: using max 31 ests per chain, 74400 per kthread [ 102.880687][ T6485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.109'. [ 103.023957][ T6445] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.039685][ T6493] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 103.165919][ T6504] Bluetooth: MGMT ver 1.23 [ 103.215814][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 103.225010][ T6504] netlink: 'syz.4.114': attribute type 7 has an invalid length. [ 103.233923][ T6504] netlink: 'syz.4.114': attribute type 8 has an invalid length. [ 103.241649][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 103.258883][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 103.309910][ T6504] ip6gretap0: entered promiscuous mode [ 103.322500][ T6504] syz_tun: entered promiscuous mode [ 103.365249][ T6504] ip6gretap0: left promiscuous mode [ 103.378336][ T6504] syz_tun: left promiscuous mode [ 103.566160][ T6508] netlink: 88 bytes leftover after parsing attributes in process `syz.2.115'. [ 103.594021][ T651] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 103.617014][ T651] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 103.625977][ T5824] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 103.650448][ T6524] syzkaller0: entered promiscuous mode [ 103.697832][ T6524] syzkaller0: entered allmulticast mode [ 103.750170][ T6531] Bluetooth: MGMT ver 1.23 [ 103.755266][ T6530] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 103.788571][ T6531] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 103.822297][ T5824] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 103.842637][ T5824] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 104.644416][ T5896] net_ratelimit: 1271 callbacks suppressed [ 104.644435][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.690672][ T6578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.137'. [ 104.962825][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.025594][ T6585] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 105.141042][ T6586] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.170741][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.138'. [ 105.182020][ T6586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.220103][ T6595] tipc: Started in network mode [ 105.266714][ T6595] tipc: Node identity 8a160ece8e9a, cluster identity 4711 [ 105.291195][ T6595] tipc: Enabled bearer , priority 0 [ 105.448516][ T6595] tipc: Disabling bearer [ 105.480850][ T6613] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 105.686766][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.175354][ T6658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.182929][ T6658] IPv6: NLM_F_CREATE should be set when creating new route [ 106.190203][ T6658] IPv6: NLM_F_CREATE should be set when creating new route [ 106.302177][ T6663] pim6reg1: entered promiscuous mode [ 106.307545][ T6663] pim6reg1: entered allmulticast mode [ 106.391053][ T6658] xt_CT: No such helper "syz0" [ 106.722372][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.750234][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.164'. [ 107.030075][ T6700] netlink: 52 bytes leftover after parsing attributes in process `syz.0.167'. [ 107.063132][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 107.079252][ T6708] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.166'. [ 107.176013][ T6711] netlink: 'syz.3.166': attribute type 2 has an invalid length. [ 107.762363][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 107.772574][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.954960][ T6741] xt_policy: output policy not valid in PREROUTING and INPUT [ 108.018703][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.242588][ T6755] __nla_validate_parse: 3 callbacks suppressed [ 108.242606][ T6755] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.179'. [ 108.300604][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 108.319752][ T6754] openvswitch: netlink: Flow actions attr not present in new flow. [ 108.555667][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 108.669321][ T6773] syzkaller0: entered promiscuous mode [ 108.806031][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.875578][ T6780] ipvlan2: entered promiscuous mode [ 108.898483][ T6780] team0: Device ipvlan2 failed to register rx_handler [ 109.149079][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 109.220181][ T6806] netlink: 68 bytes leftover after parsing attributes in process `syz.1.196'. [ 109.762688][ T10] net_ratelimit: 3 callbacks suppressed [ 109.762717][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.839303][ T6840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.848155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.860717][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.909718][ T6840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.918709][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.952228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.977530][ T6840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.986310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.991831][ T6837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.066559][ T6850] team0: entered allmulticast mode [ 110.072041][ T6850] team_slave_0: entered allmulticast mode [ 110.082367][ T6850] team_slave_1: entered allmulticast mode [ 110.217194][ T6837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.283787][ T6852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.210'. [ 110.315927][ T6861] SET target dimension over the limit! [ 110.451002][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 110.485452][ T6837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.512693][ T6874] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 110.710815][ T6879] netlink: zone id is out of range [ 110.725104][ T6837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.788148][ T6879] netlink: 'syz.3.218': attribute type 14 has an invalid length. [ 110.982157][ T6887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.221'. [ 111.075460][ T1162] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.079720][ T6890] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 111.093463][ T6872] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.112316][ T6890] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 111.169794][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.194360][ T6872] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.272127][ T1108] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.344481][ T6872] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.384098][ T1108] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.457854][ T6872] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.564917][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 111.576536][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 111.691117][ T1162] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.787021][ T1108] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.923536][ T1108] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.951919][ T1108] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.452174][ T6944] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 112.604381][ T6944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.898565][ T6973] syzkaller1: entered promiscuous mode [ 112.919856][ T6973] syzkaller1: entered allmulticast mode [ 113.537905][ T7022] netlink: 'syz.4.254': attribute type 1 has an invalid length. [ 114.652262][ T5837] Bluetooth: hci3: command tx timeout [ 115.042505][ T5896] net_ratelimit: 359 callbacks suppressed [ 115.042526][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.129139][ T7057] syzkaller0: entered promiscuous mode [ 115.135021][ T7057] syzkaller0: entered allmulticast mode [ 115.212780][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.345246][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.356319][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.365080][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.392593][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.401899][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.818819][ T6980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.092295][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.131097][ T7097] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 116.168484][ T7100] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 116.173568][ T7097] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 116.203401][ T7103] netlink: 'syz.1.278': attribute type 10 has an invalid length. [ 116.211587][ T7097] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 116.234622][ T7100] bond1: entered promiscuous mode [ 116.240026][ T7100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.257591][ T7111] netlink: 'syz.1.278': attribute type 10 has an invalid length. [ 116.274410][ T7103] team0: Port device dummy0 added [ 116.366638][ T7111] team0: Port device dummy0 removed [ 116.404989][ T7120] __nla_validate_parse: 2 callbacks suppressed [ 116.405012][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 116.434533][ T7111] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.446209][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.282'. [ 116.614908][ T7120] macsec0: entered promiscuous mode [ 116.802277][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.876139][ T7128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.053348][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.123436][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.217847][ T7128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.273573][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 117.330117][ T7142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.386650][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 117.396847][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.287'. [ 117.407246][ T7152] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 117.429960][ T7128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.446887][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 117.507724][ T7142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.567004][ T7128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.631391][ T7142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.758384][ T7142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.814337][ T58] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.849940][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 117.851420][ T58] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.902061][ T58] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.961830][ T1108] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.031029][ T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.075088][ T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.109881][ T1108] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.174719][ T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.201462][ T7182] netlink: 'syz.2.297': attribute type 21 has an invalid length. [ 118.789265][ T7215] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 118.797829][ T7215] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 118.806942][ T7218] netlink: 56 bytes leftover after parsing attributes in process `syz.0.306'. [ 118.845271][ T7214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.946701][ T7214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.012926][ T7223] netlink: 'syz.0.307': attribute type 21 has an invalid length. [ 119.027057][ T7225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.307'. [ 119.044254][ T7223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.307'. [ 119.271654][ T7214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.524338][ T7232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.919050][ T7214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.087436][ T6000] net_ratelimit: 6 callbacks suppressed [ 120.087455][ T6000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.148528][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.216293][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.242588][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.261300][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.301881][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.510921][ T7286] syzkaller0: entered promiscuous mode [ 120.516769][ T7286] syzkaller0: entered allmulticast mode [ 121.284678][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.232355][ T7247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.322439][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.504041][ T7308] __nla_validate_parse: 4 callbacks suppressed [ 122.504084][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 122.641128][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 122.705068][ T7317] bond1: entered promiscuous mode [ 122.712583][ T7317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.730386][ T7317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.328'. [ 122.825621][ T7317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.851374][ T7317] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 122.863155][ T7317] bond1: (slave vcan1): Error -95 calling set_mac_address [ 123.104241][ T7342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.334'. [ 123.123222][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.143253][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'. [ 123.363179][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.448088][ T7336] validate_nla: 1 callbacks suppressed [ 123.448107][ T7336] netlink: 'syz.0.332': attribute type 10 has an invalid length. [ 123.469492][ T7336] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 123.537190][ T7362] syzkaller1: entered promiscuous mode [ 123.547189][ T7362] syzkaller1: entered allmulticast mode [ 123.864207][ T7370] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.893812][ T7370] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 123.917807][ T7370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.930223][ T7370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.941680][ T7370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.071656][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 124.088317][ T7388] openvswitch: netlink: Invalid VLAN frame [ 124.112229][ T7388] bridge1: entered promiscuous mode [ 124.206579][ T7394] syz_tun: entered promiscuous mode [ 124.214774][ T7394] macvtap1: entered promiscuous mode [ 124.223727][ T7394] macvtap1: entered allmulticast mode [ 124.232623][ T7394] syz_tun: entered allmulticast mode [ 124.263738][ T7394] syz_tun: left allmulticast mode [ 124.283401][ T7394] syz_tun: left promiscuous mode [ 124.517819][ T7410] netlink: 96 bytes leftover after parsing attributes in process `syz.4.353'. [ 124.681507][ T7415] netlink: 'syz.4.355': attribute type 17 has an invalid length. [ 124.689746][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 124.742437][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 124.751511][ T7421] bridge: RTM_NEWNEIGH with invalid ether address [ 124.771866][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 124.782243][ T7422] bridge: RTM_NEWNEIGH with invalid ether address [ 124.877555][ T7427] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 124.902611][ T7427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.923465][ T7427] bond2: (slave gretap1): making interface the new active one [ 124.933109][ T7427] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 125.327543][ T7434] net_ratelimit: 3 callbacks suppressed [ 125.327553][ T7434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.443694][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.511255][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.519932][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.736010][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.762921][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.850401][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.893115][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.913015][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.945792][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.163152][ T7448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.483482][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.851547][ T7378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.061239][ T7448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.524501][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.545521][ T7500] netlink: 'syz.2.374': attribute type 2 has an invalid length. [ 127.553392][ T7500] netlink: 'syz.2.374': attribute type 2 has an invalid length. [ 127.582624][ T7500] syzkaller0: entered promiscuous mode [ 127.588190][ T7500] syzkaller0: entered allmulticast mode [ 127.682571][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.690688][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.854370][ T7511] __nla_validate_parse: 26 callbacks suppressed [ 127.854389][ T7511] netlink: 52 bytes leftover after parsing attributes in process `syz.2.378'. [ 128.002431][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.031142][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.044706][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.072767][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.102708][ T7525] netlink: 168 bytes leftover after parsing attributes in process `syz.0.379'. [ 128.165801][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 128.176095][ T7532] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 128.209736][ T7532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.214970][ T7530] netlink: 52 bytes leftover after parsing attributes in process `syz.1.383'. [ 128.264724][ T7532] bond3: (slave veth3): Enslaving as an active interface with a down link [ 128.291425][ T7532] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 128.447981][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 128.466993][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.475666][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 128.492201][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.503022][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.523580][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.562397][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.657494][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.393'. [ 128.760870][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 128.830238][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 129.606868][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.640531][ T7616] dvmrp6: entered allmulticast mode [ 129.845812][ T7629] No such timeout policy "syz0" [ 130.341588][ T7658] ip6gre1: entered promiscuous mode [ 130.349345][ T7652] netlink: 'syz.4.419': attribute type 1 has an invalid length. [ 130.358857][ T7658] ip6gre1: entered allmulticast mode [ 130.404144][ T7652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.487390][ T7664] netlink: 'syz.0.421': attribute type 4 has an invalid length. [ 130.495499][ T7664] netlink: 224 bytes leftover after parsing attributes in process `syz.0.421'. [ 130.568630][ T7660] bond3: (slave veth3): Enslaving as an active interface with a down link [ 130.605059][ T7652] bond3: (slave dummy0): making interface the new active one [ 130.622775][ T7652] dummy0: entered promiscuous mode [ 130.639098][ T7652] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 130.652766][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.686800][ T7665] bond3: (slave dummy0): Releasing active interface [ 130.705919][ T7665] dummy0 (unregistering): left promiscuous mode [ 130.726229][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.178759][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.631503][ T7732] syzkaller0: entered allmulticast mode [ 131.640836][ T7732] syzkaller0: entered promiscuous mode [ 131.674386][ T7732] syzkaller0 (unregistering): left promiscuous mode [ 131.681295][ T7732] syzkaller0 (unregistering): left allmulticast mode [ 131.688512][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.773208][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.783281][ T7741] batadv_slave_0: entered promiscuous mode [ 131.789283][ T7741] batadv_slave_0: entered allmulticast mode [ 131.831017][ T7740] syzkaller0: entered promiscuous mode [ 131.836671][ T7740] syzkaller0: entered allmulticast mode [ 131.877779][ T7748] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 131.892651][ T7748] pim6reg0: persist disabled [ 131.897411][ T7750] netlink: 'syz.0.437': attribute type 9 has an invalid length. [ 131.914906][ T7748] netlink: 'syz.1.436': attribute type 10 has an invalid length. [ 131.947759][ T7748] team0: Device veth1_macvtap failed to register rx_handler [ 132.302041][ T7774] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 132.335212][ T7774] wlan1: mtu less than device minimum [ 132.536156][ T7782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.544539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.624943][ T7781] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.643326][ T7781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.650622][ T7781] IPv6: NLM_F_CREATE should be set when creating new route [ 132.657983][ T7781] IPv6: NLM_F_CREATE should be set when creating new route [ 132.665249][ T7781] IPv6: NLM_F_CREATE should be set when creating new route [ 132.808934][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.818701][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932244][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.234717][ T7796] __nla_validate_parse: 6 callbacks suppressed [ 133.234737][ T7796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.450'. [ 133.291083][ T7796] openvswitch: netlink: Flow key attr not present in new flow. [ 133.375306][ T7796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.450'. [ 133.512354][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 133.601970][ T7817] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 133.686890][ T7817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.983489][ T7838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.460'. [ 134.173484][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'. [ 134.628482][ T7878] netlink: 124 bytes leftover after parsing attributes in process `syz.1.472'. [ 134.732352][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.850710][ T7883] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 135.128010][ T7883] bond4: entered promiscuous mode [ 135.133667][ T7883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.158895][ T7884] bond4: (slave bridge2): making interface the new active one [ 135.162126][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 135.192234][ T7884] bridge2: entered promiscuous mode [ 135.198580][ T7884] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 135.274908][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 135.559072][ T7915] syzkaller0: entered promiscuous mode [ 135.576469][ T7915] syzkaller0: entered allmulticast mode [ 135.650727][ T7918] syzkaller1: entered promiscuous mode [ 135.672674][ T7918] syzkaller1: entered allmulticast mode [ 135.995859][ T7935] net_ratelimit: 72 callbacks suppressed [ 135.995872][ T7935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.010171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.030461][ T7935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.038752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.047983][ T7935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.056633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.065707][ T7935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.074160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.083101][ T7935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.091457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.463703][ T7951] syzkaller1: entered promiscuous mode [ 136.502524][ T7951] syzkaller1: entered allmulticast mode [ 136.681049][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 136.715653][ T7958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.496'. [ 136.740597][ T7953] bridge2: entered promiscuous mode [ 136.851453][ T7955] team_slave_0 (unregistering): left allmulticast mode [ 136.872634][ T7955] team0: Port device team_slave_0 removed [ 136.895249][ T7962] tipc: Started in network mode [ 136.900161][ T7962] tipc: Node identity 7ef2aba25c47, cluster identity 4711 [ 136.911141][ T7962] tipc: Enabled bearer , priority 0 [ 136.920067][ T7971] syzkaller0: entered promiscuous mode [ 136.932253][ T7971] syzkaller0: entered allmulticast mode [ 136.939710][ T7970] netlink: 'syz.0.500': attribute type 2 has an invalid length. [ 136.950129][ T7962] tipc: Resetting bearer [ 136.976113][ T7962] tipc: Disabling bearer [ 137.499902][ T8006] netlink: 'syz.1.510': attribute type 8 has an invalid length. [ 137.526774][ T8006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.133804][ T8040] netlink: 'syz.3.521': attribute type 21 has an invalid length. [ 138.185080][ T8040] netlink: 'syz.3.521': attribute type 5 has an invalid length. [ 138.201812][ T8040] wg2: entered allmulticast mode [ 138.220998][ T8042] vlan2: entered promiscuous mode [ 138.230050][ T8042] team0: entered promiscuous mode [ 138.235256][ T8042] team_slave_0: entered promiscuous mode [ 138.241350][ T8042] team_slave_1: entered promiscuous mode [ 138.535169][ T8059] __nla_validate_parse: 6 callbacks suppressed [ 138.535187][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.525'. [ 138.658107][ T8063] netlink: 84 bytes leftover after parsing attributes in process `syz.4.526'. [ 138.673378][ T8067] delete_channel: no stack [ 138.903442][ T8077] sctp: [Deprecated]: syz.4.532 (pid 8077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.903442][ T8077] Use struct sctp_sack_info instead [ 138.931804][ T8077] sctp: [Deprecated]: syz.4.532 (pid 8077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.931804][ T8077] Use struct sctp_sack_info instead [ 139.055644][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.534'. [ 139.101425][ T8089] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 139.135823][ T8093] netlink: 2 bytes leftover after parsing attributes in process `syz.4.537'. [ 139.407036][ T5927] IPVS: starting estimator thread 0... [ 139.430188][ T7713] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 139.502274][ T8121] IPVS: using max 28 ests per chain, 67200 per kthread [ 139.587100][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 139.879566][ T8142] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 139.918457][ T8142] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 141.283698][ T7455] net_ratelimit: 2052 callbacks suppressed [ 141.283725][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.464064][ T8159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.768639][ T8184] netlink: 'syz.4.558': attribute type 13 has an invalid length. [ 142.088069][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 142.241999][ T8204] bridge0: entered promiscuous mode [ 142.255691][ T8210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.565'. [ 142.274778][ T8206] netlink: 76 bytes leftover after parsing attributes in process `syz.4.564'. [ 142.276372][ T8204] xt_bpf: check failed: parse error [ 142.332333][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.363303][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.883210][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.903111][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.921421][ T8234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.372234][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.383747][ T8260] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 143.501652][ T8260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.679648][ T8277] tipc: Enabling of bearer rejected, failed to enable media [ 143.700634][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.718076][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.582'. [ 143.762331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.925307][ T8285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'. [ 143.939408][ T8285] nbd: must specify a device to reconfigure [ 144.194256][ T8299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.590'. [ 144.402443][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.638843][ T8317] netlink: 48 bytes leftover after parsing attributes in process `syz.0.595'. [ 144.699235][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.596'. [ 144.715788][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.596'. [ 146.482706][ T7453] net_ratelimit: 2 callbacks suppressed [ 146.482720][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.988068][ T8289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.157362][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 147.175440][ T8341] netlink: 'syz.4.603': attribute type 83 has an invalid length. [ 147.202370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.377694][ T8359] netlink: 108 bytes leftover after parsing attributes in process `syz.4.608'. [ 147.523905][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.576636][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 147.729678][ T8355] trusted_key: syz.0.604 sent an empty control message without MSG_MORE. [ 147.773300][ T8379] syzkaller1: entered promiscuous mode [ 147.778904][ T8379] syzkaller1: entered allmulticast mode [ 148.025053][ T8396] netlink: 45 bytes leftover after parsing attributes in process `syz.0.616'. [ 148.135299][ T8397] bond_slave_0: entered promiscuous mode [ 148.141224][ T8397] bond_slave_1: entered promiscuous mode [ 148.147032][ T8397] dummy0: entered promiscuous mode [ 148.211867][ T8397] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.244632][ T8397] team0: Port device macvlan2 added [ 148.448697][ T8411] Cannot find add_set index 0 as target [ 148.572250][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.976866][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.229725][ T8440] team_slave_0: entered promiscuous mode [ 149.241438][ T8440] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 149.271404][ T8455] __nla_validate_parse: 1 callbacks suppressed [ 149.271424][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 149.630144][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.147901][ T8488] netlink: 'syz.0.642': attribute type 30 has an invalid length. [ 150.196160][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 150.247783][ T8490] vlan0: entered allmulticast mode [ 150.269870][ T8490] macvtap0: entered allmulticast mode [ 150.298632][ T8490] veth0_macvtap: entered allmulticast mode [ 150.339060][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 150.469628][ T8511] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 150.491842][ T8510] xt_hashlimit: max too large, truncated to 1048576 [ 150.512008][ T8510] xt_hashlimit: overflow, try lower: 2/0 [ 150.599773][ T8517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.649'. [ 150.618335][ T8517] netlink: 260 bytes leftover after parsing attributes in process `syz.4.649'. [ 150.647715][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.786199][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 150.826563][ T8527] netlink: 'syz.2.653': attribute type 4 has an invalid length. [ 150.879235][ T8530] netlink: 'syz.2.653': attribute type 4 has an invalid length. [ 150.970941][ T8527] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20004 [ 151.019830][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'. [ 151.031360][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.062384][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.087605][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.302754][ T8553] bond2: option packets_per_slave: invalid value (1048582) [ 151.310083][ T8553] bond2: option packets_per_slave: allowed values 0 - 65535 [ 151.319805][ T8553] bond2 (unregistering): Released all slaves [ 151.510509][ T8571] bond2: (slave bond_slave_1): Device is not our slave [ 151.518814][ T8571] bond2: option active_slave: invalid value (bond_slave_1) [ 151.532727][ T8571] bond2 (unregistering): Released all slaves [ 151.581284][ T8570] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 151.684043][ T7457] net_ratelimit: 40 callbacks suppressed [ 151.684063][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.892335][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.901361][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.913077][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.921615][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.988625][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 151.990462][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 151.998012][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 152.043103][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.304781][ T8608] syzkaller0: entered promiscuous mode [ 152.310293][ T8608] syzkaller0: entered allmulticast mode [ 152.349697][ T8611] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 152.410946][ T8611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.602353][ T8626] netlink: 'syz.3.683': attribute type 5 has an invalid length. [ 152.643169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.722869][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.989558][ T8651] xt_hashlimit: max too large, truncated to 1048576 [ 153.015397][ T8651] xt_bpf: check failed: parse error [ 153.074197][ T8657] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 153.296069][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.304718][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.313037][ T8657] veth3: entered promiscuous mode [ 153.335943][ T8661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.389935][ T8674] batman_adv: batadv0: Adding interface: vlan2 [ 153.433628][ T8674] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.495389][ T8674] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 153.725216][ T8694] netlink: 'syz.3.699': attribute type 3 has an invalid length. [ 153.735752][ T8696] syzkaller0: entered promiscuous mode [ 153.741371][ T8696] syzkaller0: entered allmulticast mode [ 153.770266][ T8696] tipc: Started in network mode [ 153.779775][ T8696] tipc: Node identity ba525f27485a, cluster identity 4711 [ 153.790989][ T8696] tipc: Enabled bearer , priority 0 [ 153.811592][ T8696] tipc: Resetting bearer [ 153.825544][ T8695] tipc: Resetting bearer [ 153.847741][ T8695] tipc: Disabling bearer [ 154.021459][ T8715] tipc: Enabled bearer , priority 0 [ 154.107407][ T8715] syzkaller0: entered promiscuous mode [ 154.142578][ T8715] syzkaller0: entered allmulticast mode [ 154.148903][ T8715] tipc: Resetting bearer [ 154.247638][ T8714] tipc: Resetting bearer [ 154.481218][ T8748] __nla_validate_parse: 10 callbacks suppressed [ 154.481239][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.711'. [ 155.604055][ T8714] tipc: Disabling bearer [ 155.754685][ T5876] tipc: Node number set to 4060634919 [ 155.782605][ T8768] netlink: 80 bytes leftover after parsing attributes in process `syz.1.715'. [ 155.814821][ T8772] syzkaller0: entered promiscuous mode [ 155.820483][ T8772] syzkaller0: entered allmulticast mode [ 155.831623][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 156.087216][ T8784] FAULT_INJECTION: forcing a failure. [ 156.087216][ T8784] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.178607][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.3.716 Not tainted syzkaller #0 PREEMPT(full) [ 156.178633][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.178651][ T8784] Call Trace: [ 156.178658][ T8784] [ 156.178666][ T8784] dump_stack_lvl+0xe8/0x150 [ 156.178704][ T8784] should_fail_ex+0x412/0x560 [ 156.178734][ T8784] _copy_to_user+0x31/0xb0 [ 156.178758][ T8784] bpf_prog_test_run_raw_tp+0x511/0x6c0 [ 156.178789][ T8784] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 156.178814][ T8784] ? __fget_files+0x2a/0x420 [ 156.178841][ T8784] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 156.178865][ T8784] bpf_prog_test_run+0x2c7/0x340 [ 156.178932][ T8784] __sys_bpf+0x643/0x950 [ 156.178953][ T8784] ? __pfx___sys_bpf+0x10/0x10 [ 156.178985][ T8784] ? ksys_write+0x242/0x270 [ 156.179007][ T8784] ? __pfx_ksys_write+0x10/0x10 [ 156.179033][ T8784] __x64_sys_bpf+0x7c/0x90 [ 156.179058][ T8784] do_syscall_64+0x14d/0xf80 [ 156.179079][ T8784] ? trace_irq_disable+0x3b/0x150 [ 156.179094][ T8784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.179111][ T8784] ? clear_bhb_loop+0x40/0x90 [ 156.179133][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.179150][ T8784] RIP: 0033:0x7f1af1d9c819 [ 156.179172][ T8784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.179187][ T8784] RSP: 002b:00007f1af2c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.179212][ T8784] RAX: ffffffffffffffda RBX: 00007f1af2016090 RCX: 00007f1af1d9c819 [ 156.179224][ T8784] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 156.179235][ T8784] RBP: 00007f1af2c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.179245][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.179255][ T8784] R13: 00007f1af2016128 R14: 00007f1af2016090 R15: 00007ffef68cae68 [ 156.179284][ T8784] [ 156.248462][ T8793] 8021q: VLANs not supported on ip6gre0 [ 156.496115][ T8804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.725'. [ 156.514975][ T8804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.725'. [ 156.561979][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.726'. [ 156.578403][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.726'. [ 156.709004][ T8827] x_tables: duplicate underflow at hook 3 [ 156.835369][ T8832] netlink: 23 bytes leftover after parsing attributes in process `syz.4.732'. [ 156.865580][ T8835] netlink: 140 bytes leftover after parsing attributes in process `syz.3.733'. [ 156.883646][ T7455] net_ratelimit: 78 callbacks suppressed [ 156.883665][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.911263][ T8835] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 156.958910][ T8834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.968056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.002613][ T8834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.411041][ T8860] pim6reg: entered allmulticast mode [ 157.437758][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.448066][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.461576][ T8863] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 157.484700][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.495976][ T8833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.539568][ T8863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.758144][ T8860] bond5: (slave gretap1): making interface the new active one [ 157.785114][ T8860] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 157.872548][ T8878] batadv0: entered promiscuous mode [ 157.877883][ T8878] batadv0: entered allmulticast mode [ 157.927052][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.033768][ T8888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.748'. [ 158.071731][ T8890] gre1: entered promiscuous mode [ 159.013096][ T8923] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 159.023275][ T8923] netlink: 'syz.3.758': attribute type 2 has an invalid length. [ 159.065965][ T8922] xt_CT: No such helper "pptp" [ 159.151768][ T8930] bridge0: port 3(syz_tun) entered blocking state [ 159.166075][ T8930] bridge0: port 3(syz_tun) entered disabled state [ 159.184462][ T8930] syz_tun: entered allmulticast mode [ 159.213372][ T8930] syz_tun: entered promiscuous mode [ 159.219446][ T8930] bridge0: port 3(syz_tun) entered blocking state [ 159.226409][ T8930] bridge0: port 3(syz_tun) entered forwarding state [ 159.600114][ T8959] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 159.642370][ T8959] syzkaller1: Refused to change device type [ 159.742049][ T8966] syzkaller1: entered promiscuous mode [ 159.758977][ T8966] syzkaller1: entered allmulticast mode [ 159.904329][ T8980] __nla_validate_parse: 4 callbacks suppressed [ 159.904347][ T8980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'. [ 159.958726][ T8984] Cannot find del_set index 4 as target [ 160.775803][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.786'. [ 160.786777][ T9029] netlink: 14 bytes leftover after parsing attributes in process `syz.4.787'. [ 160.893364][ T9029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.933855][ T9029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.970818][ T9029] bond0 (unregistering): Released all slaves [ 161.487826][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 161.797577][ T9087] tipc: Enabled bearer , priority 0 [ 161.828743][ T9087] syzkaller0: entered promiscuous mode [ 161.860350][ T9087] syzkaller0: entered allmulticast mode [ 161.919029][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.806'. [ 161.929687][ T9093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.808'. [ 161.939904][ T9093] net_ratelimit: 5 callbacks suppressed [ 161.939923][ T9093] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 161.954928][ T9087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.806'. [ 161.991700][ T9094] netlink: 64 bytes leftover after parsing attributes in process `syz.4.807'. [ 162.074233][ T9088] tipc: Resetting bearer [ 162.115721][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.124643][ T9086] tipc: Resetting bearer [ 162.178007][ T9086] tipc: Disabling bearer [ 162.326553][ T9115] openvswitch: netlink: VXLAN extension message has 21 unknown bytes. [ 162.410522][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 162.465140][ T9115] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 162.486983][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.508757][ T9115] bond2: entered promiscuous mode [ 162.552635][ T9115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.585138][ T9120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.643495][ T9134] netlink: 348 bytes leftover after parsing attributes in process `syz.1.817'. [ 162.653792][ T9120] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 162.673011][ T9120] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 162.689664][ T9120] bond2: (slave vti0): making interface the new active one [ 162.701667][ T9120] vti0: entered promiscuous mode [ 162.708855][ T9120] bond2: (slave vti0): Enslaving as an active interface with an up link [ 162.727043][ T9140] netlink: 'syz.4.819': attribute type 1 has an invalid length. [ 162.753135][ T9140] netlink: 'syz.4.819': attribute type 2 has an invalid length. [ 162.988944][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.093074][ T9150] bridge_slave_0 (unregistering): left allmulticast mode [ 163.101655][ T9150] bridge_slave_0 (unregistering): left promiscuous mode [ 163.122319][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.131478][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.494730][ T9161] netlink: 'syz.2.825': attribute type 13 has an invalid length. [ 163.526754][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.612283][ T9179] blkio.reset_stats is deprecated [ 163.979685][ T9203] lo speed is unknown, defaulting to 1000 [ 164.162620][ T7450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.170821][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.194180][ T9203] lo speed is unknown, defaulting to 1000 [ 164.216540][ T9203] lo speed is unknown, defaulting to 1000 [ 164.242435][ T9203] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.250825][ T9213] syzkaller0: entered promiscuous mode [ 164.256521][ T9213] syzkaller0: entered allmulticast mode [ 164.265665][ T9203] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 164.353394][ T9203] lo speed is unknown, defaulting to 1000 [ 164.366918][ T9203] lo speed is unknown, defaulting to 1000 [ 164.378615][ T9203] lo speed is unknown, defaulting to 1000 [ 164.386660][ T9203] lo speed is unknown, defaulting to 1000 [ 164.401011][ T9203] lo speed is unknown, defaulting to 1000 [ 164.813610][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.059698][ T9253] __nla_validate_parse: 7 callbacks suppressed [ 165.059715][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 165.202812][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.464858][ T9275] netlink: 56 bytes leftover after parsing attributes in process `syz.3.854'. [ 165.871765][ T9298] netlink: 'syz.2.860': attribute type 4 has an invalid length. [ 165.922409][ T9298] netlink: 17 bytes leftover after parsing attributes in process `syz.2.860'. [ 166.208257][ T9314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.867'. [ 166.256745][ T9316] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.866'. [ 166.356666][ T9312] lo speed is unknown, defaulting to 1000 [ 167.071684][ T9375] xt_socket: unknown flags 0x4 [ 167.124961][ T9377] FAULT_INJECTION: forcing a failure. [ 167.124961][ T9377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.152534][ T9377] CPU: 1 UID: 0 PID: 9377 Comm: syz.1.876 Not tainted syzkaller #0 PREEMPT(full) [ 167.152560][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.152570][ T9377] Call Trace: [ 167.152577][ T9377] [ 167.152585][ T9377] dump_stack_lvl+0xe8/0x150 [ 167.152615][ T9377] should_fail_ex+0x412/0x560 [ 167.152646][ T9377] _copy_from_iter+0x1d3/0x1670 [ 167.152667][ T9377] ? sock_alloc_send_pskb+0x896/0x990 [ 167.152692][ T9377] ? __pfx__copy_from_iter+0x10/0x10 [ 167.152718][ T9377] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 167.152740][ T9377] skb_copy_datagram_from_iter+0xf5/0x710 [ 167.152764][ T9377] ? skb_put+0x11b/0x210 [ 167.152790][ T9377] tun_get_user+0xc38/0x3ed0 [ 167.152830][ T9377] ? aa_file_perm+0x50e/0x15e0 [ 167.152849][ T9377] ? __pfx_tun_get_user+0x10/0x10 [ 167.152868][ T9377] ? aa_file_perm+0x192/0x15e0 [ 167.152892][ T9377] ? __lock_acquire+0x6b5/0x2cf0 [ 167.152939][ T9377] ? ref_tracker_alloc+0x35c/0x4c0 [ 167.152960][ T9377] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 167.152983][ T9377] ? tun_get+0x1c/0x2f0 [ 167.153009][ T9377] ? tun_get+0x1c/0x2f0 [ 167.153028][ T9377] ? tun_get+0x1c/0x2f0 [ 167.153054][ T9377] tun_chr_write_iter+0x113/0x200 [ 167.153077][ T9377] vfs_write+0x61d/0xb90 [ 167.153106][ T9377] ? __pfx_vfs_write+0x10/0x10 [ 167.153135][ T9377] ? __fget_files+0x2a/0x420 [ 167.153159][ T9377] ksys_write+0x150/0x270 [ 167.153181][ T9377] ? __pfx_ksys_write+0x10/0x10 [ 167.153211][ T9377] do_syscall_64+0x14d/0xf80 [ 167.153232][ T9377] ? trace_irq_disable+0x3b/0x150 [ 167.153248][ T9377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.153265][ T9377] ? clear_bhb_loop+0x40/0x90 [ 167.153286][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.153304][ T9377] RIP: 0033:0x7f1db655d04e [ 167.153321][ T9377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.153335][ T9377] RSP: 002b:00007f1db738bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.153354][ T9377] RAX: ffffffffffffffda RBX: 00007f1db738c6c0 RCX: 00007f1db655d04e [ 167.153366][ T9377] RDX: 0000000000000e80 RSI: 0000200000001180 RDI: 00000000000000c8 [ 167.153377][ T9377] RBP: 00007f1db738c090 R08: 0000000000000000 R09: 0000000000000000 [ 167.153387][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.153397][ T9377] R13: 00007f1db6816038 R14: 00007f1db6815fa0 R15: 00007fff6473da48 [ 167.153424][ T9377] [ 167.161346][ T9379] xt_l2tp: v2 doesn't support IP mode [ 167.193360][ T9380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.877'. [ 167.282668][ T7457] net_ratelimit: 2 callbacks suppressed [ 167.282686][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.603814][ T9394] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 167.717414][ T9394] veth0_vlan: left promiscuous mode [ 167.760141][ T9394] veth0_vlan: entered promiscuous mode [ 167.787979][ T9394] team0: Device veth0_vlan failed to register rx_handler [ 167.863751][ T9404] vlan2: entered allmulticast mode [ 167.880037][ T9404] bond0: entered allmulticast mode [ 167.902284][ T9404] bond_slave_0: entered allmulticast mode [ 167.917977][ T9404] bond_slave_1: entered allmulticast mode [ 167.941057][ T9415] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 167.993408][ T9419] No such timeout policy "syz0" [ 168.012028][ T9415] dummy0: entered allmulticast mode [ 168.038899][ T9415] team0: Port device dummy0 added [ 168.138284][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 168.158557][ T9426] FAULT_INJECTION: forcing a failure. [ 168.158557][ T9426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.178636][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.0.889 Not tainted syzkaller #0 PREEMPT(full) [ 168.178661][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.178671][ T9426] Call Trace: [ 168.178679][ T9426] [ 168.178686][ T9426] dump_stack_lvl+0xe8/0x150 [ 168.178716][ T9426] should_fail_ex+0x412/0x560 [ 168.178747][ T9426] _copy_to_user+0x31/0xb0 [ 168.178770][ T9426] simple_read_from_buffer+0xe1/0x170 [ 168.178800][ T9426] proc_fail_nth_read+0x1bb/0x230 [ 168.178836][ T9426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.178864][ T9426] ? rw_verify_area+0x2a6/0x4d0 [ 168.178883][ T9426] ? tun_chr_write_iter+0x18a/0x200 [ 168.178903][ T9426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.178929][ T9426] vfs_read+0x20c/0xa70 [ 168.178946][ T9426] ? fdget_pos+0x246/0x320 [ 168.178967][ T9426] ? __pfx___mutex_lock+0x10/0x10 [ 168.178990][ T9426] ? __pfx_vfs_read+0x10/0x10 [ 168.179011][ T9426] ? __fget_files+0x2a/0x420 [ 168.179031][ T9426] ? __fget_files+0x3a0/0x420 [ 168.179046][ T9426] ? __fget_files+0x2a/0x420 [ 168.179071][ T9426] ksys_read+0x150/0x270 [ 168.179092][ T9426] ? __pfx_ksys_read+0x10/0x10 [ 168.179123][ T9426] do_syscall_64+0x14d/0xf80 [ 168.179143][ T9426] ? trace_irq_disable+0x3b/0x150 [ 168.179159][ T9426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.179176][ T9426] ? clear_bhb_loop+0x40/0x90 [ 168.179198][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.179215][ T9426] RIP: 0033:0x7fdbd4b5d04e [ 168.179232][ T9426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.179246][ T9426] RSP: 002b:00007fdbd5b21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.179265][ T9426] RAX: ffffffffffffffda RBX: 00007fdbd5b226c0 RCX: 00007fdbd4b5d04e [ 168.179278][ T9426] RDX: 000000000000000f RSI: 00007fdbd5b220a0 RDI: 0000000000000006 [ 168.179288][ T9426] RBP: 00007fdbd5b22090 R08: 0000000000000000 R09: 0000000000000000 [ 168.179298][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.179308][ T9426] R13: 00007fdbd4e16038 R14: 00007fdbd4e15fa0 R15: 00007fff72dfe8d8 [ 168.179338][ T9426] [ 168.396824][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.562367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.749347][ T9444] syzkaller1: entered promiscuous mode [ 168.775616][ T9444] syzkaller1: entered allmulticast mode [ 168.856541][ T9450] bond3 (unregistering): Released all slaves [ 168.969728][ T9459] netlink: 'syz.0.899': attribute type 2 has an invalid length. [ 168.997143][ T9459] tipc: Cannot configure node identity twice [ 169.017732][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 169.351436][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 169.439363][ T9482] hsr0: entered promiscuous mode [ 169.445869][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.455534][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 169.479115][ T9488] netlink: 'syz.1.905': attribute type 18 has an invalid length. [ 169.488006][ T9482] hsr0: left promiscuous mode [ 169.602359][ T9346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.922405][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 170.144099][ T9531] __nla_validate_parse: 1 callbacks suppressed [ 170.144118][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.907'. [ 170.210529][ T9530] lo speed is unknown, defaulting to 1000 [ 170.365117][ T9543] syzkaller1: entered promiscuous mode [ 170.381852][ T9543] syzkaller1: entered allmulticast mode [ 170.482321][ T7453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.486020][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 170.630275][ T9564] syzkaller0: entered promiscuous mode [ 170.652251][ T9564] syzkaller0: entered allmulticast mode [ 170.699051][ T9558] netlink: 'syz.0.916': attribute type 13 has an invalid length. [ 170.808419][ T7453] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.076093][ T9585] bond0: (slave bond_slave_1): Device is not bonding slave [ 171.085534][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 171.094425][ T9585] bond0: option active_slave: invalid value (bond_slave_1) [ 171.112702][ T9585] bond0 (unregistering): Released all slaves [ 171.157947][ T9596] xt_hashlimit: size too large, truncated to 1048576 [ 171.257065][ T9600] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 171.431624][ T9602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.534351][ T9602] bond0: (slave bond5): making interface the new active one [ 171.541870][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.582873][ T9621] netlink: 3 bytes leftover after parsing attributes in process `syz.2.934'. [ 171.592958][ T9602] bond0: (slave bond5): Enslaving as an active interface with an up link [ 171.601794][ T9621] 0ªX¹¦À: renamed from caif0 [ 171.606909][ T7453] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.653552][ T9602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.929'. [ 171.673049][ T9621] 0ªX¹¦À: entered allmulticast mode [ 171.678498][ T9621] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 171.718233][ T9615] ip6erspan0: entered allmulticast mode [ 171.859373][ T9618] bridge0: port 3(syz_tun) entered disabled state [ 171.868908][ T9635] netlink: 'syz.2.936': attribute type 4 has an invalid length. [ 171.921175][ T9639] netlink: 'syz.2.936': attribute type 4 has an invalid length. [ 171.934589][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.942335][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.970593][ T9640] netlink: 'syz.3.938': attribute type 14 has an invalid length. [ 172.369645][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.396401][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.468423][ T9648] netlink: 876 bytes leftover after parsing attributes in process `syz.4.939'. [ 172.483814][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 172.512604][ T9345] lo speed is unknown, defaulting to 1000 [ 172.518792][ T9345] syz2: Port: 1 Link DOWN [ 172.531953][ T9637] netlink: 232 bytes leftover after parsing attributes in process `syz.3.938'. [ 172.573918][ T8273] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.585484][ T8273] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.606742][ T8273] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.665225][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.940'. [ 172.685739][ T9638] syz.0.937 (9638) used greatest stack depth: 17600 bytes left [ 172.698721][ T8273] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.728203][ T9655] syz_tun: entered allmulticast mode [ 172.877402][ T9655] vlan3: entered promiscuous mode [ 172.884373][ T9655] geneve1: entered promiscuous mode [ 172.885424][ T9661] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 172.889772][ T9655] vlan3: entered allmulticast mode [ 172.902857][ T9655] geneve1: entered allmulticast mode [ 172.912451][ T9661] netlink: 'syz.3.944': attribute type 2 has an invalid length. [ 172.968210][ T9658] nbd2: detected capacity change from 0 to 63 [ 172.995302][ T9662] block nbd2: NBD_DISCONNECT [ 173.000981][ T9662] block nbd2: Disconnected due to user request. [ 173.016030][ T9662] block nbd2: shutting down sockets [ 173.093968][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.103765][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.115064][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.124632][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 173.133174][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.142722][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 173.150508][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.160034][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 173.170010][ T5827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.190525][ T5827] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.198601][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.209082][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read [ 173.218978][ T5827] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.231512][ T5827] Buffer I/O error on dev nbd2, logical block 2, async page read [ 173.239467][ T5827] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.249376][ T5827] Buffer I/O error on dev nbd2, logical block 3, async page read [ 173.257748][ T5827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.267692][ T5827] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.275745][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 173.286027][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read [ 173.295251][ T5827] ldm_validate_partition_table(): Disk read failed. [ 173.303752][ T5827] Dev nbd2: unable to read RDB block 0 [ 173.315400][ T5827] nbd2: unable to read partition table [ 173.331578][ T5827] ldm_validate_partition_table(): Disk read failed. [ 173.339698][ T5827] Dev nbd2: unable to read RDB block 0 [ 173.349070][ T5827] nbd2: unable to read partition table [ 173.503893][ T9683] bridge0: Device is already in use. [ 173.770003][ T9705] syzkaller0: entered promiscuous mode [ 173.938773][ T9707] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 174.010914][ T9707] bond2: (slave geneve2): making interface the new active one [ 174.020069][ T9707] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 174.032778][ T8273] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 174.042586][ T8273] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 174.074453][ T8273] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 174.083334][ T1108] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 174.180102][ T9727] netlink: 116 bytes leftover after parsing attributes in process `syz.1.962'. [ 174.220994][ T9730] Cannot find add_set index 1 as target [ 174.427197][ T5837] Bluetooth: hci4: link tx timeout [ 174.433640][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.522966][ T9745] netlink: 'syz.4.967': attribute type 39 has an invalid length. [ 174.623094][ T9756] ipvlan2: entered promiscuous mode [ 174.636140][ T9756] team0: Device ipvlan2 failed to register rx_handler [ 175.351312][ T9789] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 175.431603][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 175.530244][ T9807] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 175.545243][ T9807] bond6 (unregistering): Released all slaves [ 175.608212][ T9810] netlink: 'syz.3.984': attribute type 322 has an invalid length. [ 175.616804][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 175.669050][ T9810] bond3: entered promiscuous mode [ 175.674701][ T9810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.753987][ T9824] syz.2.988: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.775684][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: syz.2.988 Not tainted syzkaller #0 PREEMPT(full) [ 175.775710][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.775721][ T9824] Call Trace: [ 175.775728][ T9824] [ 175.775737][ T9824] dump_stack_lvl+0xe8/0x150 [ 175.775770][ T9824] warn_alloc+0x249/0x340 [ 175.775796][ T9824] ? stack_trace_save+0xa9/0x100 [ 175.775821][ T9824] ? __pfx_warn_alloc+0x10/0x10 [ 175.775851][ T9824] ? kasan_save_track+0x4f/0x80 [ 175.775872][ T9824] ? kasan_save_track+0x3e/0x80 [ 175.775893][ T9824] ? __kasan_kmalloc+0x93/0xb0 [ 175.775914][ T9824] ? __kmalloc_cache_noprof+0x31c/0x660 [ 175.775935][ T9824] ? xskq_create+0x56/0x170 [ 175.775954][ T9824] ? xsk_setsockopt+0x54c/0x990 [ 175.775971][ T9824] ? do_sock_setsockopt+0x17c/0x1b0 [ 175.775998][ T9824] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 175.776025][ T9824] ? do_syscall_64+0x14d/0xf80 [ 175.776062][ T9824] __vmalloc_node_range_noprof+0x132/0x1730 [ 175.776109][ T9824] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.776138][ T9824] ? __kasan_kmalloc+0x93/0xb0 [ 175.776168][ T9824] vmalloc_user_noprof+0xad/0xe0 [ 175.776190][ T9824] ? xskq_create+0xbf/0x170 [ 175.776212][ T9824] xskq_create+0xbf/0x170 [ 175.776235][ T9824] xsk_init_queue+0x8a/0xe0 [ 175.776257][ T9824] xsk_setsockopt+0x54c/0x990 [ 175.776278][ T9824] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.776295][ T9824] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.776328][ T9824] ? aa_sock_opt_perm+0xff/0x1a0 [ 175.776350][ T9824] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 175.776374][ T9824] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.776394][ T9824] do_sock_setsockopt+0x17c/0x1b0 [ 175.776425][ T9824] __x64_sys_setsockopt+0x13d/0x1b0 [ 175.776459][ T9824] do_syscall_64+0x14d/0xf80 [ 175.776480][ T9824] ? trace_irq_disable+0x3b/0x150 [ 175.776497][ T9824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.776517][ T9824] ? clear_bhb_loop+0x40/0x90 [ 175.776541][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.776559][ T9824] RIP: 0033:0x7f9fded9c819 [ 175.776577][ T9824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.776594][ T9824] RSP: 002b:00007f9fdfc44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.776614][ T9824] RAX: ffffffffffffffda RBX: 00007f9fdf015fa0 RCX: 00007f9fded9c819 [ 175.776629][ T9824] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 175.776641][ T9824] RBP: 00007f9fdee32c91 R08: 0000000000000004 R09: 0000000000000000 [ 175.776653][ T9824] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.776665][ T9824] R13: 00007f9fdf016038 R14: 00007f9fdf015fa0 R15: 00007fffb2576938 [ 175.776694][ T9824] [ 175.776711][ T9824] Mem-Info: [ 176.055064][ T9824] active_anon:6204 inactive_anon:0 isolated_anon:0 [ 176.055064][ T9824] active_file:3346 inactive_file:39978 isolated_file:0 [ 176.055064][ T9824] unevictable:768 dirty:96 writeback:0 [ 176.055064][ T9824] slab_reclaimable:11469 slab_unreclaimable:98065 [ 176.055064][ T9824] mapped:30583 shmem:1363 pagetables:1278 [ 176.055064][ T9824] sec_pagetables:0 bounce:0 [ 176.055064][ T9824] kernel_misc_reclaimable:0 [ 176.055064][ T9824] free:1282802 free_pcp:11046 free_cma:0 [ 176.110010][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 176.119571][ T9832] 8021q: VLANs not supported on vxcan0 [ 176.135343][ T9824] Node 0 active_anon:24916kB inactive_anon:0kB active_file:13384kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118332kB dirty:384kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14236kB pagetables:5056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.230418][ T9824] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 176.282243][ T9824] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.344482][ T9824] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 176.350734][ T9824] Node 0 DMA32 free:1180512kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24716kB inactive_anon:0kB active_file:13384kB inactive_file:159716kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2552060kB mlocked:0kB bounce:0kB free_pcp:45092kB local_pcp:18512kB free_cma:0kB [ 176.435765][ T9824] lowmem_reserve[]: 0 0 0 0 0 [ 176.478064][ T9824] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:868kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 176.508670][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 176.543800][ T9824] lowmem_reserve[]: 0 0 0 0 0 [ 176.548581][ T9824] Node 1 Normal free:3935336kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.581205][ T9824] lowmem_reserve[]: 0 0 0 0 0 [ 176.589305][ T9824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.604785][ T9824] Node 0 DMA32: 3242*4kB (UME) 1961*8kB (UME) 853*16kB (UM) 364*32kB (UME) 196*64kB (UME) 139*128kB (UME) 102*256kB (UME) 115*512kB (UME) 97*1024kB (UME) 48*2048kB (UM) 201*4096kB (UM) = 1190208kB [ 176.625457][ T9824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 176.637557][ T9824] Node 1 Normal: 2*4kB (UM) 14*8kB (UM) 13*16kB (UM) 11*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935336kB [ 176.655572][ T9824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.665883][ T9824] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.675714][ T9824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.685844][ T9824] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.696228][ T9824] 44733 total pagecache pages [ 176.701355][ T9824] 0 pages in swap cache [ 176.705873][ T9824] Free swap = 124996kB [ 176.710176][ T9824] Total swap = 124996kB [ 176.714732][ T9824] 2097051 pages RAM [ 176.718554][ T9824] 0 pages HighMem/MovableOnly [ 176.730424][ T9824] 427204 pages reserved [ 176.735529][ T9824] 0 pages cma reserved [ 176.830312][ T9865] netlink: 280 bytes leftover after parsing attributes in process `syz.0.999'. [ 176.950011][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1000'. [ 176.987032][ T9869] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 177.145297][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 177.154302][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'. [ 177.173900][ T9881] netlink: 'syz.1.1003': attribute type 13 has an invalid length. [ 177.216985][ T9884] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1004'. [ 177.263965][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'. [ 177.360241][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 177.643279][ T9906] nbd: must specify at least one socket [ 177.680500][ T9906] xt_ipcomp: unknown flags 1D [ 177.703319][ T9910] netlink: 'syz.2.1012': attribute type 1 has an invalid length. [ 177.724906][ T9910] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 177.854769][ T9919] team0: entered allmulticast mode [ 177.860174][ T9919] team_slave_0: entered allmulticast mode [ 177.867015][ T9919] team_slave_1: entered allmulticast mode [ 178.081293][ T9930] ipip0: entered promiscuous mode [ 178.382436][ T9958] netlink: 'syz.4.1024': attribute type 14 has an invalid length. [ 179.580964][ T5828] block nbd0: Receive control failed (result -32) [ 179.581433][ T5142] block nbd0: Receive control failed (result -32) [ 179.588972][ T5836] block nbd0: Receive control failed (result -32) [ 179.595346][ T5837] block nbd0: Receive control failed (result -32) [ 179.612291][ T5831] block nbd0: Receive control failed (result -32) [ 179.917752][T10027] lo speed is unknown, defaulting to 1000 [ 180.049786][T10034] gretap0: entered promiscuous mode [ 180.059112][T10034] vlan2: entered promiscuous mode [ 180.633166][T10056] __nla_validate_parse: 8 callbacks suppressed [ 180.633188][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1043'. [ 180.881645][T10056] syzkaller0: entered promiscuous mode [ 180.887721][T10056] syzkaller0: entered allmulticast mode [ 181.247958][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 181.325362][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 181.387934][T10078] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1049'. [ 181.425064][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 181.444806][T10088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 181.466779][T10078] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1049'. [ 181.483523][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 181.521437][T10088] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1051'. [ 181.759638][T10102] x_tables: duplicate underflow at hook 4 [ 181.768038][T10097] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 181.857730][T10097] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.938429][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 182.022057][T10116] lo speed is unknown, defaulting to 1000 [ 182.473028][T10134] syzkaller0: entered promiscuous mode [ 182.478724][T10134] syzkaller0: entered allmulticast mode [ 182.780160][T10135] syzkaller1: entered promiscuous mode [ 182.787155][T10135] syzkaller1: entered allmulticast mode [ 182.820869][T10121] vcan0: tx address claim with dest, not broadcast [ 183.201279][T10162] netlink: 'syz.3.1069': attribute type 39 has an invalid length. [ 183.257181][T10159] lo speed is unknown, defaulting to 1000 [ 183.343838][T10168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.677214][T10187] ip6tnl0: Caught tx_queue_len zero misconfig [ 184.245626][T10216] nftables ruleset with unbound chain [ 184.296884][T10214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.317269][T10223] Set syz1 is full, maxelem 0 reached [ 184.336209][T10224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.406750][T10229] tipc: Enabling of bearer rejected, failed to enable media [ 184.605406][T10233] bond3: entered promiscuous mode [ 184.613064][T10233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.622896][T10233] bridge0: port 4(bond3) entered blocking state [ 184.629416][T10233] bridge0: port 4(bond3) entered disabled state [ 184.637310][T10233] bond3: entered allmulticast mode [ 184.776936][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.784632][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.813466][T10248] team0: left allmulticast mode [ 184.818457][T10248] team_slave_1: left allmulticast mode [ 184.825605][T10248] dummy0: left allmulticast mode [ 184.847873][T10248] 0ªX¹¦À: left allmulticast mode [ 184.968211][T10248] batadv_slave_0: left promiscuous mode [ 184.981632][T10248] batadv_slave_0: left allmulticast mode [ 184.992485][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.057324][T10248] veth0_macvtap: left allmulticast mode [ 185.106429][T10248] bond1: left promiscuous mode [ 185.113044][T10248] macsec0: left promiscuous mode [ 185.148538][T10248] bond4: left promiscuous mode [ 185.159977][T10248] bridge2: left promiscuous mode [ 185.201567][T10248] vlan0: left allmulticast mode [ 185.214222][T10248] macvtap0: left allmulticast mode [ 185.256523][T10248] ipip0: left promiscuous mode [ 185.285724][T10253] syzkaller1: entered promiscuous mode [ 185.293863][T10253] syzkaller1: entered allmulticast mode [ 185.336936][T10259] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.358576][ T7722] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.379565][ T7722] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.418366][T10276] netlink: 'syz.4.1101': attribute type 10 has an invalid length. [ 185.422836][ T7722] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.454111][ T7722] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.469871][T10276] team_slave_0: left promiscuous mode [ 185.482343][T10276] team0 (unregistering): Port device team_slave_0 removed [ 185.505326][T10276] team_slave_1: left promiscuous mode [ 185.519475][T10276] team0 (unregistering): Port device team_slave_1 removed [ 185.548047][ T7722] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.556823][ T7722] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.565360][ T7722] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.575138][ T7722] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.833198][T10303] FAULT_INJECTION: forcing a failure. [ 185.833198][T10303] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 185.900401][T10303] CPU: 0 UID: 0 PID: 10303 Comm: syz.4.1107 Not tainted syzkaller #0 PREEMPT(full) [ 185.900426][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.900436][T10303] Call Trace: [ 185.900443][T10303] [ 185.900450][T10303] dump_stack_lvl+0xe8/0x150 [ 185.900480][T10303] should_fail_ex+0x412/0x560 [ 185.900512][T10303] prepare_alloc_pages+0x22a/0x650 [ 185.900544][T10303] __alloc_frozen_pages_noprof+0x12f/0x380 [ 185.900571][T10303] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.900603][T10303] ? __pfx_policy_nodemask+0x10/0x10 [ 185.900631][T10303] ? __lock_acquire+0x6b5/0x2cf0 [ 185.900658][T10303] alloc_pages_mpol+0x232/0x4a0 [ 185.900687][T10303] vma_alloc_folio_noprof+0xea/0x210 [ 185.900713][T10303] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 185.900747][T10303] do_pte_missing+0x1656/0x3490 [ 185.900788][T10303] handle_mm_fault+0x1bec/0x3310 [ 185.900821][T10303] ? handle_mm_fault+0xee/0x3310 [ 185.900846][T10303] ? __pfx_handle_mm_fault+0x10/0x10 [ 185.900864][T10303] ? follow_page_pte+0x841/0x1450 [ 185.900889][T10303] ? __pfx_follow_page_pte+0x10/0x10 [ 185.900913][T10303] __get_user_pages+0x165b/0x29d0 [ 185.900977][T10303] __gup_longterm_locked+0x3db/0x1630 [ 185.901027][T10303] pin_user_pages+0x9d/0xd0 [ 185.901055][T10303] xdp_umem_pin_pages+0x11b/0x340 [ 185.901081][T10303] xdp_umem_create+0x631/0x8b0 [ 185.901111][T10303] xsk_setsockopt+0x860/0x990 [ 185.901132][T10303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 185.901156][T10303] ? aa_sock_opt_perm+0xff/0x1a0 [ 185.901178][T10303] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 185.901198][T10303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 185.901217][T10303] do_sock_setsockopt+0x17c/0x1b0 [ 185.901248][T10303] __x64_sys_setsockopt+0x13d/0x1b0 [ 185.901278][T10303] do_syscall_64+0x14d/0xf80 [ 185.901298][T10303] ? trace_irq_disable+0x3b/0x150 [ 185.901313][T10303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.901331][T10303] ? clear_bhb_loop+0x40/0x90 [ 185.901353][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.901371][T10303] RIP: 0033:0x7f115e39c819 [ 185.901387][T10303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.901402][T10303] RSP: 002b:00007f115f1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.901420][T10303] RAX: ffffffffffffffda RBX: 00007f115e615fa0 RCX: 00007f115e39c819 [ 185.901433][T10303] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 185.901443][T10303] RBP: 00007f115f1c5090 R08: 000000000000001c R09: 0000000000000000 [ 185.901454][T10303] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 185.901465][T10303] R13: 00007f115e616038 R14: 00007f115e615fa0 R15: 00007fff8b8bdf18 [ 185.901494][T10303] [ 186.177365][T10311] __nla_validate_parse: 8 callbacks suppressed [ 186.177383][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 186.191997][T10316] netlink: 'syz.0.1112': attribute type 11 has an invalid length. [ 186.390028][T10325] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 186.606138][T10342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.778762][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 186.790391][T10344] "syz.0.1121" (10344) uses obsolete ecb(arc4) skcipher [ 186.810816][T10349] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.818475][T10349] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.830533][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1124'. [ 186.851378][T10349] bond_slave_0: left promiscuous mode [ 186.857613][T10349] bond_slave_1: left promiscuous mode [ 186.863489][T10349] dummy0: left promiscuous mode [ 186.876563][T10361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1123'. [ 186.882605][T10349] team_slave_0: left promiscuous mode [ 186.923777][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.937530][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.041503][ T8717] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.057710][ T8717] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.066673][ T8717] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.075153][ T8717] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.090721][ T8717] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.102518][ T8717] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.120194][ T8717] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.131341][ T8717] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.198453][T10372] FAULT_INJECTION: forcing a failure. [ 187.198453][T10372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.214611][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.3.1126 Not tainted syzkaller #0 PREEMPT(full) [ 187.214636][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.214647][T10372] Call Trace: [ 187.214654][T10372] [ 187.214662][T10372] dump_stack_lvl+0xe8/0x150 [ 187.214692][T10372] should_fail_ex+0x412/0x560 [ 187.214722][T10372] prepare_alloc_pages+0x22a/0x650 [ 187.214752][T10372] __alloc_frozen_pages_noprof+0x12f/0x380 [ 187.214776][T10372] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.214800][T10372] ? __pfx_policy_nodemask+0x10/0x10 [ 187.214826][T10372] ? __lock_acquire+0x6b5/0x2cf0 [ 187.214852][T10372] alloc_pages_mpol+0x232/0x4a0 [ 187.214888][T10372] vma_alloc_folio_noprof+0xea/0x210 [ 187.214914][T10372] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 187.214948][T10372] do_pte_missing+0x1656/0x3490 [ 187.214987][T10372] handle_mm_fault+0x1bec/0x3310 [ 187.215018][T10372] ? handle_mm_fault+0xee/0x3310 [ 187.215044][T10372] ? __pfx_handle_mm_fault+0x10/0x10 [ 187.215062][T10372] ? follow_page_pte+0x841/0x1450 [ 187.215088][T10372] ? __pfx_follow_page_pte+0x10/0x10 [ 187.215115][T10372] __get_user_pages+0x165b/0x29d0 [ 187.215169][T10372] __gup_longterm_locked+0x3db/0x1630 [ 187.215213][T10372] pin_user_pages+0x9d/0xd0 [ 187.215239][T10372] xdp_umem_pin_pages+0x11b/0x340 [ 187.215263][T10372] xdp_umem_create+0x631/0x8b0 [ 187.215285][T10372] xsk_setsockopt+0x860/0x990 [ 187.215296][T10372] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.215309][T10372] ? aa_sock_opt_perm+0xff/0x1a0 [ 187.215321][T10372] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 187.215333][T10372] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.215343][T10372] do_sock_setsockopt+0x17c/0x1b0 [ 187.215361][T10372] __x64_sys_setsockopt+0x13d/0x1b0 [ 187.215379][T10372] do_syscall_64+0x14d/0xf80 [ 187.215391][T10372] ? trace_irq_disable+0x3b/0x150 [ 187.215400][T10372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.215410][T10372] ? clear_bhb_loop+0x40/0x90 [ 187.215423][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.215432][T10372] RIP: 0033:0x7f1af1d9c819 [ 187.215443][T10372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.215452][T10372] RSP: 002b:00007f1af2c6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.215463][T10372] RAX: ffffffffffffffda RBX: 00007f1af2015fa0 RCX: 00007f1af1d9c819 [ 187.215471][T10372] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 187.215477][T10372] RBP: 00007f1af2c6f090 R08: 000000000000001c R09: 0000000000000000 [ 187.215483][T10372] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 187.215489][T10372] R13: 00007f1af2016038 R14: 00007f1af2015fa0 R15: 00007ffef68cae68 [ 187.215505][T10372] [ 187.659969][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 187.680266][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 187.768097][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 188.116570][T10408] netlink: 'syz.3.1135': attribute type 11 has an invalid length. [ 188.181272][T10408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1135'. [ 188.205899][T10407] batman_adv: batadv0: Interface activated: vlan2 [ 188.260045][T10407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.301401][T10412] syzkaller0: entered promiscuous mode [ 188.310766][T10412] syzkaller0: entered allmulticast mode [ 188.312753][ T7458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.353093][T10415] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1140'. [ 188.542484][ T7458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.574717][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1144'. [ 188.667997][T10433] syzkaller0: entered promiscuous mode [ 188.673853][T10433] syzkaller0: entered allmulticast mode [ 189.122846][ T8721] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.185643][T10472] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 189.338312][T10476] netlink: 'syz.3.1158': attribute type 1 has an invalid length. [ 190.592848][T10480] macvlan4: entered promiscuous mode [ 190.598295][T10480] bond0: entered promiscuous mode [ 190.603637][T10480] bond_slave_0: entered promiscuous mode [ 190.609478][T10480] bond_slave_1: entered promiscuous mode [ 190.615399][T10480] dummy0: entered promiscuous mode [ 190.622640][T10480] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 190.629993][T10480] team0: Device macvlan4 is up. Set it down before adding it as a team port [ 190.640087][T10480] bond0: left promiscuous mode [ 190.645157][T10480] bond_slave_0: left promiscuous mode [ 190.650791][T10480] bond_slave_1: left promiscuous mode [ 190.656619][T10480] dummy0: left promiscuous mode [ 190.693560][ T8725] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.709718][ T8725] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.825002][ T7458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.294966][T10526] __nla_validate_parse: 7 callbacks suppressed [ 191.294987][T10526] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1175'. [ 191.802868][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 191.826987][T10550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.875163][T10556] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 191.883066][T10556] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1186'. [ 191.905839][T10556] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1186'. [ 192.086135][T10564] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1188'. [ 192.096441][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 192.105653][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 192.534372][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 192.570270][T10590] 8021q: VLANs not supported on vcan0 [ 192.598124][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 192.746854][T10603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1198'. [ 193.194965][T10627] syzkaller0: entered promiscuous mode [ 193.201720][T10630] netlink: 'syz.0.1208': attribute type 10 has an invalid length. [ 193.205656][T10627] syzkaller0: entered allmulticast mode [ 193.497509][T10642] sit0: Caught tx_queue_len zero misconfig [ 193.551177][T10642] tunl0: Caught tx_queue_len zero misconfig [ 193.869636][T10657] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 193.944908][T10665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.106970][T10668] netlink: Unknown conntrack attr (type=2304, max=9) [ 194.270661][T10668] team1: entered promiscuous mode [ 194.280515][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.295582][T10668] team1: entered allmulticast mode [ 194.296345][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.304875][T10673] netlink: 'syz.4.1218': attribute type 11 has an invalid length. [ 194.328251][T10668] 8021q: adding VLAN 0 to HW filter on device team1 [ 194.350529][T10670] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 194.417571][T10670] team2: entered promiscuous mode [ 194.429834][T10670] team2: entered allmulticast mode [ 194.435939][T10670] 8021q: adding VLAN 0 to HW filter on device team2 [ 194.514532][T10679] lo speed is unknown, defaulting to 1000 [ 194.692674][T10690] openvswitch: netlink: Unknown key attributes 2 [ 194.802306][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.901213][T10702] FAULT_INJECTION: forcing a failure. [ 194.901213][T10702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.948082][T10702] CPU: 1 UID: 0 PID: 10702 Comm: syz.4.1228 Not tainted syzkaller #0 PREEMPT(full) [ 194.948108][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.948119][T10702] Call Trace: [ 194.948126][T10702] [ 194.948133][T10702] dump_stack_lvl+0xe8/0x150 [ 194.948162][T10702] should_fail_ex+0x412/0x560 [ 194.948192][T10702] prepare_alloc_pages+0x22a/0x650 [ 194.948222][T10702] __alloc_frozen_pages_noprof+0x12f/0x380 [ 194.948247][T10702] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.948271][T10702] ? __pfx_policy_nodemask+0x10/0x10 [ 194.948298][T10702] ? __lock_acquire+0x6b5/0x2cf0 [ 194.948324][T10702] alloc_pages_mpol+0x232/0x4a0 [ 194.948351][T10702] vma_alloc_folio_noprof+0xea/0x210 [ 194.948377][T10702] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 194.948411][T10702] do_pte_missing+0x1656/0x3490 [ 194.948449][T10702] handle_mm_fault+0x1bec/0x3310 [ 194.948479][T10702] ? handle_mm_fault+0xee/0x3310 [ 194.948504][T10702] ? __pfx_handle_mm_fault+0x10/0x10 [ 194.948522][T10702] ? follow_page_pte+0x841/0x1450 [ 194.948548][T10702] ? __pfx_follow_page_pte+0x10/0x10 [ 194.948575][T10702] __get_user_pages+0x165b/0x29d0 [ 194.948630][T10702] __gup_longterm_locked+0x3db/0x1630 [ 194.948679][T10702] pin_user_pages+0x9d/0xd0 [ 194.948708][T10702] xdp_umem_pin_pages+0x11b/0x340 [ 194.948733][T10702] xdp_umem_create+0x631/0x8b0 [ 194.948761][T10702] xsk_setsockopt+0x860/0x990 [ 194.948789][T10702] ? __pfx_xsk_setsockopt+0x10/0x10 [ 194.948814][T10702] ? aa_sock_opt_perm+0xff/0x1a0 [ 194.948835][T10702] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 194.948855][T10702] ? __pfx_xsk_setsockopt+0x10/0x10 [ 194.948874][T10702] do_sock_setsockopt+0x17c/0x1b0 [ 194.948904][T10702] __x64_sys_setsockopt+0x13d/0x1b0 [ 194.948933][T10702] do_syscall_64+0x14d/0xf80 [ 194.948954][T10702] ? trace_irq_disable+0x3b/0x150 [ 194.948969][T10702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.948988][T10702] ? clear_bhb_loop+0x40/0x90 [ 194.949009][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.949026][T10702] RIP: 0033:0x7f115e39c819 [ 194.949043][T10702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.949058][T10702] RSP: 002b:00007f115f1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.949076][T10702] RAX: ffffffffffffffda RBX: 00007f115e615fa0 RCX: 00007f115e39c819 [ 194.949089][T10702] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 194.949100][T10702] RBP: 00007f115f1c5090 R08: 000000000000001c R09: 0000000000000000 [ 194.949111][T10702] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 194.949122][T10702] R13: 00007f115e616038 R14: 00007f115e615fa0 R15: 00007fff8b8bdf18 [ 194.949152][T10702] [ 195.263153][T10711] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 195.280250][T10711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.407557][T10714] lo speed is unknown, defaulting to 1000 [ 195.887776][T10748] vxcan4: entered allmulticast mode [ 196.008848][T10746] sctp: [Deprecated]: syz.3.1243 (pid 10746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.008848][T10746] Use struct sctp_sack_info instead [ 201.448937][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 201.456168][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 203.202379][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.562335][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 219.202371][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 251.842332][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.685205][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.694769][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.833894][T10809] __nla_validate_parse: 16 callbacks suppressed [ 263.833916][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1260'. [ 263.927302][T10815] ip6gretap1: entered allmulticast mode [ 264.940848][T10874] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1280'. [ 264.969139][T10874] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1280'. [ 265.216661][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 265.253797][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1285'. [ 265.272825][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 265.312336][T10894] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1285'. [ 265.328830][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1284'. [ 265.420956][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 265.646017][T10911] lo speed is unknown, defaulting to 1000 [ 265.994905][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1299'. [ 266.024959][T10944] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 266.205112][T10947] lo speed is unknown, defaulting to 1000 [ 267.185278][T11002] ¾x9ÿ: renamed from bridge_slave_0 [ 267.340247][T11010] block nbd1: Receive control failed (result -32) [ 267.352915][ T5837] block nbd1: Receive control failed (result -32) [ 267.360812][ T5828] block nbd1: Receive control failed (result -32) [ 267.372676][T11009] block nbd1: Receive control failed (result -32) [ 267.379902][T11011] block nbd1: Receive control failed (result -32) [ 267.546970][T11021] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 267.613800][T11023] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 267.784482][T11029] vlan2: entered allmulticast mode [ 267.824283][T11029] hsr0: entered allmulticast mode [ 267.829370][T11029] hsr_slave_0: entered allmulticast mode [ 267.900517][T11029] hsr_slave_1: entered allmulticast mode [ 268.062937][T11059] lo: Caught tx_queue_len zero misconfig [ 268.067174][T11061] rdma_op ffff888029d9e1f0 conn xmit_rdma 0000000000000000 [ 268.087970][T11060] bridge0: port 3(syz_tun) entered blocking state [ 268.128092][T11060] bridge0: port 3(syz_tun) entered disabled state [ 268.171409][T11060] syz_tun: entered allmulticast mode [ 268.193732][T11060] syz_tun: entered promiscuous mode [ 268.638002][T11086] lo speed is unknown, defaulting to 1000 [ 269.414218][T11122] bond8 (unregistering): Released all slaves [ 269.843992][T11150] __nla_validate_parse: 5 callbacks suppressed [ 269.844013][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 270.023027][T11150] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.375942][T11178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1354'. [ 270.614002][T11191] netlink: 'syz.2.1357': attribute type 4 has an invalid length. [ 270.876521][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.028927][T11206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.086017][T11206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.326520][T11210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.372340][T11218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.408410][ T8273] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.422460][ T7456] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 271.432306][ T8273] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.440774][ T8273] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.466287][T11230] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1366'. [ 271.492417][T11230] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1366'. [ 271.525667][ T8273] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.725213][T11249] netlink: 'syz.2.1372': attribute type 58 has an invalid length. [ 271.729606][T11247] syzkaller1: entered promiscuous mode [ 271.753381][T11247] syzkaller1: entered allmulticast mode [ 271.759956][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 271.979139][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.252774][ T7456] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 272.271482][T11293] netlink: 'syz.1.1382': attribute type 1 has an invalid length. [ 272.356177][T11293] bond5: entered promiscuous mode [ 272.361629][T11293] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.408234][T11296] vlan3: entered allmulticast mode [ 272.413587][T11296] bond5: entered allmulticast mode [ 272.435492][T11293] bond5: (slave bridge6): making interface the new active one [ 272.470432][T11293] bridge6: entered promiscuous mode [ 272.484906][T11293] bridge6: entered allmulticast mode [ 272.493034][T11293] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 272.542436][T11306] tap0: tun_chr_ioctl cmd 2147767520 [ 272.582365][T11309] netlink: 'syz.1.1386': attribute type 5 has an invalid length. [ 272.626253][T11309] netlink: 'syz.1.1386': attribute type 4 has an invalid length. [ 272.634788][T11309] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1386'. [ 272.647382][T11309] .`: renamed from bond0 [ 272.656359][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.673298][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.825694][T11315] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1388'. [ 272.991323][T11321] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1390'. [ 273.004402][T11321] netlink: 245 bytes leftover after parsing attributes in process `syz.0.1390'. [ 273.015539][T11320] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 273.508295][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 274.489456][T11399] netlink: 'syz.3.1418': attribute type 1 has an invalid length. [ 274.686921][T11403] lo speed is unknown, defaulting to 1000 [ 274.952196][T11421] __nla_validate_parse: 5 callbacks suppressed [ 274.952213][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 275.248591][T11439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1428'. [ 275.267879][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 275.368441][T11443] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1429'. [ 277.898064][T11415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.351936][T11472] vlan3: entered promiscuous mode [ 278.372235][T11472] team0: entered promiscuous mode [ 278.377402][T11472] team_slave_0: entered promiscuous mode [ 278.392633][T11472] macvlan2: entered promiscuous mode [ 278.441588][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 278.547534][T11483] syzkaller0: entered promiscuous mode [ 278.553163][T11483] syzkaller0: entered allmulticast mode [ 278.631863][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 278.913714][T11495] lo speed is unknown, defaulting to 1000 [ 279.251120][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 279.264268][T11525] netlink: 'syz.2.1454': attribute type 2 has an invalid length. [ 279.651226][T11549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1463'. [ 279.705362][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1464'. [ 279.829369][T11562] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1467'. [ 279.934486][T11568] bond0: (slave ipvlan0): Device is not bonding slave [ 279.943806][T11568] bond0: option active_slave: invalid value (ipvlan0) [ 279.969794][ T35] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.978436][ T35] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.988594][ T35] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.004251][T11568] __nla_validate_parse: 5 callbacks suppressed [ 280.004271][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1471'. [ 280.010753][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.053088][T11573] bond0: (slave ipvlan0): Device is not bonding slave [ 280.063327][T11573] bond0: option active_slave: invalid value (ipvlan0) [ 280.453771][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 280.463316][T11598] netlink: 'syz.1.1477': attribute type 1 has an invalid length. [ 280.471230][T11598] netlink: 'syz.1.1477': attribute type 2 has an invalid length. [ 280.727058][T11617] netlink: 'syz.3.1483': attribute type 83 has an invalid length. [ 280.736313][T11617] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 280.745744][T11617] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1483'. [ 280.828564][T11620] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 280.850512][T11620] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 281.119358][T11641] sit1: entered allmulticast mode [ 281.297470][T11648] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 281.427944][T11648] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.467953][T11648] netlink: 'syz.2.1492': attribute type 8 has an invalid length. [ 281.501726][T11648] bond8: (slave geneve2): making interface the new active one [ 281.525274][T11648] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 281.563014][ T8721] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.589515][ T8721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.615307][T11661] ipvlan2: entered promiscuous mode [ 281.625525][ T8721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.644656][ T8721] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.788654][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1496'. [ 281.854026][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 282.232218][T11698] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 282.396074][T11705] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 282.414350][T11705] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 282.428504][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1508'. [ 282.477577][T11698] bond0: (slave gretap1): making interface the new active one [ 282.503454][T11698] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 282.778451][T11735] netlink: 'syz.4.1512': attribute type 1 has an invalid length. [ 282.799418][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1512'. [ 282.812238][T11733] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1511'. [ 282.856394][T11740] syz_tun: left allmulticast mode [ 283.166759][T11758] batman_adv: batadv0: Interface deactivated: vlan2 [ 283.242872][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1517'. [ 283.304051][T11760] team0: entered allmulticast mode [ 283.309227][T11760] team_slave_0: entered allmulticast mode [ 283.315206][T11760] team_slave_1: entered allmulticast mode [ 283.322830][T11760] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.336610][T11764] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 283.419476][T11764] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 283.504310][T11764] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 283.541775][T11778] bond9: entered promiscuous mode [ 283.548688][T11778] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.562375][T11778] bridge0: Device is already in use. [ 283.582000][T11764] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 283.665189][ T7722] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.744215][ T7722] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.770482][ T7722] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.803295][ T7722] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.848891][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1524'. [ 284.287250][T11822] x_tables: unsorted underflow at hook 4 [ 284.553834][T11831] team0 (unregistering): Failed to send options change via netlink (err -105) [ 284.567653][T11831] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 284.599644][T11831] team0 (unregistering): Port device team_slave_1 removed [ 284.661241][T11831] team0 (unregistering): Failed to send options change via netlink (err -105) [ 284.671037][T11831] team0 (unregistering): Failed to send port change of device dummy0 via netlink (err -105) [ 284.684122][T11831] team0 (unregistering): Port device dummy0 removed [ 284.957580][T11856] validate_nla: 4 callbacks suppressed [ 284.957602][T11856] netlink: 'syz.4.1544': attribute type 39 has an invalid length. [ 284.984228][T11853] bond7: option arp_interval: invalid value (18446744073709551615) [ 285.023449][T11853] bond7: option arp_interval: allowed values 0 - 2147483647 [ 285.033127][T11853] bond7 (unregistering): Released all slaves [ 285.136118][T11867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.211090][T11862] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 285.243185][T11862] __nla_validate_parse: 5 callbacks suppressed [ 285.243201][T11862] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1543'. [ 285.280649][ T8273] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 285.319386][T11862] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 285.343038][T11862] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1543'. [ 285.460622][T11902] netlink: zone id is out of range [ 285.466613][T11902] netlink: zone id is out of range [ 285.475516][T11902] netlink: zone id is out of range [ 285.496341][T11902] netlink: zone id is out of range [ 285.509317][T11902] netlink: zone id is out of range [ 285.584788][T11902] netlink: zone id is out of range [ 285.590275][T11902] netlink: zone id is out of range [ 285.596360][T11902] netlink: zone id is out of range [ 285.612328][T11902] netlink: zone id is out of range [ 285.926002][T11880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.429576][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 286.431645][T11928] ieee802154 phy0 wpan0: encryption failed: -90 [ 286.454238][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 286.678430][T11936] syzkaller0: entered promiscuous mode [ 286.684037][T11936] syzkaller0: entered allmulticast mode [ 286.692987][T11936] net_ratelimit: 3 callbacks suppressed [ 286.693004][T11936] 0: reclassify loop, rule prio 0, protocol 700 [ 286.773115][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 286.907081][T11961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1573'. [ 286.929216][T11961] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1573'. [ 286.952960][T11962] netlink: 'syz.1.1573': attribute type 39 has an invalid length. [ 286.977881][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 287.114791][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 287.134154][T11977] vlan4: entered promiscuous mode [ 287.139252][T11977] bridge0: entered promiscuous mode [ 287.160944][T11975] bridge_slave_1: left allmulticast mode [ 287.168496][T11975] bridge_slave_1: left promiscuous mode [ 287.175187][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.265532][T11978] syzkaller1: entered promiscuous mode [ 287.283517][T11978] syzkaller1: entered allmulticast mode [ 287.296878][T11990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 287.478318][T12002] netlink: 'syz.2.1586': attribute type 89 has an invalid length. [ 287.776143][T12014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.844072][T12018] sctp: [Deprecated]: syz.2.1590 (pid 12018) Use of int in maxseg socket option. [ 287.844072][T12018] Use struct sctp_assoc_value instead [ 288.006843][ T29] audit: type=1804 audit(1776241752.816:4): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1591" name="/newroot/332/cgroup.controllers" dev="tmpfs" ino=1721 res=1 errno=0 [ 288.038463][ T29] audit: type=1800 audit(1776241752.816:5): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1591" name="cgroup.controllers" dev="tmpfs" ino=1721 res=0 errno=0 [ 289.392681][T12026] IPVS: Error connecting to the multicast addr [ 289.453170][T12034] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 289.463653][T12037] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 289.518556][T12024] lo speed is unknown, defaulting to 1000 [ 289.684996][T12048] @ÿ: renamed from veth0_vlan [ 289.823693][T12063] lo speed is unknown, defaulting to 1000 [ 290.168252][T12084] syzkaller0: entered promiscuous mode [ 290.179808][T12084] syzkaller0: entered allmulticast mode [ 290.205482][T12084] 0: reclassify loop, rule prio 0, protocol 700 [ 290.305193][T12095] __nla_validate_parse: 6 callbacks suppressed [ 290.305220][T12095] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1603'. [ 290.327679][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 290.384359][T12086] lo speed is unknown, defaulting to 1000 [ 290.810445][T12125] netlink: 'syz.2.1613': attribute type 5 has an invalid length. [ 291.000897][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 291.010288][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 291.180467][T12142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1617'. [ 291.567968][T12159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1622'. [ 291.776938][T12172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1628'. [ 291.846240][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 291.890574][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1631'. [ 291.904529][T11011] block nbd2: Receive control failed (result -1) [ 292.017749][T12176] syzkaller0: entered promiscuous mode [ 292.032215][T12176] syzkaller0: entered allmulticast mode [ 292.081198][T12181] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 292.098284][T12181] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 292.177767][T12183] netlink: 'syz.2.1633': attribute type 3 has an invalid length. [ 292.190298][T12183] nbd: nbd2 already in use [ 292.195357][T12183] block nbd2: NBD_DISCONNECT [ 292.200625][T12183] block nbd2: Send disconnect failed -32 [ 292.206493][T12183] block nbd2: shutting down sockets [ 292.329753][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'. [ 292.738101][T12204] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 292.743539][T12199] siw: device registration error -23 [ 292.754969][T12199] [ 292.757317][T12199] ====================================================== [ 292.764333][T12199] WARNING: possible circular locking dependency detected [ 292.771364][T12199] syzkaller #0 Not tainted [ 292.775768][T12199] ------------------------------------------------------ [ 292.782767][T12199] syz.4.1638/12199 is trying to acquire lock: [ 292.788809][T12199] ffff88801bae5a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 292.799492][T12199] [ 292.799492][T12199] but task is already holding lock: [ 292.806847][T12199] ffff88801bae5988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 292.817152][T12199] [ 292.817152][T12199] which lock already depends on the new lock. [ 292.817152][T12199] [ 292.827565][T12199] [ 292.827565][T12199] the existing dependency chain (in reverse order) is: [ 292.836569][T12199] [ 292.836569][T12199] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 292.844646][T12199] down_write+0x96/0x200 [ 292.849408][T12199] kernfs_add_one+0x41/0x5c0 [ 292.854507][T12199] kernfs_create_dir_ns+0xde/0x130 [ 292.860130][T12199] internal_create_group+0x425/0x1180 [ 292.866019][T12199] cpuhp_invoke_callback+0x445/0x860 [ 292.871819][T12199] cpuhp_issue_call+0x430/0x7a0 [ 292.877190][T12199] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 292.883769][T12199] __cpuhp_setup_state+0x3f/0x60 [ 292.889218][T12199] do_one_initcall+0x250/0x8d0 [ 292.894497][T12199] do_initcall_level+0x104/0x190 [ 292.899949][T12199] do_initcalls+0x59/0xa0 [ 292.904795][T12199] kernel_init_freeable+0x2a6/0x3e0 [ 292.910507][T12199] kernel_init+0x1d/0x1d0 [ 292.915351][T12199] ret_from_fork+0x51e/0xb90 [ 292.920455][T12199] ret_from_fork_asm+0x1a/0x30 [ 292.925742][T12199] [ 292.925742][T12199] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 292.933610][T12199] [ 292.933610][T12199] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 292.941339][T12199] cpus_read_lock+0x42/0x160 [ 292.946441][T12199] static_key_slow_inc+0x12/0x30 [ 292.951895][T12199] tcp_md5_do_add+0x1d4/0x390 [ 292.957086][T12199] tcp_v6_parse_md5_keys+0x562/0x680 [ 292.962984][T12199] do_tcp_setsockopt+0x12ec/0x2060 [ 292.968609][T12199] do_sock_setsockopt+0x17c/0x1b0 [ 292.974147][T12199] __x64_sys_setsockopt+0x13d/0x1b0 [ 292.979857][T12199] do_syscall_64+0x14d/0xf80 [ 292.984959][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.991358][T12199] [ 292.991358][T12199] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 292.999078][T12199] lock_sock_nested+0x41/0x100 [ 293.004356][T12199] inet_shutdown+0x6a/0x390 [ 293.009376][T12199] nbd_mark_nsock_dead+0x2e9/0x560 [ 293.014998][T12199] recv_work+0x1c7f/0x1d90 [ 293.019925][T12199] process_scheduled_works+0xb6e/0x18c0 [ 293.025981][T12199] worker_thread+0xa53/0xfc0 [ 293.031088][T12199] kthread+0x388/0x470 [ 293.035663][T12199] ret_from_fork+0x51e/0xb90 [ 293.040774][T12199] ret_from_fork_asm+0x1a/0x30 [ 293.046145][T12199] [ 293.046145][T12199] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 293.053786][T12199] __mutex_lock+0x19f/0x1300 [ 293.058894][T12199] nbd_queue_rq+0x37b/0x1100 [ 293.063999][T12199] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 293.070057][T12199] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 293.076906][T12199] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 293.083399][T12199] blk_mq_run_hw_queue+0x348/0x4f0 [ 293.089024][T12199] blk_mq_dispatch_list+0xd16/0xe10 [ 293.094742][T12199] blk_mq_flush_plug_list+0x48d/0x570 [ 293.100636][T12199] __blk_flush_plug+0x3ed/0x4d0 [ 293.105997][T12199] __submit_bio+0x28d/0x580 [ 293.111011][T12199] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 293.117153][T12199] block_read_full_folio+0x599/0x830 [ 293.122948][T12199] filemap_read_folio+0x137/0x3b0 [ 293.128488][T12199] do_read_cache_folio+0x358/0x590 [ 293.134106][T12199] read_part_sector+0xb6/0x2b0 [ 293.139383][T12199] adfspart_check_ICS+0xa5/0xa40 [ 293.144841][T12199] bdev_disk_changed+0x7ba/0x1550 [ 293.150375][T12199] blkdev_get_whole+0x380/0x510 [ 293.155734][T12199] bdev_open+0x31e/0xd30 [ 293.160490][T12199] blkdev_open+0x470/0x610 [ 293.165426][T12199] do_dentry_open+0x785/0x14e0 [ 293.170710][T12199] vfs_open+0x3b/0x340 [ 293.175298][T12199] path_openat+0x2e08/0x3860 [ 293.180487][T12199] do_file_open+0x23e/0x4a0 [ 293.185519][T12199] do_sys_openat2+0x113/0x200 [ 293.190711][T12199] __x64_sys_openat+0x138/0x170 [ 293.196081][T12199] do_syscall_64+0x14d/0xf80 [ 293.201184][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.207582][T12199] [ 293.207582][T12199] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 293.214790][T12199] __mutex_lock+0x19f/0x1300 [ 293.219896][T12199] nbd_queue_rq+0xc6/0x1100 [ 293.224909][T12199] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 293.230969][T12199] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 293.237810][T12199] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 293.244301][T12199] blk_mq_run_hw_queue+0x348/0x4f0 [ 293.249919][T12199] blk_mq_dispatch_list+0xd16/0xe10 [ 293.255629][T12199] blk_mq_flush_plug_list+0x48d/0x570 [ 293.261515][T12199] __blk_flush_plug+0x3ed/0x4d0 [ 293.266876][T12199] __submit_bio+0x28d/0x580 [ 293.271900][T12199] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 293.278043][T12199] block_read_full_folio+0x599/0x830 [ 293.283841][T12199] filemap_read_folio+0x137/0x3b0 [ 293.289385][T12199] do_read_cache_folio+0x358/0x590 [ 293.295030][T12199] read_part_sector+0xb6/0x2b0 [ 293.300305][T12199] adfspart_check_ICS+0xa5/0xa40 [ 293.305754][T12199] bdev_disk_changed+0x7ba/0x1550 [ 293.311293][T12199] blkdev_get_whole+0x380/0x510 [ 293.316657][T12199] bdev_open+0x31e/0xd30 [ 293.321410][T12199] blkdev_open+0x470/0x610 [ 293.326341][T12199] do_dentry_open+0x785/0x14e0 [ 293.331646][T12199] vfs_open+0x3b/0x340 [ 293.336228][T12199] path_openat+0x2e08/0x3860 [ 293.341327][T12199] do_file_open+0x23e/0x4a0 [ 293.346337][T12199] do_sys_openat2+0x113/0x200 [ 293.351601][T12199] __x64_sys_openat+0x138/0x170 [ 293.356963][T12199] do_syscall_64+0x14d/0xf80 [ 293.362066][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.368471][T12199] [ 293.368471][T12199] -> #4 (set->srcu){.+.+}-{0:0}: [ 293.375582][T12199] __synchronize_srcu+0xca/0x300 [ 293.381117][T12199] elevator_switch+0x1e8/0x7a0 [ 293.386391][T12199] elevator_change+0x2cc/0x450 [ 293.391666][T12199] elevator_set_default+0x36c/0x430 [ 293.397379][T12199] blk_register_queue+0x366/0x430 [ 293.402915][T12199] __add_disk+0x677/0xd50 [ 293.407760][T12199] add_disk_fwnode+0xfb/0x480 [ 293.412950][T12199] nbd_dev_add+0x72c/0xb50 [ 293.417874][T12199] nbd_init+0x168/0x1f0 [ 293.422536][T12199] do_one_initcall+0x250/0x8d0 [ 293.427812][T12199] do_initcall_level+0x104/0x190 [ 293.433262][T12199] do_initcalls+0x59/0xa0 [ 293.438101][T12199] kernel_init_freeable+0x2a6/0x3e0 [ 293.443811][T12199] kernel_init+0x1d/0x1d0 [ 293.448653][T12199] ret_from_fork+0x51e/0xb90 [ 293.453759][T12199] ret_from_fork_asm+0x1a/0x30 [ 293.459124][T12199] [ 293.459124][T12199] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 293.466932][T12199] __mutex_lock+0x19f/0x1300 [ 293.472032][T12199] elevator_change+0x1b3/0x450 [ 293.477303][T12199] elevator_set_none+0xb5/0x140 [ 293.482667][T12199] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 293.488990][T12199] nbd_start_device+0x17f/0xb10 [ 293.494367][T12199] nbd_genl_connect+0x165b/0x1cf0 [ 293.499900][T12199] genl_family_rcv_msg_doit+0x22a/0x330 [ 293.505956][T12199] genl_rcv_msg+0x61c/0x7a0 [ 293.510970][T12199] netlink_rcv_skb+0x232/0x4b0 [ 293.516245][T12199] genl_rcv+0x28/0x40 [ 293.520733][T12199] netlink_unicast+0x75c/0x8e0 [ 293.526007][T12199] netlink_sendmsg+0x813/0xb40 [ 293.531285][T12199] ____sys_sendmsg+0x972/0x9f0 [ 293.536564][T12199] ___sys_sendmsg+0x2a5/0x360 [ 293.541755][T12199] __x64_sys_sendmsg+0x1bd/0x2a0 [ 293.547205][T12199] do_syscall_64+0x14d/0xf80 [ 293.552305][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.558702][T12199] [ 293.558702][T12199] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 293.567298][T12199] blk_alloc_queue+0x546/0x680 [ 293.572583][T12199] __blk_mq_alloc_disk+0x197/0x390 [ 293.578205][T12199] nbd_dev_add+0x499/0xb50 [ 293.583132][T12199] nbd_init+0x168/0x1f0 [ 293.587793][T12199] do_one_initcall+0x250/0x8d0 [ 293.593068][T12199] do_initcall_level+0x104/0x190 [ 293.598520][T12199] do_initcalls+0x59/0xa0 [ 293.603361][T12199] kernel_init_freeable+0x2a6/0x3e0 [ 293.609072][T12199] kernel_init+0x1d/0x1d0 [ 293.613924][T12199] ret_from_fork+0x51e/0xb90 [ 293.619048][T12199] ret_from_fork_asm+0x1a/0x30 [ 293.624343][T12199] [ 293.624343][T12199] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 293.631554][T12199] fs_reclaim_acquire+0x71/0x100 [ 293.637014][T12199] kmem_cache_alloc_noprof+0x40/0x650 [ 293.642908][T12199] __kernfs_iattrs+0xdf/0x340 [ 293.648119][T12199] kernfs_iop_setattr+0xea/0x3f0 [ 293.653615][T12199] notify_change+0xc1a/0xf40 [ 293.658728][T12199] do_truncate+0x1c2/0x250 [ 293.663665][T12199] path_openat+0x2f89/0x3860 [ 293.668784][T12199] do_file_open+0x23e/0x4a0 [ 293.674081][T12199] do_sys_openat2+0x113/0x200 [ 293.679299][T12199] __x64_sys_openat+0x138/0x170 [ 293.684682][T12199] do_syscall_64+0x14d/0xf80 [ 293.689794][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.696208][T12199] [ 293.696208][T12199] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 293.704719][T12199] __lock_acquire+0x15a5/0x2cf0 [ 293.710096][T12199] lock_acquire+0xf0/0x2e0 [ 293.715033][T12199] down_write+0x96/0x200 [ 293.719793][T12199] kernfs_unlink_sibling+0x71/0x180 [ 293.725501][T12199] __kernfs_remove+0x3e7/0x660 [ 293.730778][T12199] kernfs_remove_by_name_ns+0xaf/0x130 [ 293.736745][T12199] sysfs_unmerge_group+0xd4/0x140 [ 293.742286][T12199] dpm_sysfs_remove+0x76/0xd0 [ 293.747476][T12199] device_del+0x250/0x8f0 [ 293.752324][T12199] srp_remove_one+0x81/0x280 [ 293.757425][T12199] remove_client_context+0xb9/0x1e0 [ 293.763135][T12199] disable_device+0x137/0x330 [ 293.768324][T12199] __ib_unregister_device+0x2cb/0x3f0 [ 293.774207][T12199] ib_unregister_device_and_put+0xb8/0xf0 [ 293.780436][T12199] nldev_dellink+0x288/0x320 [ 293.785533][T12199] rdma_nl_rcv+0x6d7/0xa10 [ 293.790453][T12199] netlink_unicast+0x75c/0x8e0 [ 293.795727][T12199] netlink_sendmsg+0x813/0xb40 [ 293.801002][T12199] ____sys_sendmsg+0x972/0x9f0 [ 293.806277][T12199] ___sys_sendmsg+0x2a5/0x360 [ 293.811468][T12199] __x64_sys_sendmsg+0x1bd/0x2a0 [ 293.816917][T12199] do_syscall_64+0x14d/0xf80 [ 293.822017][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.828415][T12199] [ 293.828415][T12199] other info that might help us debug this: [ 293.828415][T12199] [ 293.838637][T12199] Chain exists of: [ 293.838637][T12199] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 293.838637][T12199] [ 293.853061][T12199] Possible unsafe locking scenario: [ 293.853061][T12199] [ 293.860498][T12199] CPU0 CPU1 [ 293.865850][T12199] ---- ---- [ 293.871196][T12199] lock(&root->kernfs_rwsem); [ 293.875945][T12199] lock(cpuhp_state_mutex); [ 293.883043][T12199] lock(&root->kernfs_rwsem); [ 293.890311][T12199] lock(&root->kernfs_iattr_rwsem); [ 293.895585][T12199] [ 293.895585][T12199] *** DEADLOCK *** [ 293.895585][T12199] [ 293.903744][T12199] 3 locks held by syz.4.1638/12199: [ 293.908923][T12199] #0: ffffffff9a661918 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32b/0xa10 [ 293.918920][T12199] #1: ffff888056180718 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 293.930307][T12199] #2: ffff88801bae5988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 293.941000][T12199] [ 293.941000][T12199] stack backtrace: [ 293.946873][T12199] CPU: 1 UID: 0 PID: 12199 Comm: syz.4.1638 Not tainted syzkaller #0 PREEMPT(full) [ 293.946891][T12199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.946913][T12199] Call Trace: [ 293.946921][T12199] [ 293.946930][T12199] dump_stack_lvl+0xe8/0x150 [ 293.946952][T12199] print_circular_bug+0x2e1/0x300 [ 293.946976][T12199] check_noncircular+0x12e/0x150 [ 293.947001][T12199] __lock_acquire+0x15a5/0x2cf0 [ 293.947022][T12199] ? __lock_acquire+0x6b5/0x2cf0 [ 293.947045][T12199] lock_acquire+0xf0/0x2e0 [ 293.947063][T12199] ? kernfs_unlink_sibling+0x71/0x180 [ 293.947082][T12199] down_write+0x96/0x200 [ 293.947102][T12199] ? kernfs_unlink_sibling+0x71/0x180 [ 293.947118][T12199] ? __pfx_down_write+0x10/0x10 [ 293.947136][T12199] ? kernfs_root+0x1c/0x230 [ 293.947156][T12199] ? kernfs_root+0x1c/0x230 [ 293.947177][T12199] ? kernfs_root+0x1c/0x230 [ 293.947197][T12199] ? kernfs_root+0x1ea/0x230 [ 293.947218][T12199] kernfs_unlink_sibling+0x71/0x180 [ 293.947235][T12199] __kernfs_remove+0x3e7/0x660 [ 293.947252][T12199] kernfs_remove_by_name_ns+0xaf/0x130 [ 293.947269][T12199] sysfs_unmerge_group+0xd4/0x140 [ 293.947293][T12199] dpm_sysfs_remove+0x76/0xd0 [ 293.947316][T12199] device_del+0x250/0x8f0 [ 293.947337][T12199] ? xa_load+0x60/0x210 [ 293.947356][T12199] ? __pfx_device_del+0x10/0x10 [ 293.947377][T12199] ? remove_client_context+0x79/0x1e0 [ 293.947397][T12199] ? __pfx_srp_remove_one+0x10/0x10 [ 293.947410][T12199] srp_remove_one+0x81/0x280 [ 293.947425][T12199] ? __pfx_srp_remove_one+0x10/0x10 [ 293.947438][T12199] remove_client_context+0xb9/0x1e0 [ 293.947459][T12199] disable_device+0x137/0x330 [ 293.947479][T12199] ? __pfx_disable_device+0x10/0x10 [ 293.947503][T12199] __ib_unregister_device+0x2cb/0x3f0 [ 293.947522][T12199] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 293.947541][T12199] ib_unregister_device_and_put+0xb8/0xf0 [ 293.947560][T12199] nldev_dellink+0x288/0x320 [ 293.947576][T12199] ? __lock_acquire+0x6b5/0x2cf0 [ 293.947599][T12199] ? __pfx_nldev_dellink+0x10/0x10 [ 293.947643][T12199] ? apparmor_capable+0x126/0x170 [ 293.947661][T12199] ? bpf_lsm_capable+0x9/0x20 [ 293.947682][T12199] ? security_capable+0x7e/0x2c0 [ 293.947704][T12199] ? __pfx_nldev_dellink+0x10/0x10 [ 293.947720][T12199] rdma_nl_rcv+0x6d7/0xa10 [ 293.947740][T12199] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 293.947763][T12199] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.947784][T12199] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.947806][T12199] netlink_unicast+0x75c/0x8e0 [ 293.947828][T12199] netlink_sendmsg+0x813/0xb40 [ 293.947852][T12199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.947874][T12199] ? aa_sock_msg_perm+0xf1/0x1b0 [ 293.947889][T12199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.947907][T12199] ____sys_sendmsg+0x972/0x9f0 [ 293.947929][T12199] ? futex_unqueue+0x211/0x240 [ 293.947949][T12199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.947974][T12199] ? import_iovec+0x73/0xa0 [ 293.947992][T12199] ___sys_sendmsg+0x2a5/0x360 [ 293.948016][T12199] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.948039][T12199] ? futex_wait+0x29a/0x380 [ 293.948068][T12199] ? __fget_files+0x2a/0x420 [ 293.948081][T12199] ? __fget_files+0x3a0/0x420 [ 293.948097][T12199] __x64_sys_sendmsg+0x1bd/0x2a0 [ 293.948120][T12199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.948145][T12199] ? rcu_is_watching+0x15/0xb0 [ 293.948169][T12199] do_syscall_64+0x14d/0xf80 [ 293.948186][T12199] ? trace_irq_disable+0x3b/0x150 [ 293.948199][T12199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.948214][T12199] ? clear_bhb_loop+0x40/0x90 [ 293.948231][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.948246][T12199] RIP: 0033:0x7f115e39c819 [ 293.948260][T12199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.948274][T12199] RSP: 002b:00007f115f1c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.948289][T12199] RAX: ffffffffffffffda RBX: 00007f115e615fa0 RCX: 00007f115e39c819 [ 293.948301][T12199] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 293.948310][T12199] RBP: 00007f115e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 293.948320][T12199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.948329][T12199] R13: 00007f115e616038 R14: 00007f115e615fa0 R15: 00007fff8b8bdf18 [ 293.948347][T12199] [ 294.457945][T12204] bond5: entered promiscuous mode [ 294.463693][T12204] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.494281][T12210] bond5: (slave veth5): making interface the new active one [ 294.501596][T12210] veth5: entered promiscuous mode [ 294.507376][T12210] bond5: (slave veth5): Enslaving as an active interface with an up link