last executing test programs: 5.308153781s ago: executing program 0 (id=1225): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10001, 0x0, 0x0) 5.099851384s ago: executing program 0 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) 5.099220879s ago: executing program 2 (id=1230): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe25}, 0x48) (async, rerun: 64) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@fragment={0x33, 0x0, 0x5, 0x0, 0x0, 0x12, 0x66}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 5.028215844s ago: executing program 0 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000080)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00010065727370616e0000180002800400120006000e00000000000600020025000000140003006e"], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.727603616s ago: executing program 0 (id=1236): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xe) (async, rerun: 32) shutdown(r0, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0xfffe, @local}]}, &(0x7f0000000200)=0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48) (rerun: 64) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r2, 0xa3, 0x4991, 0x7}, &(0x7f0000000280)=0x10) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket(0x8, 0x4, 0x3) (async) epoll_create1(0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000540)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f0000000b40)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x0, 0x0, 0x200, 0x200, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x368}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c00000003060500000000000000000001000004050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) (rerun: 64) 4.580701001s ago: executing program 3 (id=1239): syz_emit_ethernet(0x33, &(0x7f0000000000)={@multicast, @local, @void, {@arp={0x806, @generic={0x321, 0x883e, 0x6, 0x1, 0x8, @random="591ea7c76b2d", "be", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, "8fecd9f6e3e2f7090befdde9880aac23"}}}}, &(0x7f0000000040)={0x0, 0x1, [0xd6, 0x627, 0x65e, 0xa23]}) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4.388932142s ago: executing program 3 (id=1241): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000004f00), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000004f40)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004f80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000005000)={&(0x7f0000005040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000051c0)={0x11, 0x8100, r3, 0x1, 0xda, 0x6, @multicast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="bfa20000000070d9d10000000057ed3b91fcffffff85000000010000005500010001000000950000000000000095000000000000006eb0a591fae4c33a38b924071750e7878b3439aa7a66aa23e850d67871e7c9b4d77e9183479c91ce0594b1e6d5bb51b0f464ce6b99b63df139eb62c716673c15348530a8c9149f8859021ffd5e0fff9ece689ba58a9a97c5aa9c5f8525e7d5cb9492d7d9f8ddc3dc09024e84e243a99350f02c6631a7cfed170c005586520cbe4dc9ef3ebdaa6a93a4ffef77ffac07c4182347e776af17283d"], &(0x7f0000000400)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004d80)={0x24, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="8b178a87079705f8d809"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000004c00)={{r5, &(0x7f00000047c0)='\xaa\xaa\xaa\xaa\xaa', 0x80800, &(0x7f0000004800)={@align=0xffffffffffffffff, {0x3420, 0xa01, 0x6, 0x655c1b8d}}, 0x8, &(0x7f0000004840)={@_ha_fsid}, &(0x7f0000004880)=0xfa}, 0x4, &(0x7f0000004b80)=[{0x2, 0x2, &(0x7f00000048c0)='$^\xcd./^(\x00', &(0x7f0000004900)="475c96ede3e6cd23ac57ebfb241dcf053f30b5d731fba4c296346df3b7b0ed99bd38b3839142e047e5783b95a50f0c044046346772de957df05348726f987337984fec1af65e696c57496f0bb1706b98e97142aa6042a09c135d1059767f92e5ec629119cf3b1c1e1a4730dbfecb2e43b2222cb290861b4ebd9667cdf9fa6026ef8892b006c854dbbe28f01cce5c7c8ca7f258aeace16f5195d33e318f2169fe7f1aa41dcdf5", 0xa6, 0x8}, {0x3, 0x0, &(0x7f00000049c0)='GPL\x00', &(0x7f0000004a00)="fa4213c76e37620a24c9d480", 0xc}, {0x1, 0x4, &(0x7f0000004a40)='\x00', &(0x7f0000004a80)="3b99ea6292", 0x5, 0x20}, {0x2, 0xfff, &(0x7f0000004ac0)='syz0\x00', &(0x7f0000004b00)="46235c9ec58dacaa2a458c16e411acbf80a8b913618f9b6bbbe1835e6ea0885f716b0a84ef678400a2ee437b99def322b755273a8410a73c35fe5b9b1e9bf63954a8533a842ff96f233bfac117a4f25e921b5e7424cd76b13b7830dca8c1333281264b73785e", 0x66, 0x10}]}) bpf$MAP_CREATE(0x0, &(0x7f0000004c80)=@base={0x3, 0x9, 0x80, 0x2, 0x10000, r9, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @value=r0}, 0x50) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000004640)={0x0, 0xfffffffffffffee0, &(0x7f0000004680)={&(0x7f00000046c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004e40)=ANY=[@ANYBLOB="3000000076000d0b000000080000000003c00e0000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={0x20, 0xa, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd0ae, '\x00', 0x0, r9, 0x4}, 0x50) socket$kcm(0x2, 0xa, 0x2) read(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000280)={0x0, 0xfffffffffffffffe, [0x3, 0x80000000, 0x2, 0x9, 0x0, 0x1]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000004740)={0x2, &(0x7f0000004780)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r12, &(0x7f00000047c0), 0x400000000000159, 0x40840) 4.140963147s ago: executing program 1 (id=1243): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4.140739442s ago: executing program 4 (id=1244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4.134962835s ago: executing program 2 (id=1245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000004118110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000150000008c000080bf9800000000000056080000000000008500000094000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.936026804s ago: executing program 3 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}}, 0x20000091) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) 3.917824837s ago: executing program 2 (id=1247): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) 3.85380012s ago: executing program 1 (id=1248): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) close(r1) 3.775978325s ago: executing program 4 (id=1249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000640)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000bc0)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffff8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x47}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040074) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x4, 0x1}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000380)={0x6, 0x2}) 3.769476716s ago: executing program 3 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000180)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000001c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000200)=0x184bace9438f14fe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x32600) getpeername$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$ppp(r3, &(0x7f0000000300)='rI', 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x3a000000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}}, 0x0) 3.733042974s ago: executing program 2 (id=1251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x3, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x54}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) sendto(r1, 0x0, 0x18, 0x1002, 0x0, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x14, 0x17, 0x1, 0x70bd2a, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f0000000640)) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x1c, r5, 0x1}, 0x1c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xe, 0x5, 0x8, 0x8000, 0x20228, r0, 0x0, '\x00', 0x0, r8, 0x3, 0x2, 0x3}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r10 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xd7308675dd0a0c24}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async, rerun: 64) r12 = socket(0x2000000015, 0x80005, 0x0) (rerun: 64) ioctl$SIOCSIFMTU(r12, 0x8943, &(0x7f0000000600)={'vcan0\x00', 0x57e3}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x3}, {}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400d0}, 0x40004) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{}, {0x0, 0x2, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r13) 3.703556664s ago: executing program 1 (id=1252): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_MTU={0x8, 0x4, 0x180}]}, 0x4c}}, 0x8000) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_MTU={0x8, 0x4, 0x180}]}, 0x4c}}, 0x8000) (async) 3.491948742s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0xc080) 3.465101223s ago: executing program 1 (id=1254): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000000), 0x120) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="83", 0x1}], 0x1}, 0x4000840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300000700"], 0x0, 0x51}, 0x28) 3.427126044s ago: executing program 3 (id=1255): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r1, &(0x7f0000000940)="35d749a95740562105389058ef042770e9ada6782f59e6143b02795068fe305e7a4c655057760fdea58ff881e4f77dc73b737914539a56033b780bde76565751dca0e954e8efddd2ab8e1f0ef18c3d8119f31281938540282be63926befff028cbc193f37595abff995a559aeccf28d17956b6a5f1630fed5241a02ca4a3b3a0b653789243", 0x85, 0x1, &(0x7f0000000a00), 0x12) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff5e, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x70, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r9, 0x894c, &(0x7f00000001c0)=0x45f7f02f) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002ebd7000fedbdf251200000008000300", @ANYRES32=r13, @ANYBLOB="0a00060008021100000000000800a400010000000600120006000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) 3.312321882s ago: executing program 4 (id=1256): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2b, 0x80801, 0x1) listen(r1, 0x7) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004640)=[{{&(0x7f0000001e80)={0xa, 0x4e21, 0x5, @mcast1, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f00000021c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}], 0x1, 0x20000000) 3.312105465s ago: executing program 0 (id=1257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000005018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000150000008c000080bf9800000000000056080000000000008500000094000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.25606329s ago: executing program 1 (id=1258): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x80, 0x700, 0x8, 0x6, {{0x21, 0x4, 0x0, 0x3, 0x84, 0x67, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @loopback, {[@lsrr={0x83, 0x1f, 0x9c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0x10}, @lsrr={0x83, 0x1b, 0x71, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010100, @multicast2, @empty, @private=0xa010102]}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x2, 0x11, "26509ba8468be1de7b656fb195899f"}, {0x7, 0x3, "f9"}, {0x0, 0x7, 'Z\a$ul'}]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@cgroup, 0x16, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ec"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 3.180460057s ago: executing program 4 (id=1259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2f, 0x9, 0x30bd28, 0x0, {0x4}, [@typed={0x5, 0x11, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x10) (async) r1 = socket(0x2a, 0x3, 0x3) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x10c, r3, 0x1, 0x0, 0x3, {0x22}, [{@pci, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000000000081}, {0xc, 0x90, 0xfffffffffffffffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xd}, {0xc, 0x90, 0x6}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffff5}, {0xc, 0x90, 0x1004}}, {@pci={{0xfffffffffffffe59}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x42f}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0xfc, 0xf, 0x3, 0x12, @mcast1, @remote, 0x80, 0x80, 0xf, 0x5}}) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=@polexpire={0x104, 0x1b, 0x200, 0x70bd26, 0x25dfdbfb, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x2, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x2f, r5, r6}, {0x7, 0x0, 0x80000001, 0x6b7, 0x8, 0xfffffffffffff800, 0x1, 0xc323}, {0x6dd, 0x100, 0x3, 0x1}, 0x6d, 0x6e6bb5, 0x2, 0x1, 0x0, 0x2}, 0x80}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3505, 0x1, 0x2, 0x8, 0x401, 0x8, 0xab}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000900)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000a00)=0xe8) (async, rerun: 32) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r9, 0x1, 0x800000000f, &(0x7f0000000240)=0x7, 0x4) listen(r9, 0x3) (async) sendmsg$nl_generic(r0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x23c, 0x1b, 0x400, 0x70bd27, 0x25dfdbfc, {0x4}, [@nested={0x103, 0x5b, 0x0, 0x1, [@generic="929164719eaecd5a3a981b7ecd9693974274168631db73fd46a06cd1cdc016e658fdb5330e372441d8a309a2528dfde15d06748b583a17bf997bce4d4d2059c33aa77f2521067f29af59323ecdb5fbcae380d3f4bb0ab02d05fb09b99078d60d624d9e127f598dd6c15726ec6065924275d42f0005ca14796e900a4fc0942125a8190221d8c40a3b432dbf7e4e7f362aabb17a327cc82d94288557e88509afaf9c10996f9e2b6288c2d6a0c73bc488e96a8e342b2045cb0bf760baa7d5db99d80a6becb627c50a304eaeb851b544d372bb9691f7fd1a8a498add2b4c707b985b0dce7eb10c126783a792c8d5e9d8b5", @typed={0x8, 0xa9, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r7}]}, @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@remote}, @nested={0xe4, 0x72, 0x0, 0x1, [@typed={0xc, 0xd5, 0x0, 0x0, @str='devlink\x00'}, @nested={0x4, 0x3b}, @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@private2}, @generic="0063001225d9b1ec9c6d7dc2be628c0ece491f524663b2829d2bbea655b6293bf5c37c84e696c9f90d89d0322da9499d61edcb006e54ec16d3c6c10c49111853c70f79ca2983a5aa95e731e0aaa617df4fe1664c73c3778ae748b440d20ee1bc9b6bbd5cda43152bc87b980b71f07ee194d27cf6bb3c8142b1c0c8746c540c82368512f8d0655edb86ab7440be7be4ed0869f5b6fb5677573f322b7f0969ad31", @typed={0xc, 0x162, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0xb2}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x4}]}, @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x850}, @typed={0x8, 0xd5, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x5, 0xc, 0x0, 0x0, @str='\x00'}, @generic="d479df24febce3e6774efa908f8d87c4"]}, 0x23c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) 3.095809073s ago: executing program 1 (id=1260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000580)="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", 0x1000}, 0x1, 0x0, 0x0, 0x4004004}, 0x810) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), 0x3, r3}, 0x38) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001600)={'bond0\x00', &(0x7f0000001640)=@ethtool_sfeatures={0x1c}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x134, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xc7f77315272df669}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x5, 0x0, 0x7, 0x2, 0x3ff, 0x29f, 0x5}}, {0xe, 0x2, [0x8, 0x9, 0xa286, 0x401, 0x8]}}, {{0x1c, 0x1, {0x8, 0xe2, 0x2d08, 0xffff, 0x0, 0x9, 0x4, 0x2}}, {0x8, 0x2, [0x8000, 0x9]}}, {{0x1c, 0x1, {0x4, 0x4, 0x5, 0x2f28, 0x0, 0x5, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x134}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020216925000000000000f8207b1a00fe00000000bfa100000000000047010000f8ffffffb702000008000000b7030000000000008500000006000000851000e4a19f1ba579706cfb46ac497b5400010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8006}, 0x94) 3.092352746s ago: executing program 0 (id=1261): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0xc}}, @rights={{0xc}}], 0x18}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000240), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000000280), 0x3fffffffffffce3, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) sendmsg$nl_route(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c3128230000001500010000004700000000ec02", @ANYRES32=r3, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x24000010) 3.090372981s ago: executing program 2 (id=1262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001080)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x4, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000010c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x278) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 171.191761ms ago: executing program 4 (id=1263): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 142.321075ms ago: executing program 2 (id=1264): r0 = socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r10, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x41) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r10, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x41) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="ab", 0x1}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r12}}}], 0x20}, 0x20040001) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="ab", 0x1}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r12}}}], 0x20}, 0x20040001) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000880)) close(r5) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000680)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4a, r4}) (async) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000680)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4a, r4}) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080) socket$inet_smc(0x2b, 0x1, 0x0) (async) r13 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r13, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e22, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x4796, 0x0, 0x1, 0x8, 0x40}) 0s ago: executing program 3 (id=1265): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_BASE={0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 64.694462][ T5601] cgroup: Unknown subsys name 'net' [ 64.795200][ T5601] cgroup: Unknown subsys name 'cpuset' [ 64.797767][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.149695][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.702031][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.710267][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.710973][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.711927][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.719697][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.763535][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.766056][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.766604][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.767440][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.768263][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.823233][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.824822][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.825427][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.828347][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.830550][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.841084][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.863315][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.868274][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.889676][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.890658][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.931414][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.939768][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.940256][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.941359][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.941940][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.681433][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.691653][ T5620] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.701942][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.707199][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.721202][ T5616] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.742903][ T5623] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.954044][ T5629] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.067344][ T5612] infiniband rxe0: set active [ 71.070402][ T5612] infiniband rxe0: added rxe_eth0 [ 71.093261][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.101831][ T5612] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 71.101860][ T5612] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 71.101892][ T5612] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 71.186756][ T5612] RDS/IB: rxe0: added [ 71.187058][ T5612] smc: adding ib device rxe0 with port count 1 [ 71.187138][ T5612] smc: ib device rxe0 port 1 has no pnetid [ 71.241685][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.264160][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.328505][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.328794][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.605342][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.803236][ T5614] Bluetooth: hci1: command tx timeout [ 71.803722][ T5614] Bluetooth: hci0: command tx timeout [ 71.882305][ T52] Bluetooth: hci2: command tx timeout [ 71.897585][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.898122][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.898226][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.898358][ T5620] bridge_slave_0: entered allmulticast mode [ 71.903586][ T5620] bridge_slave_0: entered promiscuous mode [ 71.910062][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.910201][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.910313][ T5616] bridge_slave_0: entered allmulticast mode [ 71.920941][ T5616] bridge_slave_0: entered promiscuous mode [ 71.962754][ T52] Bluetooth: hci3: command tx timeout [ 71.963360][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.963461][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.963611][ T5620] bridge_slave_1: entered allmulticast mode [ 71.966386][ T5620] bridge_slave_1: entered promiscuous mode [ 71.967871][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.967971][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.968091][ T5616] bridge_slave_1: entered allmulticast mode [ 71.970124][ T5616] bridge_slave_1: entered promiscuous mode [ 72.042368][ T52] Bluetooth: hci4: command tx timeout [ 72.108600][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.108953][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.109080][ T5623] bridge_slave_0: entered allmulticast mode [ 72.111262][ T5623] bridge_slave_0: entered promiscuous mode [ 72.144041][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.147883][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.157012][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.157122][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.157547][ T5623] bridge_slave_1: entered allmulticast mode [ 72.159403][ T5623] bridge_slave_1: entered promiscuous mode [ 72.164386][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.166803][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.294690][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.294910][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.295045][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.295440][ T5629] bridge_slave_0: entered allmulticast mode [ 72.298327][ T5629] bridge_slave_0: entered promiscuous mode [ 72.336065][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.342931][ T5620] team0: Port device team_slave_0 added [ 72.346475][ T5616] team0: Port device team_slave_0 added [ 72.347087][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.347179][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.347292][ T5629] bridge_slave_1: entered allmulticast mode [ 72.350814][ T5629] bridge_slave_1: entered promiscuous mode [ 72.386201][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.408418][ T5620] team0: Port device team_slave_1 added [ 72.410669][ T5616] team0: Port device team_slave_1 added [ 72.446787][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.515817][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.515833][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.515853][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.521804][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.537749][ T5623] team0: Port device team_slave_0 added [ 72.539460][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.539471][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.539491][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.543117][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.543129][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.543149][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.544170][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.544181][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.544201][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.573124][ T5623] team0: Port device team_slave_1 added [ 72.601830][ T5629] team0: Port device team_slave_0 added [ 72.637838][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.637852][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.637873][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.648520][ T5629] team0: Port device team_slave_1 added [ 72.700641][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.700656][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.700677][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.731224][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.731239][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.731259][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.783746][ T5616] hsr_slave_0: entered promiscuous mode [ 72.784841][ T5616] hsr_slave_1: entered promiscuous mode [ 72.809594][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.809610][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.809630][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.840149][ T5620] hsr_slave_0: entered promiscuous mode [ 72.841355][ T5620] hsr_slave_1: entered promiscuous mode [ 72.842087][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 72.842153][ T5620] Cannot create hsr debugfs directory [ 72.912770][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.996863][ T5623] hsr_slave_0: entered promiscuous mode [ 72.997969][ T5623] hsr_slave_1: entered promiscuous mode [ 72.998698][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 72.998715][ T5623] Cannot create hsr debugfs directory [ 73.030995][ T5629] hsr_slave_0: entered promiscuous mode [ 73.032061][ T5629] hsr_slave_1: entered promiscuous mode [ 73.033303][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 73.033321][ T5629] Cannot create hsr debugfs directory [ 73.550978][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.567912][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.569078][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.588736][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.590801][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.609366][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.616691][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.632161][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.756996][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.757082][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.757184][ T5612] bridge_slave_0: entered allmulticast mode [ 73.758247][ T5612] bridge_slave_0: entered promiscuous mode [ 73.776961][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.777058][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.777186][ T5612] bridge_slave_1: entered allmulticast mode [ 73.781462][ T5612] bridge_slave_1: entered promiscuous mode [ 73.816557][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.820295][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.834879][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.841034][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.860809][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.863723][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.873438][ T5612] team0: Port device team_slave_0 added [ 73.882453][ T52] Bluetooth: hci0: command tx timeout [ 73.882480][ T52] Bluetooth: hci1: command tx timeout [ 73.891116][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.897641][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.907574][ T5612] team0: Port device team_slave_1 added [ 73.920136][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.931218][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.957911][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.957928][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.957947][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.962983][ T5614] Bluetooth: hci2: command tx timeout [ 73.983827][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.983842][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.983862][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.047588][ T5614] Bluetooth: hci3: command tx timeout [ 74.075215][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.078222][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.078714][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.080984][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.113519][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.116889][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.117407][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.119829][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.122335][ T5614] Bluetooth: hci4: command tx timeout [ 74.138887][ T5612] hsr_slave_0: entered promiscuous mode [ 74.139943][ T5612] hsr_slave_1: entered promiscuous mode [ 74.140627][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 74.140644][ T5612] Cannot create hsr debugfs directory [ 74.331448][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.336396][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.347495][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.360389][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.367035][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.386777][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.390706][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.416631][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.420199][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.445295][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.486632][ T1502] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.486743][ T1502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.549616][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.549717][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.550342][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.556664][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.594397][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.597090][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.612644][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.621572][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.636577][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.639666][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.657430][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.725365][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.731339][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.766776][ T1502] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.766838][ T1502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.780599][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.795576][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.795640][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.856671][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.881025][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.903058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.903161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.921156][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.921304][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.936498][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.936594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.966019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.966120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.122128][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.209198][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.264694][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.264843][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.308415][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.308521][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.740188][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.942706][ T5616] veth0_vlan: entered promiscuous mode [ 75.960087][ T5616] veth1_vlan: entered promiscuous mode [ 75.968800][ T5614] Bluetooth: hci1: command tx timeout [ 75.968830][ T5614] Bluetooth: hci0: command tx timeout [ 76.046550][ T52] Bluetooth: hci2: command tx timeout [ 76.119812][ T5616] veth0_macvtap: entered promiscuous mode [ 76.122836][ T52] Bluetooth: hci3: command tx timeout [ 76.148001][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.158885][ T5616] veth1_macvtap: entered promiscuous mode [ 76.203474][ T52] Bluetooth: hci4: command tx timeout [ 76.245930][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.276006][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.369832][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.374909][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.492713][ T2997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.492873][ T2997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.492909][ T2997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.492941][ T2997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.621241][ T5623] veth0_vlan: entered promiscuous mode [ 76.665628][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.665649][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.700942][ T5623] veth1_vlan: entered promiscuous mode [ 76.734454][ T5629] veth0_vlan: entered promiscuous mode [ 76.740975][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.787645][ T1502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.787664][ T1502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.788879][ T5629] veth1_vlan: entered promiscuous mode [ 76.889371][ T5623] veth0_macvtap: entered promiscuous mode [ 76.895806][ T5612] veth0_vlan: entered promiscuous mode [ 76.908262][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.918081][ T5623] veth1_macvtap: entered promiscuous mode [ 76.948583][ T5629] veth0_macvtap: entered promiscuous mode [ 76.955749][ T5620] veth0_vlan: entered promiscuous mode [ 76.968600][ T5612] veth1_vlan: entered promiscuous mode [ 76.981416][ T5629] veth1_macvtap: entered promiscuous mode [ 77.012693][ T5620] veth1_vlan: entered promiscuous mode [ 77.038801][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.068154][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.084718][ T5612] veth0_macvtap: entered promiscuous mode [ 77.089655][ T5612] veth1_macvtap: entered promiscuous mode [ 77.104072][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.122691][ T199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.124193][ T199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.124814][ T199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.147980][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.152579][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.166044][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.215146][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.249581][ T5620] veth0_macvtap: entered promiscuous mode [ 77.264966][ T199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.283477][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.283495][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.284623][ T5620] veth1_macvtap: entered promiscuous mode [ 77.326443][ T199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326641][ T1502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326678][ T1502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326711][ T1502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326741][ T1502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326773][ T1502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326804][ T1502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.439460][ T1502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.439477][ T1502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.443215][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.487529][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.513964][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.513981][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.585058][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.585079][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.634918][ T5812] netlink: 'syz.1.2': attribute type 11 has an invalid length. [ 77.644178][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.644440][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.655770][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.657929][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.657945][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.735282][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.735300][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.830482][ T1502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.830503][ T1502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.863226][ T1013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.917929][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.917949][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.042837][ T5614] Bluetooth: hci1: command tx timeout [ 78.042885][ T52] Bluetooth: hci0: command tx timeout [ 78.118617][ T5824] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 78.122849][ T52] Bluetooth: hci2: command tx timeout [ 78.130003][ T5824] bond1 (unregistering): Released all slaves [ 78.205689][ T5831] ip_tables: iptables: counters copy to user failed while replacing table [ 78.212463][ T52] Bluetooth: hci3: command tx timeout [ 78.225951][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 78.238762][ T5831] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 78.283164][ T52] Bluetooth: hci4: command tx timeout [ 78.400831][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.400949][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.469799][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.570333][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.706445][ T5868] Zero length message leads to an empty skb [ 78.712837][ T5872] ip_tables: iptables: counters copy to user failed while replacing table [ 78.898598][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 78.978052][ T5880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.978069][ T5880] IPv6: NLM_F_CREATE should be set when creating new route [ 78.980459][ T5880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.283905][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.284173][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.284407][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.325191][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.328768][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.328978][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 79.961558][ T5926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.011054][ T5933] Bluetooth: MGMT ver 1.23 [ 80.036658][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.068561][ T5926] bond1: (slave bond0): making interface the new active one [ 80.085092][ T5926] bond1: (slave bond0): Enslaving as an active interface with an up link [ 80.743388][ T5975] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 80.785687][ T5975] netlink: 'syz.2.47': attribute type 10 has an invalid length. [ 80.785851][ T5975] dummy0: entered promiscuous mode [ 80.868048][ T5981] netlink: 'syz.0.50': attribute type 29 has an invalid length. [ 80.961950][ T5985] pim6reg: entered allmulticast mode [ 80.976875][ T5986] veth1_to_hsr: entered allmulticast mode [ 80.980352][ T5983] veth1_to_hsr: left allmulticast mode [ 81.540239][ T6030] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.548478][ T6033] atomic_op ffff8880687329e0 conn xmit_atomic 0000000000000000 [ 81.574902][ T5704] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.174362][ T6059] xt_hashlimit: size too large, truncated to 1048576 [ 82.746330][ T6096] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 82.849940][ T6101] netlink: 'syz.2.89': attribute type 9 has an invalid length. [ 83.225186][ T6126] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.516674][ T6146] ip_tables: iptables: counters copy to user failed while replacing table [ 83.517409][ T6147] ip_tables: iptables: counters copy to user failed while replacing table [ 83.658731][ T6148] __nla_validate_parse: 77 callbacks suppressed [ 83.658749][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 83.658770][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 83.787352][ T6153] netlink: 64 bytes leftover after parsing attributes in process `syz.0.100'. [ 83.830876][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'. [ 83.947344][ T6172] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.105'. [ 84.014855][ T6153] syzkaller1: entered promiscuous mode [ 84.014876][ T6153] syzkaller1: entered allmulticast mode [ 84.033131][ T6175] tc action pedit offset must be on 32 bit boundaries [ 84.340664][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 84.357181][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 84.469421][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 84.560297][ T6203] syzkaller0: entered promiscuous mode [ 84.560319][ T6203] syzkaller0: entered allmulticast mode [ 84.657834][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 84.730295][ T6214] xt_TCPMSS: Only works on TCP SYN packets [ 84.871235][ T6231] netlink: 81 bytes leftover after parsing attributes in process `syz.0.123'. [ 85.117312][ T6241] veth3: entered allmulticast mode [ 85.240199][ T6258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.278881][ T6259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.484630][ T6275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.698923][ T6293] openvswitch: netlink: Flow actions attr not present in new flow. [ 85.726379][ T6297] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 85.847509][ T6303] ipt_REJECT: TCP_RESET invalid for non-tcp [ 85.876932][ T6305] netlink: 'syz.3.148': attribute type 2 has an invalid length. [ 85.986837][ T6311] netlink: 'syz.1.152': attribute type 5 has an invalid length. [ 86.694505][ T978] cfg80211: failed to load regulatory.db [ 86.773747][ T6357] x_tables: duplicate underflow at hook 3 [ 86.985182][ T6373] bond2: option lp_interval: invalid value (0) [ 86.985205][ T6373] bond2: option lp_interval: allowed values 1 - 2147483647 [ 86.986824][ T6373] bond2 (unregistering): Released all slaves [ 87.028070][ T6377] netlink: 'syz.3.171': attribute type 3 has an invalid length. [ 87.028975][ T6377] netlink: 'syz.3.171': attribute type 3 has an invalid length. [ 87.435290][ T6417] netlink: 'syz.2.182': attribute type 12 has an invalid length. [ 87.500677][ T6417] bond2: option primary_reselect: invalid value (255) [ 87.508312][ T6417] bond2 (unregistering): Released all slaves [ 87.737626][ T6443] warning: `syz.1.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.215969][ T6396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.362532][ T6460] __nla_validate_parse: 21 callbacks suppressed [ 90.362553][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.401169][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.403336][ T1502] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.406479][ T1502] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.414571][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.415226][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.419661][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.420214][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.420736][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.423924][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.424881][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.427204][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 90.432448][ T1217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.480175][ T6457] syzkaller0: entered promiscuous mode [ 90.480195][ T6457] syzkaller0: entered allmulticast mode [ 90.529543][ T6459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.624220][ T1217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.726204][ T6469] can: request_module (can-proto-0) failed. [ 90.801680][ T6483] tipc: Started in network mode [ 90.801709][ T6483] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 90.818477][ T6483] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 90.819050][ T6483] tipc: Enabled bearer , priority 10 [ 91.224313][ T6510] team0: Device gtp0 is up. Set it down before adding it as a team port [ 91.257036][ T6515] 8021q: VLANs not supported on lo [ 91.273427][ T6515] gretap1: entered promiscuous mode [ 91.273446][ T6515] gretap1: entered allmulticast mode [ 91.355238][ T6518] 8021q: VLANs not supported on lo [ 91.413268][ T1217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.419068][ T6523] netlink: 'syz.2.210': attribute type 11 has an invalid length. [ 91.559202][ T6528] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 92.729172][ T30] tipc: Node number set to 1 [ 92.741216][ T6525] netlink: 'syz.2.210': attribute type 11 has an invalid length. [ 92.765761][ T6517] tipc: Enabled bearer , priority 11 [ 92.941950][ T6539] sit0: entered promiscuous mode [ 92.957347][ T6539] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 93.221719][ T6561] netlink: 'syz.3.221': attribute type 62 has an invalid length. [ 93.291134][ T6562] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 93.295179][ T6562] team0: Device ipvlan2 is already an upper device of the team interface [ 93.669554][ T6596] Unsupported ieee802154 address type: 0 [ 94.602702][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.303805][ T6568] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.414837][ T43] IPVS: starting estimator thread 0... [ 96.447200][ T6581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.502344][ T6611] IPVS: using max 39 ests per chain, 93600 per kthread [ 96.528000][ T6620] __nla_validate_parse: 67 callbacks suppressed [ 96.528018][ T6620] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.227'. [ 96.532088][ T6615] ip_tables: iptables: counters copy to user failed while replacing table [ 96.594894][ T6608] syzkaller1: entered promiscuous mode [ 96.594915][ T6608] syzkaller1: entered allmulticast mode [ 96.827483][ T6629] geneve2: entered promiscuous mode [ 96.953542][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 97.420036][ T6666] syzkaller0: entered promiscuous mode [ 97.420057][ T6666] syzkaller0: entered allmulticast mode [ 97.432494][ T6674] ip_tables: iptables: counters copy to user failed while replacing table [ 97.438107][ T6674] raw_sendmsg: syz.2.246 forgot to set AF_INET. Fix it! [ 97.572465][ T6681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.573008][ T6682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.645193][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.251'. [ 97.799372][ T6698] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 97.799394][ T6698] netlink: 'syz.0.255': attribute type 2 has an invalid length. [ 97.800874][ T6698] openvswitch: netlink: Message has 1 unknown bytes. [ 98.044187][ T6709] syzkaller1: entered allmulticast mode [ 98.221307][ T6726] lo: entered promiscuous mode [ 98.235906][ T6727] lo: left promiscuous mode [ 98.301519][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 98.378936][ T6736] netlink: 52 bytes leftover after parsing attributes in process `syz.3.265'. [ 98.401146][ T2997] IPVS: starting estimator thread 0... [ 98.417264][ T6738] netlink: 'syz.4.266': attribute type 1 has an invalid length. [ 98.482055][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.492569][ T6741] IPVS: using max 32 ests per chain, 76800 per kthread [ 98.497929][ T6750] netlink: 128 bytes leftover after parsing attributes in process `syz.1.269'. [ 98.532694][ T6745] bond1: (slave geneve3): making interface the new active one [ 98.539539][ T6745] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 98.670253][ T6755] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 98.903506][ T6773] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 98.905782][ T6773] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 98.967345][ T6778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.277'. [ 99.034748][ T6780] netlink: 'syz.3.279': attribute type 4 has an invalid length. [ 99.063962][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 100.721785][ T6806] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 100.919731][ T6832] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 100.919746][ T6832] netlink: 'syz.4.291': attribute type 2 has an invalid length. [ 100.944717][ T6837] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 100.944730][ T6837] netlink: 'syz.4.291': attribute type 2 has an invalid length. [ 101.089094][ T6853] tipc: Resetting bearer [ 101.107703][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 101.239957][ T6861] openvswitch: netlink: IPv4 tun info is not correct [ 101.339026][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 101.547885][ T6878] ip6t_rt: unknown flags 36 [ 101.549664][ T6878] __nla_validate_parse: 1 callbacks suppressed [ 101.549675][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 101.549688][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 101.549699][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 101.662851][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 101.683646][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 102.079122][ T6907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.316'. [ 102.097618][ T6907] netlink: 140 bytes leftover after parsing attributes in process `syz.1.316'. [ 102.115740][ T6913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.316'. [ 102.121579][ T6912] netlink: 140 bytes leftover after parsing attributes in process `syz.1.316'. [ 102.287706][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.320'. [ 103.069799][ T6962] syzkaller0: entered promiscuous mode [ 103.069816][ T6962] syzkaller0: entered allmulticast mode [ 103.327480][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.659109][ T6988] syzkaller1: entered promiscuous mode [ 104.659124][ T6988] syzkaller1: entered allmulticast mode [ 104.767931][ T6996] pim6reg1: entered promiscuous mode [ 104.767952][ T6996] pim6reg1: entered allmulticast mode [ 104.871654][ T7005] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.011309][ T7017] tipc: Enabling of bearer rejected, failed to enable media [ 105.230689][ T7035] pim6reg527: entered allmulticast mode [ 105.424056][ T7046] pimreg3: entered allmulticast mode [ 105.486955][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 105.487019][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 105.489034][ T52] Bluetooth: hci2: hardware error 0x00 [ 105.536667][ T7059] netlink: 'syz.0.354': attribute type 11 has an invalid length. [ 105.536687][ T7059] netlink: 'syz.0.354': attribute type 11 has an invalid length. [ 105.968556][ T7083] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 106.107877][ T7093] xt_policy: neither incoming nor outgoing policy selected [ 106.169304][ T7096] batman_adv: batadv0: Adding interface: syzkaller0 [ 106.169321][ T7096] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.169344][ T7096] batman_adv: batadv0: Interface activated: syzkaller0 [ 106.322658][ T7104] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 106.637953][ T7094] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 106.753926][ T7094] batman_adv: batadv0: Removing interface: syzkaller0 [ 107.495756][ T7162] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.562426][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 107.564188][ T7168] netlink: 'syz.1.387': attribute type 12 has an invalid length. [ 107.564204][ T7168] netlink: 'syz.1.387': attribute type 29 has an invalid length. [ 107.564214][ T7168] __nla_validate_parse: 10 callbacks suppressed [ 107.564225][ T7168] netlink: 148 bytes leftover after parsing attributes in process `syz.1.387'. [ 107.564252][ T7168] netlink: 59 bytes leftover after parsing attributes in process `syz.1.387'. [ 107.753587][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'. [ 108.259575][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 108.260413][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 108.260611][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 108.260792][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 108.260995][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 108.332391][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 108.333101][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 108.531993][ T7224] netlink: 'syz.2.406': attribute type 4 has an invalid length. [ 108.682054][ T7236] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 108.720744][ T7236] bond2: entered promiscuous mode [ 108.721053][ T7236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.942102][ T7250] ip_tables: iptables: counters copy to user failed while replacing table [ 108.943436][ T7249] ip_tables: iptables: counters copy to user failed while replacing table [ 109.129018][ T7260] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 109.237087][ T7265] ip_tables: iptables: counters copy to user failed while replacing table [ 109.270826][ T7266] netlink: 'syz.0.414': attribute type 6 has an invalid length. [ 109.319050][ T7266] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 109.319227][ T7266] xt_SECMARK: invalid mode: 9 [ 109.437069][ T7278] openvswitch: netlink: Key type 8450 is out of range max 32 [ 109.450578][ T7279] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 109.771472][ T5279] veth1_vlan: left promiscuous mode [ 109.956596][ T7298] syzkaller0: entered promiscuous mode [ 109.956613][ T7298] syzkaller0: entered allmulticast mode [ 109.986397][ T7307] team0 (unregistering): Port device team_slave_0 removed [ 109.995456][ T7307] team0 (unregistering): Port device team_slave_1 removed [ 110.094616][ T7322] net_ratelimit: 1 callbacks suppressed [ 110.094637][ T7322] netlink: Unknown nat attribute (0) [ 110.094659][ T7322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.168891][ T7326] netlink: 'syz.3.428': attribute type 7 has an invalid length. [ 110.229902][ T7329] netlink: 'syz.3.428': attribute type 7 has an invalid length. [ 111.340818][ T7332] pim6reg: entered allmulticast mode [ 111.340930][ T7333] veth1_to_hsr: entered allmulticast mode [ 111.375587][ T7334] pim6reg: left allmulticast mode [ 111.375701][ T7334] veth1_to_hsr: left allmulticast mode [ 111.602543][ T7348] netlink: 'syz.0.432': attribute type 8 has an invalid length. [ 111.643097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.676320][ T7348] gtp1: entered promiscuous mode [ 111.676344][ T7348] gtp1: entered allmulticast mode [ 111.984459][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.046704][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.085008][ T1502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.086949][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.179181][ T7408] netlink: 'syz.3.443': attribute type 8 has an invalid length. [ 113.179203][ T7408] __nla_validate_parse: 65 callbacks suppressed [ 113.179214][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 113.181260][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.182701][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.237086][ T7459] netlink: 'syz.4.453': attribute type 6 has an invalid length. [ 113.250335][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.562411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.724523][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 113.730489][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 113.772855][ T7489] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 113.773222][ T5745] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 113.809892][ T7491] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 113.809915][ T7491] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 113.830779][ T7494] netlink: 'syz.0.463': attribute type 2 has an invalid length. [ 113.830798][ T7494] netlink: 188 bytes leftover after parsing attributes in process `syz.0.463'. [ 113.921196][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 113.993337][ T7503] netlink: 72 bytes leftover after parsing attributes in process `syz.2.468'. [ 114.122965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.188092][ T7060] udevd[7060]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.406942][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 114.816386][ T7558] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 114.820457][ T7558] bond1 (unregistering): Released all slaves [ 114.849901][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 114.893636][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 114.893664][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 114.918416][ T7556] bridge2: entered promiscuous mode [ 114.918436][ T7556] bridge2: entered allmulticast mode [ 115.163328][ T5885] net_ratelimit: 5 callbacks suppressed [ 115.163344][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.166343][ T7578] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 115.284263][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.306882][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.306929][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.306958][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.323125][ T1502] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.202732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.203072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.205191][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.283143][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.433385][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.242577][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.404849][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.542373][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.899093][ T7592] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.031825][ T7593] netlink: 'syz.3.489': attribute type 49 has an invalid length. [ 118.215668][ T7593] ip6gretap0: entered promiscuous mode [ 118.215692][ T7593] ip6gretap0: entered allmulticast mode [ 118.602603][ T7621] xt_CT: No such helper "snmp_trap" [ 118.808321][ T7621] xt_CT: No such helper "snmp_trap" [ 118.989523][ T7621] xt_CT: No such helper "snmp_trap" [ 119.116971][ T7621] xt_CT: No such helper "snmp_trap" [ 119.255076][ T7664] 8021q: VLANs not supported on xfrm0 [ 119.396787][ T7670] __nla_validate_parse: 6 callbacks suppressed [ 119.396806][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.503'. [ 119.555545][ T7683] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 119.766785][ T7686] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 119.793126][ T7686] bond1 (unregistering): Released all slaves [ 119.970194][ T7690] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 119.999410][ T7690] bond1 (unregistering): Released all slaves [ 120.164330][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 120.364323][ T5736] net_ratelimit: 7 callbacks suppressed [ 120.364340][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.443492][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.602476][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.682552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.682822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.840866][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 120.843844][ T2997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.906786][ T7756] veth2: entered promiscuous mode [ 120.906809][ T7756] veth2: entered allmulticast mode [ 121.038648][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 121.108611][ T7766] xt_hashlimit: size too large, truncated to 1048576 [ 121.127047][ T7767] xt_hashlimit: size too large, truncated to 1048576 [ 121.326596][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.527'. [ 121.403881][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.541925][ T7778] syzkaller0: entered promiscuous mode [ 121.541944][ T7778] syzkaller0: entered allmulticast mode [ 121.605056][ T7777] tipc: Enabled bearer , priority 0 [ 121.611572][ T7776] tipc: Resetting bearer [ 121.654777][ T7776] tipc: Disabling bearer [ 121.798988][ T7799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.535'. [ 121.943426][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.948100][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 121.948120][ T7808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 122.026345][ T7814] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.538'. [ 122.026837][ T7814] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.538'. [ 122.275273][ T7825] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 122.345834][ T7825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.347837][ T7833] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 122.433381][ T7836] bond2: (slave veth3): Enslaving as an active interface with a down link [ 122.433461][ T7834] netlink: 'syz.3.542': attribute type 12 has an invalid length. [ 122.433476][ T7834] netlink: 'syz.3.542': attribute type 29 has an invalid length. [ 122.433699][ T7834] netlink: 'syz.3.542': attribute type 12 has an invalid length. [ 122.433712][ T7834] netlink: 'syz.3.542': attribute type 29 has an invalid length. [ 122.433933][ T7834] netlink: 'syz.3.542': attribute type 12 has an invalid length. [ 122.433945][ T7834] netlink: 'syz.3.542': attribute type 29 has an invalid length. [ 122.434128][ T7834] netlink: 'syz.3.542': attribute type 12 has an invalid length. [ 122.434139][ T7834] netlink: 'syz.3.542': attribute type 29 has an invalid length. [ 122.435057][ T7825] veth0_virt_wifi: entered promiscuous mode [ 122.461880][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.524377][ T7825] bond2: (slave veth0_virt_wifi): making interface the new active one [ 122.549673][ T7825] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 122.564561][ T7845] lo: entered promiscuous mode [ 122.586858][ T7845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.047778][ T7860] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 123.364260][ T7889] ip_tables: iptables: counters copy to user failed while replacing table [ 123.481481][ T7896] xt_TCPMSS: Only works on TCP SYN packets [ 123.498016][ T7898] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 123.589461][ T7896] tipc: Started in network mode [ 123.589481][ T7896] tipc: Node identity 4, cluster identity 4711 [ 123.589491][ T7896] tipc: Node number set to 4 [ 123.634568][ T7903] syzkaller1: entered promiscuous mode [ 123.634588][ T7903] syzkaller1: entered allmulticast mode [ 123.806851][ T7902] syzkaller1: left promiscuous mode [ 123.806872][ T7902] syzkaller1: left allmulticast mode [ 124.590577][ T7973] erspan0: entered promiscuous mode [ 124.611009][ T7973] vlan2: entered promiscuous mode [ 124.741312][ T7985] vlan2: entered promiscuous mode [ 124.801537][ T8000] __nla_validate_parse: 38 callbacks suppressed [ 124.801556][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.575'. [ 124.801583][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.575'. [ 124.821015][ T199] IPVS: starting estimator thread 0... [ 124.902996][ T8001] IPVS: using max 29 ests per chain, 69600 per kthread [ 125.117351][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 125.140177][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.170124][ T8009] atomic_op ffff88802b7b01e0 conn xmit_atomic 0000000000000000 [ 125.195983][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.581'. [ 125.196017][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.581'. [ 125.258410][ T71] IPVS: starting estimator thread 0... [ 125.344004][ T8028] IPVS: using max 31 ests per chain, 74400 per kthread [ 125.433007][ T8027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.581'. [ 125.564050][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.804380][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 125.804402][ T8050] net_ratelimit: 1 callbacks suppressed [ 125.804411][ T8050] openvswitch: netlink: Flow actions attr not present in new flow. [ 125.915945][ T8058] xt_ecn: cannot match TCP bits for non-tcp packets [ 126.164607][ T8072] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 126.205731][ T8072] bond1: entered promiscuous mode [ 126.206102][ T8072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.217253][ T8072] ipvlan3: entered allmulticast mode [ 126.217271][ T8072] bond1: entered allmulticast mode [ 126.217516][ T8072] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.217531][ T8072] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 126.217542][ T8072] bond1: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 126.223452][ T8072] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 126.279144][ T8074] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 126.320954][ T8080] ipvlan3: entered allmulticast mode [ 126.321142][ T8080] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.321157][ T8080] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 126.328339][ T8080] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 126.384471][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 126.387318][ T8060] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 126.387391][ T8060] syzkaller1: Refused to change device type [ 126.413421][ T8086] netlink: 224 bytes leftover after parsing attributes in process `syz.2.594'. [ 126.637525][ T8089] netlink: 52 bytes leftover after parsing attributes in process `syz.0.595'. [ 126.702604][ T71] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.077939][ T8122] veth2: entered promiscuous mode [ 127.080155][ T8134] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 127.082045][ T8122] veth2: entered allmulticast mode [ 127.228722][ T8137] gretap0: entered promiscuous mode [ 127.260112][ T8140] 0{X: renamed from gretap0 [ 127.297124][ T8140] 0{X: left promiscuous mode [ 127.297145][ T8140] 0{X: entered allmulticast mode [ 127.314272][ T8140] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 127.366683][ T8148] validate_nla: 64 callbacks suppressed [ 127.366702][ T8148] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 127.486451][ T8148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.489193][ T8156] bond0: Error: Cannot enslave bond to itself. [ 128.546375][ T8206] ip_tables: iptables: counters copy to user failed while replacing table [ 128.611870][ T8209] 8021q: VLANs not supported on sit0 [ 128.831453][ T8219] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 128.831473][ T8219] netlink: 'syz.3.628': attribute type 8 has an invalid length. [ 129.009618][ T8227] netlink: 'syz.4.630': attribute type 4 has an invalid length. [ 129.224859][ T8070] udevd[8070]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 129.235376][ T8139] udevd[8139]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 129.269385][ T43] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3e [ 129.295958][ T8240] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 129.369866][ T8240] IPVS: sh: FWM 1 0x00000001 - no destination available [ 129.484745][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.631492][ T8267] xt_IDLETIMER: timeout value is zero [ 130.393961][ T8302] __nla_validate_parse: 16 callbacks suppressed [ 130.393980][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 130.522757][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.588683][ T8291] pim6reg1: entered promiscuous mode [ 130.588706][ T8291] pim6reg1: entered allmulticast mode [ 130.675371][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 130.838935][ T8308] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 130.865947][ T8308] bond1 (unregistering): Released all slaves [ 130.934282][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.059849][ T8319] bond1: Removing last arp target with arp_interval on [ 131.563466][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.747681][ T8377] No such timeout policy "syz1" [ 131.765971][ T8374] nbd: must specify a size in bytes for the device [ 131.805102][ T8377] batadv_slave_1: entered promiscuous mode [ 131.808678][ T5885] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 131.987164][ T8376] batadv_slave_1: left promiscuous mode [ 131.988015][ T9] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 132.084300][ T8408] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 132.272663][ T8412] trusted_key: syz.4.677 sent an empty control message without MSG_MORE. [ 132.289614][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.679'. [ 132.605340][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.676877][ T8441] netlink: NAT attribute has 8 unknown bytes [ 132.676914][ T8441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.774354][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836011][ T8453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.056839][ T8465] xt_hashlimit: size too large, truncated to 1048576 [ 133.081765][ T8473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.424325][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.645683][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.791264][ T8507] netlink: 'syz.1.699': attribute type 4 has an invalid length. [ 133.791287][ T8507] netlink: 17 bytes leftover after parsing attributes in process `syz.1.699'. [ 133.908471][ T8507] netlink: 'syz.1.699': attribute type 3 has an invalid length. [ 133.990294][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 134.098525][ T8523] netlink: 80 bytes leftover after parsing attributes in process `syz.3.703'. [ 134.214753][ T8537] FAULT_INJECTION: forcing a failure. [ 134.214753][ T8537] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.214812][ T8537] CPU: 1 UID: 0 PID: 8537 Comm: syz.1.707 Not tainted syzkaller #0 PREEMPT(full) [ 134.214832][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.214850][ T8537] Call Trace: [ 134.214861][ T8537] [ 134.214869][ T8537] dump_stack_lvl+0xe8/0x150 [ 134.214910][ T8537] should_fail_ex+0x410/0x560 [ 134.214940][ T8537] _copy_from_user+0x2d/0xb0 [ 134.214968][ T8537] ___sys_sendmsg+0x1c6/0x360 [ 134.214989][ T8537] ? __lock_acquire+0x747/0x2de0 [ 134.215014][ T8537] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.215069][ T8537] ? __fget_files+0x2a/0x420 [ 134.215086][ T8537] ? __fget_files+0x3a2/0x420 [ 134.215113][ T8537] __x64_sys_sendmsg+0x1b1/0x290 [ 134.215135][ T8537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.215182][ T8537] do_syscall_64+0x166/0x520 [ 134.215203][ T8537] ? trace_irq_disable+0x3b/0x140 [ 134.215223][ T8537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.215242][ T8537] ? clear_bhb_loop+0x70/0xc0 [ 134.215264][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.215282][ T8537] RIP: 0033:0x7f5c13b9e559 [ 134.215305][ T8537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.215324][ T8537] RSP: 002b:00007f5c11df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.215347][ T8537] RAX: ffffffffffffffda RBX: 00007f5c13e25fa0 RCX: 00007f5c13b9e559 [ 134.215360][ T8537] RDX: 0000000024000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 134.215371][ T8537] RBP: 00007f5c11df6090 R08: 0000000000000000 R09: 0000000000000000 [ 134.215382][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.215392][ T8537] R13: 00007f5c13e26038 R14: 00007f5c13e25fa0 R15: 00007ffe8a35dfe8 [ 134.215423][ T8537] [ 134.560091][ T8547] sctp: [Deprecated]: syz.4.710 (pid 8547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.560091][ T8547] Use struct sctp_sack_info instead [ 134.614588][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 134.731644][ T8560] netlink: 84 bytes leftover after parsing attributes in process `syz.1.714'. [ 134.979420][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.716'. [ 135.059551][ T8573] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 135.078902][ T8573] tipc: Enabled bearer , priority 0 [ 135.096910][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 135.255244][ T8586] bond0: entered promiscuous mode [ 135.255265][ T8586] bond_slave_0: entered promiscuous mode [ 135.255473][ T8586] bond_slave_1: entered promiscuous mode [ 135.267673][ T8586] batadv0: entered promiscuous mode [ 135.298742][ T8586] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 135.330170][ T8592] FAULT_INJECTION: forcing a failure. [ 135.330170][ T8592] name failslab, interval 1, probability 0, space 0, times 0 [ 135.330199][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.2.721 Not tainted syzkaller #0 PREEMPT(full) [ 135.330222][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.330232][ T8592] Call Trace: [ 135.330240][ T8592] [ 135.330248][ T8592] dump_stack_lvl+0xe8/0x150 [ 135.330279][ T8592] should_fail_ex+0x410/0x560 [ 135.330309][ T8592] ? __alloc_skb+0x1db/0x7a0 [ 135.330335][ T8592] should_failslab+0xa8/0x100 [ 135.330361][ T8592] ? __alloc_skb+0x1db/0x7a0 [ 135.330386][ T8592] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 135.330406][ T8592] ? __alloc_skb+0x18d/0x7a0 [ 135.330433][ T8592] ? __alloc_skb+0x1db/0x7a0 [ 135.330465][ T8592] __alloc_skb+0x1db/0x7a0 [ 135.330496][ T8592] netlink_sendmsg+0x5d4/0xb40 [ 135.330529][ T8592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.330560][ T8592] ? apparmor_socket_sendmsg+0x18b/0x360 [ 135.330592][ T8592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.330613][ T8592] sock_sendmsg_nosec+0x13a/0x180 [ 135.330641][ T8592] ____sys_sendmsg+0x54e/0x850 [ 135.330667][ T8592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.330696][ T8592] ? import_iovec+0x73/0xa0 [ 135.330726][ T8592] ___sys_sendmsg+0x2a5/0x360 [ 135.330745][ T8592] ? __lock_acquire+0x747/0x2de0 [ 135.330770][ T8592] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.330826][ T8592] ? __fget_files+0x2a/0x420 [ 135.330842][ T8592] ? __fget_files+0x3a2/0x420 [ 135.330869][ T8592] __x64_sys_sendmsg+0x1b1/0x290 [ 135.330892][ T8592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.330934][ T8592] do_syscall_64+0x166/0x520 [ 135.330960][ T8592] ? trace_irq_disable+0x3b/0x140 [ 135.330979][ T8592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.330998][ T8592] ? clear_bhb_loop+0x70/0xc0 [ 135.331021][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.331039][ T8592] RIP: 0033:0x7f26b979e559 [ 135.331056][ T8592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.331068][ T8592] RSP: 002b:00007f26ba594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.331087][ T8592] RAX: ffffffffffffffda RBX: 00007f26b9a25fa0 RCX: 00007f26b979e559 [ 135.331099][ T8592] RDX: 0000000024000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 135.331109][ T8592] RBP: 00007f26ba594090 R08: 0000000000000000 R09: 0000000000000000 [ 135.331119][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.331128][ T8592] R13: 00007f26b9a26038 R14: 00007f26b9a25fa0 R15: 00007ffd2f2ec4e8 [ 135.331158][ T8592] [ 135.642588][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 135.642640][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 135.644045][ T5614] Bluetooth: hci4: hardware error 0x00 [ 135.845409][ T8616] netlink: 'syz.4.727': attribute type 1 has an invalid length. [ 135.846434][ T8616] ksmbd: Unknown IPC event: 6, ignore. [ 136.025979][ T8627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.731'. [ 136.035746][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 136.070250][ T8627] smc: removing ib device rxe0 [ 136.089216][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 136.189425][ T8640] netlink: 60 bytes leftover after parsing attributes in process `syz.0.731'. [ 136.201978][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 136.228353][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 136.404804][ T8627] smbdirect: ib_dev[rxe0] removed [ 136.766025][ T30] net_ratelimit: 4 callbacks suppressed [ 136.766042][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.017406][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.103899][ T8683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.150746][ T8689] tipc: Started in network mode [ 137.150766][ T8689] tipc: Node identity 4, cluster identity 4711 [ 137.150777][ T8689] tipc: Node number set to 4 [ 137.433220][ T8696] x_tables: unsorted entry at hook 1 [ 137.438005][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.748'. [ 137.449966][ T8700] netlink: 80 bytes leftover after parsing attributes in process `syz.2.748'. [ 137.635773][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 137.724652][ T5614] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 137.806500][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.291852][ T8732] syzkaller0: entered promiscuous mode [ 138.291875][ T8732] syzkaller0: entered allmulticast mode [ 138.378334][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 138.844090][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.886055][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.042915][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.158120][ T8773] tipc: Started in network mode [ 140.158144][ T8773] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 140.158377][ T8773] tipc: Enabled bearer , priority 10 [ 140.221735][ T8771] netlink: 'syz.2.768': attribute type 4 has an invalid length. [ 140.257309][ T8778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.259820][ T8779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.301845][ T8781] openvswitch: netlink: Duplicate key (type 6). [ 140.313312][ T8781] netlink: 'syz.1.773': attribute type 12 has an invalid length. [ 140.364597][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.416506][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.421759][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.433076][ T8790] x_tables: duplicate underflow at hook 2 [ 140.478150][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.651063][ T8809] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 140.732471][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.732530][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.732561][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.732589][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.922903][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.163278][ T9] tipc: Node number set to 10070698 [ 141.498607][ T8831] syzkaller0: entered promiscuous mode [ 141.498691][ T8831] syzkaller0: entered allmulticast mode [ 141.513908][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.513949][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.513978][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.514007][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.565688][ T8834] __nla_validate_parse: 9 callbacks suppressed [ 141.565706][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 141.566944][ T8834] x_tables: duplicate entry at hook 4 [ 141.879973][ T8848] syzkaller0: left promiscuous mode [ 141.879995][ T8848] syzkaller0: left allmulticast mode [ 141.963054][ T5736] net_ratelimit: 2 callbacks suppressed [ 141.963071][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.107882][ T8860] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 142.113279][ T8860] bond2 (unregistering): Released all slaves [ 142.158337][ T8868] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 142.173471][ T8868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.174278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.187224][ T8868] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 142.409858][ T31] audit: type=1107 audit(1792278868.323:2): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6bJs?}.nJW8/y)G9p\jQ1h.O}x ,~hJY@hF!&Crɢ#B@}p] WD8D8b8!1 v8H}28Sl_oat z\Yf' [ 142.410801][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.805'. [ 142.410871][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 142.696116][ T8913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.810'. [ 142.825564][ T8901] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 142.913673][ T8919] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 142.913698][ T8919] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 143.010450][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.022365][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.022573][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.199185][ T8929] netlink: 'syz.3.816': attribute type 21 has an invalid length. [ 143.199204][ T8929] netlink: 128 bytes leftover after parsing attributes in process `syz.3.816'. [ 143.199275][ T8929] netlink: 3 bytes leftover after parsing attributes in process `syz.3.816'. [ 143.567065][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 143.820239][ T8961] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.839611][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 143.839639][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 143.933604][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 144.045627][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.238707][ T8992] netlink: 'syz.2.830': attribute type 4 has an invalid length. [ 144.326888][ T9004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.327072][ T9004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.327304][ T9004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.434937][ T9006] geneve2: entered promiscuous mode [ 144.434959][ T9006] geneve2: entered allmulticast mode [ 144.439048][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.472336][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.472376][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.472406][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 144.686522][ T9021] ip6t_hbh: unknown flags 38 [ 144.878427][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.878691][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.939830][ T9041] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 145.046997][ T9041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.050391][ T9041] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 145.232567][ T9056] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 145.232593][ T9056] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 145.351475][ T9065] Illegal XDP return value 4294967274 on prog (id 332) dev N/A, expect packet loss! [ 145.488042][ T9072] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 145.851693][ T9093] tun0: tun_chr_ioctl cmd 1074025675 [ 145.851714][ T9093] tun0: persist disabled [ 145.935586][ T5614] Bluetooth: hci1: connection err: -111 [ 146.389621][ T9132] x_tables: duplicate underflow at hook 2 [ 146.447269][ T9141] syzkaller0: entered promiscuous mode [ 146.447291][ T9141] syzkaller0: entered allmulticast mode [ 147.165270][ T30] net_ratelimit: 25 callbacks suppressed [ 147.165292][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.410208][ T9157] sctp: [Deprecated]: syz.3.881 (pid 9157) Use of int in maxseg socket option. [ 147.410208][ T9157] Use struct sctp_assoc_value instead [ 147.639427][ T9178] __nla_validate_parse: 16 callbacks suppressed [ 147.639447][ T9178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'. [ 147.645053][ T9159] netlink: 'syz.1.879': attribute type 4 has an invalid length. [ 147.721285][ T9189] ip_tables: iptables: counters copy to user failed while replacing table [ 147.859665][ T9189] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 147.926217][ T9202] hsr0: entered allmulticast mode [ 147.926239][ T9202] hsr_slave_0: entered allmulticast mode [ 147.926254][ T9202] hsr_slave_1: entered allmulticast mode [ 147.929037][ T9202] hsr0: entered promiscuous mode [ 147.929496][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 147.986614][ T9205] netlink: 'syz.2.888': attribute type 1 has an invalid length. [ 147.986635][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 147.986646][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 148.051791][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 148.079526][ T9216] netlink: 'syz.0.890': attribute type 1 has an invalid length. [ 148.090581][ T9206] netlink: 'syz.2.888': attribute type 1 has an invalid length. [ 148.090600][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 148.090611][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 148.091681][ T9202] hsr_slave_0: left promiscuous mode [ 148.114206][ T9202] hsr_slave_1: left promiscuous mode [ 148.195925][ T9222] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 148.203174][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.264604][ T9202] hsr0 (unregistering): left allmulticast mode [ 148.264630][ T9202] hsr0 (unregistering): left promiscuous mode [ 148.363556][ T9216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.523240][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 148.523713][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 148.525089][ T9218] veth3: entered allmulticast mode [ 148.544830][ T9218] bond2: (slave veth3): Enslaving as an active interface with a down link [ 148.582836][ T9219] bond2: (slave veth0_to_bond): making interface the new active one [ 148.589916][ T9219] veth0_to_bond: entered promiscuous mode [ 148.590218][ T9219] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 148.625242][ T9217] macvlan4: entered promiscuous mode [ 148.625256][ T9217] macvlan4: entered allmulticast mode [ 148.625601][ T9217] bond2: entered promiscuous mode [ 148.626191][ T9217] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 148.626520][ T9217] bond2: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 148.626672][ T9217] bond2: left promiscuous mode [ 148.694120][ T9232] lo: entered promiscuous mode [ 148.763108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.764007][ T199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.765427][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.766894][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.856075][ T9227] lo: left promiscuous mode [ 148.957892][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 149.092732][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.139279][ T9270] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 149.141291][ T9262] syz.0.901 (9262) used greatest stack depth: 17952 bytes left [ 149.208921][ T9275] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 149.251291][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.251452][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.656761][ T9286] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 149.664061][ T9286] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 150.003533][ T9320] tipc: Enabling of bearer rejected, already enabled [ 150.004033][ T9321] tipc: Enabling of bearer rejected, already enabled [ 150.034046][ T9321] tipc: Resetting bearer [ 150.067056][ T9323] erspan0: entered promiscuous mode [ 150.067079][ T9323] erspan0: entered allmulticast mode [ 150.168757][ T9330] netlink: 'syz.1.921': attribute type 17 has an invalid length. [ 150.190132][ T9330] gretap0: entered promiscuous mode [ 150.197823][ T9330] gretap0: left promiscuous mode [ 150.386199][ T9341] netlink: 'syz.2.925': attribute type 3 has an invalid length. [ 150.549038][ T9360] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 150.549059][ T9360] netlink: 'syz.0.931': attribute type 2 has an invalid length. [ 150.841374][ T9385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.841391][ T9385] IPv6: NLM_F_CREATE should be set when creating new route [ 150.860964][ T9386] Bluetooth: hci0: unsupported parameter 5135 [ 150.860983][ T9386] Bluetooth: hci0: unsupported parameter 8192 [ 150.860994][ T9386] Bluetooth: hci0: unsupported parameter 5135 [ 150.861004][ T9386] Bluetooth: hci0: unsupported parameter 8192 [ 150.929550][ T9386] ovs-s: entered promiscuous mode [ 150.930941][ T9392] IPVS: length: 125 != 8 [ 150.934539][ T9391] openvswitch: ovs-s: Dropping previously announced user features [ 151.462390][ T199] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.462432][ T199] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.462461][ T199] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.462489][ T199] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.566390][ T199] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.566431][ T199] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.566459][ T199] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.566488][ T199] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.834479][ T9445] batman_adv: batadv0: Adding interface: syzkaller0 [ 151.834495][ T9445] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.834519][ T9445] batman_adv: batadv0: Interface activated: syzkaller0 [ 151.842007][ T9444] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 151.906743][ T9444] batman_adv: batadv0: Removing interface: syzkaller0 [ 152.176279][ T9476] Bluetooth: MGMT ver 1.23 [ 152.187792][ T9468] bond3: (slave geneve5): making interface the new active one [ 152.197571][ T9468] bond3: (slave geneve5): Enslaving as an active interface with an up link [ 152.268770][ T71] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.312713][ T1013] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.312765][ T1013] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.312796][ T1013] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.367392][ T5736] net_ratelimit: 16 callbacks suppressed [ 152.367410][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.375314][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.519506][ T9488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.519885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.520230][ T9488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.548154][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.604678][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.605895][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.607241][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.627722][ T9488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.663379][ T9493] bridge2: entered allmulticast mode [ 152.926017][ T52] Bluetooth: hci0: command 0x0c3a tx timeout [ 152.926140][ T5614] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 153.219058][ T9520] __nla_validate_parse: 25 callbacks suppressed [ 153.219078][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 153.219102][ T9520] validate_nla: 1 callbacks suppressed [ 153.219112][ T9520] netlink: 'syz.3.977': attribute type 30 has an invalid length. [ 153.229489][ T199] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.229731][ T199] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.229781][ T199] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.229811][ T199] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.230967][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 153.230997][ T9520] netlink: 'syz.3.977': attribute type 30 has an invalid length. [ 153.245579][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 153.464000][ T9533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.981'. [ 153.508282][ T9530] syzkaller0: entered promiscuous mode [ 153.508306][ T9530] syzkaller0: entered allmulticast mode [ 153.551088][ T9538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.984'. [ 153.707586][ T9544] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 153.707631][ T9544] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 153.707647][ T9544] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 153.761635][ T9540] syzkaller0: entered promiscuous mode [ 153.761657][ T9540] syzkaller0: entered allmulticast mode [ 155.166471][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.695329][ T9569] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 155.893691][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.994'. [ 155.900419][ T9602] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 156.063820][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'. [ 156.094646][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 156.095549][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 156.127054][ T9616] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1001'. [ 156.135995][ T31] audit: type=1804 audit(1792278882.043:3): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1002" name="/newroot/188/cgroup.controllers" dev="tmpfs" ino=974 res=1 errno=0 [ 156.150509][ T31] audit: type=1800 audit(1792278882.063:4): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1002" name="cgroup.controllers" dev="tmpfs" ino=974 res=0 errno=0 [ 156.156605][ T31] audit: type=1800 audit(1792278882.073:5): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1002" name="cgroup.controllers" dev="tmpfs" ino=974 res=0 errno=0 [ 156.226419][ T9624] gretap0: entered promiscuous mode [ 156.242855][ T9624] 0{X: renamed from gretap0 [ 156.260947][ T9624] 0{X: left promiscuous mode [ 156.260969][ T9624] 0{X: entered allmulticast mode [ 156.638358][ T9647] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.661386][ T9649] Bluetooth: MGMT ver 1.23 [ 156.710477][ T9649] bond6: entered promiscuous mode [ 156.710549][ T9649] bond6: entered allmulticast mode [ 156.711040][ T9649] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.840421][ T9654] tun0: tun_chr_ioctl cmd 1074025675 [ 156.840442][ T9654] tun0: persist enabled [ 156.856296][ T9654] tipc: Trying to set illegal importance in message [ 157.352078][ T9689] tipc: Enabled bearer , priority 0 [ 157.436722][ T9679] tipc: Disabling bearer [ 157.564651][ T5885] net_ratelimit: 22 callbacks suppressed [ 157.564670][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.564977][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.645969][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.646712][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.654298][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.019308][ T9762] xt_hashlimit: size too large, truncated to 1048576 [ 158.072878][ T9770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.124724][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.199370][ T9760] netlink: 'syz.1.1047': attribute type 10 has an invalid length. [ 158.224374][ T9763] xt_connbytes: Forcing CT accounting to be enabled [ 158.364587][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.420311][ T9807] __nla_validate_parse: 11 callbacks suppressed [ 158.420332][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'. [ 158.493833][ T9815] netlink: 'syz.0.1050': attribute type 7 has an invalid length. [ 158.602805][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.603201][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.927267][ T9835] Bluetooth: ISO socket layer initialized [ 158.951353][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1056'. [ 159.201060][ T9846] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1059'. [ 159.201812][ T9848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1059'. [ 159.245595][ T9843] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1059'. [ 159.313454][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 159.315115][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 159.321250][ T9855] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 159.477766][ T9864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1063'. [ 159.623883][ T12] veth0_to_bond: left promiscuous mode [ 159.631177][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 159.969021][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1070'. [ 160.171108][ T9907] netlink: 'syz.1.1072': attribute type 1 has an invalid length. [ 160.317821][ T9907] bond0: (slave veth0_to_bond): Releasing backup interface [ 160.337681][ T9907] bond7: (slave veth0_to_bond): making interface the new active one [ 160.338782][ T9907] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 160.347827][ T9907] 8021q: adding VLAN 0 to HW filter on device bond7 [ 160.844180][ T9944] geneve3: entered promiscuous mode [ 160.862439][ T199] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 42419 - 0 [ 160.863731][ T199] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 42419 - 0 [ 160.863766][ T199] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 42419 - 0 [ 160.863796][ T199] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 42419 - 0 [ 161.151388][ T9971] veth1_to_team: entered promiscuous mode [ 161.291506][ T9983] netlink: 'syz.0.1094': attribute type 6 has an invalid length. [ 161.300226][ T9983] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 161.344138][ T9983] bond3: entered promiscuous mode [ 161.344568][ T9983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.431873][ T9993] vlan2: entered allmulticast mode [ 161.431958][ T9993] veth0_virt_wifi: entered allmulticast mode [ 161.490016][ T9987] bond3: (slave bridge6): making interface the new active one [ 161.490037][ T9987] bridge6: entered promiscuous mode [ 161.491367][ T9987] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 161.538284][ T9999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.575169][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.578320][ T9999] bond4: (slave bond0): making interface the new active one [ 161.579444][ T9999] bond4: (slave bond0): Enslaving as an active interface with an up link [ 161.666393][ T9999] bond4 (unregistering): (slave bond0): Releasing active interface [ 161.672039][ T9999] bond4 (unregistering): Released all slaves [ 162.218453][ T9993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.537080][T10049] sctp: [Deprecated]: syz.3.1110 (pid 10049) Use of int in maxseg socket option. [ 162.537080][T10049] Use struct sctp_assoc_value instead [ 162.575092][T10049] pimreg: entered allmulticast mode [ 162.609936][T10046] vlan2: entered promiscuous mode [ 162.609957][T10046] hsr0: entered promiscuous mode [ 162.610338][T10046] vlan2: entered allmulticast mode [ 162.610352][T10046] hsr0: entered allmulticast mode [ 162.610362][T10046] hsr_slave_0: entered allmulticast mode [ 162.610376][T10046] hsr_slave_1: entered allmulticast mode [ 162.677122][T10047] pimreg: left allmulticast mode [ 162.730054][T10058] netlink: 'syz.1.1112': attribute type 7 has an invalid length. [ 162.764208][ T978] net_ratelimit: 10 callbacks suppressed [ 162.764227][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.764504][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.275210][T10074] veth0_virt_wifi: left promiscuous mode [ 163.362998][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.427723][T10074] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 163.451382][T10074] bond6: left promiscuous mode [ 163.723841][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.802825][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.908580][T10129] __nla_validate_parse: 17 callbacks suppressed [ 163.908601][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1127'. [ 163.954280][T10132] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1128'. [ 163.954302][T10132] openvswitch: netlink: Flow key attr not present in new flow. [ 164.042867][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.338997][T10156] netlink: 'syz.4.1138': attribute type 3 has an invalid length. [ 164.500735][T10173] vxcan0: tx address claim with dest, not broadcast [ 164.538054][T10176] vxcan0: tx address claim with dest, not broadcast [ 164.774441][T10190] x_tables: duplicate underflow at hook 2 [ 164.849687][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.894091][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 164.906870][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 164.910243][T10201] smc: net device lo applied user defined pnetid SYZ0 [ 165.336408][T10216] netlink: 'syz.4.1151': attribute type 16 has an invalid length. [ 165.336428][T10216] netlink: 'syz.4.1151': attribute type 17 has an invalid length. [ 165.336529][T10216] lo: left promiscuous mode [ 165.440620][T10216] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 165.440950][T10216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.466036][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.481623][T10216] geneve2: left promiscuous mode [ 165.493283][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.497409][T10216] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 165.710209][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1157'. [ 165.755260][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.826489][T10243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1159'. [ 165.958443][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 165.964087][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 166.000847][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 166.027100][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 166.710415][T10304] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 166.728715][T10304] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 166.802052][T10309] veth1_to_bond: entered allmulticast mode [ 166.931250][T10307] veth1_to_bond: left allmulticast mode [ 167.070349][T10333] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 167.328149][T10330] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.358339][T10330] bond4: (slave bond5): making interface the new active one [ 167.358788][T10330] bond4: (slave bond5): Enslaving as an active interface with an up link [ 167.652852][T10333] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 167.964818][ T9] net_ratelimit: 28 callbacks suppressed [ 167.964837][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.966153][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.202504][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.231077][T10389] netlink: 'syz.4.1189': attribute type 4 has an invalid length. [ 168.274376][T10389] bridge3: entered promiscuous mode [ 168.274437][T10389] bridge3: entered allmulticast mode [ 168.362831][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.602558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.602806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.603027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.603555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.603921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.792040][T10432] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 168.792065][T10432] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 168.996549][T10442] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 169.011582][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.049382][T10442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.130358][T10442] bond4: (slave veth0_to_bond): making interface the new active one [ 169.132103][T10442] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.268214][T10460] netlink: 'syz.0.1207': attribute type 61 has an invalid length. [ 169.342586][T10469] __nla_validate_parse: 8 callbacks suppressed [ 169.342605][T10469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1208'. [ 169.808059][T10494] tipc: Failed to remove unknown binding: 66,0,0/10070698:129811805/129811807 [ 169.808088][T10494] tipc: Failed to remove unknown binding: 66,0,0/10070698:129811805/129811806 [ 169.844861][T10499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1217'. [ 169.850274][T10494] tipc: Failed to remove unknown binding: 66,0,0/10070698:129811805/129811807 [ 169.850301][T10494] tipc: Failed to remove unknown binding: 66,0,0/10070698:129811805/129811806 [ 170.069683][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1221'. [ 170.128905][T10518] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1220'. [ 170.129469][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 170.378368][T10534] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1226'. [ 170.974920][T10567] Cannot find add_set index 4 as target [ 171.143650][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 171.143859][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 171.144047][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 171.144258][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 172.303488][T10635] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 172.378450][T10635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.505753][T10635] bond5: (slave geneve4): making interface the new active one [ 172.511055][T10635] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 172.692709][T10635] sit2: entered promiscuous mode [ 172.694118][T10635] sit2: entered allmulticast mode [ 175.348713][ T30] net_ratelimit: 21 callbacks suppressed [ 175.348733][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.348822][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.363178][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.363290][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.483915][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.364990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.202400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.802525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.042796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.043179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.362099][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 280.410788][ C1] rcu: 0-...!: (1 GPs behind) idle=bb84/1/0x4000000000000000 softirq=35972/35979 fqs=7 [ 280.420510][ C1] rcu: (detected by 1, t=10502 jiffies, g=35101, q=1048 ncpus=2) [ 280.428325][ C1] Sending NMI from CPU 1 to CPUs 0: [ 280.433546][ C0] NMI backtrace for cpu 0 [ 280.433574][ C0] CPU: 0 UID: 0 PID: 10657 Comm: syz.1.1260 Not tainted syzkaller #0 PREEMPT(full) [ 280.433595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.433610][ C0] RIP: 0010:match_held_lock+0x18/0x120 [ 280.433643][ C0] Code: 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 bb 01 00 00 00 48 39 77 10 0f 84 c6 00 00 00 0f b7 47 22 e0 ff 00 00 0f 84 b5 00 00 00 48 8b 46 08 49 be 29 5c 8f c2 f5 [ 280.433659][ C0] RSP: 0018:ffffc90000007ca0 EFLAGS: 00000006 [ 280.433675][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000001000001 [ 280.433687][ C0] RDX: 0000000001000001 RSI: ffff8880348e52c0 RDI: ffff888055d22af0 [ 280.433699][ C0] RBP: 00000000ffffffff R08: 0000000001000001 R09: 0000000000000004 [ 280.433710][ C0] R10: dffffc0000000000 R11: fffff52000000f90 R12: 0000000000000046 [ 280.433723][ C0] R13: ffff888055d21f40 R14: ffff8880348e52c0 R15: 0000000000000000 [ 280.433736][ C0] FS: 00007f5c11df66c0(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 280.433752][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.433765][ C0] CR2: 00007ffc01d83f52 CR3: 00000000572d2000 CR4: 00000000003526f0 [ 280.433781][ C0] Call Trace: [ 280.433789][ C0] [ 280.433799][ C0] lock_is_held_type+0x89/0x150 [ 280.433823][ C0] advance_sched+0x1d9/0xc80 [ 280.433852][ C0] ? __pfx_advance_sched+0x10/0x10 [ 280.433876][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 280.433906][ C0] ? __pfx_advance_sched+0x10/0x10 [ 280.433930][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 280.433967][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 280.434008][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 280.434032][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 280.434053][ C0] [ 280.434068][ C0] [ 280.434075][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.434096][ C0] RIP: 0010:lockdep_unregister_key+0x2d4/0x350 [ 280.434118][ C0] Code: e9 71 16 09 00 48 c7 c7 90 49 9c 97 89 c6 e8 53 f9 47 0a e9 66 fe ff ff e8 99 27 45 0a 41 f7 c7 00 02 00 00 74 b4 fb 40 84 ed <75> b3 eb c4 90 0f 0b 90 e9 27 ff ff ff 90 0f 0b 90 e9 2f ff ff ff [ 280.434132][ C0] RSP: 0018:ffffc9000367f0f0 EFLAGS: 00000246 [ 280.434147][ C0] RAX: 0000000000000046 RBX: ffff88807d2c6268 RCX: 0000000000000046 [ 280.434159][ C0] RDX: ffffffff9557c4f8 RSI: ffffffff8e48457c RDI: ffffffff8c6ddb80 [ 280.434173][ C0] RBP: ffff888055d21f00 R08: ffffffff81b104b8 R09: 0000000000000000 [ 280.434186][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e90 R12: 0000000000000000 [ 280.434199][ C0] R13: ffff88807d2c6269 R14: 0000000000001000 R15: 0000000000000a07 [ 280.434215][ C0] ? __is_module_percpu_address+0x28/0x3f0 [ 280.434250][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 280.434269][ C0] __qdisc_destroy+0x1ab/0x470 [ 280.434291][ C0] taprio_attach+0x253/0x380 [ 280.434317][ C0] ? __pfx_taprio_attach+0x10/0x10 [ 280.434340][ C0] qdisc_graft+0x1292/0x1810 [ 280.434374][ C0] ? __pfx_qdisc_graft+0x10/0x10 [ 280.434401][ C0] ? trace_qdisc_create+0x83/0x200 [ 280.434431][ C0] ? qdisc_create+0xa62/0xf00 [ 280.434460][ C0] tc_modify_qdisc+0x1968/0x2390 [ 280.434494][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 280.434535][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 280.434560][ C0] rtnetlink_rcv_msg+0x7b9/0xc00 [ 280.434580][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 280.434597][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.434625][ C0] ? ref_tracker_free+0x689/0x830 [ 280.434654][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 280.434685][ C0] netlink_rcv_skb+0x226/0x4a0 [ 280.434708][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.434738][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.434765][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.434787][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.434811][ C0] netlink_unicast+0x8ef/0xa80 [ 280.434839][ C0] netlink_sendmsg+0x813/0xb40 [ 280.434866][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.434892][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 280.434918][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.434941][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 280.434967][ C0] ____sys_sendmsg+0x54e/0x850 [ 280.434989][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.435013][ C0] ? import_iovec+0x73/0xa0 [ 280.435042][ C0] ___sys_sendmsg+0x2a5/0x360 [ 280.435066][ C0] ? __lock_acquire+0x747/0x2de0 [ 280.435088][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.435108][ C0] ? futex_wait+0x2a2/0x390 [ 280.435140][ C0] ? __fget_files+0x2a/0x420 [ 280.435156][ C0] ? __fget_files+0x3a2/0x420 [ 280.435177][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 280.435197][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.435227][ C0] do_syscall_64+0x166/0x520 [ 280.435248][ C0] ? trace_irq_disable+0x3b/0x140 [ 280.435268][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.435286][ C0] ? clear_bhb_loop+0x70/0xc0 [ 280.435307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.435325][ C0] RIP: 0033:0x7f5c13b9e559 [ 280.435347][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.435361][ C0] RSP: 002b:00007f5c11df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.435378][ C0] RAX: ffffffffffffffda RBX: 00007f5c13e25fa0 RCX: 00007f5c13b9e559 [ 280.435392][ C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 280.435403][ C0] RBP: 00007f5c13c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 280.435415][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.435425][ C0] R13: 00007f5c13e26038 R14: 00007f5c13e25fa0 R15: 00007ffe8a35dfe8 [ 280.435447][ C0] [ 280.986197][ C1] rcu: rcu_preempt kthread starved for 10483 jiffies! g35101 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 280.997215][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 281.007174][ C1] rcu: RCU grace-period kthread stack dump: [ 281.013053][ C1] task:rcu_preempt state:R running task stack:27688 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 281.026555][ C1] Call Trace: [ 281.029831][ C1] [ 281.032763][ C1] __schedule+0x17db/0x58f0 [ 281.037276][ C1] ? __lock_acquire+0x747/0x2de0 [ 281.042232][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 281.047359][ C1] ? __pfx___schedule+0x10/0x10 [ 281.052203][ C1] ? lock_acquire+0x115/0x350 [ 281.056892][ C1] ? schedule+0x90/0x2b0 [ 281.061142][ C1] schedule+0x164/0x2b0 [ 281.065298][ C1] schedule_timeout+0x152/0x2c0 [ 281.070160][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 281.075542][ C1] ? __pfx_process_timeout+0x10/0x10 [ 281.080837][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 281.086645][ C1] ? prepare_to_swait_event+0x322/0x350 [ 281.092204][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 281.097072][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 281.103232][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 281.108522][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 281.113727][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 281.119539][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 281.124136][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 281.129338][ C1] ? __kthread_parkme+0x71/0x1f0 [ 281.134284][ C1] ? __kthread_parkme+0x199/0x1f0 [ 281.139327][ C1] kthread+0x38b/0x480 [ 281.143398][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 281.148596][ C1] ? __pfx_kthread+0x10/0x10 [ 281.153190][ C1] ret_from_fork+0x514/0xb70 [ 281.157784][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 281.162894][ C1] ? __switch_to+0xc89/0x1420 [ 281.167580][ C1] ? __pfx_kthread+0x10/0x10 [ 281.172170][ C1] ret_from_fork_asm+0x1a/0x30 [ 281.176963][ C1] [ 281.179990][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 281.186305][ C1] CPU: 1 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 281.195755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.205807][ C1] RIP: 0010:smp_call_function_many_cond+0x61e/0x1500 [ 281.212488][ C1] Code: b6 04 04 84 c0 0f 85 d5 03 00 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 91 59 0c 00 41 83 e7 01 75 07 e8 86 54 0c 00 eb 3f f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 0f f7 03 01 [ 281.232093][ C1] RSP: 0018:ffffc90003f1f420 EFLAGS: 00000293 [ 281.238161][ C1] RAX: ffffffff81bbbc1e RBX: ffff8880b8443728 RCX: ffff88807b6a1f40 [ 281.246128][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 281.254092][ C1] RBP: ffffc90003f1f570 R08: ffff88807b6a34df R09: 1ffff1100f6d469b [ 281.262058][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff110170886e5 [ 281.270024][ C1] R13: 0000000000000000 R14: ffff8880b8443720 R15: 0000000000000001 [ 281.277987][ C1] FS: 00005555923d5500(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 281.286914][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.293498][ C1] CR2: 00007f1e585556c8 CR3: 0000000071638000 CR4: 00000000003526f0 [ 281.301467][ C1] Call Trace: [ 281.304753][ C1] [ 281.307690][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 281.312907][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 281.319237][ C1] ? rcu_is_watching+0x16/0xb0 [ 281.324007][ C1] ? trace_tlb_flush+0x3c/0x160 [ 281.328873][ C1] flush_tlb_mm_range+0x910/0x10b0 [ 281.333992][ C1] ? ldt_dup_context+0x336/0x3e0 [ 281.338942][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 281.344498][ C1] ? mas_next_slot+0xc98/0xd70 [ 281.349261][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.355254][ C1] ? dup_mmap+0x173e/0x1dc0 [ 281.359763][ C1] ? up_write+0x19d/0x4a0 [ 281.364131][ C1] dup_mmap+0x1758/0x1dc0 [ 281.368480][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 281.373167][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 281.378217][ C1] ? lock_acquire+0x115/0x350 [ 281.382914][ C1] copy_mm+0x115/0x480 [ 281.386991][ C1] copy_process+0x1e79/0x4400 [ 281.391674][ C1] ? __lock_acquire+0x747/0x2de0 [ 281.396633][ C1] ? copy_process+0xd16/0x4400 [ 281.401420][ C1] ? __pfx_copy_process+0x10/0x10 [ 281.406461][ C1] kernel_clone+0x2d7/0x940 [ 281.410982][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 281.416035][ C1] __x64_sys_clone+0x1b6/0x230 [ 281.420810][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 281.426120][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 281.431415][ C1] do_syscall_64+0x166/0x520 [ 281.436010][ C1] ? trace_irq_disable+0x3b/0x140 [ 281.441034][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.447098][ C1] ? clear_bhb_loop+0x70/0xc0 [ 281.451782][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.457674][ C1] RIP: 0033:0x7f3a0cfc6fd2 [ 281.462088][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 281.481687][ C1] RSP: 002b:00007fff6ca86b50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 281.490101][ C1] RAX: ffffffffffffffda RBX: 00007fff6ca86b50 RCX: 00007f3a0cfc6fd2 [ 281.498071][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 281.506037][ C1] RBP: 00007fff6ca86cdc R08: 0000000000000000 R09: 0000000000000001 [ 281.514006][ C1] R10: 00005555923d57d0 R11: 0000000000000246 R12: 0000000000000001 [ 281.521973][ C1] R13: 00000000000927c0 R14: 000000000002a212 R15: 00007fff6ca86d30 [ 281.529960][ C1]