last executing test programs: 6.389206754s ago: executing program 1 (id=1318): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000250001002abd7100fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100}, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0xffffffff}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000540)={@void, @val={0x5, 0x0, 0x2, 0xe7b6, 0x5, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x7}}}}, 0x32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014f194e20"], 0x9e) getpeername(r2, 0x0, &(0x7f0000004b40)) socket$inet(0x2, 0x8000c, 0x5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6.222437504s ago: executing program 2 (id=1320): syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '1\x00', 0x52, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, [0x6, 0xb, 0x3e]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x9}, 0x1, {0x89a0}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 6.137840099s ago: executing program 2 (id=1321): r0 = socket$netlink(0x10, 0x3, 0x13) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001e80), r2) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000840)=ANY=[@ANYBLOB="3f94e3ad0414000000000000000000b4bd1342e19d56350077ed5a8631daa491e2a5c04725d2821e99af95081065ff531aabd1419662fc81053e6b3c4c1613d945821c245d5405529014ea8e658b59b95e4a1160efa18fa06402ed99c52d30175be325645d963eb193222c71c65be7441d346d40d972573e6a226ea62a76e1e9c2dcb3e247995e866a08f004b5acdc7e18fcadf0d05cfd2fb42d469528f5158ada22f6ff09ee", @ANYRES16=0x0, @ANYBLOB="7a68ae703917953d0fd7504992a7c28697b99ec7969afe687b4aeb943a0e64b03fa69afd18965f87fedeb79edc95c8096fab9b8437bd05351b1b86372cfd45303494976a7ea7b00ab57380ca0399ac2b66252affbd24570b65d9ee9d9019f26a18"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000d0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0xbc}}, 0x24000841) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r7, &(0x7f0000000e40)={&(0x7f0000000340)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}, 0x3}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)="026e281667ef67690c111d59", 0xc}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c4cf41cf265199ca34d9cf540686e3674b20648504596298d280f09e9308dd61d6db5a327411a402c26573aa00b397db37b70f698"], 0x10}, 0x40020) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000340)=r6, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30) (async) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead34", 0x52}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/91, 0x5b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0x43}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=ANY=[@ANYBLOB="b42100001500010300000000ffffffff0b00000014200e8008003e00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080004007f0000010000b2334493556a52d27462bad11f3bb0061e6ddf2803edb0a600000000004f6cea37fc271ee823247ab7ad0e5c7344007eab69f439b52a5b7622be6ef823f7fd03650e9e1985aa10b0234e22fea8bd7a923fd50a5d37b2c156485278c9eb6b08d0317e26fb0230e956b811cd0f7f0f99e4f9f8417c429b0c4239fb185925d210f50bf815ea69a3a8a92685da2f9716edf2d616fc17356fbdad9d551e462eb5b98751fe0000"], 0x21b4}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 5.324421258s ago: executing program 0 (id=1326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x91) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r1, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) socket(0x1f, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 5.317477629s ago: executing program 3 (id=1327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, &(0x7f00000002c0)=0x80, 0x800) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000c00)={r0, &(0x7f0000000640)='L.*!\\+!,}^-%[`)l\x00', 0xff70b422da9a4212, &(0x7f0000000680)={@align=0x8001, {0x7f, 0xb, 0x800, 0x821}}, 0x10000, &(0x7f0000000b80), &(0x7f0000000bc0)=0x6046}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x198}}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000400)={0x4, 0x8, [0x4, 0x5, 0x7, 0x7], &(0x7f00000003c0)=[0x0]}) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x5b27608da76a6bee}, 0x81) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8160081004300860400000000000000fffe800000000000000000000000000040ff0200000000000000000000000000014e204e200471907808178a5804b7a065"], 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000130a0102000000000000000001000000080003400000000708000340000000030900020073797a30000000000900010073797a31000000000900020073797a300000000062f84e16919df3ede28733b9d696d7104aab7548ba79253017ee45a44c4b65a9f85a8431bbddd9a26bf9958cfe7e25d5d33e9f08b3b5491ee9edd8f841141bf5ee36d9af0afd873a75d8d6b4f582f10c17"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, &(0x7f0000000100), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x84}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff0000000008000000911164000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) 5.312946977s ago: executing program 1 (id=1328): bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x0) syz_emit_ethernet(0xfffffe9b, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0011fe0a3ccfd56f0e829bc74f9b7181685c4069124ace5855d8c4e1a269a2d7892f77273a572ad6c078b7a1d6b96ca8d14574533cf67da1f119c52b1125c16fef5e134a17b7c137d375a5ccae81d5d83320a39b6c584908a06930c69f654d4e4344a4411b78220929284e32db1f06a60460f8f3578254e0c3aa46f4eafa429a2788c8b0d178d1d4968626f535d205ecf8f4d3c898df267c499e63876c194081da7077bfec4d090094bf9f01bdeb15c0828852ea54f19b02"], 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1892000008000000000000008400000014110000197eb0d02cc66b1331590e9b66d693b3772944e49196b644f6c915cbcbf769fe3a86298e9d63648793517466922d0e6ac7575bc92995d83ad90027e23ce77d825ee2dc44044af4fa8fde4e99229816f302fae5f79ba080bda06d6505030098cdd2b6dcb9aab49168efa538b998463775ac6eb9fba22d912d92aef60fb7c2d79f40f83ff95e5359a21ad2d0bf329e79957d93f65cbd4e266941cd063c00f773e86479a71f65d1bd324a2988b11dface15af780d9a93e4c2f42f6715efbfff2aea5635eebfd3e8860a545c7ca4b626fd871014756e2e5dc997eb19f37248b251444c2b63c561e6ec20ff18d713368323a3576c4c09f038341b22a220779db1ccdc37db0e4a7423fd29ddcd7232cbc5eb56a16dca140ab358f532e631f884ef7ad0e44c064daaa6ca2c527f6e9fc734ffa49007fa0f6f868f87f38190515e695fcd65d3548ff78341e388b283441e4777928a2c3918d46275", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185100001000000000000000000000001867000007000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000200000003d98b00010000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x0, &(0x7f00000004c0), 0x41100, 0x15, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x8}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x9, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000580)=[0x1], &(0x7f00000005c0)=[{0x2, 0x3, 0xf, 0x2}, {0x0, 0x3, 0x1, 0x2}, {0x4, 0x1, 0x0, 0x4}, {0x0, 0x3, 0x9, 0x1}, {0x4, 0x2, 0x4, 0xa}, {0x3, 0x1, 0x10}, {0x4, 0x5, 0x1, 0x4}]}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x11, 0x3, 0x40000) sendmmsg$inet(r4, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)="29653633f1", 0x5}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x6}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000340), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="000000afaf75661e5e4b9924ffdfad9300", @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e240000086fff02000000000000000000000000000106000020200002000a00000200000000fe8000000000000000000000000000aa00000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40815}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000008000000850000009b0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000170000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = openat$cgroup_ro(r1, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000a00)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf25190000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="200001801400020076657468315f746f5f6261746164760008000100", @ANYRES32=r6, @ANYBLOB="50000180140002006e72300000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="00000000010014000800010038342a8449c4a9af5a6af2355925d65fe0d5", @ANYRES32=r6, @ANYBLOB="0800030000000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="1500000010000000", @ANYRES32=r0, @ANYBLOB="a5f2c40850b4966ee85ac23cb4d489ff2917824aeb7a35b18ad34af68e0d87ba9b1c44088c808a108f183bddb86caf", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r7], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x7) r12 = socket(0x11, 0x1, 0xb) sendmsg$NFT_BATCH(r12, &(0x7f0000000e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x720}, 0x1, 0x0, 0x0, 0x40090}, 0x8d4) 5.220988623s ago: executing program 4 (id=1329): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r1, &(0x7f0000000280), 0x4000, &(0x7f00000002c0)={@align=0xf652, {0x5, 0x2, 0x9b0, 0x4}}, 0xde, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x80000000}, 0x5, &(0x7f0000000800)=[{0x1, 0x1, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="06cf83e11c649b10ed9a5b", 0xb, 0x20}, {0x2, 0x4, &(0x7f0000000400)='\x00', &(0x7f0000000a40)="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", 0x1f6, 0x12}, {0x1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000000580)="7e2ed5f7538e793df4070099bfdc27b5566ffeedfadebdc6634318795bb1eb942ccb53dfd2cd451f88c774f463acc612669a5ca35ecb44191176934fffb1b79e051e31", 0x43, 0x18}, {0x3, 0x9, &(0x7f0000000600)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000000640)="97118fffa696a2ac47678a6349a8abf0d301dca2cf002331875409425817317b4e83add53717925d26719776b2f6b18deca45de4baa24f1b08d9a55cdf7d6bd2b93c9a564ef0dc25e5dc446e6eab7cac201dc3d2aab134e378c7f041f7d807d8ab6a1840c261331ece1bbecb817c73123a35b2ce7ecebf43ce0339f46e8a3099af3159d06326a6c3154595b6ed3297ef67b714fca83c7124af2465e52ea25016d14b3e54bf46d2c8cad2a8319c1f56cbb7f88972b835abdce6c9fbc3967441fce8c8cc32c7fa96c04cfb82c7271a76a4386d2bcc65e30686a9539e6a31373704288b0cd53330111c5c8748688e2c4c7e82afcb74bd747ee431", 0xf9, 0x2}, {0x1, 0x0, &(0x7f0000000740)='}\x00', &(0x7f0000000780)="d4273b2e6214e409645ee61ce44790107bdd41846824be54c641073418dbba001009f5d2789c31ebc192c5bd75f633a70f000f7da668a6b5c004c569b5f08e3d1e3468f6eebf2df675f1bcf520f1e38899e3bed7ea5c4697a9359c05aefc44e51fbc56c9168a30c6ecd5334b5e617fdfa08d3b351eb8", 0x9f, 0x2}]}) (async) syz_init_net_socket$llc(0x1a, 0x20e3ad3004527ac4, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0x1a, 0x0, &(0x7f00000001c0)) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) (async) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111cb000000005a1522f2d7e9bedb00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x1f4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c8, 0x4, 0x0, 0x1, [{0x1c4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1b4, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xa2, 0x3, "3c8548de8539c1a5c0c16081ed3a4dc3f0077af904f953bb6ef20063a6b78541159d072d7ae4966fded677f4de499ebc00a6fa089291a2aa1f2ea7e53493f3696b66de1aebeccc39018324dd8196c976de12520b0a70b258ecace64756902ab76e1ce5a0dc663c222fe66d0b5fbb302bdc180c523cb6ad72bf45ea6e01ba59366f964c7fc8f26b5af766230146f515b332355407cba3e200000000000000"}, @NFTA_TARGET_INFO={0xe2, 0x3, "298392b8290a642451cb5c7c45011da8ee94801bd671f351e76537a75f73d48f60632669c080b833b8975f4b2ba8fe35c88eb66050fd19448541efe463ac9c1357f6f814bfa0a78cf1d24bee7105074ab7ff713a152651e4a8194b19e867610960dab51d60e1bbc6bb77b6cc0e7c50a59a88e853b16f712e99f0394c5e556636b28de0b02c3d929635ff9c9c2f910edbf770ffbb8a7baf8ca922f170908319dc5d59e473728dd8235e35c2bfdf5aee99659c567585ecd914bb512a453f618a080dce0cb926feaf87a0cc1edbfe999b069481d93b65a010c4e5643cb2befa"}, @NFTA_TARGET_INFO={0x28, 0x3, "a1a1a07563a5c172a0bf0c5ad229aa7f345d3f2011bb60cb08f6c0660aef3524fa8b7fec"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x21c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000000000100000008000100030000002c0004801800030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003", @ANYRES16=r8, @ANYBLOB='P\x00\x00\x00', @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES16=r3, @ANYRESDEC=r6], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000005) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x1, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="180000000414010025bd7000fedbdf2508000100000000006b57c9e4c176967b820bfd5880687dae7cab5dd78700000000000062332c1ed9f639d466caba0e70ee7ab5de6e4fba4605a7cdba0ed92587fca290dd4a7ac89c98528ff52166f114bbe3d7e0338cb49dc04a1c66f31d911f7277b67fd4e8737a81b1276a4515f5914d16ed6f538ebd6203853e19cf8e4db5d9655f390602ee78120c943adfba1bb9513809d7764f634b6883d8527909438fe2c8534d76db77510a354e9338ea13e899637f40980a735789af16898148d7c4c5ea6f3d0ac850bed106cbf8ffffffffa98ad8a1d12a5a0a0000000000"], 0x18}, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027400089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fcab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f", 0xdd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f24e5f11640fe872708e9551d18", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.124445999s ago: executing program 2 (id=1330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400ff2340834b80040d8c560a067f0258ff0000000000000006000000000000005f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810ee0000408c56040000", 0x58}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000140)={0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0x2, 0x3, 0x33) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x24045005}, 0x0) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) r11 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r11, 0x6, 0xc, &(0x7f0000000100)=0x8, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 4.99829731s ago: executing program 0 (id=1331): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x80}, [@IFLA_ADDRESS={0xa}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2008004) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) 4.808964101s ago: executing program 0 (id=1332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007d0800000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ppoll(&(0x7f0000000080)=[{r2, 0x1a0}], 0x1, &(0x7f0000000480), 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}]}, 0x24}}, 0x0) 4.62134567s ago: executing program 0 (id=1333): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x29, 0x2, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe, 0x45}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x3}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000937fed)=""/3, &(0x7f0000000040)=0x3) 4.473059567s ago: executing program 4 (id=1334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40) 4.465633741s ago: executing program 0 (id=1335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6b, 0x1, 0x1, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x9, 0xdd, &(0x7f0000000340)="678a3e7c136d40631e", &(0x7f0000000500)=""/221, 0x0, 0x0, 0xf1, 0xa5, &(0x7f0000000740)="770929f16e934a026daf4f947a1b8fffdeed68abbc040457d46a79865b8819d013d61c50ed2ba36993096c2dafaa62094b5325516c3d4cac026cd3a7cc372122cccc68354cdafceceaf34c3fca3972d82f653c4c690b6d6fcb77de7ef01b68b5927676e9454ac25052780fe6dc0c8f97821a11c0c8e39a3f9bcf79486620782697841d950d86d5e90c8082aae48ba525b9a678f395ae25bce3685ef0cf92cb6a788ca967f7be2287ee4e6358c63cfc75bc6d142dc13d6f78014912ffed0ca48881a748c5ebdcee0e46ad43ea59fcf16c05f92ea4bc8fd63f232d74843602565575a7c38268c0bef23661c546436f8999e8", &(0x7f0000000840)="2faacaa06897f17e64b41e0a1809b85ceca86e1a8d4d9fe01998ed87949af3ace650ddf67acf793ce2d8748cb32c38fcf2c0ed807d27d550dbd5b1df87cea17207564ca041696d3e0b90eb1320f95ac352622b11d3c4d09ac3bd1c2b758941b7a6c049f40b8a110a4954d95ef9c3b016c007018661129107b66c7f177d4c158d193cd5384b7b84ba2eb688eb91bc8039ea2c6d0a2718d5c355fdbdf469204f5cc3ff2affe6", 0x1, 0x0, 0x5}, 0x50) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd27, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x43, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x103}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (rerun: 32) 4.174980584s ago: executing program 3 (id=1336): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) shutdown(r1, 0x2) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="d22d5551dc", 0x5}, {&(0x7f0000000140)="ce9277bbc753391a76e2d87085f5bc15fdbd595188442189fd9a66aeea2496a4f4255d68ed3ed2a1e130f413ad60908ce82521eedb88cc54efe25e4a1af33ee00e90ce172e9e0ecb7be41f2ea1e69a1a4aaaafe0798d4259ff33d7f59b2b451956c7a52610b574d0b8b691061e6b1195f6bf7d4dbfa26924dc209d60bb49d540556a1adcf83011b3cfbcbf404e3fa8f2dc26210e515917b4dde451cfdd7052a7e0d2266549dcc31db0ddd2b45eae44b46dc63705320c18037b30c5b7a11eaf444fd911c2a6b47349c03a039b6874ab34", 0xd0}, {&(0x7f0000000340)="0b5b9098df88603b84f543e7100e2a1a3fabd89ca98635d199ad789c30d8a1935c1951461b74fd434c7957360c26c0c981d42346276eb219e3408e495107294390663f94d7e7e78665e684c7b7a85678bda6eb5e9412ea41d1d4bb6b52b1d369a77d0fa3f96ba8aaa8f378835b7a1e623d9751b17ee9ab25b9", 0x79}, {&(0x7f0000000480)="eadeeab7c678", 0x6}, {&(0x7f00000004c0)="1c31512b724f64548ff11d19a2f3ac9837fa131ed27b7d0e2624659cdd30ec9634a1ab38e94f465d71fd363c897f327dfe1b14fa471561da8ba91728bef3b30ec8a643547988cc013011346626ffaa64caf6fd3550a27dfac47676c45ff6567cf7ea4de15674f74a58e62518c7d5482b818e5d26b503bdbf8d211f", 0x7b}, {&(0x7f0000000640)="ae3edfafce1e1c8fcb3b55fc4249a7e52f3dcb166505266c375593aaf02ec3a6ac43216cd843068474991170f4fc0ccef9c8ae45bb712b200fe41a2e122a72dc1ed25cc943eb83dde18b554f6f4b61c013a56c290e613eaa77fb50dce26917d2ff2dd47835026a7433b296e5afbc46ef8aee7e5e73d9435cbb778a2e89a1c45d5683ac3efc01a21c58d57c56a57f19b219665df5a2d7212f646111e943a55dc37daa339da9fe43681f71", 0xaa}], 0x6}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="cdc629b459997adc2e8392ec12c555d3225f5d652fed86f66f6a5ac146c7ccbe2ff3e7d4e43b14a317abe0f2aef46958aa98a2eb996196bbd3c26a9c877ad3c70f3389f06b4d6709ed0ad533e4ba30fa244c1eee19708b431329a7fe17a4a15d7dfa9ef01d5dc582a862770b93a2bf9a0d221de5427679131827b910390b86c35c20f42137f14b38e15f4875260824d175f874fc5c90db655fbe2cf1b9dee525de0c5f64ac602f110ad3ce5acbdbfa9f9b05a7ad03a426bb86266a1c8e42b47c8563a512e27a06a40b542a42c90e8c0afe", 0xd1}, {&(0x7f0000000880)="ed307a69e23853b05dc50b84c436c5223d90eb6e60febfe60cbeae89014de35a885ce8e60db88aa6e990bc588f94746e7eb9aebbd1449c2a0a627da93d7670d2a7d21dd5564ce6d0846376d4bdcd8417f2b8f370d45a22213a46b647da61441347339f693209c8f994a2a1018fa5acc0bd15dea4e2f827067ab76669fcb0dec2dabb93c57beb4011bc64ecadf83f6118362fd165cfbd41cfbc0a58b025233ef369a52ac6b2b996de3193", 0xaa}, {&(0x7f0000000940)="031f5336e5f373d88e9e7d6f306103bb466dd577abe99590c885613dfc50505203569ab25f4d9af380de9f81638c24048edb7e813b2c6b6707151802b00a386bb16badd46fdb7c4e301698df34eef79df13be91966eea0b67c49264e970855b844a733d60d", 0x65}, {&(0x7f00000009c0)="104a7e223ae4dde08e7ab1a61a7177c4af6e0b48cdd153f52a5c449933d3e436e99bf3bebc8fea2d08c976d9f2ec6152b7f45971f9ec6c279bea4a15048d946085d68895e1bafa80fcca86b90f10c8ec2bffa23bec601ca5d0041b347698017b1b4c6e57581f4b352d4eaa03263450d766857be02a8934302565375b5497c2480ed853d7", 0x84}, {&(0x7f0000000a80)="0d56a59006bc2541d02a7e889689c9", 0xf}], 0x5, &(0x7f0000000b40)=[@dstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x0, 0x18, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x8001}, @generic={0x7, 0x23, "deb5d6a065fb6a1b6df6759c71f16f0a3ea260c49a7ff54423c0091fa27ef8db46bed4"}, @calipso={0x7, 0x48, {0x2, 0x10, 0x7d, 0x3, [0xfffffffffffff801, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x5, 0x8000000000000000]}}, @ra={0x5, 0x2, 0x1fc6}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x6b5}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x1, 0xc, 0x2, 0x36, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3012}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}], 0x1a0}}], 0x2, 0x4000040) 3.948129406s ago: executing program 1 (id=1337): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r9], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESHEX=r14], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r16, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) close(r12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 3.889150872s ago: executing program 3 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xc000, @local, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bd", 0x1}], 0x1}}], 0x2, 0x42) shutdown(r1, 0x1) sendmsg$inet6(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="ae85df2a", 0x4}], 0x1}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)=ANY=[@ANYBLOB="18000000041401"], 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44f14}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x9, 0x100, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x40, 0x7800, 0x3, 0x10001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@gettfilter={0x5c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff0, 0xa}, {0x1, 0xe}, {0x7, 0x4}}, [{0x8, 0xb, 0x10000}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x660f6ec9}, {0x8, 0xb, 0x3}]}, 0x5c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x201) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r8, 0xe8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe9e, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff87, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x29, 0x0}}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r5, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x20, 0x1e, 0x723, 0x0, 0x0, "", [@nested={0x10, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x4, 0xf}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r10, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x40}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x44880}, 0x24008041) 3.759701607s ago: executing program 4 (id=1339): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f", 0x2b}], 0x1}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.622206754s ago: executing program 4 (id=1340): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007180)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r3, 0x40047452, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 3.416475925s ago: executing program 0 (id=1341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000480)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x4, 0x24, 0x64, 0x0, 0x4f, 0x21, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, "df6dfb", 0x3b, "aa8a94"}}}}}}}, 0x36) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r8, &(0x7f0000006200)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)='NQ', 0x2}], 0x1}}, {{&(0x7f0000000240)=@llc={0x1a, 0x1, 0x9, 0x33, 0x80, 0x81, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)="981b", 0x2}], 0x1}}], 0x2, 0x40d5) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 3.343178675s ago: executing program 4 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r1, &(0x7f0000000040)=""/57, 0x39, 0x7fff) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="85e220bc45bd83c02300128009000100626f6e64000000001400028008000f000400000005001000880000008c48053e10c4c190a4fcf9f276e609e844496c417221b25bf213ce740700a90362785a0a1b0bc8f2ea945ef7c8bd7406e3212631e380d86fe1861d2cdedffe56b3887982ab01d76d3d3cb24cda883620b31252e5124a4d2604cece49eaefd583e1e245aa2055387b4ed97e7ac731e6fb8b3484fdeb0b1db2becd11b1ef3f66b4cfe37b42b672801159ff238b639a1a33ca6b36976f28b95fcb6339c25022cc9ceb6b966b67fe9128069e3b65e54f2d5c68b2a279eecde1c91fb30b5eaaf6f7d2f33464101b0be85e87d9dd7d9db3635ee0504091e561e168e3b09a8a3ff044a68f91e9640a984e2f838e2c6946c37cc74711d5aaf8ff1e5acd55b9a9b2fd65fd46e8a630753e8ba682bbf51a6dc4ccc567a3fbd7f538bb6114e35c8510593192fd9cacfa8f2c08b23d52d483a1867b4812cdca08f82aed7aabab192ef7b91aa50bb0a51096775fd56fe0605cd45149b66325963bac156e6cdc963766c4bebd42e5dda2c042118109d1ca6009f60dfe52e96fe8def6ae621d1afb0dd639a59f268be73dd7cdb26d9a9e295ca933a9de053c320370c6815b65985952474f8073b3f1bf1f00f3f1578c6662fde1e8b2980d20adf1fbfb9efd000000000000000000"], 0x44}}, 0x0) 3.285053498s ago: executing program 2 (id=1343): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000ad0051a2ad6736115a6bc54549e1377f0228f479caa5b40e730406773570d1f50f824a7a3841ab011d345583ea3595204bc8420afc84b427dae5e0a3f4818fe86c9aa1394ef6fd4a43e8d8a1a6edd3239be1b9d316002f439458565c3fbc96239b5c3cebe99388d7f1ba717d0bc29f491a7d8e2e793929eeb10d03737f6dff56e41e5fc53cfd252b8d128a87af7fdee92e95eff203e89000517b8c768f3115357e9981eaf", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 3.028096934s ago: executing program 2 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40084) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0xfff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000040000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf46, 0x0, 0x2, 0x0, &(0x7f00000001c0)='\x00\x00', 0x0, 0x2, 0x0, 0x8}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002d00010000000000ffdbdf25077c0000cd0d4d8437a153b272d4aeb049fedc2a030085c24865fd19a606032ce91166adc8eb2602583a6095001b5209a38b037f2d"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.926384476s ago: executing program 1 (id=1345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000880)={0x27, r3, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) (async) close(r2) (async) close(0x4) (async) r4 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x40, 0x9, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x7a, 0x2f, 0x0, @remote, @broadcast}}}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000002400010000000000000000001900000a4c000000090a010207000000000000040800044000000001080005400000000408000a40000000020900010073797a300000000008000340004049160900020073797a3200000000140000001100010000000000000000000200000a00000000"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r6, @ANYRES16=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)=0x1) (async) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000380)={@private1, 0x6d, r5}) (async) r11 = socket(0x10, 0x803, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r13, 0x0, 0xcb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x0) 472.598227ms ago: executing program 4 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23000000080000000c001b000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x10, 0xffffffffffffffff, 0x34f6a000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r3 = socket$inet_sctp(0x2, 0x0, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000078000104020000000000000007000000640000001400018008000100640000"], 0x2c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="1699f2309b717bf772089a1a74d1416938435430646e51da14c128b9d53a372439f7685cdea6d1960832245ba4828fbb0a3f97deed9b95d90a0ea83f9f4f36b7385e46c963bcc4c2c3000000", @ANYRES64=0x0], 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525059, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x94}, 0x94) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x16, "af4fea32b44a130c5e1e6786c2cd7c53f7cabfae6dc2"}, &(0x7f0000000100)=0x1e) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000b00)={&(0x7f0000000a00)=""/236, 0xec}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r6, 0xeb}, &(0x7f00000001c0)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f00000002c0)={r7, 0x6, 0xf7, 0x80, 0x5, 0x6}, &(0x7f0000000800)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.events\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0900000004020000080000000dd3c4566f53c6266614b259300dae1ff88dcf2141429f46d2c82c7a50ccfb5dd5611b84cc1359d4aeecc4435572655fa463d628ae"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000380)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r12}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r12}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x26, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x3, 0x2, 0x0, r0}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000000}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x2, 0x82, &(0x7f00000004c0)=""/130, 0x40f00, 0x9, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000005c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r0, r5, r0, r5, r5, r11, r3], &(0x7f00000006c0)=[{0x0, 0x3, 0x8, 0x5}, {0x2, 0x4, 0x8, 0x3}, {0x4, 0x4, 0x9, 0x2}, {0x2, 0x5, 0x9, 0xc}], 0x10, 0x80000001}, 0x94) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c0015"], 0x38}}, 0xc000) 469.809645ms ago: executing program 3 (id=1347): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000200100000c000280080002006c6f00001800038004"], 0x38}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) 351.653371ms ago: executing program 1 (id=1348): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getgid() listen(r1, 0x40000) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0x9, 0x9, 0x2, 0x81}) recvfrom$phonet(r0, &(0x7f0000000200)=""/89, 0x59, 0x10002, &(0x7f0000000280)={0x23, 0x0, 0x2}, 0x10) 347.54355ms ago: executing program 2 (id=1349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40) 204.612218ms ago: executing program 3 (id=1350): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f", 0x2b}], 0x1}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 200.89888ms ago: executing program 1 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010025bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xf94}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect(r2, &(0x7f0000000180)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000003c60010000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=1352): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/54, 0x36, 0x10041, &(0x7f0000000280)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r5}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5}, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, &(0x7f00000003c0)={0x11, 0xf6, 0x0, 0x1, 0xa1, 0x6, @multicast}, 0x14) sendmmsg$sock(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000084) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) recvfrom(r0, &(0x7f0000000080)=""/54, 0x36, 0x10041, &(0x7f0000000280)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1003, r5}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5}, 0x20) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) bind$packet(r0, &(0x7f00000003c0)={0x11, 0xf6, 0x0, 0x1, 0xa1, 0x6, @multicast}, 0x14) (async) sendmmsg$sock(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000084) (async) kernel console output (not intermixed with test programs): 6185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 97.199470][ T6198] sock: sock_timestamping_bind_phc: sock not bind to device [ 97.364691][ T6200] FAULT_INJECTION: forcing a failure. [ 97.364691][ T6200] name failslab, interval 1, probability 0, space 0, times 1 [ 97.364729][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(full) [ 97.364753][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.364765][ T6200] Call Trace: [ 97.364774][ T6200] [ 97.364783][ T6200] dump_stack_lvl+0xe8/0x150 [ 97.364818][ T6200] should_fail_ex+0x410/0x560 [ 97.364848][ T6200] should_failslab+0xa8/0x100 [ 97.364874][ T6200] ? skb_clone+0x212/0x3a0 [ 97.364900][ T6200] kmem_cache_alloc_noprof+0xa1/0x600 [ 97.364934][ T6200] ? skb_clone+0x212/0x3a0 [ 97.364968][ T6200] skb_clone+0x212/0x3a0 [ 97.364999][ T6200] __netlink_deliver_tap+0x413/0x860 [ 97.365042][ T6200] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.365073][ T6200] netlink_deliver_tap+0x19c/0x1b0 [ 97.365103][ T6200] netlink_unicast+0x781/0x940 [ 97.365143][ T6200] netlink_sendmsg+0x813/0xb40 [ 97.365183][ T6200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.365222][ T6200] ? apparmor_socket_sendmsg+0x98/0x360 [ 97.365247][ T6200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.365284][ T6200] sock_sendmsg_nosec+0x13a/0x180 [ 97.365318][ T6200] ____sys_sendmsg+0x54e/0x850 [ 97.365351][ T6200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.365388][ T6200] ? import_iovec+0x73/0xa0 [ 97.365418][ T6200] ___sys_sendmsg+0x2a5/0x360 [ 97.365443][ T6200] ? __lock_acquire+0x747/0x2de0 [ 97.365470][ T6200] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.365538][ T6200] ? __fget_files+0x2a/0x420 [ 97.365566][ T6200] ? __fget_files+0x3a2/0x420 [ 97.365606][ T6200] __x64_sys_sendmsg+0x1b1/0x290 [ 97.365636][ T6200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.365688][ T6200] do_syscall_64+0x166/0x520 [ 97.365710][ T6200] ? trace_irq_disable+0x3b/0x140 [ 97.365731][ T6200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.365752][ T6200] ? clear_bhb_loop+0x70/0xc0 [ 97.365777][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.365797][ T6200] RIP: 0033:0x7f0ee999e159 [ 97.365818][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.365835][ T6200] RSP: 002b:00007f0eea86c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.365859][ T6200] RAX: ffffffffffffffda RBX: 00007f0ee9c25fa0 RCX: 00007f0ee999e159 [ 97.365874][ T6200] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 97.365888][ T6200] RBP: 00007f0eea86c090 R08: 0000000000000000 R09: 0000000000000000 [ 97.365901][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.365913][ T6200] R13: 00007f0ee9c26038 R14: 00007f0ee9c25fa0 R15: 00007fffb574fc48 [ 97.365949][ T6200] [ 97.555503][ T81] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.555550][ T81] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.555582][ T81] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.555612][ T81] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.821475][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 97.981534][ T6222] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 97.981567][ T6222] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.020560][ T5730] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 98.046839][ T6213] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 98.169028][ T6220] ip6gretap0: entered promiscuous mode [ 98.220855][ T5730] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 98.234308][ T6223] netlink: 232 bytes leftover after parsing attributes in process `syz.3.121'. [ 98.606806][ T6238] netlink: 260 bytes leftover after parsing attributes in process `syz.1.124'. [ 99.520137][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.520166][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.554120][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.554148][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.607538][ T6271] sctp: [Deprecated]: syz.2.133 (pid 6271) Use of int in max_burst socket option. [ 99.607538][ T6271] Use struct sctp_assoc_value instead [ 99.700861][ T6270] vlan2: entered promiscuous mode [ 99.700888][ T6270] syz_tun: entered promiscuous mode [ 100.421081][ T6314] sch_tbf: burst 88 is lower than device netdevsim1 mtu (1514) ! [ 100.550977][ T6310] bridge1: entered promiscuous mode [ 101.308206][ T6355] syzkaller0: entered promiscuous mode [ 101.308234][ T6355] syzkaller0: entered allmulticast mode [ 101.666266][ T6368] validate_nla: 62 callbacks suppressed [ 101.666289][ T6368] netlink: 'syz.4.150': attribute type 9 has an invalid length. [ 101.794663][ T6376] __nla_validate_parse: 10 callbacks suppressed [ 101.794686][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 101.794701][ T6376] netlink: 14 bytes leftover after parsing attributes in process `syz.2.153'. [ 101.931729][ T6380] netlink: 830 bytes leftover after parsing attributes in process `syz.4.154'. [ 101.982844][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 102.029254][ T6382] 8021q: VLANs not supported on ip_vti0 [ 102.395364][ T6399] Bluetooth: MGMT ver 1.23 [ 102.399478][ T6395] can: request_module (can-proto-3) failed. [ 102.468051][ T6395] ip_tables: iptables: counters copy to user failed while replacing table [ 102.514796][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 102.542246][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 102.542276][ T6400] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 102.560007][ T6400] netlink: 'syz.3.158': attribute type 8 has an invalid length. [ 102.876787][ T6410] ip6gre1: entered promiscuous mode [ 102.876812][ T6410] ip6gre1: entered allmulticast mode [ 102.921200][ T6418] geneve0: entered promiscuous mode [ 102.956200][ T6418] geneve0: left promiscuous mode [ 103.105421][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'. [ 103.230292][ T6420] geneve0: entered promiscuous mode [ 103.271160][ T6420] geneve0: left promiscuous mode [ 103.362625][ T6438] netlink: 830 bytes leftover after parsing attributes in process `syz.4.166'. [ 103.630811][ T6449] netlink: 'syz.0.171': attribute type 21 has an invalid length. [ 103.671393][ T6448] sctp: [Deprecated]: syz.3.170 (pid 6448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.671393][ T6448] Use struct sctp_sack_info instead [ 104.043924][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 104.462425][ T6476] netlink: 830 bytes leftover after parsing attributes in process `syz.1.178'. [ 104.745826][ T6486] bridge_slave_1: left allmulticast mode [ 104.745857][ T6486] bridge_slave_1: left promiscuous mode [ 104.746983][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.786670][ T6486] bridge_slave_0: left allmulticast mode [ 104.786702][ T6486] bridge_slave_0: left promiscuous mode [ 104.786955][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.325451][ T6533] IPVS: set_ctl: invalid protocol: 60 172.30.0.1:20004 [ 106.340746][ T6534] IPVS: set_ctl: invalid protocol: 60 172.30.0.1:20004 [ 106.708318][ T6546] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 107.109280][ T6561] __nla_validate_parse: 4 callbacks suppressed [ 107.109304][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.206'. [ 107.117232][ T6561] lo speed is unknown, defaulting to 1000 [ 107.117312][ T6561] lo speed is unknown, defaulting to 1000 [ 107.124972][ T6561] lo speed is unknown, defaulting to 1000 [ 107.135674][ T6561] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 107.135711][ T6561] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 107.135746][ T6561] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 107.158207][ T6561] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.249156][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 107.270815][ T6561] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 107.591894][ T6561] lo speed is unknown, defaulting to 1000 [ 107.627384][ T6561] lo speed is unknown, defaulting to 1000 [ 107.660827][ T6561] lo speed is unknown, defaulting to 1000 [ 107.673144][ T6561] lo speed is unknown, defaulting to 1000 [ 107.706548][ T6561] lo speed is unknown, defaulting to 1000 [ 107.767808][ T6573] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 107.846503][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 107.868708][ T6583] tipc: Started in network mode [ 107.868728][ T6583] tipc: Node identity , cluster identity 4711 [ 107.868743][ T6583] tipc: Failed to obtain node identity [ 107.868774][ T6583] tipc: Enabling of bearer rejected, failed to enable media [ 108.180004][ T6569] syz.4.208 (6569) used greatest stack depth: 18088 bytes left [ 108.340314][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 108.359652][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 108.366401][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 108.366425][ T6599] netlink: 14 bytes leftover after parsing attributes in process `syz.1.214'. [ 108.381550][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 108.381573][ T6604] netlink: 14 bytes leftover after parsing attributes in process `syz.1.214'. [ 108.433970][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 109.533831][ T6643] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 109.856822][ T6657] syzkaller0: entered promiscuous mode [ 109.856848][ T6657] syzkaller0: entered allmulticast mode [ 110.111681][ T6676] netlink: 'syz.0.236': attribute type 7 has an invalid length. [ 110.111705][ T6676] netlink: 'syz.0.236': attribute type 3 has an invalid length. [ 110.153778][ T6677] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 110.322145][ T6683] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 110.322168][ T6683] netlink: 'syz.3.238': attribute type 5 has an invalid length. [ 110.425321][ T6687] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 110.425345][ T6687] netlink: 'syz.3.238': attribute type 5 has an invalid length. [ 110.477726][ T6683] geneve2: entered promiscuous mode [ 110.477752][ T6683] geneve2: entered allmulticast mode [ 110.494419][ T6694] netlink: 'syz.2.239': attribute type 7 has an invalid length. [ 110.494442][ T6694] netlink: 'syz.2.239': attribute type 8 has an invalid length. [ 110.534762][ T202] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 52857 - 0 [ 110.534815][ T202] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 52857 - 0 [ 110.534850][ T202] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 52857 - 0 [ 110.534883][ T202] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 52857 - 0 [ 111.423213][ T6729] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.979187][ T6749] netlink: 'syz.1.258': attribute type 34 has an invalid length. [ 111.995883][ T6751] netlink: 'syz.1.258': attribute type 34 has an invalid length. [ 112.135383][ T6758] netlink: 'syz.4.260': attribute type 39 has an invalid length. [ 112.531218][ T6772] __nla_validate_parse: 17 callbacks suppressed [ 112.531242][ T6772] netlink: 830 bytes leftover after parsing attributes in process `syz.2.263'. [ 112.943081][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.268'. [ 112.943337][ T6787] unsupported nlmsg_type 40 [ 113.233928][ T6792] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.234122][ T6792] ip6t_rt: unknown flags 1F [ 113.236160][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 113.741221][ T6810] netlink: 830 bytes leftover after parsing attributes in process `syz.3.276'. [ 114.010307][ T6812] netlink: 'syz.2.277': attribute type 1 has an invalid length. [ 114.133590][ T6812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.264030][ T6816] bond1: (slave gretap1): making interface the new active one [ 114.284303][ T6816] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 114.355956][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 114.485276][ T6830] netlink: 84 bytes leftover after parsing attributes in process `syz.3.279'. [ 114.748076][ T6842] Bluetooth: ISO socket layer initialized [ 114.761337][ T6842] netlink: 96 bytes leftover after parsing attributes in process `syz.0.284'. [ 114.775234][ T6842] Bluetooth: MGMT ver 1.23 [ 115.032369][ T6849] netlink: 'syz.1.285': attribute type 8 has an invalid length. [ 115.032394][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 115.036102][ T6846] bond2: option min_links: invalid value (18446744073709551612) [ 115.036130][ T6846] bond2: option min_links: allowed values 0 - 2147483647 [ 115.047964][ T6846] bond2 (unregistering): Released all slaves [ 115.231040][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.232742][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.199456][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 116.200079][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 116.867972][ T6920] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 117.511066][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.511833][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.790537][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.821924][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.141929][ T6947] __nla_validate_parse: 2 callbacks suppressed [ 118.141956][ T6947] netlink: 830 bytes leftover after parsing attributes in process `syz.2.310'. [ 118.183148][ T258] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.183202][ T258] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.183241][ T258] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.278417][ T258] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.780032][ T6988] tipc: Started in network mode [ 118.780068][ T6988] tipc: Node identity ac1414aa, cluster identity 4711 [ 118.780981][ T6988] tipc: New replicast peer: 172.20.20.187 [ 118.790235][ T6988] tipc: Enabled bearer , priority 10 [ 118.930427][ T6996] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 118.980164][ T6996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.045368][ T6996] team0: Port device netdevsim1 added [ 119.286828][ T7005] tun0: tun_chr_ioctl cmd 1074025673 [ 119.350087][ T7013] netlink: 830 bytes leftover after parsing attributes in process `syz.2.325'. [ 119.710079][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.752748][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.752775][ T7021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.901442][ T5815] tipc: Node number set to 2886997162 [ 121.056812][ T7056] FAULT_INJECTION: forcing a failure. [ 121.056812][ T7056] name failslab, interval 1, probability 0, space 0, times 0 [ 121.056848][ T7056] CPU: 1 UID: 0 PID: 7056 Comm: syz.4.333 Not tainted syzkaller #0 PREEMPT(full) [ 121.056872][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.056884][ T7056] Call Trace: [ 121.056891][ T7056] [ 121.056900][ T7056] dump_stack_lvl+0xe8/0x150 [ 121.056937][ T7056] should_fail_ex+0x410/0x560 [ 121.056966][ T7056] should_failslab+0xa8/0x100 [ 121.057005][ T7056] __kmalloc_cache_noprof+0xa3/0x600 [ 121.057025][ T7056] ? trace_kmalloc+0x2a/0xf0 [ 121.057056][ T7056] ? nft_trans_rule_add+0x59/0x440 [ 121.057087][ T7056] ? nft_trans_rule_add+0x59/0x440 [ 121.057115][ T7056] ? __kmalloc_noprof+0x38c/0x720 [ 121.057139][ T7056] nft_trans_rule_add+0x59/0x440 [ 121.057173][ T7056] nf_tables_newrule+0x1b50/0x28a0 [ 121.057218][ T7056] ? __pfx_nf_tables_newrule+0x10/0x10 [ 121.057242][ T7056] ? lock_acquire+0x115/0x350 [ 121.057279][ T7056] ? nfnl_pernet+0x23/0x240 [ 121.057317][ T7056] ? __nla_parse+0x40/0x60 [ 121.057349][ T7056] nfnetlink_rcv+0x1288/0x28c0 [ 121.057432][ T7056] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 121.057479][ T7056] ? ref_tracker_free+0x689/0x830 [ 121.057533][ T7056] ? skb_clone+0x246/0x3a0 [ 121.057563][ T7056] ? __netlink_deliver_tap+0x811/0x860 [ 121.057601][ T7056] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.057630][ T7056] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.057666][ T7056] netlink_unicast+0x7bd/0x940 [ 121.057707][ T7056] netlink_sendmsg+0x813/0xb40 [ 121.057748][ T7056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.057788][ T7056] ? apparmor_socket_sendmsg+0x98/0x360 [ 121.057814][ T7056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.057842][ T7056] sock_sendmsg_nosec+0x13a/0x180 [ 121.057878][ T7056] ____sys_sendmsg+0x54e/0x850 [ 121.057910][ T7056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.057948][ T7056] ? import_iovec+0x73/0xa0 [ 121.057978][ T7056] ___sys_sendmsg+0x2a5/0x360 [ 121.058002][ T7056] ? __lock_acquire+0x747/0x2de0 [ 121.058028][ T7056] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.058095][ T7056] ? __fget_files+0x2a/0x420 [ 121.058124][ T7056] ? __fget_files+0x3a2/0x420 [ 121.058163][ T7056] __x64_sys_sendmsg+0x1b1/0x290 [ 121.058193][ T7056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.058245][ T7056] do_syscall_64+0x166/0x520 [ 121.058268][ T7056] ? trace_irq_disable+0x3b/0x140 [ 121.058289][ T7056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.058311][ T7056] ? clear_bhb_loop+0x70/0xc0 [ 121.058336][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.058356][ T7056] RIP: 0033:0x7f1a2039e159 [ 121.058376][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.058393][ T7056] RSP: 002b:00007f1a21221028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.058426][ T7056] RAX: ffffffffffffffda RBX: 00007f1a20625fa0 RCX: 00007f1a2039e159 [ 121.058441][ T7056] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 121.058455][ T7056] RBP: 00007f1a21221090 R08: 0000000000000000 R09: 0000000000000000 [ 121.058467][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.058480][ T7056] R13: 00007f1a20626038 R14: 00007f1a20625fa0 R15: 00007fff1f446d68 [ 121.058516][ T7056] [ 121.414777][ T7063] netlink: 830 bytes leftover after parsing attributes in process `syz.0.336'. [ 121.897253][ T7084] netlink: 'syz.3.341': attribute type 15 has an invalid length. [ 121.932219][ T7084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 122.030023][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 122.083958][ T7091] openvswitch: netlink: IP tunnel dst address not specified [ 122.148335][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 122.148361][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 122.212538][ T202] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.213331][ T202] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.213398][ T202] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.213433][ T202] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.311850][ T7099] FAULT_INJECTION: forcing a failure. [ 122.311850][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 122.311886][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.4.348 Not tainted syzkaller #0 PREEMPT(full) [ 122.311909][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.311922][ T7099] Call Trace: [ 122.311930][ T7099] [ 122.311939][ T7099] dump_stack_lvl+0xe8/0x150 [ 122.311980][ T7099] should_fail_ex+0x410/0x560 [ 122.312008][ T7099] should_failslab+0xa8/0x100 [ 122.312037][ T7099] __kmalloc_cache_noprof+0xa3/0x600 [ 122.312059][ T7099] ? nf_tables_commit+0x906/0xad60 [ 122.312082][ T7099] ? nf_tables_commit+0x906/0xad60 [ 122.312115][ T7099] nf_tables_commit+0x906/0xad60 [ 122.312149][ T7099] ? lock_acquire+0x115/0x350 [ 122.312171][ T7099] ? nft_pernet+0x23/0x240 [ 122.312208][ T7099] ? nft_pernet+0x23/0x240 [ 122.312231][ T7099] ? nft_pernet+0x23/0x240 [ 122.312263][ T7099] ? __pfx_nf_tables_commit+0x10/0x10 [ 122.312294][ T7099] ? rcu_is_watching+0x16/0xb0 [ 122.312320][ T7099] ? kfree+0x4d/0x650 [ 122.312348][ T7099] ? nft_trans_rule_add+0x315/0x440 [ 122.312381][ T7099] ? nf_tables_newrule+0x258d/0x28a0 [ 122.312425][ T7099] ? __pfx_nf_tables_newrule+0x10/0x10 [ 122.312450][ T7099] ? lock_acquire+0x115/0x350 [ 122.312497][ T7099] nfnetlink_rcv+0x1caf/0x28c0 [ 122.312566][ T7099] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 122.312613][ T7099] ? ref_tracker_free+0x689/0x830 [ 122.312666][ T7099] ? skb_clone+0x246/0x3a0 [ 122.312699][ T7099] ? __netlink_deliver_tap+0x811/0x860 [ 122.312739][ T7099] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.312767][ T7099] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.312802][ T7099] netlink_unicast+0x7bd/0x940 [ 122.312843][ T7099] netlink_sendmsg+0x813/0xb40 [ 122.312883][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.312923][ T7099] ? apparmor_socket_sendmsg+0x98/0x360 [ 122.312949][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.312977][ T7099] sock_sendmsg_nosec+0x13a/0x180 [ 122.313012][ T7099] ____sys_sendmsg+0x54e/0x850 [ 122.313045][ T7099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.313083][ T7099] ? import_iovec+0x73/0xa0 [ 122.313113][ T7099] ___sys_sendmsg+0x2a5/0x360 [ 122.313138][ T7099] ? __lock_acquire+0x747/0x2de0 [ 122.313165][ T7099] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.313234][ T7099] ? __fget_files+0x2a/0x420 [ 122.313262][ T7099] ? __fget_files+0x3a2/0x420 [ 122.313309][ T7099] __x64_sys_sendmsg+0x1b1/0x290 [ 122.313339][ T7099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.313392][ T7099] do_syscall_64+0x166/0x520 [ 122.313415][ T7099] ? trace_irq_disable+0x3b/0x140 [ 122.313435][ T7099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.313457][ T7099] ? clear_bhb_loop+0x70/0xc0 [ 122.313484][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.313505][ T7099] RIP: 0033:0x7f1a2039e159 [ 122.313525][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.313542][ T7099] RSP: 002b:00007f1a21221028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.313566][ T7099] RAX: ffffffffffffffda RBX: 00007f1a20625fa0 RCX: 00007f1a2039e159 [ 122.313581][ T7099] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 122.313595][ T7099] RBP: 00007f1a21221090 R08: 0000000000000000 R09: 0000000000000000 [ 122.313608][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.313621][ T7099] R13: 00007f1a20626038 R14: 00007f1a20625fa0 R15: 00007fff1f446d68 [ 122.313657][ T7099] [ 122.847899][ T7112] 8021q: VLANs not supported on gre0 [ 123.608495][ T7130] bond2: entered allmulticast mode [ 123.637216][ T7136] macvlan2: entered promiscuous mode [ 123.637241][ T7136] macvlan2: entered allmulticast mode [ 123.638198][ T7136] bond2: (slave macvlan2): Opening slave failed [ 123.842274][ T7151] netlink: 'syz.1.359': attribute type 21 has an invalid length. [ 123.846574][ T7151] __nla_validate_parse: 2 callbacks suppressed [ 123.846595][ T7151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.359'. [ 123.846633][ T7151] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 124.176319][ T7162] GUP no longer grows the stack in syz.0.363 (7162): 200000003000-20000000a000 (200000001000) [ 124.176356][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.0.363 Not tainted syzkaller #0 PREEMPT(full) [ 124.176380][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.176392][ T7162] Call Trace: [ 124.176401][ T7162] [ 124.176411][ T7162] dump_stack_lvl+0xe8/0x150 [ 124.176447][ T7162] __get_user_pages+0x23b6/0x2750 [ 124.176481][ T7162] ? lock_acquire+0x115/0x350 [ 124.176522][ T7162] ? __gup_longterm_locked+0xc3b/0x15c0 [ 124.176562][ T7162] __gup_longterm_locked+0xd52/0x15c0 [ 124.176591][ T7162] ? lock_acquire+0x115/0x350 [ 124.176631][ T7162] gup_fast_fallback+0x1d92/0x20e0 [ 124.176698][ T7162] ? __pfx_gup_fast_fallback+0x10/0x10 [ 124.176729][ T7162] ? lock_acquire+0x115/0x350 [ 124.176748][ T7162] ? is_valid_gup_args+0x11f/0x200 [ 124.176778][ T7162] ? get_user_pages_fast+0x4d/0xb0 [ 124.176808][ T7162] __iov_iter_get_pages_alloc+0x378/0xa40 [ 124.176844][ T7162] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 124.176881][ T7162] iov_iter_get_pages2+0x5e/0xa0 [ 124.176911][ T7162] __se_sys_vmsplice+0x7b5/0x1660 [ 124.176968][ T7162] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 124.177000][ T7162] ? __pfx_futex_wait+0x10/0x10 [ 124.177116][ T7162] do_syscall_64+0x166/0x520 [ 124.177141][ T7162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.177163][ T7162] ? clear_bhb_loop+0x70/0xc0 [ 124.177189][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.177208][ T7162] RIP: 0033:0x7f28c919e159 [ 124.177229][ T7162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.177245][ T7162] RSP: 002b:00007f28c9fad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 124.177269][ T7162] RAX: ffffffffffffffda RBX: 00007f28c9425fa0 RCX: 00007f28c919e159 [ 124.177285][ T7162] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 124.177299][ T7162] RBP: 00007f28c923503b R08: 0000000000000000 R09: 0000000000000000 [ 124.177312][ T7162] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 124.177325][ T7162] R13: 00007f28c9426038 R14: 00007f28c9425fa0 R15: 00007ffff0b6afa8 [ 124.177361][ T7162] [ 124.479561][ T7179] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 124.555192][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 124.662812][ T7181] gretap1: entered allmulticast mode [ 124.668493][ T7181] bond1: (slave gretap1): making interface the new active one [ 124.669436][ T7181] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 124.745891][ T7192] netlink: 'syz.3.368': attribute type 2 has an invalid length. [ 124.745914][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 124.923354][ T7192] ¿: entered promiscuous mode [ 125.070908][ T7197] netlink: 'syz.1.369': attribute type 2 has an invalid length. [ 125.072115][ T7197] netlink: 8256 bytes leftover after parsing attributes in process `syz.1.369'. [ 125.639715][ T7184] syzkaller1: entered promiscuous mode [ 125.639741][ T7184] syzkaller1: entered allmulticast mode [ 126.105334][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 126.269650][ T7229] syzkaller1: entered promiscuous mode [ 126.269677][ T7229] syzkaller1: entered allmulticast mode [ 126.474024][ T7229] lo speed is unknown, defaulting to 1000 [ 126.584334][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 126.928284][ T7231] netlink: 152 bytes leftover after parsing attributes in process `syz.3.377'. [ 127.959742][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 128.105466][ T7283] lo speed is unknown, defaulting to 1000 [ 128.105539][ T7283] lo speed is unknown, defaulting to 1000 [ 128.108084][ T7283] lo speed is unknown, defaulting to 1000 [ 128.139518][ T7283] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 128.139545][ T7283] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 128.139569][ T7283] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 128.201587][ T7284] batadv0: entered promiscuous mode [ 128.209900][ T7284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.220933][ T7283] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.261933][ T7284] 8021q: adding VLAN 0 to HW filter on device eth0 [ 128.280954][ T7284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 128.298627][ T7284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 128.301203][ T7284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 128.319371][ T7284] ip6gre1: left promiscuous mode [ 128.328299][ T5710] lo speed is unknown, defaulting to 1000 [ 128.348098][ T39] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 128.388503][ T7283] lo speed is unknown, defaulting to 1000 [ 128.403742][ T7283] lo speed is unknown, defaulting to 1000 [ 128.410201][ T7283] lo speed is unknown, defaulting to 1000 [ 128.425570][ T7283] lo speed is unknown, defaulting to 1000 [ 128.430324][ T7283] lo speed is unknown, defaulting to 1000 [ 128.479568][ T7290] netlink: 'syz.1.393': attribute type 2 has an invalid length. [ 128.544057][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 128.598584][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 128.598977][ T7293] 8021q: VLANs not supported on sit0 [ 128.623694][ T7293] ip6tnl1: entered allmulticast mode [ 129.372911][ T337] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.376427][ T337] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.402323][ T5808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.473535][ T5815] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.582277][ T5808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 130.118689][ T7340] gtp0: entered promiscuous mode [ 130.118717][ T7340] gtp0: entered allmulticast mode [ 130.236915][ T7343] __nla_validate_parse: 1 callbacks suppressed [ 130.236937][ T7343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.410'. [ 130.539809][ T7352] netlink: 27 bytes leftover after parsing attributes in process `syz.3.413'. [ 130.580785][ T7352] netlink: 27 bytes leftover after parsing attributes in process `syz.3.413'. [ 130.813484][ T7363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.416'. [ 130.928391][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'. [ 130.973282][ T202] IPVS: starting estimator thread 0... [ 131.030270][ T7377] tipc: Started in network mode [ 131.030304][ T7377] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 131.030365][ T7377] tipc: Enabling of bearer rejected, failed to enable media [ 131.065965][ T7374] IPVS: using max 27 ests per chain, 64800 per kthread [ 131.311236][ T7394] xt_cgroup: path and classid specified [ 131.461654][ T7400] netlink: 'syz.0.429': attribute type 6 has an invalid length. [ 131.615247][ T7403] syzkaller1: entered promiscuous mode [ 131.615274][ T7403] syzkaller1: entered allmulticast mode [ 131.663741][ T7403] lo speed is unknown, defaulting to 1000 [ 131.668453][ T7403] lo speed is unknown, defaulting to 1000 [ 132.187250][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 132.572277][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 132.654840][ T7420] ip6gretap0: entered promiscuous mode [ 132.712931][ T7423] netlink: 'syz.4.434': attribute type 1 has an invalid length. [ 132.718061][ T7423] netlink: 'syz.4.434': attribute type 1 has an invalid length. [ 132.816565][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 133.054870][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.772187][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 133.823853][ T7459] netlink: 830 bytes leftover after parsing attributes in process `syz.4.443'. [ 133.829207][ T7460] netlink: 172 bytes leftover after parsing attributes in process `syz.0.442'. [ 134.009624][ T7461] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.442'. [ 134.185825][ T7467] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 134.311212][ T7467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.363202][ T7478] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 134.683992][ T7467] bridge1: entered promiscuous mode [ 134.713664][ T7467] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 135.216780][ T7507] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 135.296145][ T7513] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 135.309246][ T7507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.325312][ T7512] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.343888][ T7512] bond2: (slave team0): Enslaving as a backup interface with an up link [ 135.413293][ T7518] __nla_validate_parse: 5 callbacks suppressed [ 135.413315][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 135.416413][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 135.464356][ T7513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.547456][ T7515] bond1: (slave gretap1): making interface the new active one [ 135.551331][ T7515] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 135.800769][ T7535] netlink: 260 bytes leftover after parsing attributes in process `syz.3.461'. [ 135.998779][ T7541] netlink: 148 bytes leftover after parsing attributes in process `syz.2.464'. [ 136.081596][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 136.158129][ T7543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.463'. [ 136.206753][ T7543] syzkaller1: entered promiscuous mode [ 136.206779][ T7543] syzkaller1: entered allmulticast mode [ 136.541572][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 137.488697][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 137.707617][ T7595] IPv6: sit1: Disabled Multicast RS [ 138.090987][ T7606] netlink: 'syz.0.479': attribute type 3 has an invalid length. [ 138.091010][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.479'. [ 138.149281][ T7609] netlink: 'syz.1.481': attribute type 3 has an invalid length. [ 138.149321][ T7609] netlink: 'syz.1.481': attribute type 7 has an invalid length. [ 138.170328][ T7615] ieee802154 phy0 wpan0: encryption failed: -90 [ 138.176096][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 138.414663][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.415129][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.441303][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.441756][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.461815][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.484004][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.484451][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.484900][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.488536][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.488988][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.787744][ T7636] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 138.848156][ T7636] bond2: (slave geneve2): making interface the new active one [ 138.849003][ T7636] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 138.869562][ T7637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.882320][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.883378][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.883404][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 138.883424][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.730803][ T7674] ip6gretap1: entered allmulticast mode [ 139.747038][ T7674] batman_adv: batadv0: Adding interface: ip6gretap1 [ 139.747058][ T7674] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.747090][ T7674] batman_adv: batadv0: Interface activated: ip6gretap1 [ 139.843371][ T7682] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 139.857229][ T7683] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 139.986862][ T7682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.032186][ T7674] bond2: (slave team0): Removing an active aggregator [ 140.053476][ T7674] bond2: (slave team0): Releasing backup interface [ 140.065991][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.069188][ T7674] bond3: (slave team0): making interface the new active one [ 140.076385][ T7674] bond3: (slave team0): Enslaving as an active interface with an up link [ 140.769866][ T7716] batadv_slave_1: entered promiscuous mode [ 140.805504][ T7712] batadv_slave_1: left promiscuous mode [ 141.217901][ T7731] __nla_validate_parse: 4 callbacks suppressed [ 141.217923][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 141.221440][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.222751][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.372518][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 141.665835][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 142.652420][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.690438][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 143.677793][ T7811] pim6reg1: entered promiscuous mode [ 143.677818][ T7811] pim6reg1: entered allmulticast mode [ 144.070948][ T7820] netlink: 'syz.3.541': attribute type 4 has an invalid length. [ 144.183198][ T7826] netlink: 'syz.1.539': attribute type 8 has an invalid length. [ 144.183219][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 144.474819][ T7842] net_ratelimit: 55 callbacks suppressed [ 144.474842][ T7842] ip_tables: iptables: counters copy to user failed while replacing table [ 145.246427][ T7867] netlink: 830 bytes leftover after parsing attributes in process `syz.1.551'. [ 145.465446][ T7875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'. [ 145.465557][ T7875] netlink: 56 bytes leftover after parsing attributes in process `syz.1.552'. [ 145.488020][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.550'. [ 145.510465][ T7875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'. [ 145.510547][ T7875] netlink: 56 bytes leftover after parsing attributes in process `syz.1.552'. [ 147.979645][ T7854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.424836][ T7902] tipc: Failed to remove unknown binding: 66,1,1/0:1887359595/1887359597 [ 148.446977][ T7902] __nla_validate_parse: 2 callbacks suppressed [ 148.446999][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 148.563643][ T7918] syzkaller0: entered promiscuous mode [ 148.563670][ T7918] syzkaller0: entered allmulticast mode [ 148.622276][ T7924] syzkaller0: entered promiscuous mode [ 148.622302][ T7924] syzkaller0: entered allmulticast mode [ 148.745484][ T7927] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 149.034921][ T7932] netlink: 'syz.0.573': attribute type 4 has an invalid length. [ 149.172185][ T7937] netlink: 'syz.4.574': attribute type 4 has an invalid length. [ 149.205589][ T5710] lo speed is unknown, defaulting to 1000 [ 149.205615][ T5710] syz0: Port: 1 Link DOWN [ 149.554810][ T7947] syz_tun: entered promiscuous mode [ 149.555820][ T7947] vlan2: entered promiscuous mode [ 150.260129][ T7956] netlink: 48 bytes leftover after parsing attributes in process `syz.1.579'. [ 150.484112][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 150.703254][ T7985] netlink: 6 bytes leftover after parsing attributes in process `syz.0.581'. [ 150.876042][ T7993] syzkaller0: entered promiscuous mode [ 150.876068][ T7993] syzkaller0: entered allmulticast mode [ 151.387827][ T8014] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 151.387858][ T8014] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 151.426418][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 152.135738][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 152.834305][ T8067] syzkaller0: entered promiscuous mode [ 152.834331][ T8067] syzkaller0: entered allmulticast mode [ 153.417809][ T8092] bridge_slave_0: left allmulticast mode [ 153.417840][ T8092] bridge_slave_0: left promiscuous mode [ 153.418089][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.469432][ T8092] bridge_slave_1: left allmulticast mode [ 153.469463][ T8092] bridge_slave_1: left promiscuous mode [ 153.486631][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.519258][ T8092] bond2: (slave veth0_to_bond): Releasing backup interface [ 153.519286][ T8092] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 153.566867][ T8092] bond0: (slave bond_slave_0): Releasing backup interface [ 153.603157][ T8092] bond0: (slave bond_slave_1): Releasing backup interface [ 153.637866][ T8092] team0: Port device team_slave_0 removed [ 153.681383][ T8092] team0: Port device team_slave_1 removed [ 153.684754][ T8092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.773570][ T8092] vlan0: entered promiscuous mode [ 153.806075][ T8092] team0: Port device vlan0 added [ 154.120355][ T8115] ip_tables: iptables: counters copy to user failed while replacing table [ 154.149168][ T8115] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 154.149191][ T8115] netlink: 76 bytes leftover after parsing attributes in process `syz.2.608'. [ 154.329325][ T8120] netlink: 'syz.3.609': attribute type 49 has an invalid length. [ 154.419627][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028e4ec00: rx timeout, send abort [ 154.533307][ T8120] ip6gretap0: left promiscuous mode [ 154.533922][ T8120] ip6gretap0: entered promiscuous mode [ 154.533941][ T8120] ip6gretap0: entered allmulticast mode [ 154.694536][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 154.839008][ T8135] tun0: tun_chr_ioctl cmd 1074025677 [ 154.839114][ T8135] tun0: linktype set to 0 [ 154.863973][ T8146] tun0: tun_chr_ioctl cmd 1074025677 [ 154.864082][ T8146] tun0: linktype set to 0 [ 154.866420][ T8144] tun0: tun_chr_ioctl cmd 1074025673 [ 154.884511][ T8145] xt_LOG: level 115 >= 8 [ 154.920109][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028e4d400: rx timeout, send abort [ 154.920828][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028e4ec00: abort rx timeout. Force session deactivation [ 154.987963][ T8148] syzkaller0: entered promiscuous mode [ 154.987989][ T8148] syzkaller0: entered allmulticast mode [ 155.420169][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028e4d400: abort rx timeout. Force session deactivation [ 155.879484][ T8189] syzkaller0: entered promiscuous mode [ 155.879511][ T8189] syzkaller0: entered allmulticast mode [ 156.306759][ T8202] tipc: Started in network mode [ 156.306795][ T8202] tipc: Node identity ac14140f, cluster identity 4711 [ 156.307120][ T8202] tipc: New replicast peer: 255.255.255.255 [ 156.307495][ T8202] tipc: Enabled bearer , priority 10 [ 156.308774][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 156.372551][ T8202] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 156.488825][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'. [ 156.519887][ T8212] netlink: 'syz.4.627': attribute type 21 has an invalid length. [ 156.519911][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 156.546669][ T8202] bond3: entered promiscuous mode [ 156.548760][ T8202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.569119][ T8212] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 156.600268][ T8202] bond3: (slave bridge2): making interface the new active one [ 156.600294][ T8202] bridge2: entered promiscuous mode [ 156.601587][ T8202] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 156.688626][ T8210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.051770][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 157.085300][ T8238] syzkaller0: entered promiscuous mode [ 157.085327][ T8238] syzkaller0: entered allmulticast mode [ 157.305668][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 157.359091][ T8248] bridge3: entered promiscuous mode [ 157.485339][ T8252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.487005][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 157.487643][ T5710] tipc: Node number set to 2886997007 [ 157.598994][ T8267] netlink: 'syz.2.641': attribute type 3 has an invalid length. [ 158.338005][ T8292] netlink: 'syz.4.647': attribute type 30 has an invalid length. [ 158.396259][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 158.652247][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 158.675171][ T8297] No such timeout policy "syz1" [ 160.136026][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 160.276843][ T8310] netlink: 'syz.4.652': attribute type 3 has an invalid length. [ 160.406758][ T8310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.652'. [ 160.445165][ T8322] tipc: Can't bind to reserved service type 1 [ 160.556868][ T8324] vti0: entered promiscuous mode [ 160.556893][ T8324] vti0: entered allmulticast mode [ 160.573193][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.589247][ T8324] netlink: 204 bytes leftover after parsing attributes in process `syz.3.655'. [ 160.605966][ T8326] netlink: 68 bytes leftover after parsing attributes in process `syz.4.657'. [ 160.693312][ T8328] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 160.830483][ T8328] bond3: entered promiscuous mode [ 160.838569][ T8328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.921040][ T8337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.921571][ T8337] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 160.921593][ T8337] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 160.951813][ T8337] bond3: (slave gre1): making interface the new active one [ 160.951841][ T8337] gre1: entered promiscuous mode [ 161.005286][ T8337] bond3: (slave gre1): Enslaving as an active interface with an up link [ 161.102535][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 161.298678][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 161.523621][ T8355] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 162.132979][ T8372] veth0: entered promiscuous mode [ 162.257833][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 162.542518][ T8383] netlink: 76 bytes leftover after parsing attributes in process `syz.1.669'. [ 162.542549][ T8383] nbd: illegal input index 65508 [ 162.627973][ T8385] macvlan0: entered promiscuous mode [ 162.659010][ T8383] netlink: 128 bytes leftover after parsing attributes in process `syz.1.669'. [ 162.745454][ T8387] netlink: 774 bytes leftover after parsing attributes in process `syz.2.673'. [ 162.820619][ T8394] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 163.355247][ T8416] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 163.405370][ T8421] netlink: 'syz.0.683': attribute type 3 has an invalid length. [ 163.481207][ T8423] netlink: 'syz.2.684': attribute type 2 has an invalid length. [ 163.481231][ T8423] netlink: 'syz.2.684': attribute type 1 has an invalid length. [ 163.489902][ T8423] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 163.489902][ T8423] Please contact the netfilter-devel mailing list or update your nftables rules. [ 163.567719][ T8430] syz_tun: entered allmulticast mode [ 163.573675][ T8423] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 163.594275][ T8424] tipc: Started in network mode [ 163.594311][ T8424] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 163.594369][ T8424] tipc: Enabling of bearer rejected, failed to enable media [ 163.661713][ T5623] Bluetooth: hci4: link tx timeout [ 163.661897][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.663991][ T5626] Bluetooth: hci4: link tx timeout [ 163.664007][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.669803][ T5626] Bluetooth: hci4: link tx timeout [ 163.669823][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.686150][ T5626] Bluetooth: hci4: link tx timeout [ 163.686170][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.801343][ T8438] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 163.953926][ T8444] netlink: 'syz.4.689': attribute type 7 has an invalid length. [ 163.955030][ T8444] netlink: 'syz.4.689': attribute type 7 has an invalid length. [ 163.957126][ T8444] batadv_slave_1: entered promiscuous mode [ 163.959477][ T8443] batadv_slave_1: left promiscuous mode [ 164.216432][ T8455] Cannot find set identified by id 2 to match [ 165.579783][ T8506] __nla_validate_parse: 15 callbacks suppressed [ 165.579803][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 165.692097][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 166.159934][ T8512] lo speed is unknown, defaulting to 1000 [ 166.174693][ T8512] lo speed is unknown, defaulting to 1000 [ 166.180151][ T13] IPVS: starting estimator thread 0... [ 166.262109][ T8537] IPVS: using max 25 ests per chain, 60000 per kthread [ 166.375312][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.711'. [ 166.381331][ T8533] vlan2: entered promiscuous mode [ 166.381356][ T8533] hsr0: entered promiscuous mode [ 166.381695][ T8533] vlan2: entered allmulticast mode [ 166.381712][ T8533] hsr0: entered allmulticast mode [ 166.381724][ T8533] hsr_slave_0: entered allmulticast mode [ 166.381740][ T8533] hsr_slave_1: entered allmulticast mode [ 166.729150][ T8559] tipc: Enabled bearer , priority 2 [ 167.276229][ T8582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.719'. [ 167.276275][ T8582] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 167.433733][ T8583] lo speed is unknown, defaulting to 1000 [ 167.433818][ T8583] lo speed is unknown, defaulting to 1000 [ 167.490418][ T8583] lo speed is unknown, defaulting to 1000 [ 167.491719][ T8583] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 167.491753][ T8583] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 167.491799][ T8583] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 167.619071][ T8583] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 167.806388][ T8583] lo speed is unknown, defaulting to 1000 [ 167.885467][ T8604] ip6erspan0: entered allmulticast mode [ 167.918318][ T8583] lo speed is unknown, defaulting to 1000 [ 167.977544][ T8583] lo speed is unknown, defaulting to 1000 [ 167.998320][ T8583] lo speed is unknown, defaulting to 1000 [ 168.049993][ T8583] lo speed is unknown, defaulting to 1000 [ 168.546087][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 168.546395][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 168.549842][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 168.551400][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 168.585608][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 168.587749][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 168.588942][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 168.591136][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 168.625466][ T8628] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 169.213579][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 169.246308][ T8650] xt_policy: output policy not valid in PREROUTING and INPUT [ 169.359114][ T8651] syzkaller0: entered promiscuous mode [ 169.359138][ T8651] syzkaller0: entered allmulticast mode [ 169.514360][ T8663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.565774][ T8682] bond4: (slave veth3): Enslaving as an active interface with a down link [ 169.893642][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.911369][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.957448][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.106608][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.135683][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.177605][ T8691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.177632][ T8691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.195853][ T8691] veth1_vlan: left promiscuous mode [ 170.197301][ T8691] veth0_vlan: left promiscuous mode [ 170.200084][ T8691] veth0_vlan: entered promiscuous mode [ 170.204528][ T8691] veth1_vlan: entered promiscuous mode [ 170.212559][ T8691] veth1_macvtap: left promiscuous mode [ 170.215079][ T8691] veth0_macvtap: left promiscuous mode [ 170.220925][ T8691] veth0_macvtap: entered promiscuous mode [ 170.225874][ T8691] veth1_macvtap: entered promiscuous mode [ 170.254019][ T8691] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 170.254949][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.256294][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.258763][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.264258][ T8691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.281094][ T8691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.291382][ T8691] bond2: left allmulticast mode [ 170.292631][ T8691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.306479][ T8691] bond3: left promiscuous mode [ 170.306501][ T8691] gre1: left promiscuous mode [ 170.308685][ T8691] vlan2: left promiscuous mode [ 170.308701][ T8691] hsr0: left promiscuous mode [ 170.309061][ T8691] vlan2: left allmulticast mode [ 170.309074][ T8691] hsr0: left allmulticast mode [ 170.309085][ T8691] hsr_slave_0: left allmulticast mode [ 170.309099][ T8691] hsr_slave_1: left allmulticast mode [ 170.326075][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.326122][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.335642][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.343590][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.348074][ T12] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 170.355861][ T12] bond4: (slave veth3): making interface the new active one [ 170.359330][ T12] bond4: active interface up! [ 170.373949][ T272] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.374056][ T272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.376402][ T272] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.376602][ T272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.506057][ T8663] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 170.509709][ T8663] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 170.685903][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 171.429680][ T8819] netlink: 44 bytes leftover after parsing attributes in process `syz.3.747'. [ 171.458545][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.747'. [ 172.294358][ T8842] bridge1: entered allmulticast mode [ 172.341264][ T8848] netlink: 19284 bytes leftover after parsing attributes in process `syz.4.756'. [ 172.386456][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 172.528109][ T8857] netlink: 'syz.2.757': attribute type 11 has an invalid length. [ 173.234883][ T8884] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 173.774057][ T8897] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 173.774098][ T8897] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 173.774138][ T8897] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 173.802411][ T8907] 8021q: VLANs not supported on sit0 [ 173.850936][ T8897] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.118627][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 174.228487][ T8902] smbdirect: ib_dev[syz2] renamed to [sys] [ 174.835552][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 175.189688][ T8954] pim6reg: entered allmulticast mode [ 175.206921][ T8952] pim6reg: left allmulticast mode [ 175.344227][ T8964] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.782'. [ 175.748634][ T8972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'. [ 175.749182][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 175.749204][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 175.750160][ T8974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.784'. [ 176.028127][ T8948] netlink: 67 bytes leftover after parsing attributes in process `syz.0.778'. [ 176.034809][ T8964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.034877][ T5617] lo speed is unknown, defaulting to 1000 [ 176.201501][ T8989] lo speed is unknown, defaulting to 1000 [ 176.233196][ T8989] lo speed is unknown, defaulting to 1000 [ 176.235231][ T8989] lo speed is unknown, defaulting to 1000 [ 176.381795][ T8997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.788'. [ 176.651181][ T8997] hsr_slave_1 (unregistering): left promiscuous mode [ 176.837800][ T59] tipc: Subscription rejected, illegal request [ 176.929461][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 176.930735][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 176.999064][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 177.015853][ T9019] SET target dimension over the limit! [ 177.157910][ T9023] validate_nla: 25 callbacks suppressed [ 177.157933][ T9023] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 177.158284][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 177.192892][ T9021] ip6gre1: entered promiscuous mode [ 177.192917][ T9021] ip6gre1: entered allmulticast mode [ 177.445628][ T9043] openvswitch: netlink: Flow key attribute not present in set flow. [ 177.524099][ T81] IPVS: starting estimator thread 0... [ 177.612404][ T9048] IPVS: using max 28 ests per chain, 67200 per kthread [ 177.739464][ T9045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.796958][ T9056] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 177.796988][ T9056] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.818823][ T9054] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 177.818849][ T9054] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 177.847109][ T9056] syzkaller0: entered promiscuous mode [ 177.847134][ T9056] syzkaller0: entered allmulticast mode [ 178.252775][ T9086] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.252956][ T9085] xt_hashlimit: size too large, truncated to 1048576 [ 178.376302][ T9095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.310186][ T9093] syzkaller0: renamed from gre2 [ 179.405979][ T5717] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 179.422384][ T9099] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 179.522705][ T81] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 179.522755][ T81] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 179.522789][ T81] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 179.533763][ T12] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 180.080705][ T9134] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 180.115100][ T9139] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 180.540938][ T9156] atomic_op ffff88803548f1e0 conn xmit_atomic 0000000000000000 [ 180.749335][ T9162] nbd0: detected capacity change from 0 to 63 [ 180.766241][ T9162] block nbd0: NBD_DISCONNECT [ 180.789436][ T9162] block nbd0: Disconnected due to user request. [ 180.789481][ T9162] block nbd0: shutting down sockets [ 180.791688][ T1964] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.791788][ T1964] Buffer I/O error on dev nbd0, logical block 1, async page read [ 180.791875][ T1964] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 180.791901][ T1964] Buffer I/O error on dev nbd0, logical block 2, async page read [ 180.791917][ T1964] Buffer I/O error on dev nbd0, logical block 3, async page read [ 180.881060][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.881200][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 180.901871][ T1939] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 180.901909][ T1939] Buffer I/O error on dev nbd0, logical block 0, async page read [ 180.901927][ T1939] Buffer I/O error on dev nbd0, logical block 1, async page read [ 180.913791][ T1939] Buffer I/O error on dev nbd0, logical block 2, async page read [ 180.913816][ T1939] Buffer I/O error on dev nbd0, logical block 3, async page read [ 180.916362][ T1964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.916393][ T1964] Buffer I/O error on dev nbd0, logical block 0, async page read [ 180.916510][ T1964] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.916535][ T1964] Buffer I/O error on dev nbd0, logical block 1, async page read [ 180.916627][ T1964] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.916730][ T1964] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.916845][ T1964] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.916973][ T1964] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 180.923195][ T5634] ldm_validate_partition_table(): Disk read failed. [ 180.927993][ T5634] Dev nbd0: unable to read RDB block 0 [ 180.935538][ T5634] nbd0: unable to read partition table [ 180.978325][ T5634] ldm_validate_partition_table(): Disk read failed. [ 180.979699][ T5634] Dev nbd0: unable to read RDB block 0 [ 180.981334][ T5634] nbd0: unable to read partition table [ 181.021598][ T9162] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 181.368930][ T9162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.399351][ T9174] bond5: (slave veth7): Enslaving as an active interface with a down link [ 181.524329][ T9179] __nla_validate_parse: 7 callbacks suppressed [ 181.524353][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 181.530303][ T9179] netlink: 'syz.3.830': attribute type 8 has an invalid length. [ 181.530322][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 181.579688][ T9179] veth1_to_team: entered promiscuous mode [ 181.582844][ T9179] gretap0: entered promiscuous mode [ 181.597043][ T9179] veth1_to_team: left promiscuous mode [ 181.608880][ T9179] gretap0: left promiscuous mode [ 181.895981][ T9189] geneve0: entered promiscuous mode [ 181.916259][ T9189] batman_adv: batadv0: Adding interface: macvlan0 [ 181.916280][ T9189] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.916312][ T9189] batman_adv: batadv0: Interface activated: macvlan0 [ 182.647379][ T9210] syzkaller0: entered promiscuous mode [ 182.647405][ T9210] syzkaller0: entered allmulticast mode [ 182.700820][ T9215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.841'. [ 182.730002][ T9214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.807338][ T9218] syzkaller0: entered promiscuous mode [ 182.807363][ T9218] syzkaller0: entered allmulticast mode [ 183.276348][ T9237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.846'. [ 183.386566][ T9242] netlink: 774 bytes leftover after parsing attributes in process `syz.4.848'. [ 183.649578][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 183.913583][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 183.998986][ T9268] syzkaller0: entered promiscuous mode [ 183.999005][ T9268] syzkaller0: entered allmulticast mode [ 184.265847][ T9275] syzkaller0: entered promiscuous mode [ 184.265873][ T9275] syzkaller0: entered allmulticast mode [ 184.520119][ T9280] netlink: 774 bytes leftover after parsing attributes in process `syz.4.860'. [ 184.668829][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 184.668861][ T9289] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 184.670047][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 184.670070][ T9288] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 184.673227][ T9292] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 184.815485][ T9292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.474739][ T9332] syzkaller0: entered promiscuous mode [ 185.474766][ T9332] syzkaller0: entered allmulticast mode [ 185.736922][ T9343] bridge0: port 3(macsec1) entered blocking state [ 185.738017][ T9343] bridge0: port 3(macsec1) entered disabled state [ 185.738179][ T9343] macsec1: entered allmulticast mode [ 185.738197][ T9343] bridge0: entered allmulticast mode [ 185.738237][ T9343] bridge0: entered promiscuous mode [ 185.984175][ T9343] macsec1: left allmulticast mode [ 185.984204][ T9343] bridge0: left allmulticast mode [ 186.170137][ T5730] bridge0: left promiscuous mode [ 187.580643][ T9390] __nla_validate_parse: 7 callbacks suppressed [ 187.580666][ T9390] netlink: 1 bytes leftover after parsing attributes in process `syz.0.885'. [ 187.737912][ T9393] netlink: 766 bytes leftover after parsing attributes in process `syz.4.886'. [ 187.834485][ T9397] xt_l2tp: invalid flags combination: 8 [ 187.870010][ T9396] syzkaller0: entered promiscuous mode [ 187.870036][ T9396] syzkaller0: entered allmulticast mode [ 187.915747][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915789][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915814][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915839][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915863][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915888][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915912][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915937][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915961][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.915986][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916010][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916035][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916059][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916083][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916118][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916142][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916166][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916191][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916215][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916239][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916264][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916288][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916312][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916336][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916361][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916385][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916409][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916451][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916476][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916501][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916528][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916555][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 187.916580][ T9397] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 188.244040][ T5815] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 188.255753][ T5815] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 188.648554][ T9431] tipc: Enabling of bearer rejected, already enabled [ 188.707130][ T9434] netlink: 'syz.2.894': attribute type 2 has an invalid length. [ 188.733927][ T9434] ip_tables: iptables: counters copy to user failed while replacing table [ 188.912959][ T9434] netlink: 'syz.2.894': attribute type 16 has an invalid length. [ 188.912984][ T9434] netlink: 'syz.2.894': attribute type 17 has an invalid length. [ 189.276318][ T9434] veth0_virt_wifi: left promiscuous mode [ 189.276346][ T9434] veth0_virt_wifi: left allmulticast mode [ 189.314080][ T9434] vlan0: left promiscuous mode [ 189.333215][ T9434] macvlan0: left promiscuous mode [ 189.404602][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 189.457581][ T9434] vlan2: left promiscuous mode [ 189.457607][ T9434] syz_tun: left promiscuous mode [ 189.478771][ T9434] bridge1: left promiscuous mode [ 189.494478][ T9434] bond3: left promiscuous mode [ 189.494503][ T9434] bridge2: left promiscuous mode [ 189.497303][ T9434] bridge3: left promiscuous mode [ 189.601100][ T9448] tipc: Enabling of bearer rejected, media not registered [ 189.681173][ T9462] netlink: 766 bytes leftover after parsing attributes in process `syz.1.900'. [ 189.978628][ T9475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.899'. [ 190.297336][ T9487] syzkaller0: entered promiscuous mode [ 190.297364][ T9487] syzkaller0: entered allmulticast mode [ 190.736532][ T5644] udevd[5644]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 190.816124][ T5634] udevd[5634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 190.838210][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 190.852261][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 190.972751][ T9507] netlink: 'syz.2.907': attribute type 3 has an invalid length. [ 190.972776][ T9507] netlink: 152 bytes leftover after parsing attributes in process `syz.2.907'. [ 190.985584][ T9506] netlink: 'syz.2.907': attribute type 3 has an invalid length. [ 190.985603][ T9506] netlink: 152 bytes leftover after parsing attributes in process `syz.2.907'. [ 191.018347][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.021430][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.032644][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.033309][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.043073][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.087867][ T9506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.128322][ T9519] netlink: 766 bytes leftover after parsing attributes in process `syz.0.911'. [ 191.293104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.293804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.359213][ T9520] gtp0: entered promiscuous mode [ 191.359241][ T9520] gtp0: entered allmulticast mode [ 191.503683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.550370][ T9509] netlink: 'syz.3.908': attribute type 7 has an invalid length. [ 191.550398][ T9509] netlink: 'syz.3.908': attribute type 8 has an invalid length. [ 191.933301][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 192.520913][ T9557] tipc: New replicast peer: 255.255.255.255 [ 192.521793][ T9557] tipc: Enabled bearer , priority 10 [ 192.549742][ T9554] syzkaller0: entered promiscuous mode [ 192.549768][ T9554] syzkaller0: entered allmulticast mode [ 192.627021][ T9564] __nla_validate_parse: 4 callbacks suppressed [ 192.627042][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 192.656665][ T9560] syzkaller1: entered promiscuous mode [ 192.656693][ T9560] syzkaller1: entered allmulticast mode [ 192.663929][ T9560] x_tables: duplicate underflow at hook 3 [ 193.190939][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 193.190964][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 193.290015][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 193.293202][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.293275][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.293350][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.293381][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.327616][ T9585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.642191][ T1235] tipc: Node number set to 4278321153 [ 193.789652][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.938'. [ 193.854773][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 193.932383][ T9608] net_ratelimit: 7 callbacks suppressed [ 193.932405][ T9608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.065794][ T9626] netlink: 'syz.4.943': attribute type 15 has an invalid length. [ 194.065819][ T9626] netlink: 666 bytes leftover after parsing attributes in process `syz.4.943'. [ 194.066786][ T9626] netlink: 'syz.4.943': attribute type 23 has an invalid length. [ 194.070770][ T9623] syzkaller0: entered promiscuous mode [ 194.070795][ T9623] syzkaller0: entered allmulticast mode [ 194.155657][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 194.155694][ T9627] netlink: 'syz.2.942': attribute type 20 has an invalid length. [ 194.155708][ T9627] netlink: 'syz.2.942': attribute type 21 has an invalid length. [ 194.498046][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.973264][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.109737][ T9667] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 195.111849][ T9667] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 195.135335][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.366814][ T9667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.757168][ T9695] syzkaller0: entered promiscuous mode [ 195.757193][ T9695] syzkaller0: entered allmulticast mode [ 196.012557][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.198521][ T9712] veth1_to_bond: entered allmulticast mode [ 196.199106][ T9712] veth1_to_bond: entered promiscuous mode [ 196.199497][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 196.260790][ T9712] veth1_to_bond (unregistering): left allmulticast mode [ 196.260837][ T9712] veth1_to_bond (unregistering): left promiscuous mode [ 196.284872][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 196.312622][ T9712] bond0: (slave bond_slave_1): Releasing backup interface [ 197.062607][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.692321][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.095818][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.175393][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.320118][ T9766] syzkaller0: entered promiscuous mode [ 198.320144][ T9766] syzkaller0: entered allmulticast mode [ 198.358280][ T9768] syzkaller0: entered promiscuous mode [ 198.358319][ T9768] syzkaller0: entered allmulticast mode [ 199.136616][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.215334][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 199.215372][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 199.264730][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 199.265113][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 199.267379][ T9805] syzkaller1: entered promiscuous mode [ 199.267399][ T9805] syzkaller1: entered allmulticast mode [ 199.638013][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.657269][ T9811] syzkaller0: entered promiscuous mode [ 199.657295][ T9811] syzkaller0: entered allmulticast mode [ 200.024833][ T9824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.993'. [ 200.174315][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.179846][ T9828] syzkaller0: entered promiscuous mode [ 200.179871][ T9828] syzkaller0: entered allmulticast mode [ 200.328043][ T81] nci: nci_rx_work: unknown MT 0x6 [ 200.330559][ T9836] netlink: 'syz.4.996': attribute type 4 has an invalid length. [ 200.330582][ T9836] netlink: 152 bytes leftover after parsing attributes in process `syz.4.996'. [ 200.379299][ T9836] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 200.614660][ T9853] syzkaller1: entered promiscuous mode [ 200.614686][ T9853] syzkaller1: entered allmulticast mode [ 201.212390][ T9608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.212923][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.235657][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 201.279114][ T9855] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.279207][ T9855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.279216][ T9855] IPv6: NLM_F_CREATE should be set when creating new route [ 201.279254][ T9855] IPv6: NLM_F_CREATE should be set when creating new route [ 201.279278][ T9855] IPv6: NLM_F_CREATE should be set when creating new route [ 201.280377][ T9855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.435988][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 201.436028][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 201.440957][ T9862] geneve2: entered promiscuous mode [ 201.440973][ T9862] geneve2: entered allmulticast mode [ 201.510289][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 201.692160][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 201.692247][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 201.692289][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 202.252718][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.095612][ T9830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.200483][ T9873] SET target dimension over the limit! [ 203.293090][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.336265][ T9875] lo speed is unknown, defaulting to 1000 [ 203.358215][ T9875] lo speed is unknown, defaulting to 1000 [ 203.403417][ T9875] lo speed is unknown, defaulting to 1000 [ 203.894601][ T9893] syzkaller0: entered promiscuous mode [ 203.894626][ T9893] syzkaller0: entered allmulticast mode [ 204.060284][ T9913] netlink: 'syz.4.1013': attribute type 2 has an invalid length. [ 204.252586][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.332882][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.428408][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.429141][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.624329][ T9897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.655118][ T9897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.082507][ T9897] bond1: left allmulticast mode [ 205.090525][ T9897] bond2: left allmulticast mode [ 205.095630][ T9941] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 205.096072][ T9897] geneve2: left allmulticast mode [ 205.098130][ T9897] ip6tnl1: left allmulticast mode [ 205.099965][ T9897] gtp0: left allmulticast mode [ 205.101338][ T9897] vti0: left allmulticast mode [ 205.101909][ T9897] bridge1: left allmulticast mode [ 205.184699][ T202] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.184739][ T202] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.184764][ T202] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 52857 - 0 [ 205.184807][ T202] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.184831][ T202] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.184857][ T202] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 52857 - 0 [ 205.184893][ T202] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.184918][ T202] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.184944][ T202] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 52857 - 0 [ 205.184982][ T202] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.185008][ T202] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.185033][ T202] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 52857 - 0 [ 205.353323][ T1235] lo speed is unknown, defaulting to 1000 [ 205.353352][ T1235] sys: Port: 1 Link DOWN [ 205.432204][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.986494][ T9969] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 205.986519][ T9969] __nla_validate_parse: 5 callbacks suppressed [ 205.986532][ T9969] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1023'. [ 206.401338][ T9986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1029'. [ 206.494233][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.100507][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1034'. [ 207.246840][T10006] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1034'. [ 207.270816][T10012] syzkaller0: entered promiscuous mode [ 207.270843][T10012] syzkaller0: entered allmulticast mode [ 207.283487][ T337] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.283537][ T337] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.283573][ T337] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.283608][ T337] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.323400][ T9922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.532720][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.778638][T10025] bridge0: entered allmulticast mode [ 207.781133][T10021] ip_tables: iptables: counters copy to user failed while replacing table [ 207.833151][T10025] bridge_slave_1: left allmulticast mode [ 207.833219][T10025] bridge_slave_1: left promiscuous mode [ 207.842488][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.891264][T10025] bridge_slave_0: left allmulticast mode [ 207.891296][T10025] bridge_slave_0: left promiscuous mode [ 207.894922][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.125702][T10036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1039'. [ 208.574866][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.622969][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 208.680372][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 209.080698][T10065] syzkaller0: entered promiscuous mode [ 209.080725][T10065] syzkaller0: entered allmulticast mode [ 209.147357][T10069] syzkaller0: entered promiscuous mode [ 209.147382][T10069] syzkaller0: entered allmulticast mode [ 209.212943][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.612263][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.334170][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.652212][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.696488][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.737616][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1052'. [ 211.737740][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1052'. [ 211.816294][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1052'. [ 212.316155][ T5620] udevd[5620]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 212.316352][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1060'. [ 212.316560][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1060'. [ 212.316772][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1060'. [ 212.317575][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1060'. [ 212.317806][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1060'. [ 212.318001][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1060'. [ 212.322503][ T5634] udevd[5634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 212.325849][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 212.370281][T10119] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 212.390412][ T31] audit: type=1800 audit(1789472098.856:2): pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1058" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1089 res=0 errno=0 [ 212.732401][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.070473][T10133] syzkaller0: entered promiscuous mode [ 213.070499][T10133] syzkaller0: entered allmulticast mode [ 213.159242][T10138] 8021q: VLANs not supported on gre0 [ 213.189921][T10140] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 213.298264][T10140] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 213.372609][ T9922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.678810][T10163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.679498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.192392][T10174] netlink: 'syz.0.1074': attribute type 10 has an invalid length. [ 214.270050][T10174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.290051][T10174] team0: Port device netdevsim1 added [ 214.577943][T10197] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 214.813487][ T9607] net_ratelimit: 1 callbacks suppressed [ 214.813509][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.849184][T10203] syzkaller0: entered promiscuous mode [ 214.849204][T10203] syzkaller0: entered allmulticast mode [ 214.968919][T10207] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 215.068377][T10207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.103059][T10211] bond6: (slave veth5): Enslaving as an active interface with a down link [ 215.116707][T10207] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 215.121083][T10207] bond6: (slave batadv1): making interface the new active one [ 215.122655][T10207] batadv1: entered promiscuous mode [ 215.128057][T10207] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 215.853497][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.136000][T10237] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 216.185565][T10237] openvswitch: netlink: Actions may not be safe on all matching packets [ 216.414147][ T9922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.896724][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.178710][T10270] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 217.178736][T10270] __nla_validate_parse: 15 callbacks suppressed [ 217.178751][T10270] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1097'. [ 217.296929][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'. [ 217.300890][T10267] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.301648][T10267] bridge0: port 3(bond7) entered blocking state [ 217.301818][T10267] bridge0: port 3(bond7) entered disabled state [ 217.333947][T10267] bond7: entered allmulticast mode [ 217.345799][T10267] bond7: entered promiscuous mode [ 217.398641][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'. [ 217.642526][ T39] IPVS: starting estimator thread 0... [ 217.742076][T10294] IPVS: using max 26 ests per chain, 62400 per kthread [ 217.782842][T10298] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1106'. [ 217.932814][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.941686][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'. [ 218.218104][T10306] syzkaller0: entered promiscuous mode [ 218.218129][T10306] syzkaller0: entered allmulticast mode [ 218.355197][T10311] lo speed is unknown, defaulting to 1000 [ 218.357147][T10311] lo speed is unknown, defaulting to 1000 [ 218.375570][T10311] lo speed is unknown, defaulting to 1000 [ 218.803141][T10326] tipc: Enabling of bearer rejected, failed to enable media [ 218.822720][ T9922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.972562][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.459079][ T9922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.470838][T10342] lo speed is unknown, defaulting to 1000 [ 219.480071][T10342] lo speed is unknown, defaulting to 1000 [ 219.493428][T10342] lo speed is unknown, defaulting to 1000 [ 219.505231][T10360] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1123'. [ 219.938109][T10374] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1125'. [ 219.977993][T10377] syz.4.1127: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 219.978191][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.4.1127 Not tainted syzkaller #0 PREEMPT(full) [ 219.978217][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.978229][T10377] Call Trace: [ 219.978238][T10377] [ 219.978249][T10377] dump_stack_lvl+0xe8/0x150 [ 219.978287][T10377] warn_alloc+0x24d/0x270 [ 219.978310][T10377] ? kasan_save_track+0x4f/0x80 [ 219.978332][T10377] ? kasan_save_track+0x3e/0x80 [ 219.978357][T10377] ? __pfx_warn_alloc+0x10/0x10 [ 219.978376][T10377] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 219.978403][T10377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.978448][T10377] __vmalloc_node_range_noprof+0x127/0x1540 [ 219.978506][T10377] ? rcu_is_watching+0x16/0xb0 [ 219.978539][T10377] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 219.978570][T10377] ? __kmalloc_cache_noprof+0x321/0x600 [ 219.978592][T10377] ? __kmalloc_cache_noprof+0x14d/0x600 [ 219.978613][T10377] ? xskq_create+0x56/0x220 [ 219.978639][T10377] xskq_create+0x148/0x220 [ 219.978660][T10377] ? xsk_init_queue+0x8a/0xe0 [ 219.978691][T10377] xsk_init_queue+0x8a/0xe0 [ 219.978734][T10377] xsk_setsockopt+0x52a/0x960 [ 219.978768][T10377] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.978799][T10377] ? __pfx_aa_sk_perm+0x10/0x10 [ 219.978837][T10377] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 219.978863][T10377] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.978896][T10377] do_sock_setsockopt+0x17c/0x1b0 [ 219.978929][T10377] __x64_sys_setsockopt+0x13d/0x1b0 [ 219.978962][T10377] do_syscall_64+0x166/0x520 [ 219.978985][T10377] ? trace_irq_disable+0x3b/0x140 [ 219.979006][T10377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.979028][T10377] ? clear_bhb_loop+0x70/0xc0 [ 219.979055][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.979078][T10377] RIP: 0033:0x7f1a2039e159 [ 219.979100][T10377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.979118][T10377] RSP: 002b:00007f1a21221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.979142][T10377] RAX: ffffffffffffffda RBX: 00007f1a20625fa0 RCX: 00007f1a2039e159 [ 219.979157][T10377] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 219.979171][T10377] RBP: 00007f1a2043503b R08: 0000000000000004 R09: 0000000000000000 [ 219.979185][T10377] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.979233][T10377] R13: 00007f1a20626038 R14: 00007f1a20625fa0 R15: 00007fff1f446d68 [ 219.979275][T10377] [ 220.013407][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.114608][T10377] Mem-Info: [ 220.114624][T10377] active_anon:6094 inactive_anon:0 isolated_anon:0 [ 220.114624][T10377] active_file:0 inactive_file:43285 isolated_file:0 [ 220.114624][T10377] unevictable:0 dirty:243 writeback:0 [ 220.114624][T10377] slab_reclaimable:10714 slab_unreclaimable:102253 [ 220.114624][T10377] mapped:29640 shmem:578 pagetables:1294 [ 220.114624][T10377] sec_pagetables:0 bounce:0 [ 220.114624][T10377] kernel_misc_reclaimable:0 [ 220.114624][T10377] free:1322052 free_pcp:10799 free_cma:0 [ 220.114678][T10377] Node 0 active_anon:24376kB inactive_anon:0kB active_file:0kB inactive_file:172936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118560kB dirty:972kB writeback:0kB shmem:2312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13884kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 220.114731][T10377] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 220.114779][T10377] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.114837][T10377] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 220.114877][T10377] Node 0 DMA32 free:1339604kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24376kB inactive_anon:0kB active_file:0kB inactive_file:172936kB unevictable:0kB writepending:972kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:43196kB local_pcp:19032kB free_cma:0kB [ 220.114935][T10377] lowmem_reserve[]: 0 0 0 0 0 [ 220.114970][T10377] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.115023][T10377] lowmem_reserve[]: 0 0 0 0 0 [ 220.115059][T10377] Node 1 Normal free:3933244kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.115120][T10377] lowmem_reserve[]: 0 0 0 0 0 [ 220.115154][T10377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 220.115311][T10377] Node 0 DMA32: 1480*4kB (UME) 744*8kB (UME) 207*16kB (UME) 729*32kB (UME) 97*64kB (UME) 75*128kB (UME) 21*256kB (UM) 26*512kB (UME) 15*1024kB (UM) 5*2048kB (UM) 303*4096kB (UM) = 1339696kB [ 220.115474][T10377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 220.115573][T10377] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 7*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3933244kB [ 220.115728][T10377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.115743][T10377] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.115758][T10377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.115774][T10377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.115789][T10377] 43859 total pagecache pages [ 220.115797][T10377] 0 pages in swap cache [ 220.115804][T10377] Free swap = 124996kB [ 220.115811][T10377] Total swap = 124996kB [ 220.115819][T10377] 2097051 pages RAM [ 220.115826][T10377] 0 pages HighMem/MovableOnly [ 220.115833][T10377] 428781 pages reserved [ 220.115840][T10377] 0 pages cma reserved [ 220.716805][T10396] macsec1: entered promiscuous mode [ 220.716833][T10396] hsr0: entered promiscuous mode [ 220.919906][T10398] geneve2: entered promiscuous mode [ 220.931145][T10395] 8021q: VLANs not supported on gre0 [ 221.020117][T10402] syzkaller0: entered promiscuous mode [ 221.020144][T10402] syzkaller0: entered allmulticast mode [ 221.057445][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.370411][T10421] netlink: 'syz.0.1136': attribute type 49 has an invalid length. [ 221.370868][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 221.509828][T10420] gtp1: entered promiscuous mode [ 221.509853][T10420] gtp1: entered allmulticast mode [ 221.522865][T10420] team0: Device gtp1 is of different type [ 221.927393][T10434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'. [ 222.061841][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 222.092472][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.492817][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.503518][T10492] bond3: option min_links: invalid value (18446744073709551612) [ 222.503548][T10492] bond3: option min_links: allowed values 0 - 2147483647 [ 222.506002][T10492] bond3 (unregistering): Released all slaves [ 222.539124][T10503] __nla_validate_parse: 1 callbacks suppressed [ 222.539148][T10503] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1148'. [ 222.603674][T10506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.605590][T10506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.606545][T10506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.606845][T10506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.807742][T10507] syzkaller0: entered promiscuous mode [ 222.807771][T10507] syzkaller0: entered allmulticast mode [ 222.917496][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1153'. [ 222.917784][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1153'. [ 223.021266][T10514] bond3: entered promiscuous mode [ 223.177752][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.207186][T10531] netlink: 'syz.1.1155': attribute type 1 has an invalid length. [ 223.207211][T10531] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1155'. [ 223.317192][T10527] syzkaller0: entered promiscuous mode [ 223.317220][T10527] syzkaller0: entered allmulticast mode [ 223.641873][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1159'. [ 223.719334][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1159'. [ 223.905632][T10556] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1162'. [ 224.228329][T10568] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 224.253138][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.534248][T10552] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 224.667888][T10568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.673430][T10467] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.691670][T10458] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.691725][T10458] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.691763][T10458] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.780310][T10569] bond4: (slave veth1): Enslaving as an active interface with a down link [ 224.914801][T10580] syzkaller0: entered promiscuous mode [ 224.914828][T10580] syzkaller0: entered allmulticast mode [ 225.292762][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.319060][T10591] lo speed is unknown, defaulting to 1000 [ 225.336302][T10591] lo speed is unknown, defaulting to 1000 [ 225.349963][T10591] lo speed is unknown, defaulting to 1000 [ 225.358705][ T202] IPVS: starting estimator thread 0... [ 225.404309][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 225.404336][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 225.442468][T10608] IPVS: using max 26 ests per chain, 62400 per kthread [ 225.537437][ T9922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.332547][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.432824][ T202] batadv1: left promiscuous mode [ 226.528618][T10642] syzkaller0: entered promiscuous mode [ 226.528644][T10642] syzkaller0: entered allmulticast mode [ 226.897933][T10652] digital: digital_start_poll: Unknown protocol [ 226.899993][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 227.373629][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.588550][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 227.617831][T10671] ip6t_hbh: unknown flags AD [ 227.639706][T10671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1189'. [ 227.642046][T10681] bond3: entered promiscuous mode [ 227.642516][T10681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.694495][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 227.741278][T10684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.741843][T10684] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 227.754247][T10684] bond3: (slave gre1): Error -95 calling set_mac_address [ 227.827773][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 227.837781][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 227.876425][T10681] bond3 (unregistering): Released all slaves [ 228.232916][T10689] bond3: entered promiscuous mode [ 228.235294][T10689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.242644][T10691] bond3 (unregistering): Released all slaves [ 228.412455][ T9922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.412547][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.572511][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.003711][T10728] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 229.158185][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1207'. [ 229.170537][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 229.231261][T10733] bond7: (slave veth9): Enslaving as an active interface with a down link [ 229.267831][T10728] bond7: (slave veth11): Enslaving as an active interface with a down link [ 229.319143][T10739] veth13: entered allmulticast mode [ 229.367713][T10739] bond7: (slave veth13): Enslaving as an active interface with a down link [ 229.388017][T10748] IPv6: Can't replace route, no match found [ 229.388442][T10748] IPv6: Can't replace route, no match found [ 229.452751][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.527692][T10750] syzkaller0: entered promiscuous mode [ 229.527718][T10750] syzkaller0: entered allmulticast mode [ 229.566069][T10754] netlink: 'syz.4.1218': attribute type 11 has an invalid length. [ 229.746776][T10762] netlink: 'syz.4.1220': attribute type 1 has an invalid length. [ 229.787806][T10762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.909508][ T9922] s`z1: Port: 1 Link DOWN [ 230.248041][T10756] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 230.266398][T10756] bond8 (unregistering): Released all slaves [ 230.306793][T10770] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1221'. [ 230.494116][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.839411][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.932855][T10786] netlink: 9428 bytes leftover after parsing attributes in process `syz.4.1226'. [ 231.159864][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 231.221180][T10793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.260335][T10793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.265193][T10793] bond0 (unregistering): Released all slaves [ 231.532677][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.623623][ T9927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.504805][T10805] syzkaller0: entered promiscuous mode [ 232.504831][T10805] syzkaller0: entered allmulticast mode [ 232.573436][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.851033][T10859] netlink: 'syz.2.1243': attribute type 11 has an invalid length. [ 233.297621][T10862] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 233.328409][T10863] macsec1: entered promiscuous mode [ 233.477605][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'. [ 233.614294][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.745299][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 233.924970][T10878] FAULT_INJECTION: forcing a failure. [ 233.924970][T10878] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 233.925016][T10878] CPU: 0 UID: 0 PID: 10878 Comm: syz.3.1248 Not tainted syzkaller #0 PREEMPT(full) [ 233.925042][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.925055][T10878] Call Trace: [ 233.925063][T10878] [ 233.925074][T10878] dump_stack_lvl+0xe8/0x150 [ 233.925111][T10878] should_fail_ex+0x410/0x560 [ 233.925142][T10878] prepare_alloc_pages+0x223/0x600 [ 233.925173][T10878] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 233.925201][T10878] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.925230][T10878] ? __pfx_policy_nodemask+0x10/0x10 [ 233.925259][T10878] ? __schedule+0x17f1/0x58f0 [ 233.925288][T10878] alloc_pages_mpol+0x21e/0x390 [ 233.925322][T10878] alloc_pages_noprof+0xb1/0x2b0 [ 233.925351][T10878] pte_alloc_one+0x22/0x370 [ 233.925389][T10878] do_pte_missing+0x13c8/0x34b0 [ 233.925429][T10878] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 233.925466][T10878] handle_mm_fault+0x1a53/0x3750 [ 233.925506][T10878] ? handle_mm_fault+0xf1/0x3750 [ 233.925546][T10878] ? __pfx_handle_mm_fault+0x10/0x10 [ 233.925597][T10878] ? lock_mm_and_find_vma+0xa7/0x340 [ 233.925633][T10878] do_user_addr_fault+0x746/0x1340 [ 233.925673][T10878] exc_page_fault+0x6a/0xc0 [ 233.925697][T10878] asm_exc_page_fault+0x26/0x30 [ 233.925717][T10878] RIP: 0010:move_addr_to_user+0x49/0x210 [ 233.925741][T10878] Code: 00 44 89 fe e8 a8 57 21 f8 41 81 ff 80 00 00 00 0f 87 90 01 00 00 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c5 4c 0f 47 e8 0f 01 cb <45> 8b 65 00 45 39 e7 44 89 e5 41 0f 4c ef bf ff ff ff ff 89 ee e8 [ 233.925758][T10878] RSP: 0018:ffffc9000d64fd48 EFLAGS: 00050283 [ 233.925778][T10878] RAX: 00007ffffffff000 RBX: 0000200000000180 RCX: ffff88807da33e80 [ 233.925794][T10878] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000080 [ 233.925807][T10878] RBP: ffffc9000d64feb8 R08: ffffffff907a317f R09: 1ffffffff20f462f [ 233.925823][T10878] R10: dffffc0000000000 R11: fffffbfff20f4630 R12: ffffc9000d64fdc0 [ 233.925836][T10878] R13: 0000200000000080 R14: ffffc9000d64fdc0 R15: 000000000000000c [ 233.925869][T10878] ? move_addr_to_user+0x28/0x210 [ 233.925894][T10878] __sys_getsockname+0x20f/0x2d0 [ 233.925921][T10878] ? __pfx___sys_getsockname+0x10/0x10 [ 233.925960][T10878] ? __pfx_ksys_write+0x10/0x10 [ 233.926000][T10878] __x64_sys_getsockname+0x7d/0x90 [ 233.926025][T10878] do_syscall_64+0x166/0x520 [ 233.926046][T10878] ? trace_irq_disable+0x3b/0x140 [ 233.926066][T10878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.926086][T10878] ? clear_bhb_loop+0x70/0xc0 [ 233.926113][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.926133][T10878] RIP: 0033:0x7f2e6359e159 [ 233.926151][T10878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.926168][T10878] RSP: 002b:00007f2e644e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 233.926188][T10878] RAX: ffffffffffffffda RBX: 00007f2e63826180 RCX: 00007f2e6359e159 [ 233.926203][T10878] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 233.926216][T10878] RBP: 00007f2e644e8090 R08: 0000000000000000 R09: 0000000000000000 [ 233.926228][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.926241][T10878] R13: 00007f2e63826218 R14: 00007f2e63826180 R15: 00007fffa69d8808 [ 233.926276][T10878] [ 234.455359][T10887] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 234.653672][ T9927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.655003][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.187278][T10923] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 235.187304][T10923] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1257'. [ 235.452147][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.692263][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.898245][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 236.698721][T10949] FAULT_INJECTION: forcing a failure. [ 236.698721][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 236.698759][T10949] CPU: 0 UID: 0 PID: 10949 Comm: syz.3.1262 Not tainted syzkaller #0 PREEMPT(full) [ 236.698783][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.698796][T10949] Call Trace: [ 236.698805][T10949] [ 236.698814][T10949] dump_stack_lvl+0xe8/0x150 [ 236.698851][T10949] should_fail_ex+0x410/0x560 [ 236.698881][T10949] should_failslab+0xa8/0x100 [ 236.698907][T10949] ? ptlock_alloc+0x20/0x70 [ 236.698935][T10949] kmem_cache_alloc_noprof+0xa1/0x600 [ 236.698969][T10949] ? ptlock_alloc+0x20/0x70 [ 236.699003][T10949] ptlock_alloc+0x20/0x70 [ 236.699031][T10949] pte_alloc_one+0x7a/0x370 [ 236.699059][T10949] do_pte_missing+0x13c8/0x34b0 [ 236.699097][T10949] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 236.699134][T10949] handle_mm_fault+0x1a53/0x3750 [ 236.699175][T10949] ? handle_mm_fault+0xf1/0x3750 [ 236.699217][T10949] ? __pfx_handle_mm_fault+0x10/0x10 [ 236.699281][T10949] ? lock_mm_and_find_vma+0xa7/0x340 [ 236.699316][T10949] do_user_addr_fault+0x746/0x1340 [ 236.699360][T10949] exc_page_fault+0x6a/0xc0 [ 236.699393][T10949] asm_exc_page_fault+0x26/0x30 [ 236.699415][T10949] RIP: 0010:move_addr_to_user+0x49/0x210 [ 236.699438][T10949] Code: 00 44 89 fe e8 a8 57 21 f8 41 81 ff 80 00 00 00 0f 87 90 01 00 00 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c5 4c 0f 47 e8 0f 01 cb <45> 8b 65 00 45 39 e7 44 89 e5 41 0f 4c ef bf ff ff ff ff 89 ee e8 [ 236.699457][T10949] RSP: 0018:ffffc9000dde7d48 EFLAGS: 00050283 [ 236.699478][T10949] RAX: 00007ffffffff000 RBX: 0000200000000180 RCX: ffff888079698000 [ 236.699493][T10949] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000080 [ 236.699506][T10949] RBP: ffffc9000dde7eb8 R08: ffffffff907a317f R09: 1ffffffff20f462f [ 236.699522][T10949] R10: dffffc0000000000 R11: fffffbfff20f4630 R12: ffffc9000dde7dc0 [ 236.699536][T10949] R13: 0000200000000080 R14: ffffc9000dde7dc0 R15: 000000000000000c [ 236.699570][T10949] ? move_addr_to_user+0x28/0x210 [ 236.699594][T10949] __sys_getsockname+0x20f/0x2d0 [ 236.699622][T10949] ? __pfx___sys_getsockname+0x10/0x10 [ 236.699661][T10949] ? __pfx_ksys_write+0x10/0x10 [ 236.699701][T10949] __x64_sys_getsockname+0x7d/0x90 [ 236.699727][T10949] do_syscall_64+0x166/0x520 [ 236.699748][T10949] ? trace_irq_disable+0x3b/0x140 [ 236.699769][T10949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.699789][T10949] ? clear_bhb_loop+0x70/0xc0 [ 236.699815][T10949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.699835][T10949] RIP: 0033:0x7f2e6359e159 [ 236.699889][T10949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.699906][T10949] RSP: 002b:00007f2e644e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 236.699928][T10949] RAX: ffffffffffffffda RBX: 00007f2e63826180 RCX: 00007f2e6359e159 [ 236.699943][T10949] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 236.699957][T10949] RBP: 00007f2e644e8090 R08: 0000000000000000 R09: 0000000000000000 [ 236.699969][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.699983][T10949] R13: 00007f2e63826218 R14: 00007f2e63826180 R15: 00007fffa69d8808 [ 236.700017][T10949] [ 236.738281][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.316189][T10965] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.318064][T10965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.465932][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'. [ 237.494084][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'. [ 238.299387][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1277'. [ 238.414210][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.607325][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 238.624605][ T9922] lo speed is unknown, defaulting to 1000 [ 238.624635][ T9922] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 238.832186][T10460] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.832227][T10460] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 238.832255][T10460] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.832293][T10460] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.832319][T10460] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 238.832354][T10460] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.832388][T10460] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.832414][T10460] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 238.832440][T10460] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.832473][T10460] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.832496][T10460] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 238.832520][T10460] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.050508][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1282'. [ 239.287478][T11039] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 239.287506][T11039] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1285'. [ 239.359829][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1283'. [ 239.453968][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.833479][T11063] nft_compat: unsupported protocol 5 [ 239.834434][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 240.234159][T11072] syzkaller0: entered promiscuous mode [ 240.234187][T11072] syzkaller0: entered allmulticast mode [ 240.516931][T11083] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1296'. [ 240.641633][T11081] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1294'. [ 240.641664][T11081] nbd: must specify at least one socket [ 240.827130][T11092] netlink: 'syz.1.1298': attribute type 8 has an invalid length. [ 240.827158][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 240.973943][T11096] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 241.071561][T11096] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.109829][T11103] vlan3: entered promiscuous mode [ 241.109855][T11103] bond4: entered promiscuous mode [ 241.110031][T11103] vlan3: entered allmulticast mode [ 241.110047][T11103] bond4: entered allmulticast mode [ 241.249106][T11096] bond4: (slave bridge2): making interface the new active one [ 241.249134][T11096] bridge2: entered promiscuous mode [ 241.249334][T11096] bridge2: entered allmulticast mode [ 241.250643][T11096] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 241.616592][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 241.936046][T11143] syzkaller0: entered promiscuous mode [ 241.936073][T11143] syzkaller0: entered allmulticast mode [ 242.120920][T11145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1307'. [ 242.429544][T11173] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 242.847218][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.847502][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.847746][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.908427][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.908748][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.908996][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.909268][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.911149][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.911459][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 242.911758][T11196] netlink: 'syz.4.1317': attribute type 11 has an invalid length. [ 243.132088][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 243.477538][T11227] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 243.710562][T11209] syzkaller1: entered promiscuous mode [ 243.710588][T11209] syzkaller1: entered allmulticast mode [ 244.014658][T11245] __nla_validate_parse: 1 callbacks suppressed [ 244.014683][T11245] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1327'. [ 244.014805][T11245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1327'. [ 244.324759][T11265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1331'. [ 244.378332][T11252] smbdirect: ib_dev[sys] removed [ 244.504503][T11269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1330'. [ 244.909907][T11282] syzkaller0: entered promiscuous mode [ 244.909935][T11282] syzkaller0: entered allmulticast mode [ 245.528013][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 245.980892][T11318] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1342'. [ 246.333127][T11329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.712914][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 246.715394][T11344] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1345'. [ 248.686123][T11318] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 249.028221][T11375] syzkaller0: entered promiscuous mode [ 249.028248][T11375] syzkaller0: entered allmulticast mode [ 249.192302][T11380] [ 249.196533][T11380] ============================= [ 249.202854][T11380] WARNING: suspicious RCU usage [ 249.208209][T11380] syzkaller #0 Not tainted [ 249.213032][T11380] ----------------------------- [ 249.218069][T11380] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 249.226678][T11380] [ 249.226678][T11380] other info that might help us debug this: [ 249.226678][T11380] [ 249.237095][T11380] [ 249.237095][T11380] rcu_scheduler_active = 2, debug_locks = 1 [ 249.245319][T11380] locks held by syz.1.1351/11380: 1, last CPU#1: [ 249.251674][T11380] #0: ffffffff8ed5ca98 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: __bpf_prog_test_run_raw_tp+0x1d3/0xa60 [ 249.263695][T11380] [ 249.263695][T11380] stack backtrace: [ 249.269612][T11380] CPU: 1 UID: 0 PID: 11380 Comm: syz.1.1351 Not tainted syzkaller #0 PREEMPT(full) [ 249.279013][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.289091][T11380] Call Trace: [ 249.292392][T11380] [ 249.295351][T11380] dump_stack_lvl+0xe8/0x150 [ 249.299990][T11380] lockdep_rcu_suspicious+0x140/0x1d0 [ 249.305402][T11380] get_callchain_entry+0x2b7/0x3c0 [ 249.310549][T11380] get_perf_callchain+0xd5/0x880 [ 249.315529][T11380] ? __pfx_get_perf_callchain+0x10/0x10 [ 249.321119][T11380] __bpf_get_stack+0x375/0xae0 [ 249.325926][T11380] ? __pfx___bpf_get_stack+0x10/0x10 [ 249.331248][T11380] ? lock_acquire+0x115/0x350 [ 249.335959][T11380] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 249.341626][T11380] bpf_get_stack_raw_tp+0x1a4/0x210 [ 249.346867][T11380] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 249.352354][T11380] __bpf_prog_test_run_raw_tp+0x421/0xa60 [ 249.358128][T11380] ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10 [ 249.364418][T11380] bpf_prog_test_run_raw_tp+0x579/0x840 [ 249.370013][T11380] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 249.376128][T11380] ? __fget_files+0x2a/0x420 [ 249.380769][T11380] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 249.386881][T11380] bpf_prog_test_run+0x2c5/0x340 [ 249.391843][T11380] __sys_bpf+0xa22/0xd90 [ 249.396121][T11380] ? __pfx___sys_bpf+0x10/0x10 [ 249.400922][T11380] ? do_futex+0x3e7/0x4e0 [ 249.405317][T11380] ? rcu_is_watching+0x16/0xb0 [ 249.410112][T11380] __x64_sys_bpf+0xba/0xd0 [ 249.414548][T11380] do_syscall_64+0x166/0x520 [ 249.419163][T11380] ? trace_irq_disable+0x3b/0x140 [ 249.424198][T11380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.430297][T11380] ? clear_bhb_loop+0x70/0xc0 [ 249.434997][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.440906][T11380] RIP: 0033:0x7f802239e159 [ 249.445329][T11380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.464944][T11380] RSP: 002b:00007f80232e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.473374][T11380] RAX: ffffffffffffffda RBX: 00007f8022625fa0 RCX: 00007f802239e159 [ 249.481374][T11380] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 249.489357][T11380] RBP: 00007f802243503b R08: 0000000000000000 R09: 0000000000000000 [ 249.497339][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.505333][T11380] R13: 00007f8022626038 R14: 00007f8022625fa0 R15: 00007ffc823f13b8 [ 249.513332][T11380] [ 255.934691][ T1306] ieee802154 phy0 wpan0: encryption failed: -22