last executing test programs: 3.142726968s ago: executing program 1 (id=2799): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x9, @local, 0xa}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x24000087, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) 2.918612197s ago: executing program 3 (id=2804): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x7f, 0x1d8, 0xb}) (async) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000100)=0x80) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x5, {{0x2, 0x4e20, @multicast1}}}, 0x88) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24040004) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0)={r3, 0xf0, "c4b6430d40b8c02b360595ec6e7ab95cd45d21d68fe45c007ee2458cd433f2ba8e08ccd0a83900daf066782d262410e096678546d9da3444efaf039f0c323ab5766a35e3c31820968c760a47f09c85624e54b09c3132ab3910b5827f553e0ee7699a9d7098cbf4fa7dadfc219508eddb351fa975d476cdd8cd229acd4cff33f87f49f8d7a8b48867fc43650011bb7d136b72e6e5245398a11ac2699ab8c0bbea6ff0671b6467b0e56a16b5605639aa9374ba54cb3cbfc8355aac76d547785c81f49f7e5f1225ad7ea9693cbf09b5fd33cfcd0ead616325c10a5d8f919c4f9acd50263a225e794b93795b4b0715775c1a"}, &(0x7f00000004c0)=0xf8) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4) (async) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="315187a22050", @void, {@llc={0x4, {@snap={0x1, 0xaa, "04", "b9b30d", 0xa00, "db35c2ce7e28b35326af7ccc2e8878faed19da239310b437f1885ee108b9936af75fc9e29fc0b6d01128e13f9b4aa4e6"}}}}}, &(0x7f00000005c0)={0x1, 0x3, [0xf4c, 0x291, 0x2bd, 0x5c6]}) (async) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000600)={r1, 0xffff8000}) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000640), 0x4) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000680)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x280300, 0x0) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000700)={0x2b, 0x1}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x496400, 0x0) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x2e, 0x3, 0x8, 0x6}]}) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000800)={0x1, 'bond0\x00', 0x4}, 0x18) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x400240, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000880)={0x41424344}, 0x1, 0xf2) (async) syz_extract_tcp_res$synack(&(0x7f00000008c0)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r6, &(0x7f0000000900)={@void, @void, @ipv4=@tcp={{0xb, 0x4, 0x0, 0x2, 0x62, 0x67, 0x0, 0x5, 0x6, 0x0, @rand_addr=0x64010100, @loopback, {[@end, @noop, @cipso={0x86, 0x8, 0x3, [{0x6, 0x2}]}, @generic={0x82, 0xb, "f758ce00b7b21593dd"}]}}, {{0x4e21, 0x4e20, r7, r8, 0x1, 0x0, 0xc, 0x8, 0x7, 0x0, 0x2, {[@sack={0x5, 0xa, [0x10000, 0x3]}, @exp_fastopen={0xfe, 0x10, 0xf989, "657dcb60467a2089eb6032a2"}]}}, {"85b6a0746040"}}}}, 0x62) (async) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f00000009c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, &(0x7f0000000980)=[{0x11, 0x1ff, 0x5}, {0x1a, 0x101, 0x4f0}]}) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000a00)=[0x1, 0x8000]) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb8, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa33}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd409}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x45}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000c00)) 2.418510329s ago: executing program 3 (id=2809): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f0000001600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xffffffffffffff10, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) close(r0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100003000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32=r8], 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) 2.195654621s ago: executing program 1 (id=2815): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000611051000000000095000000000000002d236587a0aa27d3dabb03a7ee445c7a115d512bd079978a15"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2840f600b41300"/20, @ANYRES32, @ANYBLOB="0000b5bb61720000000b00000004158b693300", @ANYRES64=r0, @ANYRES32, @ANYRESOCT=r0], 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x4, 0x5, 0x48, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x40, 0x8, 0x331}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x4, 0x5, 0x48, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x40, 0x8, 0x331}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) (async) close(r2) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x25dfdc00, 0x4}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) (async) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc) (async) bind$netlink(r2, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) (async) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) socket$netlink(0x10, 0x3, 0x9) (async) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0x10) 2.174179506s ago: executing program 4 (id=2816): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') (async) sendmmsg$unix(r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) 1.991982469s ago: executing program 1 (id=2819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffeee, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xb}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040e0}, 0x4890) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000000f14010028bd6ff2fbdbdf2509004500756d6164000000000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40c8}, 0x400d0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1000}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) close(0x3) 1.927107102s ago: executing program 4 (id=2820): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newtfilter={0x23c, 0x2c, 0x10, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xa}, {0x10, 0x1}, {0x7, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xff}, @TCA_RATE={0x6, 0x5, {0x6}}, @filter_kind_options=@f_u32={{0x8}, {0x200, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4b}, @TCA_U32_LINK={0x8, 0x3, 0xfffffe00}, @TCA_U32_MARK={0x10, 0xa, {0x4278, 0x9}}, @TCA_U32_ACT={0x1bc, 0x7, [@m_gact={0xbc, 0xd, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xa6ab, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x31b, 0xffffffffcffffffd}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x5f4, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x2, 0x20000000, 0x0, 0x1}}]}, {0x46, 0x6, "dec19ee8a88c84514a06a6c179bc3628afeb5333e519f6f0e22482627bf2f420e43ccd59fa6ab9fe7808c7852980bf08c44989540621280862c8c4acf76744224e00"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_connmark={0xfc, 0x3, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x8, 0x80f8, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3a, 0x7, 0x0, 0x8, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x5, 0x7fff, 0xb}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x687, 0xcb, 0x8, 0x0, 0xfff}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x10000000, 0xf0a, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fd, 0xf5, 0x1, 0x8001, 0x6a}, 0x5}}]}, {0x24, 0x6, "12e2ba4f3c3ad63964b15bc2b5face79440a8b1a93d5c17052130c64b9766049"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_ACT={0x4}, @TCA_U32_HASH={0x8, 0x2, 0x401}, @TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}]}}]}, 0x23c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='@:$[_$\xa9\x00', 0x480000, 0x0, 0x4, 0x0, 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500007100", @ANYRES32=r10, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0xc441}, 0x40040d4) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x1, 0x2c, 0x1, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r11 = accept4(r0, 0x0, 0x0, 0x800) r12 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r12, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r13 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r13, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f17b0242e7d121d45e3a446cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xce}], 0x3, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x1018}], 0x1, 0x408c4) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000000500)={{0xa, 0x4e22, 0x1000, @private1, 0x3}, {0xa, 0x4e20, 0x8, @private0, 0xffffff3d}, 0xffffffffffffffff, {[0x5, 0x8001, 0xffffff7f, 0x2, 0x2, 0x5, 0x6, 0xffff]}}, 0x5c) r14 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) 1.643875724s ago: executing program 4 (id=2824): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="070017"], 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x240040c0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2dd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20044400) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r8) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042bbd7000fbdbdf25130000004c0009800800010001000000080002000600000008000200050000000800020000000033080002000400000008000100010000000800010008000000080002000d000000080100006c030000"], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0x2f}, {0xffffffffffffffc6, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x0, 0x3b, @broadcast}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r13, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x1407, 0x4, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"/336], 0x90}}, 0x22008040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.642411354s ago: executing program 1 (id=2825): socketpair(0x22, 0x1, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x9, 0x4, 0x8, 0x5}, {0x101, 0x0, 0x1, 0x7}, {0xc, 0x47, 0x0, 0x21}, {0xf, 0x81, 0xa, 0x7}]}, 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180), 0x0) 1.431965126s ago: executing program 0 (id=2827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r1 = socket(0x11, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}], 0x1}], 0x1, 0x8001) accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r1) 1.431721504s ago: executing program 3 (id=2828): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040072019500"/30], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002003800080000fe800000000000000000000000000000fe8000000000000000000000000000aa73000103000008"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000800)={{r0, &(0x7f0000000000)='wlan0\x00', 0x0, &(0x7f0000000180)={@align=0x3b, {0x76, 0xf91, 0x3f64, 0x10}}, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8d7}, 0x5, &(0x7f00000006c0)=[{0x2, 0x54, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="4bdd0d9d051194ca2bd62a0362cd451dc61ec293d0695e7e8aee98218b880d96c8b57bba616336bb5918c5a61217469aba85828f444a01b2a8d1ba15e9c9bc2b9d3e5fa6c2c0fb884f20bee2d48db0795c2cf9c0c2a660698c14d1b0ef44fb708f4b6e612d5f1e2d8b26915ba57c94b2deae6a040c70767fabcb3e89b0694ca44e4c52bdd69ed24bd7bd5e1e3be9c1b6b922f1bf17c4", 0x96, 0x1a}, {0x3, 0x2, &(0x7f00000003c0)='wlan0\x00', &(0x7f0000000400)="ce9c8db270393e8e670844975d2a69bf42363ce97021a573af324e7acfa6ac6818ebe7ca4c3f3dc68d94f49855c91dfed409847a93e193d33d084529d80730f57711398172", 0x45}, {0x3, 0x5, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="ef1d21783ce12193dd5f9d520e40ad9efaebb6e14db7a6b999ee04042d965a9aae3cbb1c4f8868526e1b279fceb6", 0x2e, 0x30}, {0x3, 0x4, &(0x7f0000000500)='[\x00', &(0x7f0000000540)="c8950c8bd1a16643f306114cda", 0xd, 0x2}, {0x2, 0x4, &(0x7f0000000580)='/$@*}%-\x00', &(0x7f00000005c0)="c2b6c1f25bd9fd9775c83cf0351658bf7714cf5d5698a204320918da7815081c5f0452a62d63669825d10c541935dbaa648686402961b32924d472fb2dc776d1720ae14b4987746abce7f4e169df616eef50e8f5675adf5c15d45bd03c0baa9e0a63845ac3920926ef551d19e5c9afe27431d38de19764c7f552afeb84fd77f9c9fc8d04aca8daab9d047f7e5e602da83c2012f3ea170ed32a0dc5206eedd77c3b17dbd6a50b0c8d218f9730beeaabc4441a3bc1fa23213525863b83a4f84a3d0b59d994f59cf80eca63bb31d3e2da52088d6c883086d7214e6038546250910d", 0xe0}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x20, &(0x7f0000000880)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b70800000a0000007b8af0ffb4b70000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000050000000000000001000080b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185000000a00000000000000000000008520000001000000744a000008000000"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x60}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) 1.365811525s ago: executing program 1 (id=2829): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000200)=0x7b8d, 0x4) vmsplice(r1, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/11, @ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.290361259s ago: executing program 0 (id=2830): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x25, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="0095000100000000c80000000000c028859abebfdddb4fb12ea4b3d465e1724cc5"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x80000000}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}]}}]}, 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000340)={0x8, 0x20e, 0x446, 0x7, r12}, 0x10) 1.243105586s ago: executing program 2 (id=2831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) unshare(0x20020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) read(r1, 0x0, 0x0) 1.240148338s ago: executing program 4 (id=2832): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x78392403d8da3499, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0xa}, {0x6}, {0xf, 0x9}}}, 0x24}}, 0x40004) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) write$tun(r4, &(0x7f0000002bc0)={@void, @void, @eth={@link_local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "00fcac", 0x117d, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, {[@srh={0x3c, 0x6, 0x4, 0x3, 0xa0, 0x48, 0x8, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x2, [0x7764, 0x9], "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"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x9, 0x9, 0x8], "c4e6f757c9ccd6267cc42892b88e802344af8fb5c21fc4440203c585dd2421b5c98e2f8bea5b6d9df6064285a9daa8db88c5ad9a447abf35e970c9"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "e2cf998c7de48a84d71a2981d1ea7fc2e708e646325e7967a3a36d23f5473d1937d5e7287cf3ec24f372891e99d7b0c8bcd762de1393a8cf269545303bcd2a5ff5622598df281694d4e4d67cc77f8d039e91097f65c3a61257e010da05d211887d076fd7d46e9e13a1fb263b61a6282317c6c6336e8ef420eba0dfdc24ccb9b0e0cd9fb2a78b3ee79eb531deab61e08db8"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x8, 0x3, 0x0, 0x3, 0x7, 0x9}, 0x1, {0x54f820a4}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, 0x1}, 0x2, {0xff, 0x46, 0x3, 0x1d, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "f3a38f767030739a517a5199486744a24d17b0378337fb557c180845e61de1785989f01978a63c25e3b4e4"}}}}}}}}, 0x11b3) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x34, r7, 0x1, 0x170bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) (rerun: 32) 1.20908274s ago: executing program 3 (id=2833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000016001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f00000001c0)="3853e826a7a77474bcd351016eb9d380772d8e632c1caa2b460e620af33d449058078f8b43329ecded6c623a40fbce21f9c9211b5a5609f32aaf001d5080947671cbb13114fde796181c4b121210d85eec9a529e79d30fbb2b6a94a054a18a3921243485015532dd26b24dd09b130bfb0c3e81775b04f4a52cadd8f386c312725a8a6a4f74302c840346640f860588c0a71b4a36f69f45baa965e648c97eb2b75a5abbe603e536e2d548bff2f4678572ddb745e1686106353e848e79ceddf50825089749921425f4bf90c573b91118c1b18cbf7cca8f07", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) 1.07846902s ago: executing program 0 (id=2834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x1d8, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x1a8, 0x2, [@TCA_BASIC_EMATCHES={0x1a4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x1, 0x6, 0x2, "2ed9f7ebce02"}}}, @TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x6}, "690ca8c2c0b24c774622964f73bef4c7ed5329af8aef8ed27ca6617e4ea3b84eaddc65af4e41c72609d2a41e02e48bcf13bcbe85a37d80d7ab53dd83bd5dc6841563b74559f3180aa81704cb28c3a39f95a06c5bcc183d4f9c152c828e9ecca577fef9865f0e30964e8ec926c9355f91647fb1ac272aeafadcbe457e048c2cc2f16eea5adc1a3fc43e267449eff0cf06744a9c6a53"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x40, 0x8, 0x5ca9}, {0x0, 0x2, 0x7}}}, @TCF_EM_IPT={0x44, 0x3, 0x0, 0x0, {{0x1ff, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0x1c, 0x3, 0x0, 0x0, {{0x400, 0x4, 0x80}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="75d3", @TCF_META_TYPE_VAR="87b16664", @TCF_META_TYPE_VAR="7a1e2b41bc5d"]}]}}, @TCF_EM_CONTAINER={0x18, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x4}, "c045cc54856619f0e2"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x2e}, {0x1, 0x9, 0x1, "b55d84a813d7972414"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0x200, 0x3, 0x1, "712de6"}}}]}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r8, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0xc1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x48, r7, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000180)={r9, 0x7, 0x1, "efbc7d7ac68061ab3fd657fba9d44821e34c839260c27bdfd5f486ace1470dbbe22dc1a90d6b62178e905301843c3f3e8aaca186c7caedffd0d7ce1b3c67df"}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.0271892s ago: executing program 2 (id=2835): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x2a0, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x194, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x275}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x96d}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5e}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "bb83b35866be"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x1a:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x25, 0x4, "3a380a1f6ebc582f58e23383f087537fc5398817199bf81279d57064628d8b5ca1"}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x440}, 0x40) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10c3, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x8000) 1.026982936s ago: executing program 3 (id=2836): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24008000) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080218000001080211f8138c00001b006c0000000000090308000100000000000000"], 0x26) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140c, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x1001) 917.690764ms ago: executing program 4 (id=2837): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8f", 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) 793.644866ms ago: executing program 2 (id=2838): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0)) 711.018983ms ago: executing program 4 (id=2839): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x100000000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0xe1447000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x2000}) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @window={0x3, 0x86f5, 0x5}, @timestamp, @timestamp, @timestamp, @sack_perm], 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2c4, r6, 0x208, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="66b8b7242dfca481c25364bed0ac25b3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="df8eb5545dc0baf6ddfb9fc5dabdf7f754669c91fda21d8b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d9e65c2cb03ddf5b1bcc1ba192db0fec36076bde512210c0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4209051f02e52ea0200505cf0493b54aa2805cf5414d7a64"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="320be75593972db32a9cdaf8cdc776b5b9d712003f2bd7e7d1399f8619f1e851"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="84143536b684eb3186cdbe8232bfa9d0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a6055412d1288a4c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="71107bded5cbd6ee4c2c05b0a1db11dd71a77ef0232f8ecb"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52ae5ef3879b72770adf6a61337a61d1"}]}, @NL80211_ATTR_REKEY_DATA={0xdc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "df249e854a441a27"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="021fe8f62d1d18e1f86283f58ec7ebde0417a28d88bec204"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e209bedc2d9d65d1add95faba9acc9ad"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b90aeef18595f865eba8363be6f20a98658cacff60676cdf"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3c5d31733e8496883b8b1f32676467a8375cc2cf1105533d2e4dc5265de8f170"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb82fc1523d4506b45c0e1d6766653f690e74745345d26ca92b08e3593387e46"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3a0b0945e0519e89"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0e102b9fba3b443300d0b2a7fc692f7d9da680d2b6beb8c38dc17b97f7fe662b"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8eafac8a044ef7c2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9c7bad8adfa0350be45d5e163f143872fb0a0ad3e5314d9a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e53d5853a315bd7246920fbddf2bdf81"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "46ed488724bc10e7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d62c3ef2dc408d7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="94045187bd575fc1452bf1027a3e613747f5fc142f016cd85f13df724a6e54f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ed6b2c21412a03930384e9307bc22b94"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d3b7e36419806c72f87516e8653a62f5ce2665d8d713957487c51cc2e8d5fd35"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dead067f8b266d09"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="343ffc898fcda2cf04b698692424161cc8623c691d7b129c"}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4) getpeername$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x3, 0x0, 0x46, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x7800, 0x101, 0x7f}}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x84, r7, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a80), r3) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r11, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048080}, 0x84) r12 = accept4(r2, &(0x7f0000000b80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000c00)=0x80, 0x800) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_generic(r12, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2f4, 0x27, 0x2, 0x70bd2c, 0x25dfdbfd, {0x18}, [@nested={0x2c9, 0xd0, 0x0, 0x1, [@generic="b02adbece264d4e93102f25b6ae1ea13efd4c2eff96a27639c54c0d7250ff519001e59490312e4b8b5a052bfffea8f992cd4dcd5cc347a9466d0174f59c937ad3160efb98c540355c79fbcd9458ada985831db20384570b58575e59747cb76f9b1d237901b9cc4d46d4470cab788809ae61908943f9a86f6e2352fe507ab3cf410ef1fde51d3217853eee9d8", @generic="4cc50d3c9a83930a50724cf4f866c11d0d65c3ca5f64bd1c6679c75e78e4f7b9a36838570e5f0323b5fa0ef82ecf3177b0e7f70b043448d3acd0180c4858fbabcac5a75f95731f6184edc80dc1f3bc0370fd502da77be9acee1bff3285dbb6034adb7bc14d25926c6a2c29494340d7350be8d35fd28f5838058ff1e8902f0ede583a1448e901a7fd42c9bc7afe081a8c6cb26976a0", @typed={0x64, 0xa2, 0x0, 0x0, @binary="a17d14f3e823d2e988b304bc6d67978bbeb020001817e55ebbc46aecf17a9b5cea95e54e3f9df50c61e13006413b87ef5c3348acc90b9058a501e74803c11f625ccac27ef91886d8e9212cc50a5f349c10b44abd7f557e38bf68abb73e7fbce6"}, @generic="ba8914e04440063a51b7f15a7da87f2db7c8ac095d31cfcca8455253674e18dc06882902ba7401fdd2e100b790cf789b9089aecb42941600a0", @generic="140150b39e54aab44f03e757650f355d1fe03ef36a32b768f889f35467198004387570a9be1039c1b7c0c97980bf961d8dcdf70610d418", @generic="6931cb5f2fc97af04b0ab3c6b88a9eaf33a71f9f59d70c8fce20cbce50f9ca2ab464042ae01e558b460d4c7283d5da231c4cf1b6b7f6eee4e3e9dde36ad595ad49192a75951df713ddfa2fcd92978253c9481de2e99bbfc03a2201c9f592e42262ac1d71024b070b9cc375b8bc4255a71f28d0147b5de81bc8fc2a6b909ec27f850a49c3363d8926934c89f9cd2538c2079748f494209cc1ed088dbddedb7f001a4bc42b504a8c59c8b873287d317f43c916981e3e03259fdf3479cb5d97472a3eb986537ce6d19863b7351780910172"]}, @generic="2733dfa287bfccfda339dcb7ddfb5cfa6b5b"]}, 0x2f4}}, 0x20008800) splice(r3, &(0x7f0000001000), r3, &(0x7f0000001040)=0x8, 0x9, 0xe) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r13, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x78, r14, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hugetlbfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40054}, 0x4084) getsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000001200), &(0x7f0000001240)=0x4) 709.149533ms ago: executing program 2 (id=2840): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) accept4(r1, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f0000000200)=0x80, 0x800) 607.183556ms ago: executing program 0 (id=2842): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 593.256126ms ago: executing program 2 (id=2843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x9e}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff47}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x37}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x23}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x440080c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f00000007c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)=@deltclass={0x84, 0x29, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff2, 0xb}, {0x5, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x1}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @TCA_RATE={0x6, 0x5, {0x47, 0xfc}}, @TCA_RATE={0xfffffe65, 0x5, {0xdc, 0x7}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_mq={0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) sendmmsg$unix(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x3, 0x79, 0x10, 0x8, 0x3}, [@ldst={0x3, 0x0, 0x1, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r10, @sk_msg=0x7}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r12}, &(0x7f0000000400), &(0x7f0000000500)=r13}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r12}, &(0x7f0000000800), &(0x7f0000000840)=r11}, 0x20) 363.31602ms ago: executing program 2 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/19, 0x13) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000001880)=@gcm_256={{0x304}, "e1a8375b6f203410", "88f8e480a74417a80f7404e3d15f0249400522bb3e39a720b4775071312959c9", "81e850ca", "a555464693bd1103"}, 0x38) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) 363.061832ms ago: executing program 0 (id=2845): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r1, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 362.257962ms ago: executing program 3 (id=2846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x10, 0xa, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004a000000000a00"/20], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000300000001dcdf250100000008000100", @ANYRES8=r6, @ANYBLOB="440002ff7f00000000000069640700000000000000000000000000000000000000000000000500030003000000080005000000000000000600", @ANYRES32=r11, @ANYBLOB], 0x60}, 0x1, 0x400000000000000}, 0x40010) getpeername$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x5c, 0x24, 0x10, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xfff2, 0xffff}, {0xfff9, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0xfffff92d, 0x2, 0x81, 0x2, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x16ee568d, 0x0, 0x8000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008c2}, 0x0) socket$packet(0x11, 0x3, 0x300) 330.468508ms ago: executing program 1 (id=2847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 0s ago: executing program 0 (id=2848): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x60, 0x0, &(0x7f0000000f00)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) kernel console output (not intermixed with test programs): eue, screwing up backlog [ 226.165577][T11261] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 226.241177][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.491878][T11273] __nla_validate_parse: 1 callbacks suppressed [ 226.491896][T11273] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1457'. [ 226.863476][T11287] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1463'. [ 227.013790][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.028600][T11294] syz.2.1464: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 227.044283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.104887][T11294] CPU: 1 UID: 0 PID: 11294 Comm: syz.2.1464 Not tainted syzkaller #0 PREEMPT(full) [ 227.104919][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.104941][T11294] Call Trace: [ 227.104954][T11294] [ 227.104962][T11294] dump_stack_lvl+0xe8/0x150 [ 227.104993][T11294] warn_alloc+0x249/0x340 [ 227.105023][T11294] ? stack_trace_save+0xa9/0x100 [ 227.105058][T11294] ? __pfx_warn_alloc+0x10/0x10 [ 227.105094][T11294] ? kasan_save_track+0x4f/0x80 [ 227.105120][T11294] ? kasan_save_track+0x3e/0x80 [ 227.105145][T11294] ? __kasan_kmalloc+0x93/0xb0 [ 227.105170][T11294] ? __kmalloc_cache_noprof+0x31c/0x660 [ 227.105205][T11294] ? xskq_create+0x56/0x170 [ 227.105230][T11294] ? xsk_setsockopt+0x54c/0x990 [ 227.105251][T11294] ? do_sock_setsockopt+0x17c/0x1b0 [ 227.105277][T11294] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 227.105302][T11294] ? do_syscall_64+0x15f/0xf80 [ 227.105335][T11294] __vmalloc_node_range_noprof+0x132/0x1750 [ 227.105399][T11294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 227.105436][T11294] ? __kasan_kmalloc+0x93/0xb0 [ 227.105470][T11294] vmalloc_user_noprof+0xad/0xe0 [ 227.105498][T11294] ? xskq_create+0xbf/0x170 [ 227.105524][T11294] xskq_create+0xbf/0x170 [ 227.105553][T11294] xsk_init_queue+0x8a/0xe0 [ 227.105580][T11294] xsk_setsockopt+0x54c/0x990 [ 227.105608][T11294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 227.105631][T11294] ? __pfx_aa_sk_perm+0x10/0x10 [ 227.105661][T11294] ? aa_sock_opt_perm+0xff/0x1a0 [ 227.105692][T11294] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 227.105719][T11294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 227.105745][T11294] do_sock_setsockopt+0x17c/0x1b0 [ 227.105777][T11294] __x64_sys_setsockopt+0x13d/0x1b0 [ 227.105807][T11294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.105830][T11294] do_syscall_64+0x15f/0xf80 [ 227.105860][T11294] ? clear_bhb_loop+0x40/0x90 [ 227.105885][T11294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.105905][T11294] RIP: 0033:0x7fa7e879ce59 [ 227.105933][T11294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.105950][T11294] RSP: 002b:00007fa7e9628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 227.105971][T11294] RAX: ffffffffffffffda RBX: 00007fa7e8a15fa0 RCX: 00007fa7e879ce59 [ 227.105985][T11294] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 227.105998][T11294] RBP: 00007fa7e8832d6f R08: 0000000000000004 R09: 0000000000000000 [ 227.106010][T11294] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.106023][T11294] R13: 00007fa7e8a16038 R14: 00007fa7e8a15fa0 R15: 00007fff241bab88 [ 227.106057][T11294] [ 227.383689][T11294] Mem-Info: [ 227.388014][T11294] active_anon:5870 inactive_anon:8 isolated_anon:0 [ 227.388014][T11294] active_file:2442 inactive_file:40310 isolated_file:0 [ 227.388014][T11294] unevictable:768 dirty:105 writeback:0 [ 227.388014][T11294] slab_reclaimable:10441 slab_unreclaimable:102771 [ 227.388014][T11294] mapped:30297 shmem:1292 pagetables:1528 [ 227.388014][T11294] sec_pagetables:0 bounce:0 [ 227.388014][T11294] kernel_misc_reclaimable:0 [ 227.388014][T11294] free:1265451 free_pcp:17053 free_cma:0 [ 227.474543][T11294] Node 0 active_anon:23480kB inactive_anon:32kB active_file:9768kB inactive_file:161036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125188kB dirty:420kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13548kB pagetables:6056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 227.514935][T11294] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 227.612661][T11294] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.691039][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.747269][T11294] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 227.772098][T11294] Node 0 DMA32 free:1167488kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23768kB inactive_anon:32kB active_file:9768kB inactive_file:161036kB unevictable:1536kB writepending:420kB zspages:0kB present:3129332kB managed:2552604kB mlocked:0kB bounce:0kB free_pcp:63128kB local_pcp:35200kB free_cma:0kB [ 227.840747][T11294] lowmem_reserve[]: 0 0 0 0 0 [ 227.860756][T11294] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 227.933927][T11294] lowmem_reserve[]: 0 0 0 0 0 [ 227.949926][T11294] Node 1 Normal free:3944488kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.011089][T11294] lowmem_reserve[]: 0 0 0 0 0 [ 228.027214][T11294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 228.067708][T11294] Node 0 DMA32: 5547*4kB (UME) 2988*8kB (UME) 1490*16kB (UME) 888*32kB (UME) 486*64kB (UME) 381*128kB (UME) 271*256kB (UM) 185*512kB (UME) 124*1024kB (UME) 87*2048kB (UM) 137*4096kB (UM) = 1208620kB [ 228.087755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.126192][T11294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 228.150612][T11294] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 8*16kB (UM) 8*32kB (UM) 8*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944488kB [ 228.191474][T11294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.212475][T11294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.256890][T11294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.279713][T11294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.300532][T11294] 44040 total pagecache pages [ 228.310745][T11294] 0 pages in swap cache [ 228.319485][T11294] Free swap = 124996kB [ 228.328361][T11294] Total swap = 124996kB [ 228.337203][T11294] 2097051 pages RAM [ 228.351136][T11294] 0 pages HighMem/MovableOnly [ 228.360330][T11319] netlink: 'syz.4.1469': attribute type 1 has an invalid length. [ 228.376440][T11294] 427118 pages reserved [ 228.380852][T11294] 0 pages cma reserved [ 228.402634][ T7254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.442253][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1465'. [ 228.460984][T11304] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1465'. [ 228.674225][T11326] pim6reg: entered allmulticast mode [ 228.735878][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 229.149382][T11352] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1476'. [ 229.185012][T11355] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1476'. [ 229.258392][T11349] bond0: entered promiscuous mode [ 229.263739][T11349] bond0: entered allmulticast mode [ 229.269508][T11349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.339645][T11362] netlink: 'syz.1.1478': attribute type 11 has an invalid length. [ 229.367405][T11362] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1478'. [ 229.430213][T11363] netlink: 'syz.2.1477': attribute type 11 has an invalid length. [ 229.481064][T11363] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1477'. [ 230.488311][T11407] netlink: 'syz.0.1491': attribute type 1 has an invalid length. [ 230.635044][ T7256] net_ratelimit: 7 callbacks suppressed [ 230.635063][ T7256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.789592][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 230.809084][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.027112][T11428] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 231.047181][T11428] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 231.060933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.761047][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.843053][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.920148][T11389] C: entered promiscuous mode [ 231.941195][T11389] tunl0: entered promiscuous mode [ 231.958720][T11389] gre0: entered promiscuous mode [ 232.072193][T11441] __nla_validate_parse: 65 callbacks suppressed [ 232.072215][T11441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1500'. [ 232.087791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.148177][T11389] ip_vti0: entered promiscuous mode [ 232.193524][T11407] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 232.375563][T11415] netlink: 'syz.0.1491': attribute type 1 has an invalid length. [ 232.407660][T11415] netlink: 'syz.0.1491': attribute type 2 has an invalid length. [ 232.608202][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 232.662127][T11466] block nbd0: Unsupported socket: should be TCP or UNIX. [ 232.794117][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1505'. [ 232.872649][ T7256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.885340][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.041428][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.076803][T11491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.549845][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 233.648733][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'. [ 233.704293][T11491] raw_sendmsg: syz.3.1512 forgot to set AF_INET. Fix it! [ 233.919556][T11524] syz_tun (unregistering): left allmulticast mode [ 234.017713][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 234.098574][T11536] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 234.143669][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1523'. [ 234.220131][T11549] x_tables: duplicate underflow at hook 2 [ 234.543544][T11560] netlink: 'syz.4.1530': attribute type 11 has an invalid length. [ 234.575843][T11559] netlink: 'syz.4.1530': attribute type 11 has an invalid length. [ 234.602844][T11562] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 234.638535][T11565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1532'. [ 235.090152][T11584] netlink: 'syz.3.1537': attribute type 2 has an invalid length. [ 235.177059][ T11] block nbd1: Possible stuck request ffff888027140000: control (read@0,1024B). Runtime 30 seconds [ 235.188576][ T11] block nbd1: Possible stuck request ffff8880271401c0: control (read@1024,1024B). Runtime 30 seconds [ 235.202456][ T11] block nbd1: Possible stuck request ffff888027140380: control (read@2048,1024B). Runtime 30 seconds [ 235.234716][T11590] kthread_run failed with err -4 [ 235.260055][T11589] netem: incorrect gi model size [ 235.289612][T11589] netem: change failed [ 235.586739][T11608] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 235.863141][T11618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1546'. [ 236.002798][ T57] net_ratelimit: 907 callbacks suppressed [ 236.002818][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.019127][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.042877][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.100940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.176005][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1549'. [ 236.258744][T11629] 8021q: VLANs not supported on ip6_vti0 [ 236.281560][ T7256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.303189][T11633] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:0 [ 236.554950][T11639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.564772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.608013][T11642] FAULT_INJECTION: forcing a failure. [ 236.608013][T11642] name failslab, interval 1, probability 0, space 0, times 1 [ 236.632556][T11639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.641020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.669512][T11642] CPU: 1 UID: 0 PID: 11642 Comm: syz.4.1554 Not tainted syzkaller #0 PREEMPT(full) [ 236.669541][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.669553][T11642] Call Trace: [ 236.669561][T11642] [ 236.669570][T11642] dump_stack_lvl+0xe8/0x150 [ 236.669603][T11642] should_fail_ex+0x412/0x560 [ 236.669635][T11642] should_failslab+0xa8/0x100 [ 236.669667][T11642] __kvmalloc_node_noprof+0x178/0x8a0 [ 236.669698][T11642] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 236.669727][T11642] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 236.669762][T11642] bpf_test_run_xdp_live+0x223/0x1cf0 [ 236.669797][T11642] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 236.669838][T11642] ? __pfx_autoremove_wake_function+0x10/0x10 [ 236.669871][T11642] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 236.669922][T11642] ? 0xffffffffa02019cc [ 236.669939][T11642] ? 0xffffffffa0201a08 [ 236.669984][T11642] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 236.670025][T11642] ? _copy_from_user+0x94/0xb0 [ 236.670054][T11642] ? bpf_test_init+0x113/0x150 [ 236.670079][T11642] ? xdp_convert_md_to_buff+0x5b/0x330 [ 236.670109][T11642] bpf_prog_test_run_xdp+0x81c/0x1160 [ 236.670161][T11642] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 236.670195][T11642] ? __fget_files+0x2a/0x420 [ 236.670223][T11642] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 236.670251][T11642] bpf_prog_test_run+0x2c7/0x340 [ 236.670275][T11642] __sys_bpf+0x643/0x950 [ 236.670306][T11642] ? __pfx___sys_bpf+0x10/0x10 [ 236.670353][T11642] ? ksys_write+0x242/0x270 [ 236.670383][T11642] ? __pfx_ksys_write+0x10/0x10 [ 236.670416][T11642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.670438][T11642] __x64_sys_bpf+0x7c/0x90 [ 236.670466][T11642] do_syscall_64+0x15f/0xf80 [ 236.670491][T11642] ? trace_irq_disable+0x3b/0x140 [ 236.670521][T11642] ? clear_bhb_loop+0x40/0x90 [ 236.670546][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.670566][T11642] RIP: 0033:0x7f9898f9ce59 [ 236.670584][T11642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.670599][T11642] RSP: 002b:00007f9899f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.670620][T11642] RAX: ffffffffffffffda RBX: 00007f9899215fa0 RCX: 00007f9898f9ce59 [ 236.670634][T11642] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 236.670646][T11642] RBP: 00007f9899f41090 R08: 0000000000000000 R09: 0000000000000000 [ 236.670658][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.670669][T11642] R13: 00007f9899216038 R14: 00007f9899215fa0 R15: 00007fff585ea178 [ 236.670701][T11642] [ 237.026164][T11649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.105451][T11651] __nla_validate_parse: 2 callbacks suppressed [ 237.105469][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1557'. [ 237.123759][T11651] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1557'. [ 237.133189][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1557'. [ 237.282728][T11656] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1559'. [ 237.614659][T11667] netlink: 'syz.3.1563': attribute type 21 has an invalid length. [ 237.631885][T11665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1561'. [ 237.671315][T11669] Cannot find set identified by id 3 to match [ 237.954432][T11675] netlink: 'syz.3.1565': attribute type 2 has an invalid length. [ 237.995555][T11675] netlink: 'syz.3.1565': attribute type 2 has an invalid length. [ 238.466562][T11694] syzkaller0: entered promiscuous mode [ 238.511398][T11694] syzkaller0: entered allmulticast mode [ 238.976806][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1575'. [ 239.074236][T11725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1578'. [ 239.537315][T11742] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1584'. [ 240.039295][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 240.344706][T11755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.361806][T11755] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 240.409310][T11782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1595'. [ 240.430557][T11755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.446826][T11755] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 240.514337][T11755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.535915][T11755] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 240.593920][T11755] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.608241][T11755] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 240.958586][T11799] block nbd0: Unsupported socket: should be TCP or UNIX. [ 241.121832][ T1171] net_ratelimit: 22 callbacks suppressed [ 241.121850][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.137977][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.147761][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.160904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.249292][T11819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.365736][T11825] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 241.395619][T11824] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 241.792078][T11844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.839410][T11844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.915939][T11844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.348172][T11871] netlink: 'syz.3.1621': attribute type 11 has an invalid length. [ 242.374943][T11876] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 242.385745][T11871] netlink: 'syz.3.1621': attribute type 11 has an invalid length. [ 242.410857][T11871] __nla_validate_parse: 9 callbacks suppressed [ 242.410873][T11871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1621'. [ 242.644203][T11876] 8021q: adding VLAN 0 to HW filter on device bond13 [ 242.687078][T11881] vlan2: entered promiscuous mode [ 242.701075][T11881] bond13: entered promiscuous mode [ 242.708086][T11881] vlan2: entered allmulticast mode [ 242.716501][T11881] bond13: entered allmulticast mode [ 242.812612][T11886] bond13: (slave bridge8): making interface the new active one [ 242.842397][T11886] bridge8: entered promiscuous mode [ 242.868751][T11886] bridge8: entered allmulticast mode [ 242.909984][T11886] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 243.040206][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 243.341094][T11924] bond0: Error: Cannot enslave bond to itself. [ 243.413564][T11928] FAULT_INJECTION: forcing a failure. [ 243.413564][T11928] name failslab, interval 1, probability 0, space 0, times 0 [ 243.485168][T11934] netlink: 'syz.4.1639': attribute type 11 has an invalid length. [ 243.494461][T11928] CPU: 1 UID: 0 PID: 11928 Comm: syz.2.1637 Not tainted syzkaller #0 PREEMPT(full) [ 243.494487][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.494511][T11928] Call Trace: [ 243.494519][T11928] [ 243.494527][T11928] dump_stack_lvl+0xe8/0x150 [ 243.494555][T11928] should_fail_ex+0x412/0x560 [ 243.494595][T11928] should_failslab+0xa8/0x100 [ 243.494626][T11928] __kmalloc_cache_noprof+0x88/0x660 [ 243.494653][T11928] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.494684][T11928] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 243.494717][T11928] __xdp_reg_mem_model+0x1e3/0x5d0 [ 243.494752][T11928] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 243.494778][T11928] ? page_pool_list+0x20f/0x250 [ 243.494805][T11928] ? page_pool_create_percpu+0x87b/0xc80 [ 243.494831][T11928] xdp_reg_mem_model+0x22/0x40 [ 243.494860][T11928] bpf_test_run_xdp_live+0x295/0x1cf0 [ 243.494900][T11928] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 243.494941][T11928] ? __pfx_autoremove_wake_function+0x10/0x10 [ 243.494974][T11928] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 243.495024][T11928] ? 0xffffffffa02019cc [ 243.495042][T11928] ? 0xffffffffa0201a08 [ 243.495086][T11928] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 243.495126][T11928] ? _copy_from_user+0x94/0xb0 [ 243.495155][T11928] ? bpf_test_init+0x113/0x150 [ 243.495190][T11928] ? xdp_convert_md_to_buff+0x5b/0x330 [ 243.495218][T11928] bpf_prog_test_run_xdp+0x81c/0x1160 [ 243.495261][T11928] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 243.495293][T11928] ? __fget_files+0x2a/0x420 [ 243.495321][T11928] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 243.495347][T11928] bpf_prog_test_run+0x2c7/0x340 [ 243.495370][T11928] __sys_bpf+0x643/0x950 [ 243.495401][T11928] ? __pfx___sys_bpf+0x10/0x10 [ 243.495443][T11928] ? ksys_write+0x242/0x270 [ 243.495472][T11928] ? __pfx_ksys_write+0x10/0x10 [ 243.495503][T11928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.495524][T11928] __x64_sys_bpf+0x7c/0x90 [ 243.495551][T11928] do_syscall_64+0x15f/0xf80 [ 243.495586][T11928] ? trace_irq_disable+0x3b/0x140 [ 243.495614][T11928] ? clear_bhb_loop+0x40/0x90 [ 243.495638][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.495657][T11928] RIP: 0033:0x7fa7e879ce59 [ 243.495675][T11928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.495691][T11928] RSP: 002b:00007fa7e9628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.495712][T11928] RAX: ffffffffffffffda RBX: 00007fa7e8a15fa0 RCX: 00007fa7e879ce59 [ 243.495726][T11928] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 243.495737][T11928] RBP: 00007fa7e9628090 R08: 0000000000000000 R09: 0000000000000000 [ 243.495748][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.495759][T11928] R13: 00007fa7e8a16038 R14: 00007fa7e8a15fa0 R15: 00007fff241bab88 [ 243.495790][T11928] [ 243.505232][T11934] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1639'. [ 243.727679][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'. [ 244.088580][T11952] syzkaller1: entered promiscuous mode [ 244.115682][T11952] syzkaller1: entered allmulticast mode [ 244.318084][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 244.364918][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'. [ 244.696763][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 244.710518][T11985] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.723372][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1652'. [ 244.776897][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1653'. [ 245.443459][T12014] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1660'. [ 245.718117][T12031] rdma_op ffff888020b421f0 conn xmit_rdma 0000000000000000 [ 245.750370][T12014] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 246.671833][T12064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.213926][T12092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.594424][T12110] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.771537][T12114] xt_l2tp: unknown flags: 10 [ 247.875909][T12124] __nla_validate_parse: 8 callbacks suppressed [ 247.875929][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1695'. [ 248.843831][T12172] block nbd0: Unsupported socket: should be TCP or UNIX. [ 249.103122][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 249.185715][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 249.358051][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'. [ 249.688995][T12208] netlink: 'syz.0.1720': attribute type 13 has an invalid length. [ 249.717354][T12211] FAULT_INJECTION: forcing a failure. [ 249.717354][T12211] name failslab, interval 1, probability 0, space 0, times 0 [ 249.730099][T12211] CPU: 0 UID: 0 PID: 12211 Comm: syz.1.1721 Not tainted syzkaller #0 PREEMPT(full) [ 249.730144][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.730157][T12211] Call Trace: [ 249.730166][T12211] [ 249.730174][T12211] dump_stack_lvl+0xe8/0x150 [ 249.730205][T12211] should_fail_ex+0x412/0x560 [ 249.730240][T12211] should_failslab+0xa8/0x100 [ 249.730265][T12211] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 249.730296][T12211] ? pfn_valid+0x125/0x4c0 [ 249.730318][T12211] ? pfn_valid+0x125/0x4c0 [ 249.730342][T12211] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 249.730378][T12211] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 249.730406][T12211] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 249.730443][T12211] ? 0xffffffffa02019c8 [ 249.730455][T12211] ? 0xffffffffa0201a08 [ 249.730487][T12211] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 249.730517][T12211] ? _copy_from_user+0x94/0xb0 [ 249.730538][T12211] ? bpf_test_init+0x113/0x150 [ 249.730556][T12211] ? xdp_convert_md_to_buff+0x5b/0x330 [ 249.730578][T12211] bpf_prog_test_run_xdp+0x81c/0x1160 [ 249.730633][T12211] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 249.730667][T12211] ? __fget_files+0x2a/0x420 [ 249.730697][T12211] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 249.730724][T12211] bpf_prog_test_run+0x2c7/0x340 [ 249.730749][T12211] __sys_bpf+0x643/0x950 [ 249.730781][T12211] ? __pfx___sys_bpf+0x10/0x10 [ 249.730831][T12211] ? ksys_write+0x242/0x270 [ 249.730854][T12211] ? __pfx_ksys_write+0x10/0x10 [ 249.730878][T12211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.730894][T12211] __x64_sys_bpf+0x7c/0x90 [ 249.730914][T12211] do_syscall_64+0x15f/0xf80 [ 249.730935][T12211] ? trace_irq_disable+0x3b/0x140 [ 249.730956][T12211] ? clear_bhb_loop+0x40/0x90 [ 249.730975][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.730989][T12211] RIP: 0033:0x7ff6b879ce59 [ 249.731003][T12211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.731049][T12211] RSP: 002b:00007ff6b9649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.731071][T12211] RAX: ffffffffffffffda RBX: 00007ff6b8a15fa0 RCX: 00007ff6b879ce59 [ 249.731085][T12211] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 249.731097][T12211] RBP: 00007ff6b9649090 R08: 0000000000000000 R09: 0000000000000000 [ 249.731110][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.731144][T12211] R13: 00007ff6b8a16038 R14: 00007ff6b8a15fa0 R15: 00007fff1640fda8 [ 249.731169][T12211] [ 250.361049][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 250.375748][T12223] nbd: illegal input index 2958377 [ 250.508497][T12216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1722'. [ 250.626439][T12230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1728'. [ 250.704623][T12225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.801983][T12235] netlink: 'syz.1.1729': attribute type 12 has an invalid length. [ 250.809978][T12235] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1729'. [ 250.888352][T12236] netlink: 'syz.0.1730': attribute type 49 has an invalid length. [ 250.989363][T12240] FAULT_INJECTION: forcing a failure. [ 250.989363][T12240] name failslab, interval 1, probability 0, space 0, times 0 [ 251.002122][T12240] CPU: 0 UID: 0 PID: 12240 Comm: syz.2.1732 Not tainted syzkaller #0 PREEMPT(full) [ 251.002146][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.002158][T12240] Call Trace: [ 251.002165][T12240] [ 251.002173][T12240] dump_stack_lvl+0xe8/0x150 [ 251.002202][T12240] should_fail_ex+0x412/0x560 [ 251.002232][T12240] should_failslab+0xa8/0x100 [ 251.002264][T12240] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 251.002296][T12240] ? pfn_valid+0x125/0x4c0 [ 251.002324][T12240] ? pfn_valid+0x125/0x4c0 [ 251.002354][T12240] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 251.002402][T12240] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 251.002440][T12240] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 251.002490][T12240] ? 0xffffffffa02019d8 [ 251.002506][T12240] ? 0xffffffffa0201a08 [ 251.002545][T12240] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 251.002585][T12240] ? _copy_from_user+0x94/0xb0 [ 251.002613][T12240] ? bpf_test_init+0x113/0x150 [ 251.002637][T12240] ? xdp_convert_md_to_buff+0x5b/0x330 [ 251.002667][T12240] bpf_prog_test_run_xdp+0x81c/0x1160 [ 251.002705][T12240] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 251.002731][T12240] ? __fget_files+0x2a/0x420 [ 251.002755][T12240] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 251.002777][T12240] bpf_prog_test_run+0x2c7/0x340 [ 251.002797][T12240] __sys_bpf+0x643/0x950 [ 251.002822][T12240] ? __pfx___sys_bpf+0x10/0x10 [ 251.002858][T12240] ? ksys_write+0x242/0x270 [ 251.002883][T12240] ? __pfx_ksys_write+0x10/0x10 [ 251.002909][T12240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.002934][T12240] __x64_sys_bpf+0x7c/0x90 [ 251.002957][T12240] do_syscall_64+0x15f/0xf80 [ 251.002980][T12240] ? trace_irq_disable+0x3b/0x140 [ 251.003004][T12240] ? clear_bhb_loop+0x40/0x90 [ 251.003023][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.003039][T12240] RIP: 0033:0x7fa7e879ce59 [ 251.003053][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.003067][T12240] RSP: 002b:00007fa7e9628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.003084][T12240] RAX: ffffffffffffffda RBX: 00007fa7e8a15fa0 RCX: 00007fa7e879ce59 [ 251.003095][T12240] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 251.003105][T12240] RBP: 00007fa7e9628090 R08: 0000000000000000 R09: 0000000000000000 [ 251.003114][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.003122][T12240] R13: 00007fa7e8a16038 R14: 00007fa7e8a15fa0 R15: 00007fff241bab88 [ 251.003147][T12240] [ 251.278374][T12243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1733'. [ 251.301633][T12236] ip6gretap0: entered promiscuous mode [ 251.309230][T12236] ip6gretap0: entered allmulticast mode [ 251.332224][T12245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1733'. [ 251.693436][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.858398][T12264] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 252.195125][T12284] FAULT_INJECTION: forcing a failure. [ 252.195125][T12284] name failslab, interval 1, probability 0, space 0, times 0 [ 252.207987][T12284] CPU: 1 UID: 0 PID: 12284 Comm: syz.4.1745 Not tainted syzkaller #0 PREEMPT(full) [ 252.208014][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.208026][T12284] Call Trace: [ 252.208034][T12284] [ 252.208042][T12284] dump_stack_lvl+0xe8/0x150 [ 252.208071][T12284] should_fail_ex+0x412/0x560 [ 252.208102][T12284] should_failslab+0xa8/0x100 [ 252.208135][T12284] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 252.208168][T12284] ? pfn_valid+0x125/0x4c0 [ 252.208197][T12284] ? pfn_valid+0x125/0x4c0 [ 252.208228][T12284] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 252.208277][T12284] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 252.208314][T12284] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 252.208364][T12284] ? 0xffffffffa02019d0 [ 252.208381][T12284] ? 0xffffffffa0201a08 [ 252.208424][T12284] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 252.208463][T12284] ? _copy_from_user+0x94/0xb0 [ 252.208491][T12284] ? bpf_test_init+0x113/0x150 [ 252.208514][T12284] ? xdp_convert_md_to_buff+0x5b/0x330 [ 252.208544][T12284] bpf_prog_test_run_xdp+0x81c/0x1160 [ 252.208587][T12284] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 252.208619][T12284] ? __fget_files+0x2a/0x420 [ 252.208648][T12284] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 252.208676][T12284] bpf_prog_test_run+0x2c7/0x340 [ 252.208701][T12284] __sys_bpf+0x643/0x950 [ 252.208732][T12284] ? __pfx___sys_bpf+0x10/0x10 [ 252.208778][T12284] ? ksys_write+0x242/0x270 [ 252.208808][T12284] ? __pfx_ksys_write+0x10/0x10 [ 252.208840][T12284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.208870][T12284] __x64_sys_bpf+0x7c/0x90 [ 252.208898][T12284] do_syscall_64+0x15f/0xf80 [ 252.208924][T12284] ? trace_irq_disable+0x3b/0x140 [ 252.208953][T12284] ? clear_bhb_loop+0x40/0x90 [ 252.208977][T12284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.208997][T12284] RIP: 0033:0x7f9898f9ce59 [ 252.209014][T12284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.209030][T12284] RSP: 002b:00007f9899f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.209051][T12284] RAX: ffffffffffffffda RBX: 00007f9899215fa0 RCX: 00007f9898f9ce59 [ 252.209065][T12284] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 252.209077][T12284] RBP: 00007f9899f41090 R08: 0000000000000000 R09: 0000000000000000 [ 252.209089][T12284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.209100][T12284] R13: 00007f9899216038 R14: 00007f9899215fa0 R15: 00007fff585ea178 [ 252.209132][T12284] [ 253.134765][T12317] netlink: 'syz.0.1752': attribute type 1 has an invalid length. [ 253.257859][T12317] bond4: entered promiscuous mode [ 253.287257][T12317] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.313045][T12329] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 253.321086][T12329] __nla_validate_parse: 1 callbacks suppressed [ 253.321102][T12329] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1755'. [ 253.336854][T12329] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1755'. [ 253.350325][T12329] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 253.358599][T12329] netlink: 'syz.1.1755': attribute type 8 has an invalid length. [ 253.381958][T12329] netlink: 582 bytes leftover after parsing attributes in process `syz.1.1755'. [ 253.448122][T12317] bond4: (slave bridge2): making interface the new active one [ 253.462833][T12317] bridge2: entered promiscuous mode [ 253.475911][T12317] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 253.514242][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1756'. [ 253.840533][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 254.018699][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1764'. [ 254.266520][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 254.347680][T12385] macvlan3: entered allmulticast mode [ 254.368179][T12385] dummy0: entered allmulticast mode [ 254.377004][T12385] dummy0: entered promiscuous mode [ 254.993781][T12429] sctp: [Deprecated]: syz.0.1782 (pid 12429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.993781][T12429] Use struct sctp_sack_info instead [ 255.091528][T12429] syzkaller1: entered promiscuous mode [ 255.104488][T12429] syzkaller1: entered allmulticast mode [ 255.610778][T12471] x_tables: duplicate underflow at hook 3 [ 255.617180][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630279][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1793'. [ 255.674592][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 255.705424][T12475] netlink: 'syz.3.1794': attribute type 30 has an invalid length. [ 255.725637][ T81] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.750485][ T81] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.762643][ T81] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.776003][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 255.795968][ T81] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.204970][T12510] x_tables: duplicate underflow at hook 1 [ 256.207371][T12512] tipc: Invalid UDP bearer configuration [ 256.226932][T12512] tipc: Enabling of bearer rejected, failed to enable media [ 256.369162][T12516] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 256.457921][T12525] netlink: 'syz.4.1810': attribute type 11 has an invalid length. [ 257.418007][T12580] syzkaller0: entered promiscuous mode [ 257.453505][T12580] syzkaller0: entered allmulticast mode [ 257.566319][T12592] bond14: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 257.606850][T12592] bond14 (unregistering): Released all slaves [ 257.833570][T12598] bond5: option mode: invalid value (133) [ 257.879240][T12598] bond5 (unregistering): Released all slaves [ 258.196578][T12619] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 258.247480][T12626] netlink: 'syz.0.1839': attribute type 21 has an invalid length. [ 258.259521][T12625] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 258.280944][T12625] netlink: 'syz.1.1840': attribute type 2 has an invalid length. [ 258.290245][T12625] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 258.309585][T12625] netlink: 'syz.1.1840': attribute type 3 has an invalid length. [ 258.553277][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.562881][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.852768][T12620] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 259.213945][T12659] __nla_validate_parse: 15 callbacks suppressed [ 259.213965][T12659] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1845'. [ 259.359632][T12663] bond4: entered allmulticast mode [ 259.481645][T12663] veth3: entered allmulticast mode [ 259.505113][T12663] bond4: (slave veth3): Enslaving as an active interface with an up link [ 259.566161][T12675] syzkaller0: entered promiscuous mode [ 259.572777][T12675] syzkaller0: entered allmulticast mode [ 259.699173][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1851'. [ 259.944251][T12692] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 259.999274][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 260.204486][T12707] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1860'. [ 260.259471][T12709] syzkaller1: entered promiscuous mode [ 260.268299][T12709] syzkaller1: entered allmulticast mode [ 260.330326][T12712] bridge0: entered promiscuous mode [ 260.342989][T12712] bridge0: entered allmulticast mode [ 260.370168][T12712] team0: Port device bridge0 added [ 260.534686][T12723] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1863'. [ 260.589350][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 260.652782][T12729] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 260.761564][T12728] bond14 (unregistering): Released all slaves [ 260.878328][T12729] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.913102][T12740] gre2: entered promiscuous mode [ 260.932113][T12737] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1866'. [ 261.394784][T12765] vlan2: entered allmulticast mode [ 261.568608][T12778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1878'. [ 261.738599][T12787] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1882'. [ 261.779550][T12787] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1882'. [ 262.189458][T12809] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 262.768824][T12845] block nbd0: Unsupported socket: should be TCP or UNIX. [ 263.066999][T12863] vlan3: entered promiscuous mode [ 263.073131][T12863] syz_tun: entered promiscuous mode [ 263.187687][T12872] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 263.197115][T12873] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 263.445221][T12873] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 263.447128][T12872] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 263.635381][T12894] netlink: 'syz.4.1911': attribute type 1 has an invalid length. [ 263.707368][T12894] netlink: 'syz.4.1911': attribute type 4 has an invalid length. [ 263.775851][T12901] netlink: 'syz.1.1914': attribute type 23 has an invalid length. [ 264.240202][T12933] __nla_validate_parse: 8 callbacks suppressed [ 264.240221][T12933] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1921'. [ 264.281829][T12939] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1922'. [ 264.312196][T12942] syzkaller1: entered promiscuous mode [ 264.318141][T12942] syzkaller1: entered allmulticast mode [ 264.334463][T12939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1922'. [ 264.354088][T12938] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1923'. [ 264.365896][T12933] sctp: [Deprecated]: syz.0.1921 (pid 12933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.365896][T12933] Use struct sctp_sack_info instead [ 264.772683][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'. [ 264.848868][T12978] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1928'. [ 265.059767][T12979] bond3: entered promiscuous mode [ 265.082953][T12979] bond3: entered allmulticast mode [ 265.211735][ T11] block nbd1: Possible stuck request ffff888027140000: control (read@0,1024B). Runtime 60 seconds [ 265.222805][ T11] block nbd1: Possible stuck request ffff8880271401c0: control (read@1024,1024B). Runtime 60 seconds [ 265.234383][ T11] block nbd1: Possible stuck request ffff888027140380: control (read@2048,1024B). Runtime 60 seconds [ 265.359788][T13003] openvswitch: netlink: EtherType 50a is less than min 600 [ 265.379750][T13003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1934'. [ 265.751195][T12992] syz.3.1931 (12992) used greatest stack depth: 15680 bytes left [ 265.893817][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 265.940407][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 266.018413][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 267.678755][T13100] netlink: 'syz.4.1953': attribute type 7 has an invalid length. [ 268.065988][T13108] can: request_module (can-proto-0) failed. [ 270.479782][T13161] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 270.668321][T13161] bond8: entered promiscuous mode [ 270.686043][T13169] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 270.699259][T13161] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.767976][T13163] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.804919][T13163] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 270.859094][T13163] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 270.898936][T13163] bond8: (slave vti0): making interface the new active one [ 270.906891][T13163] vti0: entered promiscuous mode [ 270.914080][T13163] bond8: (slave vti0): Enslaving as an active interface with an up link [ 271.155791][T13190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.378740][T13204] __nla_validate_parse: 8 callbacks suppressed [ 271.378758][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1984'. [ 271.491168][T13215] netlink: 'syz.0.1987': attribute type 4 has an invalid length. [ 271.517886][T13215] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1987'. [ 271.575214][T13207] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1983'. [ 271.711853][T13226] netlink: 'syz.2.1988': attribute type 83 has an invalid length. [ 271.729753][T13226] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1988'. [ 272.133122][T13244] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 272.246066][T13244] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.316480][T13245] bond6: (slave geneve3): making interface the new active one [ 272.385282][T13245] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 272.428045][T13264] openvswitch: netlink: Unknown key attributes 2 [ 272.930545][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 272.949780][T13298] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 273.207000][T13314] FAULT_INJECTION: forcing a failure. [ 273.207000][T13314] name failslab, interval 1, probability 0, space 0, times 0 [ 273.219709][T13314] CPU: 0 UID: 0 PID: 13314 Comm: syz.4.2012 Not tainted syzkaller #0 PREEMPT(full) [ 273.219737][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.219749][T13314] Call Trace: [ 273.219758][T13314] [ 273.219766][T13314] dump_stack_lvl+0xe8/0x150 [ 273.219795][T13314] should_fail_ex+0x412/0x560 [ 273.219826][T13314] should_failslab+0xa8/0x100 [ 273.219857][T13314] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 273.219892][T13314] ? pfn_valid+0x125/0x4c0 [ 273.219920][T13314] ? pfn_valid+0x125/0x4c0 [ 273.219952][T13314] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 273.220000][T13314] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 273.220037][T13314] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 273.220087][T13314] ? 0xffffffffa02019c8 [ 273.220104][T13314] ? 0xffffffffa0201a08 [ 273.220120][T13314] ? 0xffffffffa0201a54 [ 273.220162][T13314] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 273.220202][T13314] ? _copy_from_user+0x94/0xb0 [ 273.220232][T13314] ? bpf_test_init+0x113/0x150 [ 273.220255][T13314] ? xdp_convert_md_to_buff+0x5b/0x330 [ 273.220286][T13314] bpf_prog_test_run_xdp+0x81c/0x1160 [ 273.220336][T13314] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.220370][T13314] ? __fget_files+0x2a/0x420 [ 273.220399][T13314] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.220428][T13314] bpf_prog_test_run+0x2c7/0x340 [ 273.220452][T13314] __sys_bpf+0x643/0x950 [ 273.220484][T13314] ? __pfx___sys_bpf+0x10/0x10 [ 273.220530][T13314] ? ksys_write+0x242/0x270 [ 273.220561][T13314] ? __pfx_ksys_write+0x10/0x10 [ 273.220593][T13314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.220618][T13314] __x64_sys_bpf+0x7c/0x90 [ 273.220647][T13314] do_syscall_64+0x15f/0xf80 [ 273.220673][T13314] ? trace_irq_disable+0x3b/0x140 [ 273.220701][T13314] ? clear_bhb_loop+0x40/0x90 [ 273.220726][T13314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.220745][T13314] RIP: 0033:0x7f9898f9ce59 [ 273.220763][T13314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.220779][T13314] RSP: 002b:00007f9899f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.220800][T13314] RAX: ffffffffffffffda RBX: 00007f9899215fa0 RCX: 00007f9898f9ce59 [ 273.220814][T13314] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 273.220826][T13314] RBP: 00007f9899f41090 R08: 0000000000000000 R09: 0000000000000000 [ 273.220838][T13314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.220849][T13314] R13: 00007f9899216038 R14: 00007f9899215fa0 R15: 00007fff585ea178 [ 273.220882][T13314] [ 273.607092][T13316] bond4: (slave erspan0): Device is not bonding slave [ 273.646369][T13316] bond4: option active_slave: invalid value (erspan0) [ 273.668286][T13316] bond4 (unregistering): Released all slaves [ 273.776751][T13316] syzkaller0: entered promiscuous mode [ 273.791937][T13316] syzkaller0: entered allmulticast mode [ 273.823027][T13318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2013'. [ 273.827295][T13336] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2014'. [ 273.874704][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2014'. [ 274.011704][T13330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2014'. [ 274.026206][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'. [ 274.058456][T13344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.200020][T13344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.230123][ T30] audit: type=1804 audit(1779032628.307:4): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2018" name="/newroot/369/cgroup.controllers" dev="tmpfs" ino=1888 res=1 errno=0 [ 274.321485][ T30] audit: type=1800 audit(1779032628.307:5): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2018" name="cgroup.controllers" dev="tmpfs" ino=1888 res=0 errno=0 [ 274.400330][T13358] syzkaller0: entered promiscuous mode [ 274.439362][T13358] syzkaller0: entered allmulticast mode [ 274.628852][T13368] vlan3: entered allmulticast mode [ 274.681667][T13368] hsr0: entered allmulticast mode [ 274.710958][T13368] hsr_slave_0: entered allmulticast mode [ 274.875705][T13374] FAULT_INJECTION: forcing a failure. [ 274.875705][T13374] name failslab, interval 1, probability 0, space 0, times 0 [ 274.888536][T13374] CPU: 1 UID: 0 PID: 13374 Comm: syz.1.2024 Not tainted syzkaller #0 PREEMPT(full) [ 274.888563][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.888576][T13374] Call Trace: [ 274.888584][T13374] [ 274.888592][T13374] dump_stack_lvl+0xe8/0x150 [ 274.888622][T13374] should_fail_ex+0x412/0x560 [ 274.888667][T13374] should_failslab+0xa8/0x100 [ 274.888700][T13374] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 274.888733][T13374] ? pfn_valid+0x125/0x4c0 [ 274.888762][T13374] ? pfn_valid+0x125/0x4c0 [ 274.888794][T13374] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 274.888842][T13374] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 274.888880][T13374] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 274.888951][T13374] ? 0xffffffffa02019c8 [ 274.888969][T13374] ? 0xffffffffa0201a08 [ 274.888985][T13374] ? 0xffffffffa0201a54 [ 274.889028][T13374] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 274.889068][T13374] ? _copy_from_user+0x94/0xb0 [ 274.889097][T13374] ? bpf_test_init+0x113/0x150 [ 274.889119][T13374] ? xdp_convert_md_to_buff+0x5b/0x330 [ 274.889149][T13374] bpf_prog_test_run_xdp+0x81c/0x1160 [ 274.889193][T13374] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.889226][T13374] ? __fget_files+0x2a/0x420 [ 274.889255][T13374] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.889283][T13374] bpf_prog_test_run+0x2c7/0x340 [ 274.889308][T13374] __sys_bpf+0x643/0x950 [ 274.889340][T13374] ? __pfx___sys_bpf+0x10/0x10 [ 274.889386][T13374] ? ksys_write+0x242/0x270 [ 274.889417][T13374] ? __pfx_ksys_write+0x10/0x10 [ 274.889449][T13374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.889471][T13374] __x64_sys_bpf+0x7c/0x90 [ 274.889499][T13374] do_syscall_64+0x15f/0xf80 [ 274.889525][T13374] ? trace_irq_disable+0x3b/0x140 [ 274.889553][T13374] ? clear_bhb_loop+0x40/0x90 [ 274.889577][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.889596][T13374] RIP: 0033:0x7ff6b879ce59 [ 274.889614][T13374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.889630][T13374] RSP: 002b:00007ff6b9649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.889651][T13374] RAX: ffffffffffffffda RBX: 00007ff6b8a15fa0 RCX: 00007ff6b879ce59 [ 274.889665][T13374] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 274.889678][T13374] RBP: 00007ff6b9649090 R08: 0000000000000000 R09: 0000000000000000 [ 274.889690][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.889701][T13374] R13: 00007ff6b8a16038 R14: 00007ff6b8a15fa0 R15: 00007fff1640fda8 [ 274.889732][T13374] [ 275.418068][T13387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.061507][T13417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.185642][T13432] FAULT_INJECTION: forcing a failure. [ 276.185642][T13432] name failslab, interval 1, probability 0, space 0, times 0 [ 276.198453][T13432] CPU: 0 UID: 0 PID: 13432 Comm: syz.2.2044 Not tainted syzkaller #0 PREEMPT(full) [ 276.198478][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.198490][T13432] Call Trace: [ 276.198499][T13432] [ 276.198507][T13432] dump_stack_lvl+0xe8/0x150 [ 276.198535][T13432] should_fail_ex+0x412/0x560 [ 276.198566][T13432] should_failslab+0xa8/0x100 [ 276.198599][T13432] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 276.198631][T13432] ? pfn_valid+0x125/0x4c0 [ 276.198661][T13432] ? pfn_valid+0x125/0x4c0 [ 276.198692][T13432] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 276.198740][T13432] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 276.198777][T13432] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 276.198834][T13432] ? 0xffffffffa02019c8 [ 276.198851][T13432] ? 0xffffffffa0201a08 [ 276.198867][T13432] ? 0xffffffffa0201a50 [ 276.198909][T13432] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 276.198953][T13432] ? xdp_convert_md_to_buff+0x5b/0x330 [ 276.198983][T13432] bpf_prog_test_run_xdp+0x81c/0x1160 [ 276.199027][T13432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.199059][T13432] ? __fget_files+0x2a/0x420 [ 276.199107][T13432] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.199136][T13432] bpf_prog_test_run+0x2c7/0x340 [ 276.199161][T13432] __sys_bpf+0x643/0x950 [ 276.199193][T13432] ? __pfx___sys_bpf+0x10/0x10 [ 276.199241][T13432] ? ksys_write+0x242/0x270 [ 276.199273][T13432] ? __pfx_ksys_write+0x10/0x10 [ 276.199306][T13432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.199328][T13432] __x64_sys_bpf+0x7c/0x90 [ 276.199358][T13432] do_syscall_64+0x15f/0xf80 [ 276.199386][T13432] ? trace_irq_disable+0x3b/0x140 [ 276.199415][T13432] ? clear_bhb_loop+0x40/0x90 [ 276.199441][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.199461][T13432] RIP: 0033:0x7fa7e879ce59 [ 276.199479][T13432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.199496][T13432] RSP: 002b:00007fa7e9628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.199517][T13432] RAX: ffffffffffffffda RBX: 00007fa7e8a15fa0 RCX: 00007fa7e879ce59 [ 276.199532][T13432] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 276.199544][T13432] RBP: 00007fa7e9628090 R08: 0000000000000000 R09: 0000000000000000 [ 276.199556][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.199568][T13432] R13: 00007fa7e8a16038 R14: 00007fa7e8a15fa0 R15: 00007fff241bab88 [ 276.199602][T13432] [ 276.728133][T13447] __nla_validate_parse: 7 callbacks suppressed [ 276.728153][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'. [ 276.762987][T13450] netlink: 'syz.1.2049': attribute type 83 has an invalid length. [ 276.764354][T13447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2050'. [ 276.786330][T13443] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2047'. [ 276.798135][T13449] bridge3: port 1(veth0_to_bond) entered blocking state [ 276.824534][T13443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2047'. [ 276.827869][T13449] bridge3: port 1(veth0_to_bond) entered disabled state [ 276.887267][T13449] veth0_to_bond: entered allmulticast mode [ 276.955371][T13449] veth0_to_bond: entered promiscuous mode [ 276.974954][T13449] bridge3: port 1(veth0_to_bond) entered blocking state [ 276.982227][T13449] bridge3: port 1(veth0_to_bond) entered forwarding state [ 277.135883][T13459] vet: renamed from veth0_vlan [ 277.477053][T13483] FAULT_INJECTION: forcing a failure. [ 277.477053][T13483] name failslab, interval 1, probability 0, space 0, times 0 [ 277.489791][T13483] CPU: 0 UID: 0 PID: 13483 Comm: syz.2.2060 Not tainted syzkaller #0 PREEMPT(full) [ 277.489816][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.489828][T13483] Call Trace: [ 277.489835][T13483] [ 277.489843][T13483] dump_stack_lvl+0xe8/0x150 [ 277.489870][T13483] should_fail_ex+0x412/0x560 [ 277.489901][T13483] should_failslab+0xa8/0x100 [ 277.489932][T13483] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 277.489963][T13483] ? pfn_valid+0x125/0x4c0 [ 277.489999][T13483] ? pfn_valid+0x125/0x4c0 [ 277.490028][T13483] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 277.490074][T13483] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 277.490112][T13483] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 277.490162][T13483] ? 0xffffffffa02019c8 [ 277.490179][T13483] ? 0xffffffffa0201a08 [ 277.490194][T13483] ? 0xffffffffa0201a54 [ 277.490237][T13483] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 277.490278][T13483] ? _copy_from_user+0x94/0xb0 [ 277.490307][T13483] ? bpf_test_init+0x113/0x150 [ 277.490331][T13483] ? xdp_convert_md_to_buff+0x5b/0x330 [ 277.490361][T13483] bpf_prog_test_run_xdp+0x81c/0x1160 [ 277.490403][T13483] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.490436][T13483] ? __fget_files+0x2a/0x420 [ 277.490465][T13483] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.490493][T13483] bpf_prog_test_run+0x2c7/0x340 [ 277.490518][T13483] __sys_bpf+0x643/0x950 [ 277.490550][T13483] ? __pfx___sys_bpf+0x10/0x10 [ 277.490600][T13483] ? ksys_write+0x242/0x270 [ 277.490640][T13483] ? __pfx_ksys_write+0x10/0x10 [ 277.490668][T13483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.490688][T13483] __x64_sys_bpf+0x7c/0x90 [ 277.490714][T13483] do_syscall_64+0x15f/0xf80 [ 277.490760][T13483] ? trace_irq_disable+0x3b/0x140 [ 277.490788][T13483] ? clear_bhb_loop+0x40/0x90 [ 277.490812][T13483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.490831][T13483] RIP: 0033:0x7fa7e879ce59 [ 277.490849][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.490866][T13483] RSP: 002b:00007fa7e9628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.490886][T13483] RAX: ffffffffffffffda RBX: 00007fa7e8a15fa0 RCX: 00007fa7e879ce59 [ 277.490900][T13483] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 277.490912][T13483] RBP: 00007fa7e9628090 R08: 0000000000000000 R09: 0000000000000000 [ 277.490923][T13483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.490935][T13483] R13: 00007fa7e8a16038 R14: 00007fa7e8a15fa0 R15: 00007fff241bab88 [ 277.490967][T13483] [ 277.561798][T13479] bond5: entered allmulticast mode [ 277.866276][T13495] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 277.889815][T13495] netlink: 'syz.0.2062': attribute type 2 has an invalid length. [ 277.905953][T13495] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 277.922128][T13495] netlink: 'syz.0.2062': attribute type 3 has an invalid length. [ 277.956434][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 278.069624][T13488] veth5: entered allmulticast mode [ 278.118213][T13488] bond5: (slave veth5): Enslaving as an active interface with an up link [ 278.158934][T13492] bond5 (unregistering): (slave veth5): Releasing backup interface [ 278.192100][T13492] bond5 (unregistering): Released all slaves [ 278.457078][T13519] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 278.593284][T13533] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2068'. [ 278.735419][T13536] netlink: 'syz.3.2067': attribute type 12 has an invalid length. [ 278.833109][T13533] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 278.855668][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 278.869951][ T5290] vet: left promiscuous mode [ 278.897154][ T5290] vet: entered promiscuous mode [ 279.074462][T13555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2075'. [ 279.318191][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2079'. [ 279.340271][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 279.551064][T13582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.933020][T13607] netlink: 'syz.0.2086': attribute type 15 has an invalid length. [ 280.015782][ T81] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 280.056562][ T81] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 280.094420][ T81] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 280.136564][ T81] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 280.329173][T13623] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 280.524223][T13648] block nbd3: not configured, cannot reconfigure [ 280.613717][T13648] IPv6: sit2: Disabled Multicast RS [ 281.048419][T13704] openvswitch: netlink: Missing valid actions attribute. [ 281.077986][T13704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.148303][T13707] FAULT_INJECTION: forcing a failure. [ 281.148303][T13707] name failslab, interval 1, probability 0, space 0, times 0 [ 281.161086][T13707] CPU: 1 UID: 0 PID: 13707 Comm: syz.0.2103 Not tainted syzkaller #0 PREEMPT(full) [ 281.161112][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.161124][T13707] Call Trace: [ 281.161132][T13707] [ 281.161140][T13707] dump_stack_lvl+0xe8/0x150 [ 281.161170][T13707] should_fail_ex+0x412/0x560 [ 281.161201][T13707] should_failslab+0xa8/0x100 [ 281.161235][T13707] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 281.161269][T13707] ? pfn_valid+0x125/0x4c0 [ 281.161298][T13707] ? pfn_valid+0x125/0x4c0 [ 281.161329][T13707] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 281.161377][T13707] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 281.161415][T13707] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 281.161490][T13707] ? 0xffffffffa02019c8 [ 281.161506][T13707] ? 0xffffffffa0201a08 [ 281.161521][T13707] ? 0xffffffffa0201a58 [ 281.161580][T13707] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 281.161620][T13707] ? _copy_from_user+0x94/0xb0 [ 281.161649][T13707] ? bpf_test_init+0x113/0x150 [ 281.161673][T13707] ? xdp_convert_md_to_buff+0x5b/0x330 [ 281.161704][T13707] bpf_prog_test_run_xdp+0x81c/0x1160 [ 281.161747][T13707] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.161779][T13707] ? __fget_files+0x2a/0x420 [ 281.161809][T13707] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.161837][T13707] bpf_prog_test_run+0x2c7/0x340 [ 281.161861][T13707] __sys_bpf+0x643/0x950 [ 281.161893][T13707] ? __pfx___sys_bpf+0x10/0x10 [ 281.161939][T13707] ? ksys_write+0x242/0x270 [ 281.161970][T13707] ? __pfx_ksys_write+0x10/0x10 [ 281.162002][T13707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.162025][T13707] __x64_sys_bpf+0x7c/0x90 [ 281.162052][T13707] do_syscall_64+0x15f/0xf80 [ 281.162079][T13707] ? trace_irq_disable+0x3b/0x140 [ 281.162109][T13707] ? clear_bhb_loop+0x40/0x90 [ 281.162133][T13707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.162153][T13707] RIP: 0033:0x7f3bd4f9ce59 [ 281.162171][T13707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.162188][T13707] RSP: 002b:00007f3bd31f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.162209][T13707] RAX: ffffffffffffffda RBX: 00007f3bd5215fa0 RCX: 00007f3bd4f9ce59 [ 281.162223][T13707] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 281.162235][T13707] RBP: 00007f3bd31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.162247][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.162258][T13707] R13: 00007f3bd5216038 R14: 00007f3bd5215fa0 R15: 00007ffda33b2188 [ 281.162290][T13707] [ 281.782586][T13737] netlink: 'syz.4.2111': attribute type 10 has an invalid length. [ 281.839279][T13737] __nla_validate_parse: 10 callbacks suppressed [ 281.839299][T13737] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2111'. [ 281.924833][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 281.959592][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 282.149826][T13757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2117'. [ 282.183906][T13757] netlink: 'syz.0.2117': attribute type 7 has an invalid length. [ 282.197932][T13757] netlink: 'syz.0.2117': attribute type 8 has an invalid length. [ 282.232221][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2117'. [ 282.257582][T13764] FAULT_INJECTION: forcing a failure. [ 282.257582][T13764] name failslab, interval 1, probability 0, space 0, times 0 [ 282.270335][T13764] CPU: 1 UID: 0 PID: 13764 Comm: syz.4.2120 Not tainted syzkaller #0 PREEMPT(full) [ 282.270371][T13764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.270381][T13764] Call Trace: [ 282.270388][T13764] [ 282.270395][T13764] dump_stack_lvl+0xe8/0x150 [ 282.270420][T13764] should_fail_ex+0x412/0x560 [ 282.270445][T13764] should_failslab+0xa8/0x100 [ 282.270471][T13764] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 282.270501][T13764] ? pfn_valid+0x125/0x4c0 [ 282.270527][T13764] ? pfn_valid+0x125/0x4c0 [ 282.270555][T13764] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 282.270599][T13764] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 282.270634][T13764] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 282.270680][T13764] ? 0xffffffffa02019c8 [ 282.270697][T13764] ? 0xffffffffa0201a08 [ 282.270713][T13764] ? 0xffffffffa0201a54 [ 282.270753][T13764] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 282.270792][T13764] ? _copy_from_user+0x94/0xb0 [ 282.270820][T13764] ? bpf_test_init+0x113/0x150 [ 282.270843][T13764] ? xdp_convert_md_to_buff+0x5b/0x330 [ 282.270873][T13764] bpf_prog_test_run_xdp+0x81c/0x1160 [ 282.270917][T13764] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 282.270949][T13764] ? __fget_files+0x2a/0x420 [ 282.270978][T13764] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 282.271005][T13764] bpf_prog_test_run+0x2c7/0x340 [ 282.271030][T13764] __sys_bpf+0x643/0x950 [ 282.271061][T13764] ? __pfx___sys_bpf+0x10/0x10 [ 282.271106][T13764] ? ksys_write+0x242/0x270 [ 282.271136][T13764] ? __pfx_ksys_write+0x10/0x10 [ 282.271166][T13764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.271187][T13764] __x64_sys_bpf+0x7c/0x90 [ 282.271214][T13764] do_syscall_64+0x15f/0xf80 [ 282.271240][T13764] ? trace_irq_disable+0x3b/0x140 [ 282.271266][T13764] ? clear_bhb_loop+0x40/0x90 [ 282.271289][T13764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.271309][T13764] RIP: 0033:0x7f9898f9ce59 [ 282.271327][T13764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.271345][T13764] RSP: 002b:00007f9899f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.271375][T13764] RAX: ffffffffffffffda RBX: 00007f9899215fa0 RCX: 00007f9898f9ce59 [ 282.271389][T13764] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 282.271401][T13764] RBP: 00007f9899f41090 R08: 0000000000000000 R09: 0000000000000000 [ 282.271412][T13764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.271422][T13764] R13: 00007f9899216038 R14: 00007f9899215fa0 R15: 00007fff585ea178 [ 282.271453][T13764] [ 282.334883][T13757] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 282.348372][T13765] netlink: 'syz.2.2119': attribute type 12 has an invalid length. [ 282.788425][T13779] sctp: [Deprecated]: syz.1.2124 (pid 13779) Use of int in maxseg socket option. [ 282.788425][T13779] Use struct sctp_assoc_value instead [ 283.061216][T13791] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2129'. [ 283.153803][T13793] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 283.293726][T13793] bond15: entered promiscuous mode [ 283.349564][T13793] 8021q: adding VLAN 0 to HW filter on device bond15 [ 283.453905][T13818] 8021q: adding VLAN 0 to HW filter on device bond15 [ 283.475401][T13818] bond15: (slave vti0): The slave device specified does not support setting the MAC address [ 283.497769][T13818] bond15: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 283.543977][T13818] bond15: (slave vti0): making interface the new active one [ 283.556118][T13818] vti0: entered promiscuous mode [ 283.563647][T13818] bond15: (slave vti0): Enslaving as an active interface with an up link [ 283.573198][T13803] veth0: entered promiscuous mode [ 283.594315][T13792] veth0: left promiscuous mode [ 283.623643][T13820] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 283.657803][T13820] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 283.894537][T13840] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 284.078273][T13844] FAULT_INJECTION: forcing a failure. [ 284.078273][T13844] name failslab, interval 1, probability 0, space 0, times 0 [ 284.091019][T13844] CPU: 0 UID: 0 PID: 13844 Comm: syz.4.2138 Not tainted syzkaller #0 PREEMPT(full) [ 284.091046][T13844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.091059][T13844] Call Trace: [ 284.091067][T13844] [ 284.091075][T13844] dump_stack_lvl+0xe8/0x150 [ 284.091105][T13844] should_fail_ex+0x412/0x560 [ 284.091137][T13844] should_failslab+0xa8/0x100 [ 284.091169][T13844] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 284.091204][T13844] ? pfn_valid+0x125/0x4c0 [ 284.091242][T13844] ? pfn_valid+0x125/0x4c0 [ 284.091273][T13844] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 284.091322][T13844] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 284.091361][T13844] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 284.091424][T13844] ? 0xffffffffa02019c8 [ 284.091441][T13844] ? 0xffffffffa0201a08 [ 284.091456][T13844] ? 0xffffffffa0201a50 [ 284.091498][T13844] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 284.091538][T13844] ? _copy_from_user+0x94/0xb0 [ 284.091567][T13844] ? bpf_test_init+0x113/0x150 [ 284.091591][T13844] ? xdp_convert_md_to_buff+0x5b/0x330 [ 284.091622][T13844] bpf_prog_test_run_xdp+0x81c/0x1160 [ 284.091665][T13844] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 284.091699][T13844] ? __fget_files+0x2a/0x420 [ 284.091727][T13844] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 284.091754][T13844] bpf_prog_test_run+0x2c7/0x340 [ 284.091779][T13844] __sys_bpf+0x643/0x950 [ 284.091810][T13844] ? __pfx___sys_bpf+0x10/0x10 [ 284.091852][T13844] ? ksys_write+0x242/0x270 [ 284.091882][T13844] ? __pfx_ksys_write+0x10/0x10 [ 284.091914][T13844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.091935][T13844] __x64_sys_bpf+0x7c/0x90 [ 284.091963][T13844] do_syscall_64+0x15f/0xf80 [ 284.091990][T13844] ? trace_irq_disable+0x3b/0x140 [ 284.092019][T13844] ? clear_bhb_loop+0x40/0x90 [ 284.092043][T13844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.092062][T13844] RIP: 0033:0x7f9898f9ce59 [ 284.092081][T13844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.092097][T13844] RSP: 002b:00007f9899f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.092117][T13844] RAX: ffffffffffffffda RBX: 00007f9899215fa0 RCX: 00007f9898f9ce59 [ 284.092130][T13844] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 284.092143][T13844] RBP: 00007f9899f41090 R08: 0000000000000000 R09: 0000000000000000 [ 284.092154][T13844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.092165][T13844] R13: 00007f9899216038 R14: 00007f9899215fa0 R15: 00007fff585ea178 [ 284.092197][T13844] [ 284.411668][T13852] af_packet: tpacket_rcv: packet too big, clamped from 212 to 4294967272. macoff=96 [ 284.463112][T13857] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2141'. [ 284.476396][T13857] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2141'. [ 284.680275][T13863] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2144'. [ 284.803731][T13865] netlink: 'syz.2.2145': attribute type 4 has an invalid length. [ 284.816329][T13872] netlink: 'syz.2.2145': attribute type 1 has an invalid length. [ 284.855986][T13867] bond16: Removing last arp target with arp_interval on [ 285.036982][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 285.179931][T13888] netlink: 'syz.0.2151': attribute type 21 has an invalid length. [ 285.190757][T13888] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.198725][T13888] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 285.710415][T13915] x_tables: duplicate underflow at hook 2 [ 286.477702][T13972] wlan1: mtu greater than device maximum [ 286.914895][T13998] __nla_validate_parse: 7 callbacks suppressed [ 286.914915][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 287.099857][T14008] validate_nla: 5 callbacks suppressed [ 287.099874][T14008] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 287.129048][T14011] macsec0: left promiscuous mode [ 287.136918][T14011] macsec0: left allmulticast mode [ 287.142481][T14008] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2187'. [ 287.333383][T14017] syzkaller0: entered promiscuous mode [ 287.342030][T14015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.350278][T14017] syzkaller0: entered allmulticast mode [ 287.554487][T14030] sock: sock_set_timeout: `syz.4.2193' (pid 14030) tries to set negative timeout [ 287.707321][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 287.815337][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2198'. [ 287.892837][T14043] ip6erspan0: entered allmulticast mode [ 287.949542][T14044] netlink: 'syz.1.2199': attribute type 178 has an invalid length. [ 287.959978][T14055] macvtap1: entered promiscuous mode [ 287.976768][T14055] macvtap1: entered allmulticast mode [ 288.022654][T14055] veth1_vlan: entered allmulticast mode [ 288.093082][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2201'. [ 288.119555][T14059] macvtap2: entered promiscuous mode [ 288.134711][T14059] macvtap2: entered allmulticast mode [ 288.529500][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 288.530976][T14078] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 288.554792][T14076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2205'. [ 288.717016][T14089] netlink: 'syz.0.2210': attribute type 3 has an invalid length. [ 288.730272][T14089] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2210'. [ 288.780009][T14091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.830059][T14091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.095268][T14111] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2216'. [ 289.306058][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 289.337457][T14121] FAULT_INJECTION: forcing a failure. [ 289.337457][T14121] name failslab, interval 1, probability 0, space 0, times 0 [ 289.350174][T14121] CPU: 0 UID: 0 PID: 14121 Comm: syz.1.2220 Not tainted syzkaller #0 PREEMPT(full) [ 289.350201][T14121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.350213][T14121] Call Trace: [ 289.350222][T14121] [ 289.350230][T14121] dump_stack_lvl+0xe8/0x150 [ 289.350257][T14121] should_fail_ex+0x412/0x560 [ 289.350289][T14121] should_failslab+0xa8/0x100 [ 289.350322][T14121] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 289.350356][T14121] ? pfn_valid+0x125/0x4c0 [ 289.350384][T14121] ? pfn_valid+0x125/0x4c0 [ 289.350414][T14121] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 289.350463][T14121] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 289.350500][T14121] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 289.350550][T14121] ? 0xffffffffa02019c8 [ 289.350567][T14121] ? 0xffffffffa0201a08 [ 289.350582][T14121] ? 0xffffffffa0201a58 [ 289.350627][T14121] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 289.350666][T14121] ? _copy_from_user+0x94/0xb0 [ 289.350703][T14121] ? bpf_test_init+0x113/0x150 [ 289.350726][T14121] ? xdp_convert_md_to_buff+0x5b/0x330 [ 289.350755][T14121] bpf_prog_test_run_xdp+0x81c/0x1160 [ 289.350797][T14121] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 289.350829][T14121] ? __fget_files+0x2a/0x420 [ 289.350858][T14121] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 289.350886][T14121] bpf_prog_test_run+0x2c7/0x340 [ 289.350910][T14121] __sys_bpf+0x643/0x950 [ 289.350940][T14121] ? __pfx___sys_bpf+0x10/0x10 [ 289.350985][T14121] ? ksys_write+0x242/0x270 [ 289.351026][T14121] ? __pfx_ksys_write+0x10/0x10 [ 289.351056][T14121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.351077][T14121] __x64_sys_bpf+0x7c/0x90 [ 289.351103][T14121] do_syscall_64+0x15f/0xf80 [ 289.351128][T14121] ? trace_irq_disable+0x3b/0x140 [ 289.351155][T14121] ? clear_bhb_loop+0x40/0x90 [ 289.351178][T14121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.351214][T14121] RIP: 0033:0x7ff6b879ce59 [ 289.351231][T14121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.351247][T14121] RSP: 002b:00007ff6b9649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.351268][T14121] RAX: ffffffffffffffda RBX: 00007ff6b8a15fa0 RCX: 00007ff6b879ce59 [ 289.351282][T14121] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 289.351295][T14121] RBP: 00007ff6b9649090 R08: 0000000000000000 R09: 0000000000000000 [ 289.351306][T14121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.351317][T14121] R13: 00007ff6b8a16038 R14: 00007ff6b8a15fa0 R15: 00007fff1640fda8 [ 289.351349][T14121] [ 290.009538][T14151] netlink: 'syz.4.2227': attribute type 12 has an invalid length. [ 290.045126][T14151] netlink: 'syz.4.2227': attribute type 11 has an invalid length. [ 290.412238][T14167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.908098][T14202] bond0: (slave bond_slave_1): Releasing backup interface [ 290.922661][T14202] bond_slave_1: left allmulticast mode [ 291.027283][T14207] syzkaller0: entered promiscuous mode [ 291.032961][T14207] syzkaller0: entered allmulticast mode [ 291.056587][T14207] nbd: must specify at least one socket [ 291.115122][T14210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.344506][T14219] netlink: 'syz.2.2251': attribute type 13 has an invalid length. [ 291.671316][T14233] tipc: Enabled bearer , priority 0 [ 291.708027][T14238] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 291.744926][T14238] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 291.773122][T14238] gretap1: entered promiscuous mode [ 291.779463][T14238] gretap1: entered allmulticast mode [ 291.985442][T14252] __nla_validate_parse: 5 callbacks suppressed [ 291.985460][T14252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2260'. [ 292.006929][T14253] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 292.028498][T14240] tipc: Resetting bearer [ 292.188891][T14259] FAULT_INJECTION: forcing a failure. [ 292.188891][T14259] name failslab, interval 1, probability 0, space 0, times 0 [ 292.201623][T14259] CPU: 0 UID: 0 PID: 14259 Comm: syz.3.2262 Not tainted syzkaller #0 PREEMPT(full) [ 292.201646][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.201655][T14259] Call Trace: [ 292.201662][T14259] [ 292.201669][T14259] dump_stack_lvl+0xe8/0x150 [ 292.201692][T14259] should_fail_ex+0x412/0x560 [ 292.201723][T14259] should_failslab+0xa8/0x100 [ 292.201749][T14259] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 292.201777][T14259] ? pfn_valid+0x125/0x4c0 [ 292.201800][T14259] ? pfn_valid+0x125/0x4c0 [ 292.201825][T14259] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 292.201862][T14259] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 292.201894][T14259] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 292.201937][T14259] ? 0xffffffffa02019c8 [ 292.201950][T14259] ? 0xffffffffa0201a08 [ 292.201963][T14259] ? 0xffffffffa0201a50 [ 292.201998][T14259] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 292.202032][T14259] ? _copy_from_user+0x94/0xb0 [ 292.202058][T14259] ? bpf_test_init+0x113/0x150 [ 292.202078][T14259] ? xdp_convert_md_to_buff+0x5b/0x330 [ 292.202101][T14259] bpf_prog_test_run_xdp+0x81c/0x1160 [ 292.202137][T14259] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 292.202165][T14259] ? __fget_files+0x2a/0x420 [ 292.202192][T14259] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 292.202217][T14259] bpf_prog_test_run+0x2c7/0x340 [ 292.202241][T14259] __sys_bpf+0x643/0x950 [ 292.202272][T14259] ? __pfx___sys_bpf+0x10/0x10 [ 292.202315][T14259] ? ksys_write+0x242/0x270 [ 292.202344][T14259] ? __pfx_ksys_write+0x10/0x10 [ 292.202375][T14259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.202396][T14259] __x64_sys_bpf+0x7c/0x90 [ 292.202422][T14259] do_syscall_64+0x15f/0xf80 [ 292.202449][T14259] ? trace_irq_disable+0x3b/0x140 [ 292.202477][T14259] ? clear_bhb_loop+0x40/0x90 [ 292.202495][T14259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.202510][T14259] RIP: 0033:0x7fb385b9ce59 [ 292.202536][T14259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.202548][T14259] RSP: 002b:00007fb386b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.202564][T14259] RAX: ffffffffffffffda RBX: 00007fb385e15fa0 RCX: 00007fb385b9ce59 [ 292.202575][T14259] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 292.202584][T14259] RBP: 00007fb386b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 292.202593][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.202601][T14259] R13: 00007fb385e16038 R14: 00007fb385e15fa0 R15: 00007ffc2ded7768 [ 292.202625][T14259] [ 292.204587][ T7256] tipc: Resetting bearer [ 292.476345][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2263'. [ 292.490335][T14264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2263'. [ 292.527301][T14225] tipc: Resetting bearer [ 294.505562][T14225] tipc: Disabling bearer [ 294.844905][T14313] netlink: 'syz.4.2270': attribute type 3 has an invalid length. [ 295.083906][T14330] netlink: 'syz.4.2274': attribute type 4 has an invalid length. [ 295.112747][T14334] netlink: 'syz.4.2274': attribute type 4 has an invalid length. [ 295.281656][ T11] block nbd1: Possible stuck request ffff888027140000: control (read@0,1024B). Runtime 90 seconds [ 295.292654][ T11] block nbd1: Possible stuck request ffff8880271401c0: control (read@1024,1024B). Runtime 90 seconds [ 295.304058][ T11] block nbd1: Possible stuck request ffff888027140380: control (read@2048,1024B). Runtime 90 seconds [ 295.337008][T14343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.497261][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2279'. [ 295.735612][T14360] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 295.746985][T14360] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2280'. [ 295.757316][T14360] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2280'. [ 295.773109][T14360] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 295.781270][T14360] netlink: 'syz.0.2280': attribute type 8 has an invalid length. [ 295.789073][T14360] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2280'. [ 296.112698][T14341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.144882][T14383] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 296.253710][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 296.313459][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 296.342916][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 297.019517][T14431] __nla_validate_parse: 1 callbacks suppressed [ 297.019537][T14431] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2300'. [ 297.198335][T14438] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2304'. [ 297.223823][T14438] netlink: 'syz.2.2304': attribute type 21 has an invalid length. [ 297.246775][T14438] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2304'. [ 297.281730][T14438] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2304'. [ 297.413095][T14450] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 297.446583][T14456] openvswitch: netlink: Multiple metadata blocks provided [ 297.650975][T14465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2310'. [ 297.782597][T14475] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 297.890311][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2317'. [ 297.988152][T14486] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 298.008301][T14484] pim6reg: entered allmulticast mode [ 298.037276][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2316'. [ 298.075159][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2317'. [ 298.177387][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2317'. [ 298.313637][T14486] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.542461][T14493] dvmrp0: entered allmulticast mode [ 298.662955][T14523] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 299.079169][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2329'. [ 299.093143][T14541] 8021q: adding VLAN 0 to HW filter on device bond10 [ 299.135770][T14541] bond10 (unregistering): Released all slaves [ 299.176606][T14550] bridge0: port 1(ipvlan2) entered blocking state [ 299.186385][T14550] bridge0: port 1(ipvlan2) entered disabled state [ 299.193506][T14550] ipvlan2: entered allmulticast mode [ 299.208495][T14550] bridge0: entered allmulticast mode [ 299.218826][T14550] ipvlan2: left allmulticast mode [ 299.224134][T14550] bridge0: left allmulticast mode [ 299.255730][T14555] netem: unknown loss type 8 [ 299.265788][T14555] netem: change failed [ 299.947525][T14599] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 299.965508][T14599] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 299.992692][T14599] gretap2: entered promiscuous mode [ 300.009859][T14599] gretap2: entered allmulticast mode [ 300.113905][T14607] nbd0: detected capacity change from 0 to 63 [ 300.125216][T14609] block nbd1: NBD_DISCONNECT [ 300.129973][T14609] block nbd1: Send disconnect failed -32 [ 300.147305][ C0] blk_print_req_error: 139 callbacks suppressed [ 300.147327][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.162830][ C0] buffer_io_error: 139 callbacks suppressed [ 300.162848][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.185368][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.194574][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 300.208917][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.218168][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 300.226406][ T5649] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.244868][ T5649] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.250229][ T50] block nbd0: Receive control failed (result -104) [ 300.262199][ T5649] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.283133][ T5649] Buffer I/O error on dev nbd1, logical block 1, async page read [ 300.299803][ T5649] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.339832][ T5649] Buffer I/O error on dev nbd1, logical block 2, async page read [ 300.351987][ T5649] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.363302][ T5649] Buffer I/O error on dev nbd1, logical block 3, async page read [ 300.371585][ T5649] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.383920][ T5649] Buffer I/O error on dev nbd1, logical block 0, async page read [ 300.392333][ T5649] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.410930][ T5649] Buffer I/O error on dev nbd1, logical block 1, async page read [ 300.425456][ T5649] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.450761][ T5649] Buffer I/O error on dev nbd1, logical block 2, async page read [ 300.477381][ T5649] ldm_validate_partition_table(): Disk read failed. [ 300.508265][ T5649] Dev nbd1: unable to read RDB block 0 [ 300.526119][ T5649] nbd1: unable to read partition table [ 300.575461][ T5649] ldm_validate_partition_table(): Disk read failed. [ 300.604427][ T5649] Dev nbd1: unable to read RDB block 0 [ 300.634228][ T5649] nbd1: unable to read partition table [ 301.133346][T14652] vlan4: entered promiscuous mode [ 301.571970][T14681] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.273519][T14726] __nla_validate_parse: 13 callbacks suppressed [ 302.273540][T14726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2380'. [ 302.378773][T14721] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 302.600147][T14738] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 302.867310][T14750] Unsupported ieee802154 address type: 0 [ 302.968800][T14750] netlink: 'syz.3.2386': attribute type 29 has an invalid length. [ 303.011072][T14758] netlink: 'syz.1.2387': attribute type 1 has an invalid length. [ 303.023307][T14759] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2388'. [ 303.042673][T14750] syzkaller1: entered promiscuous mode [ 303.059439][T14750] syzkaller1: entered allmulticast mode [ 303.071438][T14757] syzkaller1: entered promiscuous mode [ 303.077921][T14757] syzkaller1: entered allmulticast mode [ 303.096531][T14762] team0: Port device team_slave_0 removed [ 303.397989][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'. [ 303.419602][T14752] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 303.648727][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2397'. [ 303.685416][T14795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.715439][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2399'. [ 303.826069][T14798] bond8: entered promiscuous mode [ 303.831610][T14798] bond8: entered allmulticast mode [ 303.855649][T14808] FAULT_INJECTION: forcing a failure. [ 303.855649][T14808] name failslab, interval 1, probability 0, space 0, times 0 [ 303.868407][T14808] CPU: 1 UID: 0 PID: 14808 Comm: syz.4.2400 Not tainted syzkaller #0 PREEMPT(full) [ 303.868434][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.868446][T14808] Call Trace: [ 303.868454][T14808] [ 303.868462][T14808] dump_stack_lvl+0xe8/0x150 [ 303.868489][T14808] should_fail_ex+0x412/0x560 [ 303.868519][T14808] should_failslab+0xa8/0x100 [ 303.868552][T14808] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 303.868584][T14808] ? pfn_valid+0x125/0x4c0 [ 303.868613][T14808] ? pfn_valid+0x125/0x4c0 [ 303.868643][T14808] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 303.868691][T14808] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 303.868736][T14808] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 303.868788][T14808] ? 0xffffffffa02019c8 [ 303.868804][T14808] ? 0xffffffffa0201a08 [ 303.868819][T14808] ? 0xffffffffa0201a4c [ 303.868863][T14808] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 303.868903][T14808] ? _copy_from_user+0x94/0xb0 [ 303.868931][T14808] ? bpf_test_init+0x113/0x150 [ 303.868955][T14808] ? xdp_convert_md_to_buff+0x5b/0x330 [ 303.868984][T14808] bpf_prog_test_run_xdp+0x81c/0x1160 [ 303.869028][T14808] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 303.869061][T14808] ? __fget_files+0x2a/0x420 [ 303.869089][T14808] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 303.869117][T14808] bpf_prog_test_run+0x2c7/0x340 [ 303.869142][T14808] __sys_bpf+0x643/0x950 [ 303.869173][T14808] ? __pfx___sys_bpf+0x10/0x10 [ 303.869218][T14808] ? ksys_write+0x242/0x270 [ 303.869248][T14808] ? __pfx_ksys_write+0x10/0x10 [ 303.869278][T14808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.869300][T14808] __x64_sys_bpf+0x7c/0x90 [ 303.869327][T14808] do_syscall_64+0x15f/0xf80 [ 303.869354][T14808] ? trace_irq_disable+0x3b/0x140 [ 303.869382][T14808] ? clear_bhb_loop+0x40/0x90 [ 303.869406][T14808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.869423][T14808] RIP: 0033:0x7f9898f9ce59 [ 303.869439][T14808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.869455][T14808] RSP: 002b:00007f9899f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.869476][T14808] RAX: ffffffffffffffda RBX: 00007f9899215fa0 RCX: 00007f9898f9ce59 [ 303.869489][T14808] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 303.869500][T14808] RBP: 00007f9899f41090 R08: 0000000000000000 R09: 0000000000000000 [ 303.869511][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.869521][T14808] R13: 00007f9899216038 R14: 00007f9899215fa0 R15: 00007fff585ea178 [ 303.869553][T14808] [ 304.130422][T14812] SET target dimension over the limit! [ 304.614453][T14832] netlink: 'syz.0.2407': attribute type 1 has an invalid length. [ 304.851881][T14846] netlink: 'syz.0.2408': attribute type 2 has an invalid length. [ 304.862852][T14846] netlink: 'syz.0.2408': attribute type 2 has an invalid length. [ 304.872713][T14846] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2408'. [ 306.724946][T14870] syz_tun: mtu less than device minimum [ 306.734454][T14874] TCP: TCP_TX_DELAY enabled [ 306.754802][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'. [ 306.767994][T14873] netlink: 'syz.3.2411': attribute type 22 has an invalid length. [ 306.796113][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 306.988860][T14883] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2415'. [ 307.169540][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'. [ 307.265918][ T30] audit: type=1804 audit(1779032661.347:6): pid=14859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2409" name="/newroot/477/cgroup.controllers" dev="tmpfs" ino=2439 res=1 errno=0 [ 307.290231][T14895] __nla_validate_parse: 3 callbacks suppressed [ 307.290250][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 307.339772][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'. [ 307.359806][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 307.373367][ T30] audit: type=1800 audit(1779032661.377:7): pid=14859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2409" name="cgroup.controllers" dev="tmpfs" ino=2439 res=0 errno=0 [ 307.522138][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 307.545351][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'. [ 307.567597][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 307.848547][T14909] netlink: 'syz.1.2423': attribute type 11 has an invalid length. [ 307.886374][T14909] netlink: 'syz.1.2423': attribute type 4 has an invalid length. [ 307.919685][T14909] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.2423'. [ 307.958970][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 307.968922][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2426'. [ 308.012714][T14913] netlink: 'syz.4.2426': attribute type 21 has an invalid length. [ 308.034899][T14913] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2426'. [ 308.052049][T14913] netlink: 'syz.4.2426': attribute type 4 has an invalid length. [ 308.069629][T14913] netlink: 'syz.4.2426': attribute type 5 has an invalid length. [ 308.257287][T14929] sctp: [Deprecated]: syz.4.2430 (pid 14929) Use of int in max_burst socket option. [ 308.257287][T14929] Use struct sctp_assoc_value instead [ 308.273683][T14930] sock: sock_timestamping_bind_phc: sock not bind to device [ 308.309599][T14930] netlink: 'syz.2.2431': attribute type 3 has an invalid length. [ 308.378705][T14933] openvswitch: netlink: Multiple metadata blocks provided [ 308.410219][T14932] openvswitch: netlink: Multiple metadata blocks provided [ 308.426823][T14933] netlink: 'syz.0.2432': attribute type 30 has an invalid length. [ 308.436229][T14932] netlink: 'syz.0.2432': attribute type 30 has an invalid length. [ 308.522314][T14938] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 308.569944][T14938] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 308.606346][T14941] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 308.616430][T14938] gretap1: entered promiscuous mode [ 308.632621][T14938] gretap1: entered allmulticast mode [ 309.253642][T14976] netlink: ct family unspecified [ 309.380069][T14980] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 309.412826][T14980] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 309.427324][T14980] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 309.456652][T14988] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 309.651760][T14993] bond6: entered promiscuous mode [ 309.676935][T14993] 8021q: adding VLAN 0 to HW filter on device bond6 [ 309.740222][T15001] bond6: (slave bridge8): making interface the new active one [ 309.754339][T15001] bridge8: entered promiscuous mode [ 309.766884][T15001] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 309.917632][T15000] hsr_slave_1 (unregistering): left promiscuous mode [ 310.055526][T15022] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 310.249004][T15030] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 310.491154][T15040] nbd: must specify an index to disconnect [ 312.083739][T15118] FAULT_INJECTION: forcing a failure. [ 312.083739][T15118] name failslab, interval 1, probability 0, space 0, times 0 [ 312.096509][T15118] CPU: 1 UID: 0 PID: 15118 Comm: syz.4.2484 Not tainted syzkaller #0 PREEMPT(full) [ 312.096535][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.096547][T15118] Call Trace: [ 312.096556][T15118] [ 312.096564][T15118] dump_stack_lvl+0xe8/0x150 [ 312.096592][T15118] should_fail_ex+0x412/0x560 [ 312.096624][T15118] should_failslab+0xa8/0x100 [ 312.096656][T15118] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 312.096690][T15118] ? pfn_valid+0x125/0x4c0 [ 312.096720][T15118] ? pfn_valid+0x125/0x4c0 [ 312.096752][T15118] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 312.096803][T15118] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 312.096843][T15118] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 312.096904][T15118] ? 0xffffffffa02019c8 [ 312.096922][T15118] ? 0xffffffffa0201a08 [ 312.096939][T15118] ? 0xffffffffa0201a58 [ 312.096985][T15118] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 312.097027][T15118] ? _copy_from_user+0x94/0xb0 [ 312.097056][T15118] ? bpf_test_init+0x113/0x150 [ 312.097081][T15118] ? xdp_convert_md_to_buff+0x5b/0x330 [ 312.097112][T15118] bpf_prog_test_run_xdp+0x81c/0x1160 [ 312.097158][T15118] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.097193][T15118] ? __fget_files+0x2a/0x420 [ 312.097223][T15118] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.097253][T15118] bpf_prog_test_run+0x2c7/0x340 [ 312.097279][T15118] __sys_bpf+0x643/0x950 [ 312.097311][T15118] ? __pfx___sys_bpf+0x10/0x10 [ 312.097359][T15118] ? ksys_write+0x242/0x270 [ 312.097390][T15118] ? __pfx_ksys_write+0x10/0x10 [ 312.097424][T15118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.097448][T15118] __x64_sys_bpf+0x7c/0x90 [ 312.097477][T15118] do_syscall_64+0x15f/0xf80 [ 312.097505][T15118] ? trace_irq_disable+0x3b/0x140 [ 312.097535][T15118] ? clear_bhb_loop+0x40/0x90 [ 312.097561][T15118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.097581][T15118] RIP: 0033:0x7f9898f9ce59 [ 312.097601][T15118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.097618][T15118] RSP: 002b:00007f9899f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.097640][T15118] RAX: ffffffffffffffda RBX: 00007f9899215fa0 RCX: 00007f9898f9ce59 [ 312.097655][T15118] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 312.097667][T15118] RBP: 00007f9899f41090 R08: 0000000000000000 R09: 0000000000000000 [ 312.097680][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.097691][T15118] R13: 00007f9899216038 R14: 00007f9899215fa0 R15: 00007fff585ea178 [ 312.097726][T15118] [ 312.369454][T15116] xt_TCPMSS: Only works on TCP SYN packets [ 312.693496][T15134] __nla_validate_parse: 21 callbacks suppressed [ 312.693515][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 312.726866][T15134] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.736265][T15134] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.042641][T15153] xt_TCPMSS: Only works on TCP SYN packets [ 313.215217][T15151] xt_cgroup: xt_cgroup: no path or classid specified [ 313.712335][T15185] ip6tnl0: Caught tx_queue_len zero misconfig [ 313.717879][T15191] validate_nla: 7 callbacks suppressed [ 313.717927][T15191] netlink: 'syz.3.2505': attribute type 1 has an invalid length. [ 313.733384][T15191] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2505'. [ 313.743103][T15191] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2505'. [ 313.763746][T15191] netlink: 'syz.3.2505': attribute type 1 has an invalid length. [ 313.779965][T15191] netlink: 618 bytes leftover after parsing attributes in process `syz.3.2505'. [ 314.011685][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2507'. [ 314.172420][T15206] netlink: 'syz.4.2509': attribute type 4 has an invalid length. [ 314.193440][T15206] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2509'. [ 314.219954][T15206] .`: renamed from bond0 [ 314.319771][T15217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.431515][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'. [ 314.452650][T15221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2513'. [ 314.633784][T15236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2516'. [ 315.202426][T15267] netlink: 'syz.4.2526': attribute type 2 has an invalid length. [ 315.382158][T15281] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2531'. [ 315.680546][T15287] syzkaller0: entered promiscuous mode [ 315.690881][T15287] syzkaller0: entered allmulticast mode [ 317.036424][T15342] netlink: 'syz.3.2548': attribute type 1 has an invalid length. [ 317.060720][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.807094][T15342] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 318.905420][T15368] __nla_validate_parse: 4 callbacks suppressed [ 318.905440][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'. [ 319.008269][T15368] netlink: 'syz.2.2553': attribute type 6 has an invalid length. [ 319.192100][T15376] 8021q: VLANs not supported on syzkaller0 [ 319.233595][T15376] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 319.252304][T15382] netlink: 'syz.0.2558': attribute type 39 has an invalid length. [ 319.260221][T15376] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 319.310695][T15385] 8021q: VLANs not supported on syzkaller0 [ 319.484237][T15393] netlink: 'syz.2.2561': attribute type 21 has an invalid length. [ 319.496507][T15393] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.510828][T15393] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 319.528205][T15397] IPVS: set_ctl: invalid protocol: 59 172.30.0.1:20000 [ 319.565166][T15400] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2563'. [ 319.706381][T15400] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.756813][T15400] .` (unregistering): Released all slaves [ 319.948228][T15418] FAULT_INJECTION: forcing a failure. [ 319.948228][T15418] name failslab, interval 1, probability 0, space 0, times 0 [ 319.960968][T15418] CPU: 1 UID: 0 PID: 15418 Comm: syz.1.2568 Not tainted syzkaller #0 PREEMPT(full) [ 319.960994][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.961007][T15418] Call Trace: [ 319.961015][T15418] [ 319.961023][T15418] dump_stack_lvl+0xe8/0x150 [ 319.961051][T15418] should_fail_ex+0x412/0x560 [ 319.961083][T15418] should_failslab+0xa8/0x100 [ 319.961114][T15418] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 319.961148][T15418] ? pfn_valid+0x125/0x4c0 [ 319.961175][T15418] ? pfn_valid+0x125/0x4c0 [ 319.961207][T15418] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 319.961255][T15418] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 319.961292][T15418] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 319.961344][T15418] ? 0xffffffffa02019c8 [ 319.961361][T15418] ? 0xffffffffa0201a08 [ 319.961377][T15418] ? 0xffffffffa0208808 [ 319.961430][T15418] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 319.961471][T15418] ? _copy_from_user+0x94/0xb0 [ 319.961500][T15418] ? bpf_test_init+0x113/0x150 [ 319.961523][T15418] ? xdp_convert_md_to_buff+0x5b/0x330 [ 319.961553][T15418] bpf_prog_test_run_xdp+0x81c/0x1160 [ 319.961598][T15418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 319.961632][T15418] ? __fget_files+0x2a/0x420 [ 319.961661][T15418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 319.961689][T15418] bpf_prog_test_run+0x2c7/0x340 [ 319.961714][T15418] __sys_bpf+0x643/0x950 [ 319.961746][T15418] ? __pfx___sys_bpf+0x10/0x10 [ 319.961793][T15418] ? ksys_write+0x242/0x270 [ 319.961824][T15418] ? __pfx_ksys_write+0x10/0x10 [ 319.961857][T15418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.961879][T15418] __x64_sys_bpf+0x7c/0x90 [ 319.961908][T15418] do_syscall_64+0x15f/0xf80 [ 319.961935][T15418] ? trace_irq_disable+0x3b/0x140 [ 319.961964][T15418] ? clear_bhb_loop+0x40/0x90 [ 319.961989][T15418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.962008][T15418] RIP: 0033:0x7ff6b879ce59 [ 319.962027][T15418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.962042][T15418] RSP: 002b:00007ff6b9649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.962061][T15418] RAX: ffffffffffffffda RBX: 00007ff6b8a15fa0 RCX: 00007ff6b879ce59 [ 319.962075][T15418] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 319.962088][T15418] RBP: 00007ff6b9649090 R08: 0000000000000000 R09: 0000000000000000 [ 319.962099][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.962110][T15418] R13: 00007ff6b8a16038 R14: 00007ff6b8a15fa0 R15: 00007fff1640fda8 [ 319.962142][T15418] [ 320.227336][T15405] : entered promiscuous mode [ 320.250778][T15405] tipc: Enabled bearer , priority 0 [ 320.300494][T15405] syzkaller0: entered promiscuous mode [ 320.306113][T15405] syzkaller0: entered allmulticast mode [ 320.312540][T15405] tipc: Resetting bearer [ 320.360860][T15403] tipc: Resetting bearer [ 320.744942][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2573'. [ 322.147005][T15403] tipc: Disabling bearer [ 322.548983][T15450] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2580'. [ 322.745676][T15466] netlink: 'syz.0.2584': attribute type 1 has an invalid length. [ 322.894225][ T50] block nbd1: Receive control failed (result -32) [ 323.034736][T15478] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2587'. [ 323.247176][T15487] veth0_to_bond: entered allmulticast mode [ 323.399594][T15494] bridge0: Device is already in use. [ 323.520420][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'. [ 323.535541][T15498] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 323.772358][T15508] netlink: 'syz.3.2596': attribute type 1 has an invalid length. [ 323.786100][T15508] netlink: 'syz.3.2596': attribute type 4 has an invalid length. [ 323.797321][T15508] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2596'. [ 323.812467][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 330.481458][ T1691] block nbd0: Possible stuck request ffff8880270f5080: control (read@0,1024B). Runtime 30 seconds [ 330.492288][ T1691] block nbd0: Possible stuck request ffff8880270f5240: control (read@1024,1024B). Runtime 30 seconds [ 330.503350][ T1691] block nbd0: Possible stuck request ffff8880270f5400: control (read@2048,1024B). Runtime 30 seconds [ 330.514402][ T1691] block nbd0: Possible stuck request ffff8880270f55c0: control (read@3072,1024B). Runtime 30 seconds [ 346.492924][T15523] netlink: 'syz.2.2599': attribute type 10 has an invalid length. [ 346.502315][T15523] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 346.533567][T15523] netlink: 'syz.2.2599': attribute type 10 has an invalid length. [ 346.615951][T15528] syzkaller1: entered promiscuous mode [ 346.641341][T15528] syzkaller1: entered allmulticast mode [ 346.816564][T15540] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2604'. [ 346.891320][T15547] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2606'. [ 346.946448][T15547] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 347.078985][T15553] x_tables: duplicate underflow at hook 1 [ 347.142357][T15557] netlink: 'syz.4.2611': attribute type 3 has an invalid length. [ 347.162749][T15557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2611'. [ 347.277234][T15566] xt_hashlimit: invalid interval [ 347.381189][T15571] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 347.468065][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 347.522356][T15583] netlink: 'syz.2.2617': attribute type 21 has an invalid length. [ 347.541767][T15583] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2617'. [ 347.819979][T15595] syzkaller0: entered promiscuous mode [ 347.839270][T15595] syzkaller0: entered allmulticast mode [ 347.860231][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 348.152302][T15613] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 348.190512][T15613] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 348.317733][T15619] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 348.351843][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 348.409673][T15626] sch_tbf: burst 12 is lower than device bridge6 mtu (1514) ! [ 348.492037][T15626] netlink: 'syz.3.2629': attribute type 9 has an invalid length. [ 348.599476][T15634] syzkaller0: entered promiscuous mode [ 348.610964][T15636] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2634'. [ 348.624263][T15634] syzkaller0: entered allmulticast mode [ 348.638441][T15636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'. [ 348.663025][T15634] TC_ACT_REPEAT abuse ? [ 348.968943][T15662] netlink: 'syz.2.2637': attribute type 24 has an invalid length. [ 349.350994][T15670] bond5: entered allmulticast mode [ 349.591876][T15690] : (slave bond_slave_0): Releasing backup interface [ 349.718183][T15690] team0: Port device team_slave_0 removed [ 349.757649][T15690] team0: Port device team_slave_1 removed [ 349.783112][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.791188][T15690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.806075][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.815389][T15690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.828621][T15690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.879116][T15698] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2649'. [ 350.033867][T15712] ve: renamed from gretap0 [ 350.264226][T15726] tipc: Enabling of bearer rejected, failed to enable media [ 350.972418][T15774] wireguard: wg0: Could not create IPv4 socket [ 351.650532][T15815] openvswitch: netlink: IP tunnel dst address not specified [ 351.658354][T15814] openvswitch: netlink: IP tunnel dst address not specified [ 352.369590][T15845] netlink: 'syz.2.2688': attribute type 8 has an invalid length. [ 352.780180][T15859] tc action pedit 'at' offset 6 out of bounds [ 353.338807][T15891] __nla_validate_parse: 6 callbacks suppressed [ 353.338825][T15891] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2703'. [ 353.405385][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 353.518169][T15898] xt_SECMARK: invalid mode: 9 [ 353.525059][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'. [ 353.583903][T15893] bridge3: port 1(vlan3) entered blocking state [ 353.611454][T15893] bridge3: port 1(vlan3) entered disabled state [ 353.628526][T15893] vlan3: entered allmulticast mode [ 353.642109][T15893] bridge3: entered allmulticast mode [ 353.667165][T15893] vlan3: left allmulticast mode [ 353.692276][T15893] bridge3: left allmulticast mode [ 353.792402][T15899] syzkaller0: entered promiscuous mode [ 353.805298][T15899] syzkaller0: entered allmulticast mode [ 354.225917][T15930] wireguard0: entered promiscuous mode [ 354.232443][T15930] wireguard0: entered allmulticast mode [ 354.316270][T15940] netlink: 'syz.2.2717': attribute type 4 has an invalid length. [ 354.341751][T15940] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2717'. [ 354.381488][T15936] bond11: entered allmulticast mode [ 354.453417][T15939] bridge4: entered promiscuous mode [ 354.465265][T15939] bridge4: entered allmulticast mode [ 354.506621][T15939] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 354.605282][T15953] tipc: Enabling not permitted [ 354.640387][T15953] tipc: Enabling of bearer rejected, failed to enable media [ 354.876914][T15962] syzkaller0: entered promiscuous mode [ 354.897089][T15962] syzkaller0: entered allmulticast mode [ 355.170321][T15980] tipc: Started in network mode [ 355.191136][T15980] tipc: Node identity 080211000001, cluster identity 4711 [ 355.202612][T15980] tipc: Enabled bearer , priority 0 [ 355.407168][T15989] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2731'. [ 355.425895][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'. [ 355.449806][T15995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.948600][T16016] syzkaller0: entered promiscuous mode [ 355.963593][T16016] syzkaller0: entered allmulticast mode [ 356.026133][T16018] tipc: Enabled bearer , priority 0 [ 356.139353][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2745'. [ 356.284708][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'. [ 356.286558][T16018] syzkaller0: entered promiscuous mode [ 356.320387][T16018] syzkaller0: entered allmulticast mode [ 356.327225][T16018] tipc: Resetting bearer [ 356.347855][T16025] gre3: entered promiscuous mode [ 356.353225][T16025] gre3: entered allmulticast mode [ 356.371939][T13682] tipc: Node number set to 134418688 [ 356.435198][T16017] tipc: Resetting bearer [ 356.526569][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2752'. [ 356.579227][T16051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2752'. [ 358.187037][T16017] tipc: Disabling bearer [ 358.197774][T16050] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 358.379847][T16073] __nla_validate_parse: 3 callbacks suppressed [ 358.379867][T16073] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2756'. [ 358.495891][T16081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2758'. [ 358.526673][T16081] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2758'. [ 358.582799][T16084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2758'. [ 358.804746][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 358.820023][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'. [ 358.829528][T16101] netlink: 'syz.2.2764': attribute type 12 has an invalid length. [ 358.851078][T16101] netlink: 'syz.2.2764': attribute type 11 has an invalid length. [ 358.999471][T16102] netlink: 'syz.0.2765': attribute type 10 has an invalid length. [ 359.041729][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2765'. [ 359.973341][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'. [ 359.991971][T16171] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 360.014265][T16171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'. [ 360.239414][T16178] netlink: 168380 bytes leftover after parsing attributes in process `syz.0.2782'. [ 360.259608][T16181] x_tables: duplicate underflow at hook 2 [ 360.268416][T16178] netem: change failed [ 360.562398][ T1691] block nbd0: Possible stuck request ffff8880270f5080: control (read@0,1024B). Runtime 60 seconds [ 360.573214][ T1691] block nbd0: Possible stuck request ffff8880270f5240: control (read@1024,1024B). Runtime 60 seconds [ 360.587042][ T1691] block nbd0: Possible stuck request ffff8880270f5400: control (read@2048,1024B). Runtime 60 seconds [ 360.598394][ T1691] block nbd0: Possible stuck request ffff8880270f55c0: control (read@3072,1024B). Runtime 60 seconds [ 361.099921][T16227] netlink: 'syz.2.2796': attribute type 83 has an invalid length. [ 361.368014][T16248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.431817][T16251] netlink: 'syz.0.2803': attribute type 1 has an invalid length. [ 362.355416][T16302] netlink: 'syz.0.2818': attribute type 1 has an invalid length. [ 362.371429][T16302] netlink: 'syz.0.2818': attribute type 1 has an invalid length. [ 362.389518][T16302] netlink: 'syz.0.2818': attribute type 2 has an invalid length. [ 362.401638][T16302] netlink: 'syz.0.2818': attribute type 1 has an invalid length. [ 362.424775][T16307] syzkaller0: entered promiscuous mode [ 362.440465][T16307] syzkaller0: entered allmulticast mode [ 362.840494][T16324] Cannot find set identified by id 65534 to match [ 362.860152][T16324] netlink: 'syz.0.2827': attribute type 14 has an invalid length. [ 363.131247][T16332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.308373][T16348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.324673][T16345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.353361][T16347] bridge6: port 1(vlan0) entered blocking state [ 363.360020][T16347] bridge6: port 1(vlan0) entered disabled state [ 363.369256][T16347] vlan0: entered allmulticast mode [ 363.377314][T16347] bridge6: entered allmulticast mode [ 363.385858][T16347] vlan0: left allmulticast mode [ 363.392295][T16347] bridge6: left allmulticast mode [ 363.472386][T16343] macsec1: entered promiscuous mode [ 364.009807][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.026985][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.036235][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.052483][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.054649][T16371] validate_nla: 4 callbacks suppressed [ 364.054694][T16371] netlink: 'syz.2.2844': attribute type 1 has an invalid length. [ 364.076622][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.109148][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.117008][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.125823][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.136954][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.145915][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.196956][ T30] audit: type=1800 audit(1779032718.277:8): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2845" name="memory.events" dev="tmpfs" ino=2874 res=0 errno=0 [ 364.230135][T16370] syzkaller0: entered promiscuous mode [ 364.236198][T16371] __nla_validate_parse: 12 callbacks suppressed [ 364.236215][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2844'. [ 364.236273][T16371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2844'. [ 364.264682][T16376] ------------[ cut here ]------------ [ 364.270508][T16376] 1 [ 364.270531][T16376] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#0: syz.1.2847/16376 [ 364.283653][T16376] Modules linked in: [ 364.287811][T16376] CPU: 0 UID: 0 PID: 16376 Comm: syz.1.2847 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 364.297278][T16376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 364.307414][T16376] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 364.312452][T16376] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 aa d2 b8 f7 66 90 e8 a3 d2 b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 94 68 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bf d6 9e 01 cc 49 [ 364.332158][T16376] RSP: 0018:ffffc9001beef1c0 EFLAGS: 00010286 [ 364.338274][T16376] RAX: d9875d23927ea200 RBX: ffff8880790f1b40 RCX: 0000000080000401 [ 364.346347][T16376] RDX: 0000000000000002 RSI: ffffffff8dfa6c27 RDI: ffffffff8c28af60 [ 364.354399][T16376] RBP: ffffc9001beef4c0 R08: ffffffff9030bcf7 R09: 1ffffffff206179e [ 364.362476][T16376] R10: dffffc0000000000 R11: fffffbfff206179f R12: dffffc0000000000 [ 364.370491][T16376] R13: 0000000000000000 R14: ffff8880790f1b40 R15: dffffc0000000000 [ 364.378556][T16376] FS: 00007ff6b96496c0(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 364.387574][T16376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.394314][T16376] CR2: 0000200000002280 CR3: 0000000057e3a000 CR4: 00000000003526f0 [ 364.402370][T16376] Call Trace: [ 364.405688][T16376] [ 364.408659][T16376] ip_push_pending_frames+0x8b/0x110 [ 364.414031][T16376] __icmp_send+0x11e4/0x1690 [ 364.418687][T16376] ? __icmp_send+0x22b/0x1690 [ 364.423467][T16376] ? __pfx___icmp_send+0x10/0x10 [ 364.428482][T16376] ? ip_route_input_noref+0xad/0x270 [ 364.433874][T16376] ? __pfx_ip_route_input_noref+0x10/0x10 [ 364.439663][T16376] ? tcp_v4_early_demux+0x465/0x9c0 [ 364.444943][T16376] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 364.450192][T16376] ip_options_compile+0x80/0xb0 [ 364.455145][T16376] ip_rcv_finish_core+0xaa2/0x1c00 [ 364.460324][T16376] ip_rcv_finish+0x14c/0x2a0 [ 364.465003][T16376] NF_HOOK+0x336/0x3c0 [ 364.469118][T16376] ? sock_wfree+0x26e/0x750 [ 364.473708][T16376] ? __pfx_ip_rcv_finish+0x10/0x10 [ 364.478876][T16376] ? NF_HOOK+0x9e/0x3c0 [ 364.483108][T16376] ? __pfx_NF_HOOK+0x10/0x10 [ 364.487749][T16376] ? __pfx_ip_rcv_finish+0x10/0x10 [ 364.493051][T16376] ? netif_receive_skb+0x102/0xbf0 [ 364.498211][T16376] ? __pfx_ip_rcv+0x10/0x10 [ 364.502863][T16376] netif_receive_skb+0x45b/0xbf0 [ 364.507864][T16376] ? __pfx_netif_receive_skb+0x10/0x10 [ 364.513422][T16376] ? tun_rx_batched+0x185/0x790 [ 364.518328][T16376] tun_rx_batched+0x1de/0x790 [ 364.523101][T16376] ? __build_skb+0x62/0x440 [ 364.527661][T16376] ? __pfx_tun_rx_batched+0x10/0x10 [ 364.532952][T16376] ? tun_get_user+0x2787/0x43e0 [ 364.537854][T16376] ? tun_get_user+0x2787/0x43e0 [ 364.542797][T16376] ? tun_get_user+0x2394/0x43e0 [ 364.547697][T16376] ? tun_get_user+0x2394/0x43e0 [ 364.552641][T16376] ? __local_bh_enable_ip+0xd0/0x130 [ 364.557988][T16376] tun_get_user+0x2bbc/0x43e0 [ 364.562773][T16376] ? tun_get_user+0x2787/0x43e0 [ 364.567762][T16376] ? aa_file_perm+0x50e/0x15e0 [ 364.572234][T16374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2846'. [ 364.572791][T16376] ? __pfx_tun_get_user+0x10/0x10 [ 364.586610][T16376] ? __lock_acquire+0x6b5/0x2cf0 [ 364.591657][T16376] ? ref_tracker_alloc+0x35c/0x4c0 [ 364.596823][T16376] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 364.602385][T16376] ? tun_get+0x1c/0x2f0 [ 364.606604][T16376] ? tun_get+0x1c/0x2f0 [ 364.610852][T16376] ? tun_get+0x1c/0x2f0 [ 364.615069][T16376] ? tun_get+0x1c/0x2f0 [ 364.619281][T16376] tun_chr_write_iter+0x113/0x200 [ 364.624436][T16376] vfs_write+0x61d/0xb90 [ 364.628745][T16376] ? __pfx_vfs_write+0x10/0x10 [ 364.633608][T16376] ? __fget_files+0x2a/0x420 [ 364.638249][T16376] ksys_write+0x150/0x270 [ 364.642673][T16376] ? __pfx_ksys_write+0x10/0x10 [ 364.647587][T16376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.653742][T16376] do_syscall_64+0x15f/0xf80 [ 364.658381][T16376] ? trace_irq_disable+0x3b/0x140 [ 364.663511][T16376] ? clear_bhb_loop+0x40/0x90 [ 364.668244][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.674231][T16376] RIP: 0033:0x7ff6b875d68e [ 364.678689][T16376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.698403][T16376] RSP: 002b:00007ff6b9648fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.706926][T16376] RAX: ffffffffffffffda RBX: 00007ff6b96496c0 RCX: 00007ff6b875d68e [ 364.714993][T16376] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 364.723039][T16376] RBP: 00007ff6b8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 364.731085][T16376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.737246][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2848'. [ 364.739081][T16376] R13: 00007ff6b8a16038 R14: 00007ff6b8a15fa0 R15: 00007fff1640fda8 [ 364.739126][T16376] [ 364.739172][T16376] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 364.739239][T16376] CPU: 0 UID: 0 PID: 16376 Comm: syz.1.2847 Not tainted syzkaller #0 PREEMPT(full) [ 364.739311][T16376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 364.739351][T16376] Call Trace: [ 364.739381][T16376] [ 364.739403][T16376] vpanic+0x56c/0xa60 [ 364.739480][T16376] ? __pfx__printk+0x10/0x10 [ 364.739550][T16376] ? __pfx_vpanic+0x10/0x10 [ 364.739611][T16376] ? is_bpf_text_address+0x292/0x2b0 [ 364.739686][T16376] ? is_bpf_text_address+0x26/0x2b0 [ 364.739763][T16376] panic+0xc5/0xd0 [ 364.739824][T16376] ? __pfx_panic+0x10/0x10 [ 364.739924][T16376] __warn+0x315/0x4c0 [ 364.739985][T16376] ? ip_rt_bug+0x2d/0x140 [ 364.740047][T16376] ? ip_rt_bug+0x2d/0x140 [ 364.740108][T16376] __report_bug+0x29a/0x540 [ 364.740180][T16376] ? NF_HOOK+0x336/0x3c0 [ 364.740242][T16376] ? netif_receive_skb+0x45b/0xbf0 [ 364.740296][T16376] ? tun_rx_batched+0x1de/0x790 [ 364.740378][T16376] ? ip_rt_bug+0x2d/0x140 [ 364.740442][T16376] ? __pfx___report_bug+0x10/0x10 [ 364.740583][T16376] ? ip_rt_bug+0x2d/0x140 [ 364.740650][T16376] report_bug+0x16a/0x220 [ 364.740751][T16376] ? ip_rt_bug+0x2d/0x140 [ 364.740802][T16376] ? ip_rt_bug+0x2f/0x140 [ 364.740854][T16376] handle_bug+0x9c/0x200 [ 364.740913][T16376] exc_invalid_op+0x1a/0x50 [ 364.740966][T16376] asm_exc_invalid_op+0x1a/0x20 [ 364.741017][T16376] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 364.741070][T16376] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 aa d2 b8 f7 66 90 e8 a3 d2 b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 94 68 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bf d6 9e 01 cc 49 [ 364.741121][T16376] RSP: 0018:ffffc9001beef1c0 EFLAGS: 00010286 [ 364.741170][T16376] RAX: d9875d23927ea200 RBX: ffff8880790f1b40 RCX: 0000000080000401 [ 364.741211][T16376] RDX: 0000000000000002 RSI: ffffffff8dfa6c27 RDI: ffffffff8c28af60 [ 364.741251][T16376] RBP: ffffc9001beef4c0 R08: ffffffff9030bcf7 R09: 1ffffffff206179e [ 364.741293][T16376] R10: dffffc0000000000 R11: fffffbfff206179f R12: dffffc0000000000 [ 364.741346][T16376] R13: 0000000000000000 R14: ffff8880790f1b40 R15: dffffc0000000000 [ 364.741437][T16376] ip_push_pending_frames+0x8b/0x110 [ 364.741501][T16376] __icmp_send+0x11e4/0x1690 [ 364.741582][T16376] ? __icmp_send+0x22b/0x1690 [ 364.741651][T16376] ? __pfx___icmp_send+0x10/0x10 [ 364.741796][T16376] ? ip_route_input_noref+0xad/0x270 [ 364.741904][T16376] ? __pfx_ip_route_input_noref+0x10/0x10 [ 364.742029][T16376] ? tcp_v4_early_demux+0x465/0x9c0 [ 364.742122][T16376] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 364.742206][T16376] ip_options_compile+0x80/0xb0 [ 364.742301][T16376] ip_rcv_finish_core+0xaa2/0x1c00 [ 364.742410][T16376] ip_rcv_finish+0x14c/0x2a0 [ 364.742487][T16376] NF_HOOK+0x336/0x3c0 [ 364.742571][T16376] ? sock_wfree+0x26e/0x750 [ 364.742650][T16376] ? __pfx_ip_rcv_finish+0x10/0x10 [ 364.742731][T16376] ? NF_HOOK+0x9e/0x3c0 [ 364.742795][T16376] ? __pfx_NF_HOOK+0x10/0x10 [ 364.742874][T16376] ? __pfx_ip_rcv_finish+0x10/0x10 [ 364.742964][T16376] ? netif_receive_skb+0x102/0xbf0 [ 364.743018][T16376] ? __pfx_ip_rcv+0x10/0x10 [ 364.743088][T16376] netif_receive_skb+0x45b/0xbf0 [ 364.743160][T16376] ? __pfx_netif_receive_skb+0x10/0x10 [ 364.743233][T16376] ? tun_rx_batched+0x185/0x790 [ 364.743306][T16376] tun_rx_batched+0x1de/0x790 [ 364.743376][T16376] ? __build_skb+0x62/0x440 [ 364.743478][T16376] ? __pfx_tun_rx_batched+0x10/0x10 [ 364.743555][T16376] ? tun_get_user+0x2787/0x43e0 [ 364.743627][T16376] ? tun_get_user+0x2787/0x43e0 [ 364.743699][T16376] ? tun_get_user+0x2394/0x43e0 [ 364.743770][T16376] ? tun_get_user+0x2394/0x43e0 [ 364.743833][T16376] ? __local_bh_enable_ip+0xd0/0x130 [ 364.743904][T16376] tun_get_user+0x2bbc/0x43e0 [ 364.743997][T16376] ? tun_get_user+0x2787/0x43e0 [ 364.744106][T16376] ? aa_file_perm+0x50e/0x15e0 [ 364.744189][T16376] ? __pfx_tun_get_user+0x10/0x10 [ 364.744274][T16376] ? __lock_acquire+0x6b5/0x2cf0 [ 364.744381][T16376] ? ref_tracker_alloc+0x35c/0x4c0 [ 364.744469][T16376] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 364.744552][T16376] ? tun_get+0x1c/0x2f0 [ 364.744620][T16376] ? tun_get+0x1c/0x2f0 [ 364.744719][T16376] ? tun_get+0x1c/0x2f0 [ 364.744798][T16376] ? tun_get+0x1c/0x2f0 [ 364.744910][T16376] tun_chr_write_iter+0x113/0x200 [ 364.744995][T16376] vfs_write+0x61d/0xb90 [ 364.745102][T16376] ? __pfx_vfs_write+0x10/0x10 [ 364.745226][T16376] ? __fget_files+0x2a/0x420 [ 364.745319][T16376] ksys_write+0x150/0x270 [ 364.745420][T16376] ? __pfx_ksys_write+0x10/0x10 [ 364.745506][T16376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.745570][T16376] do_syscall_64+0x15f/0xf80 [ 364.745644][T16376] ? trace_irq_disable+0x3b/0x140 [ 364.745729][T16376] ? clear_bhb_loop+0x40/0x90 [ 364.745803][T16376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.745849][T16376] RIP: 0033:0x7ff6b875d68e [ 364.745904][T16376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.745955][T16376] RSP: 002b:00007ff6b9648fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.746009][T16376] RAX: ffffffffffffffda RBX: 00007ff6b96496c0 RCX: 00007ff6b875d68e [ 364.746052][T16376] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 364.746086][T16376] RBP: 00007ff6b8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 364.746127][T16376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.746168][T16376] R13: 00007ff6b8a16038 R14: 00007ff6b8a15fa0 R15: 00007fff1640fda8 [ 364.746303][T16376] [ 364.749196][T16376] Kernel Offset: disabled