last executing test programs: 3.288703345s ago: executing program 0 (id=6076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c) socket(0x2, 0x1, 0x9) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/5, 0x5}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x10c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x2, 0x3, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, @in=@multicast1, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9}, {0x7, 0x400804, 0xfc8, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x10c}}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 3.28630912s ago: executing program 1 (id=6077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{0x0}, {&(0x7f00000015c0)="0d113311", 0x4}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x20}, 0x0) 3.206716468s ago: executing program 4 (id=6079): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540100001800010027bd7000fddbdf251d0106001e010600030503feff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abc56c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c035c8dc9f00000e4ffff004d01ffffff2814edb2ea0000080005000206f70515000300030000200501000054831bdbae1d82b3060000004e6d9ab978741fbde2269812ad37eb879abebddc5e168702aebc6cf5c9fc6ada3eeba18856a77c0eb8469b402f400356b6979e377be1f8568e731e860bf4664a653283d276a06ab112b6a68fad77ea3d6b8a30bcd78e7bb91ea08e6003f97d4069dd25306d3e3967fdea8ab54946fda9e65d6eb5"], 0x154}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x10}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd0a6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) 2.875102805s ago: executing program 4 (id=6083): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) 2.720913607s ago: executing program 4 (id=6085): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0xd, &(0x7f0000000140)="02eaff0000000000", 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x13) 2.493962719s ago: executing program 4 (id=6088): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) close(0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b00010074617267657400001c00028004ff1a000800024000000000090001004d41524b000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040044) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.354443426s ago: executing program 1 (id=6089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200fffd0000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.249759307s ago: executing program 0 (id=6090): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000048000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000001c00048018000180080001006c6f67000c00f97f060001400000000014000000110001"], 0xd0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, 0x0) shutdown(r3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@gettfilter={0x5c, 0x2e, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xffe9, 0x5}, {0xfff1, 0x5}, {0x6, 0xf}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xd60}, {0x8}, {0x8}, {0x8, 0xb, 0x9f14}, {0x8, 0xb, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8814}, 0xc8020) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802fe1622e8ffff000000000000000085000000990000009500000000000000e2650f4eafe4d7abd53b076f3a1f4ab68762a7c9c877595357c50890d38b7ec822ffb2fcfba7b94fd1b685c16d4e734234a14a01abd8ca24f3658b5780e63566896491539d6715175bb0eda494a4998f5285297a0f7b9461b00e3413a072182786ab0a3ad6fd5584eb186f6bac8ad5e8fa45fe"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.180109735s ago: executing program 3 (id=6091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x40) socket(0x1e, 0x4, 0xfdfffffd) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8006}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40850}, 0x4044044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000074000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f7570000000000800024000000000180003000000000000000000000000000000000000000000140000001100010000"], 0xfc}}, 0x0) 2.093058014s ago: executing program 1 (id=6092): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xff, 0x9, 0x40, @private0, @loopback, 0x0, 0x20, 0x6}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x48, 0x0, r0, 0xfff, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) 1.956893425s ago: executing program 3 (id=6093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 1.817438739s ago: executing program 1 (id=6094): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500020000680000bf010000000000008500000056000000b70000000200100095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.816670836s ago: executing program 0 (id=6095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d002bc47000dddbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB="0d0014006e6c38303231010000000000"], 0x2c}}, 0x408c0) r2 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113c000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x3e68, @loopback, 0x1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000480)=[{r5, 0x4000}, {r5, 0x200}], 0x2, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x810, r2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4000000}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) sendmmsg(r2, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) 1.725471542s ago: executing program 3 (id=6097): socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r5, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) 1.660036781s ago: executing program 1 (id=6098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000400000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb7030000080000e1b7040000000000a1850000002800000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r9, 0x0, 0x0, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r10, @ANYBLOB="100001800400", @ANYRES8=r5], 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) socket$inet6(0xa, 0x2, 0x0) 1.583757013s ago: executing program 2 (id=6099): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0xa, 0xffffffff) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_PARENT(r5, 0x8004b708, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020008000000000006000700040000000c000880050004000100000008000610f200000008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000081b080002d3242ae4d3279b700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x5a}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) 1.521407009s ago: executing program 2 (id=6100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x3, 0x2006) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0xd, "5dd9df453931d37eeee485"}, @fastopen={0x22, 0x4, '\rH'}]}}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000003c0), &(0x7f0000000540)=0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000005240001800a000100717565756500000014000280080004400000001006000c40000200000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) vmsplice(r3, &(0x7f00000006c0)=[{&(0x7f0000000580)="3708e76361d82d002c48bd8d164c4d7842743d38d96bd682e08fc918fb53f4fd5413f5193138a150af9eec2b9f6abeb2001154fdcc092502765549b06fd1a037e247d945af149ea4514d9c1817b1", 0x4e}, {&(0x7f0000000600)="9787e06cd198345ec9e924574d7261a9bc20a8f61cf8c2938b9f4387872f2c74deaf9d5d2590b0ebf78529cd6348a01c9dd4b7f980e775b45c1f8f2e0912449c39a2cf57d9e20e201e75d62a34f13e34a645fc46af5c6ac47e9681b13e9e06645ecad7bdd78ba7e6ad84f4ff2cef3fed8f304c3f2492a066ad1b7fda2c0003a25029ba6c8bac79e22d0e75b29b816b09fdf08ffc72abf51bec6fad1f034d14e12138ccef84ae90a59a5ffd300a8b8e49bddb2c2f3c66d5abb2efc9fc10", 0xbd}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xaa5, 0xb90, 0x346, 0x3, 0x8, 0x100}, {0x6, 0x4, 0x5, 0x5603, 0x2, 0xd97}], ['\x00']}) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="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", @ANYRES8=r5, @ANYRES64=r5, @ANYBLOB="90d1cdb0efdb63fa739f0108eecaa96cdb1076f0031470b2d74edfe40d74f1d78697598dde2bcfdaf5995d69e998985fc465cdaed187480e123ef696900d427c1e832344e01e393ef2eebbb36460eb8723b5f277c6174a7db9fa6ae759c76ecf2397a42d2a19118d28d4a67a558e695590b4f4b674bfdaa1b38717bd10b5418e945dcce1d5e4f4ba58e0c8c0179911785549d076719d082574285984399ee23fde9e584c2c4feee019afa1b3e8d6f52f492136f2022838a3842ca421c5dc2972cf3fc836cb799aaa92f83400080803828657ee2b1414b044a34f5d86e3371089012edb579988cbb22ee5e43e01e5a8350142", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES64=r0], 0x34}}, 0x4000810) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) unshare(0x2c020400) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@local, @local, @multicast2}, 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r6, 0x8000f000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.452288859s ago: executing program 0 (id=6101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000e3ff000000611484000000000005000000000000009500000000000000bb73935ac1240697280fa5407aaa009b10f111636e633167ab61e853f3700284b5903ffeb6d1d57320c555b7177e5d99e160551cf7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xe9, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) 1.427192034s ago: executing program 2 (id=6102): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffd}, {@in=@remote, 0x0, 0x33}, @in=@loopback, {}, {0x0, 0x0, 0x8000000000004}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_auth={0x48, 0x1, {{'mcryptd(tgr160)\x00'}}}]}, 0x180}}, 0x0) write$tun(r2, &(0x7f0000000140)=ANY=[], 0x38) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0xa4, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r5, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_PHYS_SWITCH_ID={0x1c, 0x24, "4a2efc13a954582352ff335733c8f6c051d03a72055613be"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206010800000000000000000700000114000780080011400000008b050015000c39a7000500010006000000050005000200000005000400020000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000007000000070b"], 0x30}}], 0x2, 0x4000800) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002d00010000000000ffdbdf25017c000008000108004700000000000000000000000000007bb06141599c29c3366e437d341ecf944521fff70624f090a271dbc55f00bc7e974c39b8394fc26e212e29c899a5eaad5e0000fee023726d1bf30932237560d86ec9420a9dca46f12b8d97b79e9641307c4d5e5576a1830f622b9905f1edb4a8778273584c7bbeac36de1117b1b5b0fe623dc3880110e3b54afb9fc726251d5f694039d8b8535922680db22ea4b5e1b8b76b601bba49cce64180e499595d30", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 1.367462643s ago: executing program 0 (id=6103): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000f80)=""/174, 0xae}, {&(0x7f0000000ec0)=""/167, 0xa7}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4108, 0x100c}, {&(0x7f0000000680)=""/169, 0xa9}], 0x8}, 0x3}], 0x1, 0x40010022, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r0, @ANYBLOB="da30e4"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0xc7, 0xf7, &(0x7f0000000400)=""/247, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x5, 0xfffffffc, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0x1], 0x0, 0x10, 0x5}, 0x94) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r12, r13, 0xa, 0x0, @void}, 0x10) r14 = socket(0x1e, 0x4, 0x0) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r7, @ANYRES16=r14], 0x14) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 1.323834091s ago: executing program 3 (id=6104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000ff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c00000000000000ac1414bb000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000004d33c0000000a0000000000000000000000000000000000000002000000000200000002000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003030000000000000002000000000000ac1e0101000000000000000000000000000000002b00"], 0x23c}}, 0x4000) 844.606541ms ago: executing program 2 (id=6105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x430, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_DURATION={0x5}]}, 0x4c}}, 0x10) (async) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)={[{0x4f, 'blkio'}, {0x2d, 'pids'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'perf_event'}, {0x2d, 'net_cls'}, {0x2b, 'cpu'}, {0x2d, 'memory'}, {0x2b, 'devices'}, {0x2d, 'perf_event'}]}, 0x52) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x408, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xe5}, @NFQA_CT={0xb0, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xac0}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x50}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x104}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x5}}, @NFQA_EXP={0x188, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x17c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xc8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, @NFQA_EXP={0x5c, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xf4a}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, @NFQA_CT={0x134, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x20}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}]}}, @CTA_NAT_SRC={0xa0, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}]}, 0x408}, 0x1, 0x0, 0x0, 0x400c004}, 0x4004010) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000a40)={r4, &(0x7f0000000940)='+\'\x00', 0x303400, &(0x7f0000000980)={@align=0xb, {0x8, 0x3, 0x4, 0xfffffffffffffffd}}, 0xd, &(0x7f00000009c0), &(0x7f0000000a00)}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x3bb31eb1785098fc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000890}, 0xdc) (async) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000e40)) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r7) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x98, r10, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xb, 0x34, @random="535b508cd8c82c"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ba}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4801) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x50c71a2a723b976c}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x78, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) (async) setsockopt$MRT6_PIM(r7, 0x29, 0xcf, &(0x7f0000001180), 0x4) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r9) sendmsg$IEEE802154_LLSEC_LIST_DEV(r11, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r12, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x44804) (async) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0x3fa, 0x300, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24044844}, 0x48010) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x48, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c0d1) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000001640)={0x3, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) (async) sendto$x25(r7, &(0x7f0000001780)="27769538fd912401fdb06fe5f0267a46986806403f726dff9eccbffb3395a347f0d94cc2c83030e3a8d7319bf676429fea8dbdd58be5a70211614d109630b84cd38aad3e4b401fdf343eabc48f6182e37b2576965df2", 0x56, 0x1, 0x0, 0x0) 844.146421ms ago: executing program 3 (id=6106): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x20}, 0xc7}, 0x1c) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="2f00000010"], 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b9000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x30, 0x6, 0xff, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0xc2, 0x2, 0x0, 0x4000, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x1, 0xce, 0x5}, @mptcp=@synack={0x1e, 0x10, 0x8, 0x2, 0x8, 0xfffffffffffffff7, 0x3ff}]}}}}}}}}, 0x0) 843.363983ms ago: executing program 4 (id=6107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 843.18996ms ago: executing program 2 (id=6108): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500020000700000bf010000000000008500000056000000b70000000200100095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 842.663588ms ago: executing program 4 (id=6109): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x87, 0x4, 0x3}}, 0x10) sendmsg$xdp(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x2c, 0x8, r2, 0x30}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="720c554bfb3983be70167ae2079bdad4952e047c4fed346a51f93bf78ba99574bb6695f0f0a64a0113e809b3e86fd4dad91ecc64e92ec1eff8ecfd8e57a0d7494f0274f4311ae38c6488b15736c6446dca1c71ea3363c13a92117e07d10e6f006b876967633b7f89cc33cac005bd101c7e59679c18fced9ff46e6c2bf78034284a4c35ba191c1b46fe85642ad5bfbff7f9e4da01c0393125dca108488230c986f8b5f556da656a4169459ddb6235cfc243f84b1f9f5bcfdf4500be57283cced4be00ee535e7f13034424e0b31289e2a8e64642212f407b170bde88e634efc64ac0099913f247f976943e3d37e6ae8f3073", 0xf1}, {&(0x7f0000000380)="7a727d53e336fb7cd4b72423fed64e13c63635efae4756fa2d98f70c511e828f399c742e5a751dcfd7ca54253884c12d42956249be51c192526c9dd6694396dd511c5190e9e612eff2cecf21c5d4fcc0a35c9a6e4f3b0d099307b86f325c75ad6853cc5f4854b3ddd7089371462955acfd0b2b1cd2ec6952438a583e67187f1238bc144c2c0eeddd89f919aad86979aff0fe598fb91a8828a3dfdf3daf1667785fb41706c448bfcdd4124f7b462bdd64f1ae13394d339f1177fbccf047ac60f7e4214c769721917f9b5f961a2be45f6ef6fe458cea408df871fe7d83282b5973db14e2a8808be791856a9903", 0xec}], 0x2}, 0x8800) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1000000, 0x800, 0x7, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x1, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0x40) r8 = socket(0xa, 0x5, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0x1a, r10, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) readv(r9, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/23, 0x17}, {0x0}, {&(0x7f0000000480)=""/178, 0xb2}], 0x5) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2c8, 0x3b8, 0x488, 0x3b8, 0x488, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) close(r6) 839.595917ms ago: executing program 2 (id=6110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) unshare(0x8040480) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0x36, 0x0, &(0x7f0000000440)="c9188e9bb95d02ff4284860186dd7ee8fa5a5745d3881fb6b93cdeeb6b589a04abcaffe8f96e9f90a39946c637dcac13b3ebeb678c27", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000002f40)={{r7}, 0x80000000, 0xab, 0x3}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r8}, 0x48) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, r12, 0x0, 0x3, 0x0, 0x2, "2f8d0a3928056508da7e75231145b556bfeed50503af35a9124d502d9480fec63c79e15d87366eb64b9b59d020c25d098653ed1562d9b8837257fbb767deb3", 0xc}, 0x60) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060500000000000000000007000004120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001800078005000300ff0000000c0001800800014000001c0205000500020000000500010006000000"], 0x64}, 0x1, 0x0, 0x0, 0x8805}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 62.73709ms ago: executing program 3 (id=6111): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) close(r3) (async) close(r0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, 0x0, 0x0) (async) r6 = socket$inet(0x2, 0x3, 0x33) (async) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$kcm(0x11, 0x2, 0x300) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="137cd912"], 0x14}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000140)=@req3={0xffd, 0x3a, 0x1000, 0x3, 0x800, 0x2, 0x4}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x40000, &(0x7f0000000040)={0x11, 0x1b, r13, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 55.525584ms ago: executing program 0 (id=6112): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$netlink(0x10, 0x3, 0xb) (async) r1 = socket(0x10, 0x803, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000400)=""/133, &(0x7f00000004c0)=0x85) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x3ff, 0x3, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0xfd, 0x29, 0x0, @multicast1, @broadcast}}}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b2a, &(0x7f0000000040)) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4044801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a428040000000000140035006261746164763000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="eab1f8e9df21044e7bc5d1a21e9b64963ee00023202a643a5ea1772e56f9eb638a1b86da67a404bddbe544a0b4b8d37b1b0bb1ba7b7c2f81455140b20947478f701b6dcb58b31bc307e9b8ebdf8380f016f8f336f1b2141ee78d942cabd2f7742c221a115b7b41a1b0ae85520daa51a5db164d822831b2d75e240c0cd8dd1e9a0df8b841c98bc0949136e8c7846ae5cfee5af8ceb7be448456e656871157827871a6d7f58fd2fa3b2dcc9a18d2e845f16da2615ac73775d130062725db3aaff6d8a8a22c205c7eec1abc453b4095feb9d5d8173b5912fd49432f12cf4f16cd254520b8b0a4d6"], 0x3c}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0xf0, 0x0, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000180), {[{{@arp={@empty, @private=0xa010101, 0xff000000, 0xff000000, 0x1, 0xd, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x8, 0xf, 0x3, 0xaaa, 0x5, 'xfrm0\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000, 0x0, 0xfffff680, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8b25b4eb72bb", @empty, @loopback, @local, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @local, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 0s ago: executing program 1 (id=6113): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x16, 0x1, 0x70bd28, 0x25dfdbfe, {0x19}}, 0xfffffffffffffe97}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x7fd, @loopback}, 0x0, {[0x0, 0x2, 0x0, 0x1, 0x0, 0x4, 0x800000]}}, 0x5c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r4, 0x34, 0x0, 0x100, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r4, r4, 0x24, 0x2004, 0x0, @value=r4, @void, @void, @void, r5}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = socket(0x40000000015, 0x5, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r7, &(0x7f0000000200)="6318", 0x2, 0x24004814, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @mcast1, 0x1}, 0x1c) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x1, 0x4) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000009840)='police\x00', 0x7) kernel console output (not intermixed with test programs): 01 48 [ 600.783993][T25075] RSP: 002b:00007fc67f049028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 600.784005][T25075] RAX: ffffffffffffffda RBX: 00007fc67e426090 RCX: 00007fc67e19e159 [ 600.784013][T25075] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 600.784020][T25075] RBP: 00007fc67e23506b R08: 0000000000000004 R09: 0000000000000000 [ 600.784027][T25075] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.784035][T25075] R13: 00007fc67e426128 R14: 00007fc67e426090 R15: 00007fff1f909658 [ 600.784052][T25075] [ 600.823433][T25075] Mem-Info: [ 600.823450][T25075] active_anon:5721 inactive_anon:0 isolated_anon:0 [ 600.823450][T25075] active_file:2 inactive_file:43873 isolated_file:0 [ 600.823450][T25075] unevictable:52 dirty:249 writeback:0 [ 600.823450][T25075] slab_reclaimable:12994 slab_unreclaimable:135787 [ 600.823450][T25075] mapped:29923 shmem:577 pagetables:1235 [ 600.823450][T25075] sec_pagetables:0 bounce:0 [ 600.823450][T25075] kernel_misc_reclaimable:0 [ 600.823450][T25075] free:1191662 free_pcp:19136 free_cma:0 [ 600.823511][T25075] Node 0 active_anon:22884kB inactive_anon:0kB active_file:8kB inactive_file:175296kB unevictable:208kB isolated(anon):0kB isolated(file):0kB mapped:119692kB dirty:996kB writeback:0kB shmem:2308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17256kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 600.823569][T25075] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 600.823628][T25075] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.823687][T25075] lowmem_reserve[]: 0 [ 600.838346][T10496] bond9: (slave dummy0): failed to get link speed/duplex [ 600.875051][T25075] 2486 2486 2486 2486 [ 600.875087][T25075] Node 0 DMA32 free:815004kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23012kB inactive_anon:0kB active_file:8kB inactive_file:175296kB unevictable:116kB writepending:1016kB zspages:0kB present:3129332kB managed:2546612kB mlocked:116kB bounce:0kB free_pcp:71560kB local_pcp:34740kB free_cma:0kB [ 600.875226][T25075] lowmem_reserve[]: 0 0 0 0 0 [ 600.875263][T25075] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.875326][T25075] lowmem_reserve[]: 0 0 0 0 0 [ 600.875361][T25075] Node 1 Normal free:3940828kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.875419][T25075] lowmem_reserve[]: 0 0 0 0 0 [ 600.875454][T25075] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 600.875568][T25075] Node 0 DMA32: 2160*4kB (UME) 1083*8kB (UME) 457*16kB (UME) 98*32kB (UME) 99*64kB (UME) 40*128kB (UME) 11*256kB (UME) 8*512kB (UME) 3*1024kB (ME) 10*2048kB (UME) 182*4096kB (UM) = 815144kB [ 600.875751][T25075] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 600.875849][T25075] Node 1 Normal: 1*4kB (M) 1*8kB (M) 5*16kB (UM) 10*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3940828kB [ 600.875999][T25075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.876016][T25075] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 600.876046][T25075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.876063][T25075] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 600.876080][T25075] 44445 total pagecache pages [ 600.876092][T25075] 0 pages in swap cache [ 600.876099][T25075] Free swap = 124996kB [ 600.876108][T25075] Total swap = 124996kB [ 600.876116][T25075] 2097051 pages RAM [ 600.876124][T25075] 0 pages HighMem/MovableOnly [ 600.876131][T25075] 428782 pages reserved [ 600.876138][T25075] 0 pages cma reserved [ 601.131048][T10496] bond9: (slave dummy0): failed to get link speed/duplex [ 601.239225][T10445] bond9: (slave dummy0): failed to get link speed/duplex [ 601.272605][T25068] hsr0: left promiscuous mode [ 601.587418][T25075] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 601.703435][T25110] xt_cgroup: invalid path, errno=-2 [ 601.849464][T25116] C: renamed from veth1_to_team (while UP) [ 601.864560][T25124] xt_hashlimit: size too large, truncated to 1048576 [ 601.873483][T25116] netlink: 'syz.0.5048': attribute type 1 has an invalid length. [ 602.002959][T25128] netlink: 'syz.4.5049': attribute type 2 has an invalid length. [ 602.121608][T25128] : entered promiscuous mode [ 602.791093][T25158] vlan2: entered promiscuous mode [ 602.791117][T25158] erspan0: entered promiscuous mode [ 602.913495][T25163] block nbd3: server does not support multiple connections per device. [ 602.913820][T25163] block nbd3: shutting down sockets [ 603.152988][T25177] __nla_validate_parse: 9 callbacks suppressed [ 603.153011][T25177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5068'. [ 603.270583][T25183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5071'. [ 603.377147][T25188] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5073'. [ 603.377171][T25188] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5073'. [ 603.377187][T25188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5073'. [ 603.377252][T25188] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5073'. [ 603.444492][T25189] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5074'. [ 603.584830][T25195] xt_TCPMSS: Only works on TCP SYN packets [ 603.621537][T25195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5075'. [ 603.653888][T25195] tipc: Enabling of bearer rejected, already enabled [ 603.911348][T25211] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20265 [ 604.414879][T25231] netlink: 'syz.2.5087': attribute type 2 has an invalid length. [ 604.426364][T25232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5089'. [ 604.428187][T25232] netlink: 'syz.4.5089': attribute type 10 has an invalid length. [ 604.428205][T25232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5089'. [ 604.497610][T25237] syzkaller1: entered promiscuous mode [ 604.497633][T25237] syzkaller1: entered allmulticast mode [ 604.894839][T25268] bridge_slave_0: default FDB implementation only supports local addresses [ 604.974405][T25271] bond0: left allmulticast mode [ 604.974428][T25271] bond_slave_0: left allmulticast mode [ 604.974447][T25271] bond_slave_1: left allmulticast mode [ 604.978232][T25271] bond0: left promiscuous mode [ 604.978250][T25271] bond_slave_0: left promiscuous mode [ 604.978650][T25271] bond_slave_1: left promiscuous mode [ 604.980352][T25271] bridge0: port 5(bond0) entered disabled state [ 604.991264][T25271] team0: left allmulticast mode [ 604.991283][T25271] team_slave_0: left allmulticast mode [ 604.991514][T25271] team0: left promiscuous mode [ 604.991527][T25271] team_slave_0: left promiscuous mode [ 604.992361][T25271] bridge0: port 4(team0) entered disabled state [ 605.003145][T25271] batadv0: left allmulticast mode [ 605.003168][T25271] batadv0: left promiscuous mode [ 605.003348][T25271] bridge0: port 3(batadv0) entered disabled state [ 605.014367][T25271] bridge_slave_1: left promiscuous mode [ 605.014655][T25271] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.031308][T25271] bridge_slave_0: left allmulticast mode [ 605.031333][T25271] bridge_slave_0: left promiscuous mode [ 605.035182][T25271] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.215969][T10479] net_ratelimit: 31 callbacks suppressed [ 605.215992][T10479] bond9: (slave dummy0): failed to get link speed/duplex [ 605.326137][T10456] bond9: (slave dummy0): failed to get link speed/duplex [ 605.437479][T10484] bond9: (slave dummy0): failed to get link speed/duplex [ 605.546803][T10479] bond9: (slave dummy0): failed to get link speed/duplex [ 605.657039][ T7143] bond9: (slave dummy0): failed to get link speed/duplex [ 605.766273][T10479] bond9: (slave dummy0): failed to get link speed/duplex [ 605.877138][T10479] bond9: (slave dummy0): failed to get link speed/duplex [ 605.945584][T25305] xt_l2tp: v2 doesn't support IP mode [ 606.025316][ T9239] bond9: (slave dummy0): failed to get link speed/duplex [ 606.172266][T25321] bridge_slave_0: left allmulticast mode [ 606.172285][T25321] bridge_slave_0: left promiscuous mode [ 606.172413][T25321] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.199983][T25321] bridge_slave_1: left allmulticast mode [ 606.200007][T25321] bridge_slave_1: left promiscuous mode [ 606.200225][T25321] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.202978][T25321] vlan2: left promiscuous mode [ 606.202997][T25321] geneve0: left promiscuous mode [ 606.244191][T25321] bond0: (slave bond_slave_0): Releasing backup interface [ 606.270694][T25321] bond0: (slave bond_slave_1): Releasing backup interface [ 606.273748][T25321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 606.278251][T25317] ip_tables: iptables: counters copy to user failed while replacing table [ 606.440152][T25331] x_tables: duplicate underflow at hook 1 [ 606.531948][T25333] x_tables: duplicate underflow at hook 1 [ 606.623956][T25337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.809545][T25343] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 606.939951][T25352] xt_l2tp: v2 doesn't support IP mode [ 607.523849][T25385] syzkaller0: entered promiscuous mode [ 607.523881][T25385] syzkaller0: entered allmulticast mode [ 607.604183][T25395] xt_l2tp: v2 doesn't support IP mode [ 607.733827][T25400] xt_l2tp: v2 doesn't support IP mode [ 608.368107][T25427] __nla_validate_parse: 6 callbacks suppressed [ 608.368128][T25427] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5147'. [ 608.737264][T25435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5149'. [ 609.094348][T25441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5151'. [ 609.180733][T25443] wg2 speed is unknown, defaulting to 1000 [ 609.184461][T25443] lo speed is unknown, defaulting to 1000 [ 610.172682][ T31] audit: type=1800 audit(1789599471.945:21): pid=25477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5161" name="memory.events" dev="tmpfs" ino=2018 res=0 errno=0 [ 610.668717][T10479] net_ratelimit: 30 callbacks suppressed [ 610.668738][T10479] bond9: (slave dummy0): failed to get link speed/duplex [ 610.946561][ T7143] bond9: (slave dummy0): failed to get link speed/duplex [ 610.947940][T25502] pimreg: tun_chr_ioctl cmd 1074025677 [ 610.948052][T25502] pimreg: linktype set to 270 [ 611.058725][T10456] bond9: (slave dummy0): failed to get link speed/duplex [ 611.226534][T10459] bond9: (slave dummy0): failed to get link speed/duplex [ 611.335799][T10456] bond9: (slave dummy0): failed to get link speed/duplex [ 611.554780][T10479] bond9: (slave dummy0): failed to get link speed/duplex [ 611.655962][T10479] bond9: (slave dummy0): failed to get link speed/duplex [ 611.766130][T10456] bond9: (slave dummy0): failed to get link speed/duplex [ 611.881611][T10445] bond9: (slave dummy0): failed to get link speed/duplex [ 612.013903][T25528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5172'. [ 612.214096][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5174'. [ 612.227770][T25537] x_tables: duplicate underflow at hook 2 [ 612.231439][T10496] bond9: (slave dummy0): failed to get link speed/duplex [ 612.371176][T25544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5175'. [ 612.401629][T25531] bond8 (unregistering): Released all slaves [ 612.447007][T25554] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5178'. [ 612.489067][T25539] gre0: entered promiscuous mode [ 612.489092][T25539] gre0: entered allmulticast mode [ 612.911787][T25568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5182'. [ 613.153315][T25576] netlink: 'syz.2.5185': attribute type 1 has an invalid length. [ 613.253540][T25576] 8021q: adding VLAN 0 to HW filter on device bond9 [ 613.309790][T25580] 8021q: adding VLAN 0 to HW filter on device bond9 [ 613.310202][T25580] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 613.313067][T25580] bond9: (slave xfrm1): Error -95 calling set_mac_address [ 613.363589][T25576] bond9: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 613.364011][T25576] bond9: (slave ip_vti0): Error -95 calling set_mac_address [ 614.082990][T25617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5202'. [ 614.098321][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5199'. [ 614.104948][T25619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5201'. [ 614.150788][T25620] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 614.392001][T25627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5205'. [ 614.392029][T25627] netlink: 'syz.3.5205': attribute type 1 has an invalid length. [ 614.466473][T25630] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5207'. [ 614.470141][T25631] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5207'. [ 614.591282][T25642] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5212'. [ 614.591361][T25642] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5212'. [ 614.735022][T25648] ip6erspan0: entered allmulticast mode [ 614.834963][T25652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5214'. [ 614.850852][T25652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5214'. [ 614.899439][T25662] xt_IDLETIMER: timeout value is too big [ 614.916334][T25662] xt_limit: Overflow, try lower: 6/2147483648 [ 614.934894][T25669] xt_limit: Overflow, try lower: 6/2147483648 [ 615.049147][T25674] netlink: 'syz.1.5222': attribute type 10 has an invalid length. [ 615.064822][T25674] team0 (unregistering): Port device team_slave_1 removed [ 615.100239][T25674] bond5: left allmulticast mode [ 615.100287][T25674] bond5: left promiscuous mode [ 615.126404][T25674] team0 (unregistering): Port device macvlan2 removed [ 615.454095][T25697] xt_hashlimit: size too large, truncated to 1048576 [ 615.481328][T25698] macvlan0: entered allmulticast mode [ 615.481349][T25698] veth1_vlan: entered allmulticast mode [ 615.722807][T10445] net_ratelimit: 25 callbacks suppressed [ 615.722827][T10445] bond9: (slave dummy0): failed to get link speed/duplex [ 615.845367][T10496] bond9: (slave dummy0): failed to get link speed/duplex [ 615.956751][T10496] bond9: (slave dummy0): failed to get link speed/duplex [ 616.068158][T10484] bond9: (slave dummy0): failed to get link speed/duplex [ 616.179834][ T7143] bond9: (slave dummy0): failed to get link speed/duplex [ 616.287963][T10456] bond9: (slave dummy0): failed to get link speed/duplex [ 616.405820][T10459] bond9: (slave dummy0): failed to get link speed/duplex [ 616.520964][ T7143] bond9: (slave dummy0): failed to get link speed/duplex [ 616.628321][T10456] bond9: (slave dummy0): failed to get link speed/duplex [ 616.736131][T10496] bond9: (slave dummy0): failed to get link speed/duplex [ 616.822393][T25768] syzkaller0: entered promiscuous mode [ 616.822416][T25768] syzkaller0: entered allmulticast mode [ 617.177999][T25782] netlink: 'syz.2.5257': attribute type 1 has an invalid length. [ 617.190668][T25781] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 617.229115][T25781] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 617.272971][T25781] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 617.309672][T25781] bond0 (unregistering): Released all slaves [ 617.436042][T25782] bond10: entered promiscuous mode [ 617.436507][T25782] 8021q: adding VLAN 0 to HW filter on device bond10 [ 617.484857][T25794] bridge9: entered promiscuous mode [ 617.484872][T25794] bridge9: entered allmulticast mode [ 617.601385][T25783] bond10: (slave bridge5): making interface the new active one [ 617.601410][T25783] bridge5: entered promiscuous mode [ 617.618628][T25783] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 618.421661][T25851] batman_adv: batadv0: Adding interface: syzkaller0 [ 618.421680][T25851] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.421707][T25851] batman_adv: batadv0: Interface activated: syzkaller0 [ 618.507516][T25847] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 618.699531][T25847] batman_adv: batadv0: Removing interface: syzkaller0 [ 619.290480][T10445] bridge0: port 1(bond7) entered disabled state [ 619.410559][T10445] batman_adv: batadv0: Interface deactivated: gretap1 [ 619.464076][T25895] __nla_validate_parse: 9 callbacks suppressed [ 619.464095][T25895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5283'. [ 619.464114][T25895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5283'. [ 619.464132][T25895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5283'. [ 619.960356][T10445] bond1 (unregistering): (slave erspan1): Releasing active interface [ 619.991393][T10445] bond0 (unregistering): (slave gretap2): Releasing active interface [ 620.015010][T10445] batman_adv: batadv0: Removing interface: gretap1 [ 620.050423][T10445] bond5 (unregistering): (slave ipip0): Releasing backup interface [ 620.105884][T10445] batman_adv: batadv0: Interface deactivated: macvlan3 [ 620.105932][T10445] batman_adv: batadv0: Interface deactivated: macvlan4 [ 620.120292][T10445] batman_adv: batadv0: Removing interface: macvlan3 [ 620.134663][T10445] batman_adv: batadv0: Removing interface: macvlan4 [ 620.243629][T10445] bond1 (unregistering): Released all slaves [ 620.275083][T10445] bond2 (unregistering): Released all slaves [ 620.298631][T10445] bond3 (unregistering): Released all slaves [ 620.312743][T10445] bond4 (unregistering): Released all slaves [ 620.328155][T10445] bond5 (unregistering): Released all slaves [ 620.352391][T10445] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 620.354091][T10445] bond6 (unregistering): Released all slaves [ 620.378362][T10445] bond7 (unregistering): Released all slaves [ 620.386817][T10445] bond8 (unregistering): Released all slaves [ 620.402366][T10445] bond9 (unregistering): (slave veth7): Removing an active aggregator [ 620.402854][T10445] bond9 (unregistering): (slave veth7): Releasing backup interface [ 620.404893][T10445] bond9 (unregistering): (slave dummy0): Removing an active aggregator [ 620.422076][T10445] bond9 (unregistering): (slave dummy0): Releasing backup interface [ 620.440866][T10445] bond9 (unregistering): Released all slaves [ 620.462250][T10445] bond10 (unregistering): Released all slaves [ 620.482354][T10445] bond11 (unregistering): Released all slaves [ 620.508295][T10445] bond0 (unregistering): Released all slaves [ 620.522390][T10445] bond12 (unregistering): Released all slaves [ 620.548501][T10445] bond13 (unregistering): Released all slaves [ 620.562301][T10445] bond14 (unregistering): Released all slaves [ 620.592121][T25906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5285'. [ 621.071601][T25934] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5293'. [ 621.086229][T25931] net_ratelimit: 54 callbacks suppressed [ 621.086251][T25931] netlink: Unknown NAT attribute (type=12035, max=9) [ 621.086280][T25931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.086697][T25931] netlink: Unknown NAT attribute (type=12035, max=9) [ 621.086725][T25931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.087100][T25931] netlink: Unknown NAT attribute (type=12035, max=9) [ 621.087128][T25931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.087481][T25931] netlink: Unknown NAT attribute (type=12035, max=9) [ 621.087510][T25931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.087850][T25931] netlink: Unknown NAT attribute (type=12035, max=9) [ 621.087876][T25931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.345567][T25957] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5293'. [ 621.722431][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5286'. [ 622.108293][T10445] tipc: Disabling bearer [ 622.108447][T10445] tipc: Disabling bearer [ 622.108559][T10445] tipc: Left network mode [ 622.270712][T25980] FAULT_INJECTION: forcing a failure. [ 622.270712][T25980] name failslab, interval 1, probability 0, space 0, times 0 [ 622.270745][T25980] CPU: 0 UID: 0 PID: 25980 Comm: syz.2.5297 Not tainted syzkaller #0 PREEMPT(full) [ 622.270768][T25980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.270779][T25980] Call Trace: [ 622.270788][T25980] [ 622.270796][T25980] dump_stack_lvl+0xe8/0x150 [ 622.270831][T25980] should_fail_ex+0x410/0x560 [ 622.270860][T25980] should_failslab+0xa8/0x100 [ 622.270886][T25980] __kmalloc_noprof+0xfe/0x720 [ 622.270910][T25980] ? tomoyo_encode+0x2ad/0x570 [ 622.270935][T25980] ? tomoyo_encode+0x2ad/0x570 [ 622.270965][T25980] tomoyo_encode+0x2ad/0x570 [ 622.270996][T25980] tomoyo_realpath_from_path+0x5fa/0x640 [ 622.271032][T25980] ? tomoyo_path_number_perm+0x219/0x5f0 [ 622.271053][T25980] tomoyo_path_number_perm+0x246/0x5f0 [ 622.271077][T25980] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 622.271098][T25980] ? __lock_acquire+0x747/0x2de0 [ 622.271134][T25980] ? hook_file_ioctl+0x1f2/0x600 [ 622.271177][T25980] ? __fget_files+0x2a/0x420 [ 622.271206][T25980] ? __fget_files+0x2a/0x420 [ 622.271231][T25980] ? __fget_files+0x3a2/0x420 [ 622.271256][T25980] ? __fget_files+0x2a/0x420 [ 622.271286][T25980] security_file_ioctl+0xc3/0x2a0 [ 622.271315][T25980] __se_sys_ioctl+0x47/0x170 [ 622.271338][T25980] do_syscall_64+0x166/0x520 [ 622.271359][T25980] ? trace_irq_disable+0x3b/0x140 [ 622.271377][T25980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.271398][T25980] ? clear_bhb_loop+0x70/0xc0 [ 622.271423][T25980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.271443][T25980] RIP: 0033:0x7f99a139e159 [ 622.271462][T25980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.271480][T25980] RSP: 002b:00007f99a221a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.271502][T25980] RAX: ffffffffffffffda RBX: 00007f99a1625fa0 RCX: 00007f99a139e159 [ 622.271517][T25980] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 622.271531][T25980] RBP: 00007f99a221a090 R08: 0000000000000000 R09: 0000000000000000 [ 622.271544][T25980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.271556][T25980] R13: 00007f99a1626038 R14: 00007f99a1625fa0 R15: 00007ffd9b1b8aa8 [ 622.271586][T25980] [ 622.282863][T25980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 622.409668][T25984] netlink: 'syz.4.5299': attribute type 8 has an invalid length. [ 622.409688][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5299'. [ 622.409720][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5299'. [ 622.749361][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5302'. [ 623.429217][T10445] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 623.481715][T10445] batman_adv: batadv0: Removing interface: ipvlan2 [ 624.307480][T26055] Bluetooth: hci0: unsupported parameter 5134 [ 624.307504][T26055] Bluetooth: hci0: unsupported parameter 8192 [ 624.307518][T26055] Bluetooth: hci0: unsupported parameter 5134 [ 624.307531][T26055] Bluetooth: hci0: unsupported parameter 8192 [ 624.549979][T26062] netlink: 'syz.4.5320': attribute type 10 has an invalid length. [ 624.772158][T26082] __nla_validate_parse: 2 callbacks suppressed [ 624.772179][T26082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5323'. [ 625.569506][T26097] block nbd3: server does not support multiple connections per device. [ 625.572099][T26097] block nbd3: shutting down sockets [ 625.631349][T26103] lo speed is unknown, defaulting to 1000 [ 625.631409][T26103] lo speed is unknown, defaulting to 1000 [ 625.632158][T26103] lo speed is unknown, defaulting to 1000 [ 625.634359][T26103] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 625.634395][T26103] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 625.634436][T26103] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 625.709061][T26103] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 625.753189][T26103] lo speed is unknown, defaulting to 1000 [ 625.759940][T26103] lo speed is unknown, defaulting to 1000 [ 625.778556][T26103] lo speed is unknown, defaulting to 1000 [ 625.782737][T26103] lo speed is unknown, defaulting to 1000 [ 625.805971][T26103] lo speed is unknown, defaulting to 1000 [ 625.812159][T26103] lo speed is unknown, defaulting to 1000 [ 625.838774][T26103] lo speed is unknown, defaulting to 1000 [ 625.840579][T26103] lo speed is unknown, defaulting to 1000 [ 626.124772][T10445] IPVS: stop unused estimator thread 0... [ 626.135121][T26112] xt_l2tp: v2 doesn't support IP mode [ 626.381351][T26127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5338'. [ 626.592360][T26139] tc_dump_action: action bad kind [ 626.593787][T26139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5344'. [ 626.964311][T26159] syz_tun: left allmulticast mode [ 626.964338][T26159] syz_tun: left promiscuous mode [ 626.964539][T26159] bridge0: port 3(syz_tun) entered disabled state [ 627.003219][T26159] batman_adv: batadv0: Interface deactivated: dummy0 [ 627.003242][T26159] batman_adv: batadv0: Removing interface: dummy0 [ 627.004194][T26159] bridge_slave_0: left allmulticast mode [ 627.004214][T26159] bridge_slave_0: left promiscuous mode [ 627.004416][T26159] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.043698][T26159] bridge_slave_1: left allmulticast mode [ 627.043721][T26159] bridge_slave_1: left promiscuous mode [ 627.045001][T26159] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.072494][T26159] bond4: (slave veth0_to_bond): Releasing backup interface [ 627.072518][T26159] bond4: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 627.098848][T26159] .`: (slave bond_slave_0): Releasing backup interface [ 627.115792][T26159] .`: (slave bond_slave_1): Releasing backup interface [ 627.117965][T26159] net_ratelimit: 26 callbacks suppressed [ 627.117981][T26159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 627.140410][T26165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5351'. [ 627.711471][T26200] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5362'. [ 627.714079][T26200] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5362'. [ 627.908152][T26209] netlink: 'syz.1.5366': attribute type 7 has an invalid length. [ 628.143585][T26225] gre0: left promiscuous mode [ 628.269561][T26230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5374'. [ 628.378868][T26232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5373'. [ 628.511292][T26238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5376'. [ 628.512196][T26238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5376'. [ 628.621390][T26243] netlink: 'syz.3.5378': attribute type 1 has an invalid length. [ 629.194033][T26264] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 629.313290][T26273] tipc: New replicast peer: 255.255.255.255 [ 629.329168][T26273] tipc: Enabled bearer , priority 10 [ 629.331415][T26272] tipc: Enabling of bearer rejected, already enabled [ 630.347876][T26320] tipc: Failed to remove unknown binding: 66,0,0/1719254273:3294977012/3294977014 [ 630.347909][T26320] tipc: Failed to remove unknown binding: 66,0,0/1719254273:3294977012/3294977013 [ 630.348429][T26320] tipc: Failed to remove unknown binding: 66,0,0/1719254273:3294977012/3294977014 [ 630.348455][T26320] tipc: Failed to remove unknown binding: 66,0,0/1719254273:3294977012/3294977013 [ 630.351606][T26320] __nla_validate_parse: 6 callbacks suppressed [ 630.351623][T26320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5403'. [ 630.794485][T26331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 630.900504][T26331] syzkaller0: entered promiscuous mode [ 630.900529][T26331] syzkaller0: entered allmulticast mode [ 631.264214][T26352] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5410'. [ 631.347532][T26353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5410'. [ 631.347559][T26353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5410'. [ 631.357738][T26353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5410'. [ 631.586998][ T31] audit: type=1800 audit(1789599493.375:22): pid=26354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5410" name="memory.events" dev="tmpfs" ino=1970 res=0 errno=0 [ 631.678225][T26357] netlink: 4448 bytes leftover after parsing attributes in process `syz.4.5411'. [ 632.150787][T26374] syz.4.5417: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 632.150876][T26374] CPU: 1 UID: 0 PID: 26374 Comm: syz.4.5417 Not tainted syzkaller #0 PREEMPT(full) [ 632.150900][T26374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.150913][T26374] Call Trace: [ 632.150921][T26374] [ 632.150932][T26374] dump_stack_lvl+0xe8/0x150 [ 632.150970][T26374] warn_alloc+0x24d/0x270 [ 632.150993][T26374] ? kasan_save_track+0x4f/0x80 [ 632.151014][T26374] ? kasan_save_track+0x3e/0x80 [ 632.151037][T26374] ? __pfx_warn_alloc+0x10/0x10 [ 632.151054][T26374] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 632.151079][T26374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.151119][T26374] __vmalloc_node_range_noprof+0x127/0x1540 [ 632.151166][T26374] ? rcu_is_watching+0x16/0xb0 [ 632.151196][T26374] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.151226][T26374] ? __kmalloc_cache_noprof+0x321/0x600 [ 632.151245][T26374] ? __kmalloc_cache_noprof+0x14d/0x600 [ 632.151264][T26374] ? xskq_create+0x56/0x220 [ 632.151289][T26374] xskq_create+0x148/0x220 [ 632.151319][T26374] ? xsk_init_queue+0x8a/0xe0 [ 632.151353][T26374] xsk_init_queue+0x8a/0xe0 [ 632.151388][T26374] xsk_setsockopt+0x5e0/0x960 [ 632.151422][T26374] ? __pfx_xsk_setsockopt+0x10/0x10 [ 632.151452][T26374] ? __pfx_aa_sk_perm+0x10/0x10 [ 632.151478][T26374] ? aa_sock_opt_perm+0x142/0x1e0 [ 632.151506][T26374] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 632.151531][T26374] ? __pfx_xsk_setsockopt+0x10/0x10 [ 632.151561][T26374] do_sock_setsockopt+0x17c/0x1b0 [ 632.151589][T26374] __x64_sys_setsockopt+0x13d/0x1b0 [ 632.151621][T26374] do_syscall_64+0x166/0x520 [ 632.151643][T26374] ? trace_irq_disable+0x3b/0x140 [ 632.151660][T26374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.151681][T26374] ? clear_bhb_loop+0x70/0xc0 [ 632.151707][T26374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.151728][T26374] RIP: 0033:0x7f8c5099e159 [ 632.151747][T26374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.151765][T26374] RSP: 002b:00007f8c5189e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 632.151788][T26374] RAX: ffffffffffffffda RBX: 00007f8c50c25fa0 RCX: 00007f8c5099e159 [ 632.151812][T26374] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 632.151825][T26374] RBP: 00007f8c50a3506b R08: 0000000000000004 R09: 0000000000000000 [ 632.151839][T26374] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.151852][T26374] R13: 00007f8c50c26038 R14: 00007f8c50c25fa0 R15: 00007fffefb7c618 [ 632.151887][T26374] [ 632.151907][T26374] Mem-Info: [ 632.151917][T26374] active_anon:5783 inactive_anon:3 isolated_anon:0 [ 632.151917][T26374] active_file:57 inactive_file:43700 isolated_file:0 [ 632.151917][T26374] unevictable:0 dirty:232 writeback:0 [ 632.151917][T26374] slab_reclaimable:13325 slab_unreclaimable:128467 [ 632.151917][T26374] mapped:29796 shmem:543 pagetables:1280 [ 632.151917][T26374] sec_pagetables:0 bounce:0 [ 632.151917][T26374] kernel_misc_reclaimable:0 [ 632.151917][T26374] free:1207244 free_pcp:10950 free_cma:0 [ 632.151971][T26374] Node 0 active_anon:23132kB inactive_anon:12kB active_file:228kB inactive_file:174604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119184kB dirty:924kB writeback:0kB shmem:2172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16460kB pagetables:4976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 632.152029][T26374] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 632.152077][T26374] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.152130][T26374] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 632.152162][T26374] Node 0 DMA32 free:872788kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23132kB inactive_anon:12kB active_file:228kB inactive_file:174604kB unevictable:0kB writepending:924kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:43800kB local_pcp:23264kB free_cma:0kB [ 632.152220][T26374] lowmem_reserve[]: 0 0 0 0 0 [ 632.152254][T26374] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.152339][T26374] lowmem_reserve[]: 0 0 0 0 0 [ 632.152377][T26374] Node 1 Normal free:3940828kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.152434][T26374] lowmem_reserve[]: 0 0 0 0 0 [ 632.152468][T26374] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 632.152583][T26374] Node 0 DMA32: 1583*4kB (UME) 848*8kB (UME) 560*16kB (UME) 958*32kB (UME) 300*64kB (UME) 125*128kB (UME) 56*256kB (UME) 23*512kB (UME) 11*1024kB (UME) 9*2048kB (UM) 178*4096kB (UM) = 872828kB [ 632.152743][T26374] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 632.152855][T26374] Node 1 Normal: 1*4kB (M) 1*8kB (M) 5*16kB (UM) 10*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3940828kB [ 632.153015][T26374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.153033][T26374] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.153050][T26374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.153067][T26374] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 632.153083][T26374] 44296 total pagecache pages [ 632.153092][T26374] 0 pages in swap cache [ 632.153100][T26374] Free swap = 124996kB [ 632.153109][T26374] Total swap = 124996kB [ 632.153118][T26374] 2097051 pages RAM [ 632.153126][T26374] 0 pages HighMem/MovableOnly [ 632.153134][T26374] 428782 pages reserved [ 632.153142][T26374] 0 pages cma reserved [ 635.568719][T26399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5422'. [ 635.605739][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5421'. [ 635.757530][T26411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5426'. [ 635.768756][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5426'. [ 635.938249][T26420] wg2 speed is unknown, defaulting to 1000 [ 635.940509][T26420] lo speed is unknown, defaulting to 1000 [ 636.287472][T26420] lo speed is unknown, defaulting to 1000 [ 636.740869][T26453] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5436'. [ 636.741119][T26453] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5436'. [ 636.860550][T26456] xt_l2tp: v2 doesn't support IP mode [ 636.909619][T26464] dvmrp0: entered allmulticast mode [ 636.911615][T26464] dvmrp0: left allmulticast mode [ 637.003168][T26420] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5428'. [ 637.457398][T26476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5440'. [ 637.862670][T26495] netlink: 'syz.0.5447': attribute type 1 has an invalid length. [ 637.988090][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5447'. [ 638.086331][T26495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.350762][T26508] netlink: 'syz.1.5452': attribute type 1 has an invalid length. [ 638.350785][T26508] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5452'. [ 638.350958][T26511] netlink: 'syz.1.5452': attribute type 1 has an invalid length. [ 638.404476][T26517] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 638.548581][T26516] wg2 speed is unknown, defaulting to 1000 [ 638.551111][T26516] lo speed is unknown, defaulting to 1000 [ 638.808519][T26533] netlink: 'syz.4.5458': attribute type 58 has an invalid length. [ 639.186674][T26551] geneve1: left promiscuous mode [ 639.189725][T26551] bridge1: left promiscuous mode [ 639.189755][T26551] bridge1: left allmulticast mode [ 639.189880][T26551] bond1: left promiscuous mode [ 639.191304][T26551] ip6tnl1: left allmulticast mode [ 639.191633][T26551] geneve2: left promiscuous mode [ 639.269707][T26551] bond10: left promiscuous mode [ 639.269734][T26551] bridge5: left promiscuous mode [ 639.427503][T26516] lo speed is unknown, defaulting to 1000 [ 639.639709][T26567] netlink: 'syz.4.5466': attribute type 1 has an invalid length. [ 639.939861][T26567] veth9: entered allmulticast mode [ 639.967005][T26567] bond7: (slave veth9): Enslaving as an active interface with a down link [ 640.048928][T26570] bond7: (slave veth0_to_bond): making interface the new active one [ 640.074839][T26570] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 640.092462][T26580] xt_l2tp: v2 doesn't support IP mode [ 640.131701][T26575] macvlan2: entered promiscuous mode [ 640.131723][T26575] macvlan2: entered allmulticast mode [ 640.132364][T26575] bond7: entered promiscuous mode [ 640.132383][T26575] veth0_to_bond: entered promiscuous mode [ 640.171666][T26575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 640.173796][T26575] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 640.173922][T26575] bond7: left promiscuous mode [ 640.173940][T26575] veth0_to_bond: left promiscuous mode [ 640.204565][T26586] smbdirect: ib_dev[syz2] removed [ 640.589570][T26601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.700050][T26609] __nla_validate_parse: 4 callbacks suppressed [ 640.700073][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5475'. [ 640.751753][T26609] syzkaller1: entered promiscuous mode [ 640.751777][T26609] syzkaller1: entered allmulticast mode [ 640.878138][T26619] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5480'. [ 641.152888][T26629] xt_l2tp: v2 doesn't support IP mode [ 641.534403][T26641] bridge_slave_0: entered promiscuous mode [ 641.534466][T26641] bridge_slave_0: entered allmulticast mode [ 641.791339][T26651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5492'. [ 642.056064][T26664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5498'. [ 642.169474][T26669] xt_l2tp: v2 doesn't support IP mode [ 642.410263][T26675] bond4: (slave ip6gretap0): Releasing active interface [ 642.468653][T26675] bond7: (slave veth0_to_bond): Releasing active interface [ 642.471920][T26679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5503'. [ 642.508149][T26675] bond0: (slave bond_slave_0): Releasing backup interface [ 642.537594][T26675] bond0: (slave bond_slave_1): Releasing backup interface [ 642.576919][T26675] team0: Port device team_slave_0 removed [ 642.586584][T26675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 642.783035][T26701] netlink: 'syz.3.5507': attribute type 1 has an invalid length. [ 642.783058][T26701] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5507'. [ 643.064761][T26712] bridge_slave_0: left promiscuous mode [ 643.064787][T26712] bridge_slave_0: left allmulticast mode [ 643.138313][T26712] vlan0: left promiscuous mode [ 643.138618][T26712] vlan1: left promiscuous mode [ 643.143743][T26712] veth1_vlan: left allmulticast mode [ 643.157524][T26712] macvlan0: left promiscuous mode [ 643.157546][T26712] macvlan0: left allmulticast mode [ 643.164535][T26712] macvlan1: left promiscuous mode [ 643.164838][T26712] ipvlan1: left promiscuous mode [ 643.174890][T26712] macvtap0: left promiscuous mode [ 643.175058][T26712] macsec0: left promiscuous mode [ 643.176954][T26712] geneve1: left promiscuous mode [ 643.177318][T26712] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 643.177434][T26712] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 643.177543][T26712] ip6gretap1: left promiscuous mode [ 643.177654][T26712] gtp0: left promiscuous mode [ 643.180605][T26712] veth2: left promiscuous mode [ 643.180763][T26712] veth3: left promiscuous mode [ 643.180897][T26712] geneve2: left promiscuous mode [ 643.181625][T26712] bond1: left promiscuous mode [ 643.185889][T26712] bridge0.257: left promiscuous mode [ 643.185907][T26712] bridge0: left promiscuous mode [ 643.186015][T26712] vlan2: left promiscuous mode [ 643.186027][T26712] geneve0: left promiscuous mode [ 643.191178][T26712] bridge1: left promiscuous mode [ 643.199617][T26712] bond2: left allmulticast mode [ 643.199638][T26712] ip6gretap2: left allmulticast mode [ 643.320713][T26712] macvlan2: left promiscuous mode [ 643.320737][T26712] macvlan2: left allmulticast mode [ 643.343501][T26712] ip6gre2: left promiscuous mode [ 643.343525][T26712] ip6gre2: left allmulticast mode [ 643.364754][T26712] ipip1: left promiscuous mode [ 643.379389][T26723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5512'. [ 643.379529][T26723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5512'. [ 643.379653][T26723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5512'. [ 643.379773][T26723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5512'. [ 643.432057][ T25] lo speed is unknown, defaulting to 1000 [ 643.432081][ T25] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 643.583547][T26732] netlink: 'syz.4.5514': attribute type 17 has an invalid length. [ 643.594527][T26732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.709544][ T31] audit: type=1804 audit(1789599505.495:23): pid=26739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5519" name="/newroot/467/cgroup.controllers" dev="tmpfs" ino=2405 res=1 errno=0 [ 643.709655][ T31] audit: type=1800 audit(1789599505.495:24): pid=26739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5519" name="cgroup.controllers" dev="tmpfs" ino=2405 res=0 errno=0 [ 643.710781][T26740] netlink: Unknown NAT attribute (type=9006, max=9) [ 643.710814][T26740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.037600][T14463] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 644.057370][T26757] macsec0: entered allmulticast mode [ 644.057397][T26757] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 644.061074][T26757] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 644.099494][T26757] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 644.203560][T14463] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 644.500349][T26793] IPVS: Unknown mcast interface: nr0 [ 644.831938][T26814] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 644.832450][T26814] Bluetooth: hci0: unsupported parameter 5135 [ 644.832467][T26814] Bluetooth: hci0: unsupported parameter 8192 [ 644.832480][T26814] Bluetooth: hci0: unsupported parameter 5135 [ 644.832492][T26814] Bluetooth: hci0: unsupported parameter 8192 [ 644.882168][T26816] syzkaller0: entered promiscuous mode [ 644.882183][T26816] syzkaller0: entered allmulticast mode [ 645.063026][T26824] veth0_vlan: entered allmulticast mode [ 645.089722][T26824] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 645.208589][T26831] tipc: Invalid UDP bearer configuration [ 645.208635][T26831] tipc: Enabling of bearer rejected, failed to enable media [ 645.738197][T26866] netlink: NAT attribute has 4 unknown bytes [ 645.738257][T26866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.740648][T26867] netlink: NAT attribute has 4 unknown bytes [ 645.740679][T26867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.832284][T26868] __nla_validate_parse: 69 callbacks suppressed [ 645.832307][T26868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5547'. [ 646.180517][T26887] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5553'. [ 646.278640][T26891] syzkaller0: entered promiscuous mode [ 646.278665][T26891] syzkaller0: entered allmulticast mode [ 646.689603][T26909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5559'. [ 646.748344][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5559'. [ 646.754584][T26914] netlink: 'syz.3.5561': attribute type 2 has an invalid length. [ 646.754605][T26914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5561'. [ 647.054509][T26930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5566'. [ 647.085568][T26930] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 647.223618][T26938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5569'. [ 647.223673][T26938] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 647.264439][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5569'. [ 647.432138][T26948] syzkaller1: entered promiscuous mode [ 647.432161][T26948] syzkaller1: entered allmulticast mode [ 647.454033][T26953] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5570'. [ 647.454148][T26953] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5570'. [ 648.347561][T26987] bridge6: port 1(veth11) entered blocking state [ 648.347748][T26987] bridge6: port 1(veth11) entered disabled state [ 648.347898][T26987] veth11: entered allmulticast mode [ 648.350722][T26987] veth11: entered promiscuous mode [ 649.079241][T27023] netlink: 'syz.3.5588': attribute type 11 has an invalid length. [ 649.145975][T27027] netlink: 'syz.2.5589': attribute type 1 has an invalid length. [ 649.290005][T27027] bond12: entered promiscuous mode [ 649.290551][T27027] 8021q: adding VLAN 0 to HW filter on device bond12 [ 649.351882][T27035] vlan0: entered allmulticast mode [ 649.351905][T27035] bond12: entered allmulticast mode [ 649.480443][T27027] bond12: (slave bridge7): making interface the new active one [ 649.480470][T27027] bridge7: entered promiscuous mode [ 649.480663][T27027] bridge7: entered allmulticast mode [ 649.494862][T27027] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 649.688940][T27049] netlink: 'syz.4.5594': attribute type 1 has an invalid length. [ 649.710520][T27054] Bluetooth: hci0: unsupported parameter 5135 [ 649.710543][T27054] Bluetooth: hci0: unsupported parameter 8192 [ 649.710557][T27054] Bluetooth: hci0: unsupported parameter 5135 [ 649.710569][T27054] Bluetooth: hci0: unsupported parameter 8192 [ 649.762458][T27049] bond8: entered promiscuous mode [ 649.770042][T27049] 8021q: adding VLAN 0 to HW filter on device bond8 [ 649.929130][T27049] bond8: (slave bridge2): making interface the new active one [ 649.929501][T27049] bridge2: entered promiscuous mode [ 649.952919][T27049] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 650.119934][T27068] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 650.285780][T27074] macvlan1: entered promiscuous mode [ 650.606484][T27091] can: request_module (can-proto-0) failed. [ 651.002260][T27112] tipc: Resetting bearer [ 651.003713][T27112] tipc: Resetting bearer [ 651.282711][T27131] netlink: 'syz.0.5615': attribute type 4 has an invalid length. [ 651.282733][T27131] __nla_validate_parse: 50 callbacks suppressed [ 651.282746][T27131] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5615'. [ 651.408386][ T8932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.408407][ T8932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.639129][T27145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 651.724845][T27150] netlink: 208496 bytes leftover after parsing attributes in process `syz.3.5622'. [ 651.724871][T27150] openvswitch: netlink: Message has 512 unknown bytes. [ 652.073022][ T9238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.073045][ T9238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.163371][T27177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5629'. [ 652.534009][T27200] tipc: Enabling of bearer rejected, already enabled [ 653.081998][T27239] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5646'. [ 653.364542][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 653.422411][T27259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5648'. [ 653.422435][T27259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5648'. [ 653.675594][T27266] bond4: entered promiscuous mode [ 653.676058][T27266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.679250][T27270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5651'. [ 653.679289][T27270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5651'. [ 653.788937][T27270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5651'. [ 654.153423][T27276] udevd[27276]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 654.171776][T27275] udevd[27275]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 654.460421][T27304] syzkaller0: entered promiscuous mode [ 654.460445][T27304] syzkaller0: entered allmulticast mode [ 654.486417][T27304] tipc: Enabled bearer , priority 0 [ 654.528275][T27311] xt_IDLETIMER: timeout value is zero [ 654.718653][T27297] tipc: Resetting bearer [ 654.800056][T27297] tipc: Disabling bearer [ 654.941347][T27322] ip6gre1: entered promiscuous mode [ 654.941370][T27322] ip6gre1: entered allmulticast mode [ 655.577304][T10496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.577538][T10496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.606216][ T1693] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.667865][T27361] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 655.780482][T27362] netlink: 'syz.0.5680': attribute type 1 has an invalid length. [ 655.962605][T27363] bond8: (slave geneve4): making interface the new active one [ 655.974780][T27363] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 656.037286][ T5345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.175316][ T791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.175365][ T791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.175400][ T791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.175433][ T791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 656.526845][T27392] sysfs: cannot create duplicate filename '/class/ieee80211/.PÑè'óG!DEÒSˆ' [ 656.526869][T27392] CPU: 0 UID: 0 PID: 27392 Comm: syz.3.5685 Not tainted syzkaller #0 PREEMPT(full) [ 656.526892][T27392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.526905][T27392] Call Trace: [ 656.526915][T27392] [ 656.526925][T27392] dump_stack_lvl+0xe8/0x150 [ 656.526964][T27392] sysfs_warn_dup+0x8e/0xa0 [ 656.527042][T27392] sysfs_do_create_link_sd+0xc0/0x110 [ 656.527075][T27392] device_add_class_symlinks+0x1cf/0x240 [ 656.527126][T27392] device_add+0x467/0xb80 [ 656.527152][T27392] wiphy_register+0x1fc8/0x2ff0 [ 656.527289][T27392] ? __pfx_wiphy_register+0x10/0x10 [ 656.527349][T27392] ? __pfx_netdev_run_todo+0x10/0x10 [ 656.527383][T27392] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 656.527523][T27392] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 656.527620][T27392] ieee80211_register_hw+0x3d3d/0x4a50 [ 656.527681][T27392] ? ieee80211_register_hw+0x1981/0x4a50 [ 656.527729][T27392] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 656.527755][T27392] ? __asan_memset+0x22/0x50 [ 656.527791][T27392] ? __hrtimer_setup+0x1b7/0x260 [ 656.527819][T27392] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 656.527892][T27392] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 656.527950][T27392] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 656.527972][T27392] ? kstrndup+0xbd/0x160 [ 656.528011][T27392] ? kstrndup+0xbd/0x160 [ 656.528034][T27392] hwsim_new_radio_nl+0xd8b/0xf90 [ 656.528073][T27392] genl_family_rcv_msg_doit+0x233/0x340 [ 656.528107][T27392] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 656.528145][T27392] ? bpf_lsm_capable+0x9/0x20 [ 656.528162][T27392] ? security_capable+0x7e/0x2c0 [ 656.528198][T27392] genl_rcv_msg+0x614/0x7a0 [ 656.528229][T27392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.528252][T27392] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 656.528290][T27392] netlink_rcv_skb+0x226/0x4a0 [ 656.528319][T27392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.528342][T27392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.528387][T27392] ? down_read+0x2be/0x330 [ 656.528418][T27392] genl_rcv+0x28/0x40 [ 656.528439][T27392] netlink_unicast+0x7bd/0x940 [ 656.528478][T27392] netlink_sendmsg+0x813/0xb40 [ 656.528528][T27392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.528565][T27392] ? apparmor_socket_sendmsg+0x98/0x360 [ 656.528587][T27392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.528614][T27392] sock_sendmsg_nosec+0x13a/0x180 [ 656.528648][T27392] ____sys_sendmsg+0x54e/0x850 [ 656.528680][T27392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.528715][T27392] ? import_iovec+0x73/0xa0 [ 656.528745][T27392] ___sys_sendmsg+0x2a5/0x360 [ 656.528770][T27392] ? __lock_acquire+0x747/0x2de0 [ 656.528796][T27392] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.528825][T27392] ? futex_wait+0x2a2/0x390 [ 656.528913][T27392] ? __fget_files+0x2a/0x420 [ 656.528942][T27392] ? __fget_files+0x3a2/0x420 [ 656.528983][T27392] __x64_sys_sendmsg+0x1b1/0x290 [ 656.529013][T27392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.529067][T27392] do_syscall_64+0x166/0x520 [ 656.529089][T27392] ? trace_irq_disable+0x3b/0x140 [ 656.529110][T27392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.529133][T27392] ? clear_bhb_loop+0x70/0xc0 [ 656.529158][T27392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.529180][T27392] RIP: 0033:0x7f051cf9e159 [ 656.529202][T27392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.529220][T27392] RSP: 002b:00007f051ddc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.529244][T27392] RAX: ffffffffffffffda RBX: 00007f051d225fa0 RCX: 00007f051cf9e159 [ 656.529260][T27392] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 656.529274][T27392] RBP: 00007f051d03506b R08: 0000000000000000 R09: 0000000000000000 [ 656.529288][T27392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.529301][T27392] R13: 00007f051d226038 R14: 00007f051d225fa0 R15: 00007fffffcd43d8 [ 656.529339][T27392] [ 656.539827][ T1693] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.625357][T27397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.112632][T27413] ip6gretap1: entered allmulticast mode [ 657.122823][T27413] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 657.124942][T27413] batman_adv: batadv0: Adding interface: ip6gretap1 [ 657.124952][T27413] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.125013][T27413] batman_adv: batadv0: Interface activated: ip6gretap1 [ 657.515507][T27424] bridge0: entered allmulticast mode [ 658.542959][T27456] __nla_validate_parse: 2 callbacks suppressed [ 658.542979][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5702'. [ 658.674367][T27465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5702'. [ 659.209841][T27481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5707'. [ 659.210533][T27481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5707'. [ 659.280464][T27481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.488628][T27481] dummy0: left promiscuous mode [ 659.555933][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.083650][ T52] block nbd3: Receive control failed (result -32) [ 660.106797][T27522] netlink: 'syz.2.5718': attribute type 1 has an invalid length. [ 660.107687][T27522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5718'. [ 660.273509][T27528] netlink: 'syz.1.5720': attribute type 1 has an invalid length. [ 660.273531][T27528] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5720'. [ 660.407041][T27528] netlink: 'syz.1.5720': attribute type 1 has an invalid length. [ 660.412410][T27540] bond9: entered allmulticast mode [ 660.498321][T27546] netlink: Unknown nat attribute (0) [ 660.498354][T27546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.524516][T27528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 660.581057][T27530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.604170][T27550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5724'. [ 660.604202][T27550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5724'. [ 660.604226][T27550] netlink: 'syz.4.5724': attribute type 11 has an invalid length. [ 660.604241][T27550] netlink: 'syz.4.5724': attribute type 13 has an invalid length. [ 660.732918][T27555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.901304][T27565] gre0: entered promiscuous mode [ 660.901330][T27565] gre0: entered allmulticast mode [ 660.909230][T27565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5731'. [ 661.077732][T27568] netlink: 'syz.3.5732': attribute type 12 has an invalid length. [ 661.084830][T27576] syzkaller1: entered promiscuous mode [ 661.084853][T27576] syzkaller1: entered allmulticast mode [ 661.242350][T27582] ip_tables: iptables: counters copy to user failed while replacing table [ 661.535803][T27609] netlink: 'syz.3.5744': attribute type 1 has an invalid length. [ 661.605124][T27614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5744'. [ 661.695001][T27609] bond5: entered promiscuous mode [ 661.701896][T27609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 661.749417][T27610] bond5: (slave bridge2): making interface the new active one [ 661.749444][T27610] bridge2: entered promiscuous mode [ 661.752135][T27610] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 661.918400][T27629] nbd1: detected capacity change from 0 to 6 [ 661.925014][ T11] block nbd1: Dead connection, failed to find a fallback [ 662.004061][T27629] netlink: Failed to add helper -22 [ 662.004115][T27629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.622534][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.622623][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.622702][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.622780][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.622857][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.622933][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623011][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623170][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623251][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623327][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623404][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623491][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623575][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623652][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623731][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623809][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623887][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.623964][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624041][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624120][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624200][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624278][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624357][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624433][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624585][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624663][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624740][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624818][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624904][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.624981][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.625059][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.629771][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.629882][T27684] tap0: linktype set to 774 [ 662.630161][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.630214][T27684] tap0: linktype set to 774 [ 662.635959][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.636064][T27684] tap0: linktype set to 774 [ 662.636334][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.636386][T27684] tap0: linktype set to 774 [ 662.639979][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.640041][T27684] tap0: linktype set to 774 [ 662.640286][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.640342][T27684] tap0: linktype set to 774 [ 662.640567][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.646669][T27684] tap0: linktype set to 774 [ 662.647041][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.647098][T27684] tap0: linktype set to 774 [ 662.647326][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.647399][T27684] tap0: linktype set to 774 [ 662.647632][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.647684][T27684] tap0: linktype set to 774 [ 662.650463][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.650547][T27684] tap0: linktype set to 774 [ 662.653446][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.653511][T27684] tap0: linktype set to 774 [ 662.653780][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.653832][T27684] tap0: linktype set to 774 [ 662.654062][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.654113][T27684] tap0: linktype set to 774 [ 662.654360][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.654409][T27684] tap0: linktype set to 774 [ 662.659080][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.659141][T27684] tap0: linktype set to 774 [ 662.660613][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.660672][T27684] tap0: linktype set to 774 [ 662.660902][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.660972][T27684] tap0: linktype set to 774 [ 662.661223][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.661275][T27684] tap0: linktype set to 774 [ 662.667373][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.667445][T27684] tap0: linktype set to 774 [ 662.667745][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.667798][T27684] tap0: linktype set to 774 [ 662.668036][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.668088][T27684] tap0: linktype set to 774 [ 662.668333][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.668384][T27684] tap0: linktype set to 774 [ 662.670896][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.670977][T27684] tap0: linktype set to 774 [ 662.671251][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.671303][T27684] tap0: linktype set to 774 [ 662.671525][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.671576][T27684] tap0: linktype set to 774 [ 662.671821][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.674233][T27684] tap0: linktype set to 774 [ 662.675308][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.675510][T27684] tap0: linktype set to 774 [ 662.675801][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.675858][T27684] tap0: linktype set to 774 [ 662.676092][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.676144][T27684] tap0: linktype set to 774 [ 662.677635][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.677708][T27684] tap0: linktype set to 774 [ 662.678621][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.678687][T27684] tap0: linktype set to 774 [ 662.681068][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.681142][T27684] tap0: linktype set to 774 [ 662.681970][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.682038][T27684] tap0: linktype set to 774 [ 662.682287][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.682341][T27684] tap0: linktype set to 774 [ 662.682576][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.682629][T27684] tap0: linktype set to 774 [ 662.682856][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.682934][T27684] tap0: linktype set to 774 [ 662.683985][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.684043][T27684] tap0: linktype set to 774 [ 662.684359][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.684412][T27684] tap0: linktype set to 774 [ 662.684641][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.684694][T27684] tap0: linktype set to 774 [ 662.684928][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.684981][T27684] tap0: linktype set to 774 [ 662.702584][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.702686][T27684] tap0: linktype set to 774 [ 662.707339][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.707429][T27684] tap0: linktype set to 774 [ 662.707717][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.707772][T27684] tap0: linktype set to 774 [ 662.727270][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.727394][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.727475][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.727555][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.727637][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.727719][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.738503][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.738620][T27684] tap0: linktype set to 774 [ 662.738917][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.738972][T27684] tap0: linktype set to 774 [ 662.739242][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.745446][T27684] tap0: linktype set to 774 [ 662.745801][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.745859][T27684] tap0: linktype set to 774 [ 662.772393][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.772506][T27684] tap0: linktype set to 774 [ 662.772831][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.772895][T27684] tap0: linktype set to 774 [ 662.773180][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.773234][T27684] tap0: linktype set to 774 [ 662.773492][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.773543][T27684] tap0: linktype set to 774 [ 662.773768][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.773826][T27684] tap0: linktype set to 774 [ 662.792906][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793016][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793094][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793185][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793265][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793341][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793446][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793520][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793595][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793670][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793771][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.793841][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.797594][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.797705][T27684] tap0: linktype set to 774 [ 662.798038][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.798093][T27684] tap0: linktype set to 774 [ 662.798346][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.798398][T27684] tap0: linktype set to 774 [ 662.801926][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.802017][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.802124][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.802199][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.810744][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.810839][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.810923][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.811000][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.811077][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.811152][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.811227][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.811302][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.811407][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.811485][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.816611][T27683] tap0: tun_chr_ioctl cmd 1074025673 [ 662.820791][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.820929][T27684] tap0: linktype set to 774 [ 662.821326][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.821385][T27684] tap0: linktype set to 774 [ 662.821626][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.822452][T27684] tap0: linktype set to 774 [ 662.822712][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.822765][T27684] tap0: linktype set to 774 [ 662.827569][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.827659][T27684] tap0: linktype set to 774 [ 662.829928][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.829991][T27684] tap0: linktype set to 774 [ 662.831536][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.831605][T27684] tap0: linktype set to 774 [ 662.832709][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.832768][T27684] tap0: linktype set to 774 [ 662.833014][T27684] tap0: tun_chr_ioctl cmd 1074025677 [ 662.833085][T27684] tap0: linktype set to 774 [ 663.067687][T27696] xt_policy: output policy not valid in PREROUTING and INPUT [ 663.744045][T27710] __nla_validate_parse: 4 callbacks suppressed [ 663.744060][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5770'. [ 663.889684][T27715] geneve3: entered promiscuous mode [ 663.926206][T10496] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 33791 - 0 [ 663.926270][T10496] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 33791 - 0 [ 663.926304][T10496] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 33791 - 0 [ 663.926338][T10496] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 33791 - 0 [ 664.090937][T27698] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 664.274965][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.275032][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.299863][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.311265][T27727] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 664.311299][T27727] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 664.311334][T27727] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 664.430206][T27727] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 664.589437][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.607983][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.612970][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.631044][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.645398][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.651805][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.654828][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.674735][T27727] wg2 speed is unknown, defaulting to 1000 [ 664.880886][T27743] lo speed is unknown, defaulting to 1000 [ 664.972845][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 664.972873][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 664.973233][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 664.973251][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 664.973430][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 664.973444][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 664.973603][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 664.973624][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 664.973776][T27745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5780'. [ 665.132490][T27747] sit0: entered promiscuous mode [ 665.157541][T27747] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 665.157725][T27747] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 665.157857][T27747] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 665.157973][T27747] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 665.158084][T27747] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 665.158193][T27747] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 665.158265][T27747] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 665.158332][T27747] netlink: 'syz.4.5780': attribute type 1 has an invalid length. [ 665.804984][T27773] sock: sock_set_timeout: `syz.4.5785' (pid 27773) tries to set negative timeout [ 665.847480][T27743] lo speed is unknown, defaulting to 1000 [ 665.859841][T27743] wg2 speed is unknown, defaulting to 1000 [ 667.127581][T27788] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 667.805315][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.869274][T27807] __nla_validate_parse: 271 callbacks suppressed [ 668.869297][T27807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5798'. [ 668.941733][T27814] validate_nla: 25 callbacks suppressed [ 668.941754][T27814] netlink: 'syz.0.5800': attribute type 30 has an invalid length. [ 669.247419][T27822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5802'. [ 669.300551][T27820] netlink: 'syz.4.5802': attribute type 2 has an invalid length. [ 669.301165][T27823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5803'. [ 669.312545][T27823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5803'. [ 669.373561][T27823] hsr_slave_1 (unregistering): left promiscuous mode [ 669.660798][T27831] x_tables: duplicate entry at hook 1 [ 669.683182][T27276] udevd[27276]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 669.700811][T27833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5805'. [ 669.704386][T27836] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5805'. [ 669.709733][T27833] netlink: 'syz.4.5805': attribute type 1 has an invalid length. [ 670.165862][T27852] netlink: 564 bytes leftover after parsing attributes in process `syz.2.5809'. [ 670.283261][T27854] veth1_vlan: left allmulticast mode [ 670.578316][T27868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5815'. [ 671.213089][T27889] ip_tables: iptables: counters copy to user failed while replacing table [ 671.233861][T27889] tipc: Bearer : already 2 bearers with priority 10 [ 671.233884][T27889] tipc: Bearer : trying with adjusted priority [ 671.243642][T27889] tipc: Enabled bearer , priority 9 [ 671.473404][T27898] netlink: 'syz.4.5826': attribute type 10 has an invalid length. [ 671.492650][T27898] team0: Port device bond_slave_0 added [ 672.932373][T27969] IPv6: sit4: Disabled Multicast RS [ 673.231619][T27982] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5849'. [ 673.234584][T27983] vlan3: entered allmulticast mode [ 673.234604][T27983] veth1: entered allmulticast mode [ 673.538188][T27997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5852'. [ 673.660920][T27999] lo speed is unknown, defaulting to 1000 [ 673.963474][T28018] __nla_validate_parse: 1 callbacks suppressed [ 673.963494][T28018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5856'. [ 674.126349][T27999] lo speed is unknown, defaulting to 1000 [ 674.128692][T27999] wg2 speed is unknown, defaulting to 1000 [ 674.205695][T28026] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5859'. [ 674.239732][T28031] netlink: 'syz.4.5861': attribute type 1 has an invalid length. [ 674.292850][T28031] 8021q: adding VLAN 0 to HW filter on device bond9 [ 674.591021][T28044] FAULT_INJECTION: forcing a failure. [ 674.591021][T28044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.591058][T28044] CPU: 0 UID: 0 PID: 28044 Comm: syz.2.5866 Not tainted syzkaller #0 PREEMPT(full) [ 674.591104][T28044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.591130][T28044] Call Trace: [ 674.591138][T28044] [ 674.591147][T28044] dump_stack_lvl+0xe8/0x150 [ 674.591181][T28044] should_fail_ex+0x410/0x560 [ 674.591209][T28044] _copy_from_user+0x2d/0xb0 [ 674.591235][T28044] mptcp_get_subflow_data+0xa0/0x250 [ 674.591375][T28044] mptcp_getsockopt+0x9ea/0x1ed0 [ 674.591404][T28044] ? lock_acquire+0x115/0x350 [ 674.591428][T28044] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 674.591467][T28044] ? process_measurement+0x7b2/0x1c10 [ 674.591500][T28044] ? up_write+0x19d/0x4a0 [ 674.591531][T28044] ? __lock_acquire+0x747/0x2de0 [ 674.591559][T28044] ? __lock_acquire+0x747/0x2de0 [ 674.591594][T28044] ? lock_acquire+0x115/0x350 [ 674.591617][T28044] ? __lock_acquire+0x747/0x2de0 [ 674.591650][T28044] ? __lock_acquire+0x747/0x2de0 [ 674.591679][T28044] ? lock_acquire+0x115/0x350 [ 674.591700][T28044] ? begin_current_label_crit_section+0x2a3/0x830 [ 674.591730][T28044] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 674.591768][T28044] ? aa_inet_opt_perm+0xae4/0xcf0 [ 674.591802][T28044] ? __lock_acquire+0x747/0x2de0 [ 674.591830][T28044] ? lock_acquire+0x115/0x350 [ 674.591850][T28044] ? get_pid_task+0x20/0x1f0 [ 674.591882][T28044] ? lock_acquire+0x115/0x350 [ 674.591927][T28044] ? sock_common_getsockopt+0x2d/0xb0 [ 674.591949][T28044] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 674.591970][T28044] do_sock_getsockopt+0x51d/0x7e0 [ 674.592001][T28044] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 674.592061][T28044] ? __fget_files+0x3a2/0x420 [ 674.592087][T28044] ? __fget_files+0x2a/0x420 [ 674.592126][T28044] __x64_sys_getsockopt+0x1a4/0x240 [ 674.592158][T28044] do_syscall_64+0x166/0x520 [ 674.592178][T28044] ? trace_irq_disable+0x3b/0x140 [ 674.592197][T28044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.592215][T28044] ? clear_bhb_loop+0x70/0xc0 [ 674.592236][T28044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.592253][T28044] RIP: 0033:0x7f99a139e159 [ 674.592270][T28044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.592286][T28044] RSP: 002b:00007f99a221a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 674.592307][T28044] RAX: ffffffffffffffda RBX: 00007f99a1625fa0 RCX: 00007f99a139e159 [ 674.592321][T28044] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000003 [ 674.592333][T28044] RBP: 00007f99a221a090 R08: 0000200000000000 R09: 0000000000000000 [ 674.592346][T28044] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 674.592358][T28044] R13: 00007f99a1626038 R14: 00007f99a1625fa0 R15: 00007ffd9b1b8aa8 [ 674.592388][T28044] [ 675.038000][T28056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5870'. [ 675.085418][T28052] Bluetooth: hci0: unsupported parameter 5135 [ 675.085441][T28052] Bluetooth: hci0: unsupported parameter 8192 [ 675.085454][T28052] Bluetooth: hci0: unsupported parameter 5135 [ 675.085466][T28052] Bluetooth: hci0: unsupported parameter 8192 [ 675.098201][T28052] netlink: 'syz.2.5867': attribute type 11 has an invalid length. [ 675.871139][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5872'. [ 675.877454][T28084] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5877'. [ 675.897588][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5872'. [ 675.923463][T28084] syzkaller1: entered promiscuous mode [ 675.923483][T28084] syzkaller1: entered allmulticast mode [ 675.939104][T28084] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5877'. [ 675.939283][T28090] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5879'. [ 675.939555][T28084] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5877'. [ 675.941458][T28084] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5877'. [ 676.098730][T28090] bond11: entered allmulticast mode [ 676.099377][T28090] 8021q: adding VLAN 0 to HW filter on device bond11 [ 676.131223][T28096] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 676.184784][T28097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 676.241019][T28101] Bluetooth: MGMT ver 1.23 [ 677.113893][T28141] netlink: 'syz.1.5891': attribute type 31 has an invalid length. [ 677.241804][T28147] netlink: 'syz.3.5893': attribute type 21 has an invalid length. [ 677.241828][T28147] netlink: 'syz.3.5893': attribute type 20 has an invalid length. [ 677.488353][T28153] lo speed is unknown, defaulting to 1000 [ 677.606994][T28144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.078604][T28179] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 678.079912][T28153] lo speed is unknown, defaulting to 1000 [ 678.081550][T28153] wg2 speed is unknown, defaulting to 1000 [ 678.201886][T28187] netlink: 'syz.1.5904': attribute type 3 has an invalid length. [ 678.273458][T28192] vlan0: entered promiscuous mode [ 678.528362][T28182] netlink: 'syz.3.5903': attribute type 1 has an invalid length. [ 678.570661][T28192] bond6 (unregistering): Released all slaves [ 678.871734][T28217] netlink: 'syz.3.5916': attribute type 10 has an invalid length. [ 678.973064][T28218] __nla_validate_parse: 10 callbacks suppressed [ 678.973086][T28218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5914'. [ 679.034068][T28220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5916'. [ 679.034104][T28220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5916'. [ 679.539884][T28251] netlink: 566 bytes leftover after parsing attributes in process `syz.1.5920'. [ 679.780744][T28258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5923'. [ 680.071197][T28268] netlink: 'syz.0.5926': attribute type 32 has an invalid length. [ 680.071218][T28268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5926'. [ 680.071241][T28268] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5) [ 680.393670][T28278] netlink: 'syz.0.5929': attribute type 1 has an invalid length. [ 680.570135][T28283] veth7: entered allmulticast mode [ 680.584823][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5933'. [ 680.584852][T28301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5933'. [ 680.604741][T28283] bond12: (slave veth7): Enslaving as an active interface with a down link [ 680.636860][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5933'. [ 681.110103][T28307] syzkaller1: entered promiscuous mode [ 681.110128][T28307] syzkaller1: entered allmulticast mode [ 681.162017][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.173859][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.174764][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.189848][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.198795][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.953071][T10448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.294352][T10448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.351773][T28370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5949'. [ 682.361865][T28358] syzkaller1: entered promiscuous mode [ 682.361888][T28358] syzkaller1: entered allmulticast mode [ 682.470015][T10448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.668456][T28350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.677204][T28320] lo speed is unknown, defaulting to 1000 [ 682.914382][T10448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 682.977414][T28392] xt_TPROXY: Can be used only with -p tcp or -p udp [ 683.081763][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.126485][T28384] SET target dimension over the limit! [ 683.275384][T28320] lo speed is unknown, defaulting to 1000 [ 683.275521][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.275561][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.275594][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.284395][T28320] wg2 speed is unknown, defaulting to 1000 [ 683.290052][T28404] xt_l2tp: v2 doesn't support IP mode [ 683.331854][ T52] Bluetooth: hci2: command tx timeout [ 683.772675][T10448] vlan2: left allmulticast mode [ 683.772698][T10448] geneve0: left allmulticast mode [ 683.772857][T10448] bridge0: port 1(vlan2) entered disabled state [ 683.893649][T28429] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 684.252319][T10448] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface [ 684.448617][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 684.477641][T28457] __nla_validate_parse: 7 callbacks suppressed [ 684.477661][T28457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5969'. [ 684.727299][T10448] bond8 (unregistering): (slave geneve4): Releasing active interface [ 684.843394][T10448] bond1 (unregistering): Released all slaves [ 684.856581][T10448] bond2 (unregistering): Released all slaves [ 684.873623][T10448] bond3 (unregistering): Released all slaves [ 684.888780][T10448] bond4 (unregistering): (slave bond5): Releasing backup interface [ 684.889339][T10448] bond4 (unregistering): Released all slaves [ 684.899970][T10448] bond5 (unregistering): Released all slaves [ 684.912417][T10448] bond6 (unregistering): Released all slaves [ 684.924795][T10448] bond7 (unregistering): Released all slaves [ 684.939065][T10448] bond0 (unregistering): Released all slaves [ 684.953324][T10448] bond8 (unregistering): Released all slaves [ 684.970121][T10448] bond9 (unregistering): Released all slaves [ 684.984064][T10448] bond10 (unregistering): Released all slaves [ 684.999558][T10448] bond11 (unregistering): Released all slaves [ 685.014785][T10448] bond12 (unregistering): (slave veth7): Releasing active interface [ 685.026406][T10448] bond12 (unregistering): Released all slaves [ 685.048053][T28425] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5965'. [ 685.048075][T28425] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 685.406342][ T52] Bluetooth: hci2: command tx timeout [ 685.422624][T10448] tipc: Disabling bearer [ 685.422778][T10448] tipc: Left network mode [ 685.517614][T28476] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.5973'. [ 685.517638][T28476] netlink: 'syz.4.5973': attribute type 1 has an invalid length. [ 685.524048][T28477] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.5973'. [ 685.524071][T28477] netlink: 'syz.4.5973': attribute type 1 has an invalid length. [ 686.304967][T28513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5980'. [ 686.518127][T28320] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.518226][T28320] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.523048][T28320] bridge_slave_0: entered allmulticast mode [ 686.530198][T28320] bridge_slave_0: entered promiscuous mode [ 686.532525][T28511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5979'. [ 686.535677][T28517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5979'. [ 686.541075][T28524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5979'. [ 686.699368][T28515] tunl0: entered promiscuous mode [ 686.699552][T28515] netlink: 'syz.1.5979': attribute type 4 has an invalid length. [ 686.699569][T28515] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5979'. [ 686.753370][T28320] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.753471][T28320] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.753636][T28320] bridge_slave_1: entered allmulticast mode [ 686.763603][T28320] bridge_slave_1: entered promiscuous mode [ 686.838591][T28516] netlink: 39 bytes leftover after parsing attributes in process `syz.4.5980'. [ 686.893574][T28320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.477330][ T52] Bluetooth: hci2: command tx timeout [ 688.021831][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 688.036681][T28320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.124267][T14463] wg2 speed is unknown, defaulting to 1000 [ 688.124295][T14463] syz2: Port: 1 Link DOWN [ 688.217162][T28554] x_tables: duplicate underflow at hook 1 [ 688.238891][T28320] team0: Port device team_slave_0 added [ 688.272675][T28320] team0: Port device team_slave_1 added [ 688.342061][T28320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.342077][T28320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.342099][T28320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.358103][ T9231] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.358138][ T9231] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 38949 - 0 [ 688.375788][ T8929] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.375822][ T8929] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 38949 - 0 [ 688.376256][ T8929] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.376282][ T8929] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 38949 - 0 [ 688.376314][ T8929] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.376338][ T8929] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 38949 - 0 [ 688.393156][T28320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.393174][T28320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.393199][T28320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.701496][T28320] hsr_slave_0: entered promiscuous mode [ 688.702704][T28320] hsr_slave_1: entered promiscuous mode [ 688.704615][T28320] debugfs: 'hsr0' already exists in 'hsr' [ 688.704635][T28320] Cannot create hsr debugfs directory [ 688.991252][T28579] xt_TCPMSS: Only works on TCP SYN packets [ 689.270832][T28579] batadv1: left allmulticast mode [ 689.270861][T28579] batadv1: left promiscuous mode [ 689.271082][T28579] bridge0: port 5(batadv1) entered disabled state [ 689.273952][T28579] vlan2: left allmulticast mode [ 689.273972][T28579] geneve0: left allmulticast mode [ 689.273990][T28579] vlan2: left promiscuous mode [ 689.274002][T28579] geneve0: left promiscuous mode [ 689.274386][T28585] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 689.274390][T28579] bridge0: port 4(vlan2) entered disabled state [ 689.280159][T28579] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 689.280185][T28579] mac80211_hwsim hwsim41 wlan1: left promiscuous mode [ 689.280367][T28579] bridge0: port 3(wlan1) entered disabled state [ 689.291835][T28579] bridge_slave_1: left allmulticast mode [ 689.291859][T28579] bridge_slave_1: left promiscuous mode [ 689.292052][T28579] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.303779][T28579] bridge_slave_0: left allmulticast mode [ 689.303803][T28579] bridge_slave_0: left promiscuous mode [ 689.303998][T28579] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.425593][T28592] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 689.425593][T28592] Please contact the netfilter-devel mailing list or update your nftables rules. [ 689.544279][T28595] __nla_validate_parse: 140 callbacks suppressed [ 689.544302][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5994'. [ 689.694331][ T52] Bluetooth: hci2: command tx timeout [ 690.222303][ T52] block nbd4: Receive control failed (result -32) [ 690.226376][ T5616] block nbd5: Receive control failed (result -32) [ 690.387623][T10448] veth0: left promiscuous mode [ 690.400966][T10448] team0: left promiscuous mode [ 690.400988][T10448] bond_slave_0: left promiscuous mode [ 690.421655][T10448] hsr_slave_0: left promiscuous mode [ 690.525424][T28622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6002'. [ 690.694726][T28627] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6002'. [ 690.869529][T10448] team0 (unregistering): Port device bond_slave_0 removed [ 690.991784][T10470] smc: removing ib device syz0 [ 691.070959][T10450] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 691.078048][T28615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6001'. [ 691.248890][T10470] smbdirect: ib_dev[syz0] removed [ 691.418069][T28631] netlink: 70 bytes leftover after parsing attributes in process `syz.3.6005'. [ 691.679967][T28647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6009'. [ 691.680447][T28647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6009'. [ 691.810986][T10496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.811009][T10496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.040072][T28320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 692.108072][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.110215][T28320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 692.136128][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.143696][T28320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 692.170894][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.201409][T28320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 692.225413][T28320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.254400][T28664] xt_l2tp: v2 doesn't support IP mode [ 693.031539][T28697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6020'. [ 693.069079][T28699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6019'. [ 693.138230][T28320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.218461][T28320] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.269838][T10473] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.269973][T10473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.355553][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.355659][T10473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.251783][T28737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6029'. [ 695.222103][T28320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.343171][T28320] veth0_vlan: entered promiscuous mode [ 695.378795][T28320] veth1_vlan: entered promiscuous mode [ 695.582063][T28320] veth0_macvtap: entered promiscuous mode [ 695.613186][T28320] veth1_macvtap: entered promiscuous mode [ 695.664889][T28320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.734316][T28320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.898573][T28794] __nla_validate_parse: 1 callbacks suppressed [ 695.898593][T28794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6044'. [ 695.925431][ T791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.925460][ T791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.025792][T10473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.026667][T10473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.026704][T10473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.026734][T10473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.172292][T28806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.248195][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6050'. [ 696.350454][T10473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.350478][T10473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.418797][T10448] IPVS: stop unused estimator thread 0... [ 696.574523][T28820] netlink: 'syz.1.6051': attribute type 23 has an invalid length. [ 696.617769][ T8929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.617791][ T8929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.033142][T28835] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6057'. [ 697.151176][T28843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5937'. [ 697.200498][T28846] netlink: 'syz.1.6058': attribute type 13 has an invalid length. [ 698.068179][T28876] lo speed is unknown, defaulting to 1000 [ 698.068241][T28876] lo speed is unknown, defaulting to 1000 [ 698.089013][T28876] lo speed is unknown, defaulting to 1000 [ 698.142206][T28876] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 698.142249][T28876] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 698.142291][T28876] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 698.199183][T28876] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 698.229657][T28876] lo speed is unknown, defaulting to 1000 [ 698.234628][T28876] lo speed is unknown, defaulting to 1000 [ 698.256632][T28876] lo speed is unknown, defaulting to 1000 [ 698.272484][T28876] lo speed is unknown, defaulting to 1000 [ 698.274325][T28876] lo speed is unknown, defaulting to 1000 [ 698.288453][T28876] lo speed is unknown, defaulting to 1000 [ 698.290264][T28876] lo speed is unknown, defaulting to 1000 [ 698.292049][T28876] lo speed is unknown, defaulting to 1000 [ 698.725883][T28883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.884852][T28887] tc_dump_action: action bad kind [ 698.897964][T28887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6067'. [ 698.898788][T28890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6069'. [ 698.939071][T28890] bridge_slave_0: left allmulticast mode [ 698.939099][T28890] bridge_slave_0: left promiscuous mode [ 698.939310][T28890] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.978103][T28890] bridge_slave_1: left allmulticast mode [ 698.978129][T28890] bridge_slave_1: left promiscuous mode [ 698.978332][T28890] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.011634][T28890] bond0: (slave bond_slave_0): Releasing backup interface [ 699.037649][T28890] bond0: (slave bond_slave_1): Releasing backup interface [ 699.063205][T28890] team0: Port device team_slave_0 removed [ 699.077387][T28890] team0: Port device team_slave_1 removed [ 699.078350][T28890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.078370][T28890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.108882][T28890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.108907][T28890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.131978][T28890] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 699.132052][ T10] lo speed is unknown, defaulting to 1000 [ 699.160584][T28897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6071'. [ 699.196332][T28899] netlink: 'syz.0.6069': attribute type 6 has an invalid length. [ 699.196356][T28899] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6069'. [ 699.573147][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6078'. [ 699.614706][T28920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6079'. [ 699.902583][T10448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.902606][T10448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.513672][T28960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.514029][T28960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.516446][T28960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.553259][T28960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.553946][T28960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.554348][T28960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.554816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.595598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.049006][T28950] __nla_validate_parse: 3 callbacks suppressed [ 701.049026][T28950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6088'. [ 701.315971][ T25] net_ratelimit: 212 callbacks suppressed [ 701.315990][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.357935][T28992] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 701.362686][T28992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6102'. [ 701.956179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.366511][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.629668][T29018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6109'. [ 702.835612][T14463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.893933][T29021] veth0_macvtap: left promiscuous mode [ 703.140359][T29047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 703.395952][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.532623][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6116'. [ 703.672491][T29079] FAULT_INJECTION: forcing a failure. [ 703.672491][T29079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.672526][T29079] CPU: 0 UID: 0 PID: 29079 Comm: syz.0.6117 Not tainted syzkaller #0 PREEMPT(full) [ 703.672549][T29079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 703.672561][T29079] Call Trace: [ 703.672570][T29079] [ 703.672579][T29079] dump_stack_lvl+0xe8/0x150 [ 703.672613][T29079] should_fail_ex+0x410/0x560 [ 703.672639][T29079] _copy_from_user+0x2d/0xb0 [ 703.672674][T29079] __sys_bpf+0x2e7/0xd90 [ 703.672733][T29079] ? __pfx___sys_bpf+0x10/0x10 [ 703.672766][T29079] ? __fget_files+0x2a/0x420 [ 703.672808][T29079] ? ksys_write+0x242/0x270 [ 703.672839][T29079] ? __pfx_ksys_write+0x10/0x10 [ 703.672873][T29079] __x64_sys_bpf+0xba/0xd0 [ 703.672897][T29079] do_syscall_64+0x166/0x520 [ 703.672919][T29079] ? trace_irq_disable+0x3b/0x140 [ 703.672939][T29079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.672960][T29079] ? clear_bhb_loop+0x70/0xc0 [ 703.672984][T29079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.673002][T29079] RIP: 0033:0x7fd481b9e159 [ 703.673021][T29079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.673038][T29079] RSP: 002b:00007fd482a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 703.673059][T29079] RAX: ffffffffffffffda RBX: 00007fd481e25fa0 RCX: 00007fd481b9e159 [ 703.673074][T29079] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 703.673088][T29079] RBP: 00007fd482a36090 R08: 0000000000000000 R09: 0000000000000000 [ 703.673100][T29079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.673112][T29079] R13: 00007fd481e26038 R14: 00007fd481e25fa0 R15: 00007ffec27737f8 [ 703.673142][T29079] [ 704.447175][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.853509][T29024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.476041][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.876195][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.516099][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.481666][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.565943][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.606331][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.758660][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.762439][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.641336][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.037371][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.687811][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.315995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.716740][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.758807][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.075806][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.795763][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.836145][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.875770][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.115532][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.916215][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.957505][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.355835][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 718.356300][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.996181][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.155549][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.035929][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.086168][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.116295][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.197354][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.197469][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.045493][ T4979] udevd[4979]: worker [27275] /devices/virtual/block/nbd1 is taking a long time [ 723.156342][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.207695][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.235406][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.253730][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.396414][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.038033][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.276310][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.316769][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.276825][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.355806][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.396187][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.875490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.438946][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.317150][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.476743][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.436022][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.515836][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.557652][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.596037][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.475780][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.635577][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.636175][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.279516][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.677154][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.716302][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.515576][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.756429][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.798244][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.836208][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.556992][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.876172][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.916351][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.956353][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.597521][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.996516][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.877356][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.036507][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.075883][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.635556][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.116033][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.156827][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.196178][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.675918][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.235815][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.638191][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.278561][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.325754][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.356021][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.675597][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.405951][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.476433][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.436072][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.397578][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.476284][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.715530][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.516121][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.555799][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.597060][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.597991][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.755978][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.645929][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.877002][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.675986][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.716023][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.756110][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.916989][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.797273][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.837287][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.636183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.887144][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.957122][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.926253][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.956067][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.196775][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.835880][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.996177][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.996432][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.035930][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.077791][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.037267][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.115785][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.157150][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.196404][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.075980][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.236258][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.276654][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.316150][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.115691][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.355925][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.437384][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.396393][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.435806][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.157247][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.476313][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.519387][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.556230][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.197194][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.598772][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.637178][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.115377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.676010][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.235585][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.716139][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.035586][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.756034][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.796159][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.275614][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.835951][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.877335][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.915964][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.316393][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.966248][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.005420][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.036145][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.355423][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 798.355453][ C1] openvswitch: cpu_id mismatch with handler threads [ 798.357266][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.077161][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.638617][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.116063][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.155974][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.395593][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.196251][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.246081][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.277942][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.435670][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.316019][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.357799][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.395901][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.477046][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.436403][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.238069][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.476936][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.516121][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.517208][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.556513][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.596423][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.558110][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.636606][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.720458][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.676278][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.715965][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.756592][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.756641][T14465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.795938][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.838710][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.885612][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.797335][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.957521][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.926778][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 820.997186][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.037428][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.835671][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.076293][ T1693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.956402][ T32] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 823.956428][ T32] Not tainted syzkaller #0 ** replaying previous printk message ** [ 823.956428][ T32] Not tainted syzkaller #0 [ 823.956440][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 823.956451][ T32] task:kworker/0:0H state:D stack:25928 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 823.956504][ T32] Workqueue: kblockd blk_mq_run_work_fn [ 823.956570][ T32] Call Trace: [ 823.956579][ T32] [ 823.956593][ T32] __schedule+0x17db/0x58f0 [ 823.956650][ T32] ? __pfx___schedule+0x10/0x10 [ 823.956683][ T32] ? schedule+0x90/0x2b0 [ 823.956708][ T32] schedule+0x164/0x2b0 [ 823.956732][ T32] schedule_timeout+0x152/0x2c0 [ 823.956762][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 823.956789][ T32] ? __pfx_process_timeout+0x10/0x10 [ 823.956827][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 823.956859][ T32] ? prepare_to_wait_event+0x436/0x480 [ 823.956904][ T32] nbd_queue_rq+0x96f/0xff0 [ 823.956945][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 823.956973][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 823.956999][ T32] ? lock_acquire+0x115/0x350 [ 823.957031][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 823.957065][ T32] ? sbitmap_get+0x229/0x390 [ 823.957097][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 823.957122][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 823.957153][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 823.957199][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 823.957259][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 823.957318][ T32] ? lock_acquire+0x115/0x350 [ 823.957344][ T32] ? process_scheduled_works+0x97a/0x1630 [ 823.957376][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 823.957403][ T32] ? blk_mq_run_work_fn+0x144/0x300 [ 823.957429][ T32] blk_mq_run_work_fn+0x16c/0x300 [ 823.957455][ T32] ? process_scheduled_works+0x97a/0x1630 [ 823.957481][ T32] process_scheduled_works+0xc3d/0x1630 [ 823.957539][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 823.957571][ T32] ? assign_work+0x3cf/0x5d0 [ 823.957600][ T32] worker_thread+0xa47/0xfb0 [ 823.957654][ T32] kthread+0x38b/0x480 [ 823.957675][ T32] ? __pfx_worker_thread+0x10/0x10 [ 823.957700][ T32] ? __pfx_kthread+0x10/0x10 [ 823.957721][ T32] ret_from_fork+0x514/0xb70 [ 823.957746][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 823.957774][ T32] ? __switch_to+0xc89/0x1420 [ 823.957802][ T32] ? __pfx_kthread+0x10/0x10 [ 823.958051][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.958915][ T32] ret_from_fork_asm+0x1a/0x30 [ 823.958969][ T32] [ 823.959196][ T32] [ 823.959196][ T32] Showing all locks held in the system: [ 823.959261][ T32] locks held by kworker/0:1/10: 2, last CPU#0: [ 823.959407][ T32] #0: ffff88807a223140 ((wq_completion)wg-crypt-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.959512][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.959580][ T32] locks held by kworker/0:0H/11: 4, on CPU#0: [ 823.959594][ T32] #0: ffff88801fea3d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.959645][ T32] #1: ffffc90000107c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.959697][ T32] #2: ffff8880266a9f18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 823.959752][ T32] #3: ffff888026e451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 823.959802][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 823.959816][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 823.959893][ T32] locks held by getty/5364: 2, on CPU#0: [ 823.959908][ T32] #0: ffff888035c0e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 823.959983][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 823.962034][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.962701][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.965293][ T5345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.969205][T10448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.969654][ T32] locks held by kworker/u8:40/10448: 5, last CPU#0: [ 823.969671][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.969732][ T32] #1: ffffc90003207c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.969783][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 823.969831][ T32] #3: ffffffff8ee388a0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 823.969878][ T32] #4: ffffffff8ebff6a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 823.969934][ T32] locks held by kworker/u8:61/10470: 2, last CPU#0: [ 823.969948][ T32] #0: ffff888054d2b940 ((wq_completion)wg-kex-wg2#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.970004][ T32] #1: ffffc90002df7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.970057][ T32] locks held by kworker/u8:83/10496: 5, last CPU#1: [ 823.970072][ T32] #0: ffff88802ca5d140 ((wq_completion)krds_cp_wq#17/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.970122][ T32] #1: ffffc90003a97c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 823.970173][ T32] #2: ffff888052098c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 823.970226][ T32] #3: ffff888052491d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 823.970393][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30 [ 823.970461][ T32] locks held by udevd/27275: 1, on CPU#0: [ 823.970475][ T32] #0: ffff888026d9b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 823.970539][ T32] [ 823.970545][ T32] ============================================= [ 823.970545][ T32] [ 823.970559][ T32] NMI backtrace for cpu 0 [ 823.970573][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 823.970594][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.970605][ T32] Call Trace: [ 823.970614][ T32] [ 823.970623][ T32] dump_stack_lvl+0xe8/0x150 [ 823.970652][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 823.970713][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 823.970745][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 823.970775][ T32] sys_info+0x135/0x170 [ 823.970799][ T32] watchdog+0xfd7/0x1030 [ 823.970833][ T32] ? watchdog+0x1c7/0x1030 [ 823.970858][ T32] kthread+0x38b/0x480 [ 823.970878][ T32] ? __pfx_watchdog+0x10/0x10 [ 823.970895][ T32] ? __pfx_kthread+0x10/0x10 [ 823.970915][ T32] ret_from_fork+0x514/0xb70 [ 823.970936][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 823.970972][ T32] ? __switch_to+0xc89/0x1420 [ 823.971002][ T32] ? __pfx_kthread+0x10/0x10 [ 823.971021][ T32] ret_from_fork_asm+0x1a/0x30 [ 823.971064][ T32] [ 823.971072][ T32] Sending NMI from CPU 0 to CPUs 1: [ 823.971185][ C1] NMI backtrace for cpu 1 [ 823.971198][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 823.971217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.971227][ C1] RIP: 0010:delay_tsc+0x5d/0xd0 [ 823.971254][ C1] Code: 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 55 bf 01 00 00 00 e8 82 fa b0 f5 65 48 8b 05 fa 08 b1 07 48 85 c0 74 1c f3 90 01 00 00 00 e8 19 f9 b0 f5 e8 f4 7a 01 00 39 c5 75 0e 0f 01 f9 [ 823.971269][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000082 [ 823.971284][ C1] RAX: 8000000000000001 RBX: 0000000000000899 RCX: ffffffff9a9e3501 [ 823.971297][ C1] RDX: 0000000000000101 RSI: ffffffff8c6d9c60 RDI: 00000000ffffffff [ 823.971309][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 823.971320][ C1] R10: dffffc0000000000 R11: ffffffff8be3e6c0 R12: 1ffffffff35a746d [ 823.971333][ C1] R13: 00000000ffffffff R14: 000001aab3d84088 R15: 0000000000000112 [ 823.971345][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 823.971360][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.971373][ C1] CR2: 000055eb18952660 CR3: 000000007e56e000 CR4: 00000000003526f0 [ 823.971389][ C1] Call Trace: [ 823.971396][ C1] [ 823.971404][ C1] wait_for_lsr+0x147/0x2f0 [ 823.971434][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 823.971462][ C1] serial8250_console_write+0xaa1/0x1200 [ 823.971485][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 823.971508][ C1] ? rcu_is_watching+0x16/0xb0 [ 823.971536][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 823.971563][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 823.971588][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 823.971615][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 823.971642][ C1] nbcon_kthread_func+0x679/0x880 [ 823.971663][ C1] ? nbcon_kthread_func+0x163/0x880 [ 823.971681][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 823.971702][ C1] ? __kthread_parkme+0x71/0x1f0 [ 823.971726][ C1] ? __kthread_parkme+0x199/0x1f0 [ 823.971752][ C1] kthread+0x38b/0x480 [ 823.971769][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 823.971795][ C1] ? __pfx_kthread+0x10/0x10 [ 823.971813][ C1] ret_from_fork+0x514/0xb70 [ 823.971830][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 823.971855][ C1] ? __switch_to+0xc89/0x1420 [ 823.971878][ C1] ? __pfx_kthread+0x10/0x10 [ 823.971895][ C1] ret_from_fork_asm+0x1a/0x30 [ 823.971928][ C1] [ 823.972755][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.980809][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 824.952559][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 824.961759][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.971818][ T32] Call Trace: [ 824.975094][ T32] [ 824.978022][ T32] vpanic+0x56d/0xa60 [ 824.982023][ T32] ? __pfx___schedule+0x10/0x10 [ 824.986881][ T32] ? __pfx_vpanic+0x10/0x10 [ 824.991412][ T32] panic+0xc5/0xd0 [ 824.995148][ T32] ? __pfx_panic+0x10/0x10 [ 824.999570][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 825.005020][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 825.010387][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 825.016550][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 825.022705][ T32] watchdog+0x1030/0x1030 [ 825.027040][ T32] ? watchdog+0x1c7/0x1030 [ 825.031471][ T32] kthread+0x38b/0x480 [ 825.035546][ T32] ? __pfx_watchdog+0x10/0x10 [ 825.040212][ T32] ? __pfx_kthread+0x10/0x10 [ 825.044790][ T32] ret_from_fork+0x514/0xb70 [ 825.049374][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 825.054492][ T32] ? __switch_to+0xc89/0x1420 [ 825.059180][ T32] ? __pfx_kthread+0x10/0x10 [ 825.063787][ T32] ret_from_fork_asm+0x1a/0x30 [ 825.068576][ T32] [ 825.071849][ T32] Kernel Offset: disabled [ 825.076167][ T32] Rebooting in 86400 seconds..