last executing test programs: 6.123169585s ago: executing program 1 (id=3686): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8040, 0x80, 0x5dead9b0, 0x9, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x95, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010101, {[@timestamp={0x44, 0x28, 0x4b, 0x0, 0x2, [0x1, 0x8000, 0x4, 0x6, 0x1, 0x3, 0x800, 0x2, 0x80000001]}, @ra={0x94, 0x4, 0x1}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0xc}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x21, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', r0, 0x0, 0x1, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="110000f4c5de2ee4cee95ee05f891f60344d831e775d70dcce4ab9499e", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff85000000010000005500010000000000950000000000000061011200000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.196596309s ago: executing program 0 (id=3710): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@delchain={0x44, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2f}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x104, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_ife={0xec, 0x1b, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x104}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x5, 0x9, 0x3, 0x1f86f77d}, 0x10, 0xeae3, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001980)=[{0x3, 0x2, 0x8, 0x9}], 0x10, 0x16}, 0x94) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) 3.22661856s ago: executing program 0 (id=3717): bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1d, 0x9, &(0x7f0000000240)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40d}}, @exit], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (fail_nth: 25) 3.107094534s ago: executing program 4 (id=3718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008040500000000002c000480080001000000000120000a800c000100706f6c696379300008000200000000020800", 0x62}], 0x1}, 0x4080) 2.935207459s ago: executing program 4 (id=3719): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x23, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x427b, 0x0}, 0x8) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @empty}, 0xc) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) (async) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) accept(r2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0xfffffff6, 0x10}, 0xc) 2.81737996s ago: executing program 0 (id=3720): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340), 0x12) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r3 = socket(0x40000000015, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x2000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x2000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70b525, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44895) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x3ad1, 0x200, 0x0, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x3ad1, 0x200, 0x0, 0x6}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, 0x0, 0x0) (async) bind$packet(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x27, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x4, 0x1, 0x9, 0x2, 0xb, 0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8c65}, @exit, @call={0x85, 0x0, 0x0, 0x97}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x27, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x4, 0x1, 0x9, 0x2, 0xb, 0x18, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8c65}, @exit, @call={0x85, 0x0, 0x0, 0x97}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000200)="e02742e86c0d85ff9783763a0a00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001", @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES32], 0x94}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020040090900010073797a300000000014000000020a0500000000000000000000000005140000001100010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r8, 0x45d5a24f61177641, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x2, 0x5d, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r8, 0x45d5a24f61177641, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x2, 0x5d, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2.788250767s ago: executing program 1 (id=3721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) accept(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 2.59763778s ago: executing program 1 (id=3723): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0x4, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x3000) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x3, @multicast, 'macvtap0\x00'}}, 0x1e) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000080)={0x1}) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000280)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x5, 0x400, 0x7fff, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000000240)=0x9c) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x2, 0xf6, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x13) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, 0x0, &(0x7f0000000040)=0x3c) 2.376498012s ago: executing program 3 (id=3726): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'\x00', 0xfff7}) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000200)={{[0x40000, 0x1, 0x8]}, 0x0, 0x3, 0x8, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x8, 0x9]}, {0x800, 0x1ff, 0x8, 0x9}}, 0xffff, 0x0, '\x00'}, {{@align=0x5, {0x400, 0x2, 0x3, 0x3ff}}, 0x5, 0x0, '\x00'}, {{@align=0x6, {0x4e8, 0x7, 0x1, 0x3c76}}, 0x80000000, 0x0, '[\x00'}, {{@_ha_fsid={[0xfda4]}, {0x1, 0x3, 0xe, 0x12}}, 0x9, 0x0, '.-]\x00'}, {{@_ha_fsid={[0x0, 0x8]}, {0x4f3, 0x2, 0x247, 0x8000000000000001}}, 0x8, 0x0, '\x00'}, {{@align=0x7d8, {0x7fff, 0x81, 0xe, 0x8}}, 0x1, 0x0, '-$#\x00'}, {{@_ha_fsid={[0x8, 0xfffffd88]}, {0x1, 0x4, 0x80, 0x2}}, 0x800, 0x0, ':\\\x00'}, {{@_ha_fsid={[0x12, 0x2]}, {0xe, 0x1, 0x10000, 0xf210}}, 0x1, 0x0, '\x00'}, {{@align=0x7, {0xff80, 0xc4f5, 0x5, 0x9}}, 0xfffffffb, 0x0, '${.^\x00'}, {{@_ha_fsid={[0x6]}, {0x1ff, 0x4059, 0xffffffff, 0x6}}, 0xe, 0x0, ']\x00'}]}) syz_emit_ethernet(0x461, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @empty, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "1f186c", 0x42b, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x8, 0x10, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x800}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x2, [0x9, 0x0, 0x7, 0xb, 0x7fffffff, 0x4]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @routing={0x2f, 0x4, 0x2, 0xe, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @remote}]}, @routing={0x33, 0x8, 0x0, 0xb, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}, @routing={0x0, 0x2, 0x2, 0xf2, 0x0, [@mcast1]}, @routing={0x62ec79ca72227f97, 0x6, 0x2, 0xc, 0x0, [@local, @local, @private1]}, @srh={0x2f, 0x4, 0x4, 0x2, 0x4, 0x8, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x3a, 0x8, 0x4, 0x4, 0xd, 0x10, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, @local]}, @hopopts={0x16, 0x9, '\x00', [@generic={0x4, 0xb, "be22f16170e5e19017b58f"}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}, @padn, @pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0xb3, 0xff00, [0x8a8]}}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}, @hopopts={0x4, 0x20, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xffb2}, @generic={0xff, 0xf6, "56915806cc5cca6c2389b87bc20f791f5edbdbe2e9787d74119ba25470f96363bef5b828cdbca2ecc7308272153a72b4d03c1f59b78a57e7a1b070c9207097224fefbf2fff8e303f0a38f6ebf739cbf853303b7e31e6ad0c73601395549f1e4c7c0ce7f0892c3fc7026b32af2f933feac13de300ae806c479eab30ad1d5b7a37636f6e802883a2314585cbc5243c02f5b38486a9535ba74638a9c8b022d502f7e1576c3db9c59acc161fb0b7af0adf31869ceb46132928ea38316c4725d67ba790c8a17ee742e476bd05854a21ca36cbd02ada3ffbde319475ddb8e05cd2bee119626ebc792ee58c4958864f5f1a7080e11b9aae0ce7"}, @jumbo={0xc2, 0x4, 0x1}]}, @srh={0x2f, 0xe, 0x4, 0x7, 0x5, 0x28, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @loopback]}], {0x4e22, 0x4e20, 0x8b, 0x0, @wg=@data={0x4, 0x6, 0x8, "fe70aec0fd847bd49e63fc43da5959a07f921468488ac29e3f0c6d0c6d0ef624fe2f6984e3e7043b5b160ce2737b92488cb0f1155e8ce52b75b008bf00788e1eecd3ab591a0dbef23b1ac15fd52e51bdaa8b511d015c997dd4bc1a38a3dad91ab17b7dd4a79eb7ca275af64da70b72e90a517a"}}}}}}}, &(0x7f00000006c0)={0x0, 0x3, [0xbec, 0x438, 0xdae, 0xee5]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x68855}, 0x20040010) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x68855}, 0x20040010) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000980)={r1, &(0x7f0000000880)='\x00', 0xa0000, &(0x7f00000008c0)={@_ha_fsid={[0x800, 0xfffffffc]}, {0x1, 0x8, 0xffff, 0x4}}, 0x0, &(0x7f0000000900)={@_ha_fsid}, &(0x7f0000000940)=0x4}) connect$llc(r4, &(0x7f00000009c0)={0x1a, 0x10f, 0xa0, 0x2, 0x7, 0xad, @random="78c78d3ba38e"}, 0x10) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000a00)={0x2, 0x3}, 0x4) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000a00)={0x2, 0x3}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000a40)=0x1ff, 0x4) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000a40)=0x1ff, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000a80)={'tunl0\x00', {0x2, 0x0, @local}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000b00)={0x0, @sco={0x1f, @none}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, @llc={0x1a, 0x313, 0x2, 0x2, 0x0, 0x7, @multicast}, 0x1, 0x0, 0x0, 0x0, 0x3d, &(0x7f0000000ac0)='pim6reg1\x00', 0x4, 0xfffffffffffff21d, 0x8}) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={r4, 0x58, &(0x7f0000000e00)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={r4, 0x58, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r4, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1d, 0x1, &(0x7f0000000d00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000d40)='syzkaller\x00', 0x8, 0x5f, &(0x7f0000000d80)=""/95, 0x40f00, 0x5, '\x00', r6, @fallback=0x12, r4, 0x8, &(0x7f0000000ec0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0x9, 0x10000, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000001000)=[r4, r7], &(0x7f0000001040)=[{0x0, 0x5, 0xc}, {0x4, 0x2, 0xd, 0x7}, {0x5, 0x1, 0x6, 0x9}, {0x2, 0x3, 0x4}, {0x0, 0x5, 0xb, 0x7}, {0x3, 0x3, 0x2, 0xf}, {0x2, 0x5, 0x10, 0x5}, {0x4, 0x5, 0xe, 0x9490cebc819bdd08}, {0x2, 0x5, 0x10, 0x9}], 0x10, 0x9}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1d, 0x1, &(0x7f0000000d00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000d40)='syzkaller\x00', 0x8, 0x5f, &(0x7f0000000d80)=""/95, 0x40f00, 0x5, '\x00', r6, @fallback=0x12, r4, 0x8, &(0x7f0000000ec0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0x9, 0x10000, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000001000)=[r4, r7], &(0x7f0000001040)=[{0x0, 0x5, 0xc}, {0x4, 0x2, 0xd, 0x7}, {0x5, 0x1, 0x6, 0x9}, {0x2, 0x3, 0x4}, {0x0, 0x5, 0xb, 0x7}, {0x3, 0x3, 0x2, 0xf}, {0x2, 0x5, 0x10, 0x5}, {0x4, 0x5, 0xe, 0x9490cebc819bdd08}, {0x2, 0x5, 0x10, 0x9}], 0x10, 0x9}, 0x94) r9 = accept4(r4, 0x0, &(0x7f00000011c0), 0x80800) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001200)={0x0, 0x1}, &(0x7f0000001240)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001200)={0x0, 0x1}, &(0x7f0000001240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000001280)={r10, 0xf}, &(0x7f00000012c0)=0x8) ioctl$OCFS2_IOC_REFLINK(r7, 0x40186f04, &(0x7f0000001380)={&(0x7f0000001300)='\xd5\x00', &(0x7f0000001340)='\xbb\xbb\xbb\xbb\xbb\xbb', 0xc7}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0xba4a, 0x0, r4, 0x40000000, '\x00', r6, 0xffffffffffffffff, 0x4}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001480)=@o_path={&(0x7f00000013c0)='./file0\x00', r11, 0x4000, r8}, 0x18) close(r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000019c0)={0x0, 0x7, 0x1, [0x1fd5, 0x8, 0x0, 0x2, 0x401], [0x800, 0xffffffffffffff01, 0x5, 0x4, 0x3dcb87d0, 0x7, 0xf2ab, 0x70b903fe, 0x101, 0x8, 0x4, 0xfff, 0x4, 0x0, 0x2, 0x8, 0x10000, 0xfffffffffffffff9, 0x7fff, 0x3, 0xffff, 0x80000001, 0x9f5, 0x4, 0x1, 0x4, 0x3ff, 0x101, 0xd, 0x3, 0xa, 0x2522, 0x6a9, 0x401, 0x0, 0xe, 0x7, 0xb, 0x8000000, 0x8, 0x3, 0x6, 0x9, 0x2, 0x8000000000000001, 0x9, 0x6, 0xffffffffffffffff, 0x7, 0x200, 0xc, 0x3, 0x7, 0x1, 0x5, 0xc, 0x1, 0x0, 0x6, 0x1000, 0xa4, 0xff, 0x7fffffff, 0x1, 0x8, 0x8, 0x8001, 0x628d, 0x56d9, 0xfffffffffffffff7, 0x1, 0x80000000, 0x9, 0x80000001, 0x1000, 0x0, 0x9, 0x401, 0x2, 0x40, 0xcd, 0xc1d6, 0x5, 0x72f5, 0xae67, 0x1, 0x1, 0x7, 0x101, 0x0, 0xe961, 0xe00000000000000, 0x4, 0x3, 0x58, 0x0, 0x5, 0x6, 0xb, 0xfffffffffffffffd, 0x4, 0x31, 0x6b, 0x9, 0x6, 0x9, 0x7, 0x5, 0x7, 0x0, 0x6, 0x2, 0x692f, 0x0, 0x8000000000000001, 0x1000, 0x2, 0x0, 0x5, 0x7c2ae465, 0xc]}) 2.375921809s ago: executing program 2 (id=3727): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000f5000000000000318ba839ffafa823f400"/29, @ANYRESOCT=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x55dd87b2ee4297be, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="a4497185fcbffb0f6680b24896b60764a161aea7d400084ac785e68241b5f46132d1e5ed6939ec4aa17e72bcdf850e1edf42fed1a89ead83b087bbdd80a74fe04ffdae5ad18935f523754e5498627b1df5fb4a116ebb189c1d6d", @ANYRES32=0x0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000fe7f850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r5) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close(0x3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="4eb2f60006ce5015972be513c00bb8e4cf2a5afc528dadc253ce25df57d77ebfde174e1c729c55bca35504c3e4629a25ae8fc69ff4fbdaf9987198041b38be0bfc19433c863bfa0dca225c769c36d342c81c3e968ed31157964d421138460a0cc34df356ddf90674eaa07719c7cd30c332f628ebe262c419b9281c162740ee", @ANYRES16=r6, @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r9, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x4010, 0xffffffffffffffff, 0x0) readv(r10, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/55, 0x37}, {&(0x7f00000003c0)=""/32, 0x20}], 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000002e00), 0x8000, 0x0) sendmsg$netlink(r9, &(0x7f0000002f00)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d80)=[{&(0x7f0000001300)=ANY=[], 0x1324}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x100}, {&(0x7f0000000740)=ANY=[], 0xfc}], 0x3, 0x0, 0xa0, 0x24008044}, 0x40004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) 2.189092543s ago: executing program 3 (id=3728): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x4000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(r13, 0x80111500, 0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xd}) sendmmsg$inet6(r14, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) shutdown(r14, 0x1) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="000000000500"/28, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r13, @ANYBLOB="00000000060000bba3846c00"/28, @ANYRES32=r11, @ANYBLOB="00000000ff0700"/28, @ANYRES32=r14, @ANYBLOB="00000000ffff00"/28, @ANYRES32=r7, @ANYBLOB="00000000ff7f00"/28]) 2.129944783s ago: executing program 2 (id=3729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008040500000000002c000480080001000000000120000a800c000100706f6c696379300008000200000000020800030000", 0x65}], 0x1}, 0x4080) 2.02952763s ago: executing program 2 (id=3730): bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1d, 0x9, &(0x7f0000000240)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40d}}, @exit], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (fail_nth: 26) 1.83313496s ago: executing program 4 (id=3731): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', r5, 0x7800, 0x7800, 0x4, 0x2, {{0xb, 0x4, 0x1, 0x27, 0x2c, 0x66, 0x0, 0x4e, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0x57, [@dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101, @loopback]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0xfffffe4b, 0x2, [@m_ife={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x10000000, 0x7, 0xffeffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4c800) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x13}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x34}}, 0x4800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048011}, 0x14) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) 1.708563497s ago: executing program 2 (id=3732): r0 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'fo\x00', 0x8, 0x3, 0x6f}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x0, 0x77}, {@remote, 0x4e20, 0x1, 0x6, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x86b87}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket(0x2, 0x80002, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'fo\x00', 0x8, 0x3, 0x6f}, 0x2c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x0, 0x77}, {@remote, 0x4e20, 0x1, 0x6, 0x1}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x86b87}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) 1.600931912s ago: executing program 0 (id=3733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 1.581886163s ago: executing program 3 (id=3734): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000079104100000000001ea00000000000009500000000000000293c44bcddd9065f2ca7b83d28b4cf5b356078fed09566384e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcf, &(0x7f0000000140)=""/207, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.3572158s ago: executing program 3 (id=3735): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async, rerun: 32) unshare(0x2c060000) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 1.356816516s ago: executing program 2 (id=3736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x40000010) bind$packet(r2, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x28000095}, 0x24000800) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x8000080, @loopback, 0x9}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc048) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r7, 0x0, 0xffffffff004) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) write(r2, &(0x7f0000000000)="01", 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008060000", @ANYRES64=r8], 0xfdef) 1.355899114s ago: executing program 0 (id=3737): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd43}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r3, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f4", 0x13, 0x40, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000200)) accept$inet(r5, &(0x7f0000000000), 0x0) 1.238972288s ago: executing program 4 (id=3738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x7, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x7, 0x27, [@local]}]}}, "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"}}, 0xfce) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1d, 0x9, &(0x7f0000000240)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40d}}, @exit], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 849.052452ms ago: executing program 1 (id=3739): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040810}, 0x400488c0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000100)={{0x32, @remote, 0x4e21, 0x3, 'fo\x00', 0x1, 0x0, 0xc}, {@multicast2, 0x4e23, 0x0, 0xfff, 0xc1f, 0x9}}, 0x44) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040810}, 0x400488c0) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000100)={{0x32, @remote, 0x4e21, 0x3, 'fo\x00', 0x1, 0x0, 0xc}, {@multicast2, 0x4e23, 0x0, 0xfff, 0xc1f, 0x9}}, 0x44) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) (async) 545.248606ms ago: executing program 1 (id=3740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008040500000000002c000480080001000000000120000a800c000100706f6c696379300008000200000000020800030000", 0x65}], 0x1}, 0x4080) 427.124886ms ago: executing program 1 (id=3741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d80)={&(0x7f0000001bc0)={0x1180, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x48, 0x3, "6b2f07e019d88b30b33e4b9cdb7722f143662e619ef3021df5d5a60bacd095a485a2df5e1273304f342bcdcde18aa1ff2e6d9aaf26c8d62fa1e69c428931e5d00f4af2aa"}, @TIPC_NLA_NODE_ID={0x20, 0x3, "cbe4df20aab67a1eae46a5eaaf0ee4199a49c5dd22cf3c48d8257f9c"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "ba40d2302017feded7134226ddabeaf5d5b0d48e2d551f9e8e3d445ce77b13d1bdf8cce14d438f649f7268d3a6a986cb3bb3b1ccb0a833ab17f6ca4a69b9844112012b6cef1027f5ab58c63e7de5772263e3b1aa609b2093cbb9dc0f016e9ffbb3060000000331af43c8d7e4e47243defc72fe1ca9c1966af352c8aadf71bcf985d6e7d537cf4cf2c6eff29b3a16ce7b7bd1d0ce9ff2f3dff5cdee90fd6e0fc78ffa872b3a28fe0407b69ed6abdc15d5d91b6e0da363ff3000000000b28ac9de3ca27efacb41a5a90f496e6b9b2710250d77b6d5acb1751210a7fcb21dd712b776c2286c60f20e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}]}, 0x1180}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r7 = socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0xc, 0x3}, {0x4, 0x3}]}]}}, &(0x7f00000011c0)=""/62, 0x4e, 0x3e, 0x1, 0x8}, 0x28) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x2, 0x7}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000014c0)='\x00g', 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000047850010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380500000800c00018006000100d103000014000000020a0102000000000000000000000002140000001100010000000000000000000100000a"], 0xc0}, 0x1, 0x0, 0x0, 0x4851}, 0x40) 329.504488ms ago: executing program 3 (id=3742): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0xe15, 0x0, 0xfffffff6}}}}}}, 0x0) 177.466061ms ago: executing program 3 (id=3743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3989e9ef", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900ac1414aa06001a004e23000008001900e000000108001800ac1414bb060003000700000006001d"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x30008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972975f77696669000800"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@private=0xa010101}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x100, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000001c0)={0x0, "d4b1359c52c14377d2d02192f9d20c14"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000011c0)={0x0, "dcd55de3e228ab1cefaced28c309ecc8"}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32], 0x38}}, 0x40080) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000021c0)={0x0, 0x3, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000025c0)={0x1, 0x2, {0x4, @struct={0x1, 0x6}, r4, 0x6, 0xe, 0xffff, 0x53f7, 0x1, 0x412, @usage=0xffffffffffffffff, 0x7fffffff, 0xffffffff, [0x1d2a, 0x3, 0x928a, 0x8000000000000000, 0x6, 0x5]}, {0x6, @usage=0x100000000, r5, 0xffffffffffffffff, 0x9, 0x8, 0x3, 0xfff, 0x22, @usage=0x1ff, 0xff, 0x1054, [0x6, 0x0, 0xfffffffffffffff8, 0xba, 0x22, 0xffffffff]}, {0x0, @struct={0x1, 0x5}, r7, 0xfffffffffffffffc, 0xa, 0x2, 0x7fffffffffffffff, 0x4, 0x13, @usage=0x9, 0x4, 0x4, [0x7, 0x5, 0x100000000, 0x5, 0xffffffffffffffff, 0x400]}, {0xb0, 0xd25}}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f00000029c0)={r5, "b218ace9b5bbf2d0cdd7d11d985b782d"}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r9, 0x8914, &(0x7f0000000080)='veth0:') setsockopt$ALG_SET_KEY(r2, 0x117, 0x20000, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb080045000043fffe0000002f9078ac1e0001e0000001000086dd002f90782104000196e3c7f96837a34000eec6bb218b4fe44f0847df6a3b5c5274fcaff1c7a195f93c7c"], 0x55) 130.502292ms ago: executing program 4 (id=3744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000018000104000000000000000002180000fe03000100000000080001000a01010008000400010000002c00150005000000240016002000010001000000000204"], 0x58}}, 0x0) 120.355294ms ago: executing program 0 (id=3745): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.633615ms ago: executing program 4 (id=3746): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0000000500"}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000081800000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r3}, 0x54) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faf7ffff00000000000000008500000007000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x203, 0x70bd28, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x100, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) (async) close(0x3) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r9, 0x891a, &(0x7f0000003300)) (async) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f0000000480)={'security\x00', 0x0, [0x3a, 0x2, 0x1, 0x2]}, &(0x7f0000000600)=0x54) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000040)={@local, @remote, @void, {@generic={0x88f5}}}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x84, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe985}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x44010) 0s ago: executing program 2 (id=3747): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0xb06, 0x0, 0x3, 0x9, 0x0, 0x4}, 0x20) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000240)="7f9a", 0x2}, {0x0}, {0x0}], 0x3, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000003c0)="14a1bb", 0x3}], 0x1}}], 0x2, 0x4044080) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) listen(0xffffffffffffffff, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, 0x0, 0x200840c4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000002060500000000000000000000000047a147273394a7142b98bb00"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000380)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="20082dbd7000fddbdf250300000008000700", @ANYRES32=r9, @ANYBLOB="e50b6cff1fecd32741f54f721c110b8816af0b4677decb1f93213dbfa045e5c6cf1ccd299e933581b90480481b7aeb2a68a7b633e1a590ded7a8e247c612cdbe197e666ffa1823077b8aa8d8f10fcf174e11ee4a617cf3291d"], 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3895f7d8cf14d9ec29bd7000fcd9df25080001000000000008004b001300000008004b001300000008004a000100000008004b0013000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x40440c1) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): e_1 [ 413.724261][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.724286][T17840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.959674][T17840] hsr_slave_0: entered promiscuous mode [ 413.964245][T17840] hsr_slave_1: entered promiscuous mode [ 413.967373][T17840] debugfs: 'hsr0' already exists in 'hsr' [ 413.967395][T17840] Cannot create hsr debugfs directory [ 414.124444][T17986] unsupported nlmsg_type 40 [ 414.563943][T18004] netlink: 'syz.3.2984': attribute type 4 has an invalid length. [ 415.150444][ T52] Bluetooth: hci2: command tx timeout [ 415.259336][T17840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.259372][T17840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.259397][T17840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.259421][T17840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 415.453874][T17840] team0: Port device netdevsim1 removed [ 415.482104][T17840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.482139][T17840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.482163][T17840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.482185][T17840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 415.580174][T18036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.743748][T17840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.743785][T17840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.743809][T17840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 415.743832][T17840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 415.824181][T18046] __nla_validate_parse: 9 callbacks suppressed [ 415.824211][T18046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2990'. [ 415.859406][T18030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2988'. [ 415.862962][T18048] x_tables: duplicate underflow at hook 2 [ 415.915894][T18046] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.2990'. [ 415.915920][T18046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2990'. [ 415.915936][T18046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2990'. [ 416.188415][T18061] syzkaller1: entered promiscuous mode [ 416.188434][T18061] syzkaller1: entered allmulticast mode [ 416.262503][T18061] wg2 speed is unknown, defaulting to 1000 [ 416.311607][T17840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 416.315488][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.316355][T17840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 416.330529][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.448106][T17840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.476943][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.477773][T17840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 416.496717][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.595517][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2995'. [ 416.650504][ T9930] net_ratelimit: 31 callbacks suppressed [ 416.650524][ T9930] bond4: (slave bridge4): failed to get link speed/duplex [ 416.690557][T14277] bond0: (slave gretap1): failed to get link speed/duplex [ 416.728757][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'. [ 416.761120][ T9930] bond4: (slave bridge4): failed to get link speed/duplex [ 416.821096][T14277] bond0: (slave gretap1): failed to get link speed/duplex [ 416.911230][ T9932] bond4: (slave bridge4): failed to get link speed/duplex [ 416.943580][T17840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.969967][ T9930] bond0: (slave gretap1): failed to get link speed/duplex [ 417.022699][T17840] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.106963][T18093] xt_nfacct: accounting object `' does not exist [ 417.230150][ T52] Bluetooth: hci2: command tx timeout [ 417.307799][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.307910][ T9932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.313552][ T9932] bond4: (slave bridge4): failed to get link speed/duplex [ 417.448947][T18106] netlink: 'syz.4.3003': attribute type 21 has an invalid length. [ 417.627704][T18101] tipc: Resetting bearer [ 417.789340][T18101] batman_adv: batadv0: Interface deactivated: gretap1 [ 417.848359][T18119] veth3: entered allmulticast mode [ 417.851450][T14277] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.851547][T14277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.926240][T14279] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.926274][T14279] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.021955][T14273] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.041981][T14273] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.046385][T14273] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.046418][T14273] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.046450][T14273] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.046475][T14273] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.060019][T14273] bond4: (slave bridge4): failed to get link speed/duplex [ 418.068480][T14273] bond0: (slave gretap1): failed to get link speed/duplex [ 418.169931][T14279] bond0: (slave gretap1): failed to get link speed/duplex [ 418.178545][T18132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3009'. [ 418.207899][T18132] ip6tnl3: entered allmulticast mode [ 418.399560][T18145] netlink: 'syz.4.3013': attribute type 3 has an invalid length. [ 418.399581][T18145] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 418.399594][T18145] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3013'. [ 418.399609][T18145] NCSI netlink: No device for ifindex 4294967295 [ 418.762498][T18162] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3018'. [ 418.762549][T18162] NCSI netlink: No device for ifindex 0 [ 418.968756][T17840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.019480][T17840] veth0_vlan: entered promiscuous mode [ 419.033810][T17840] veth1_vlan: entered promiscuous mode [ 419.061390][T17840] veth0_macvtap: entered promiscuous mode [ 419.064782][T17840] veth1_macvtap: entered promiscuous mode [ 419.090556][T17840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.096983][T17840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.231338][ T1050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.231448][ T1050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.232507][T14277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.232525][T14277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.270484][T14277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.270836][T14277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.270906][T14277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.270919][T14277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.320512][ T52] Bluetooth: hci2: command tx timeout [ 419.356254][T18186] nbd: nbd1 already in use [ 419.490668][T18188] pimreg: entered allmulticast mode [ 419.546611][T18189] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 420.246754][T18206] bond18: entered promiscuous mode [ 420.462521][T18219] xfrm0: entered allmulticast mode [ 420.680910][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.690353][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.692456][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.716325][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.717018][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.925330][ T9932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.925354][ T9932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.024355][ T9932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.024386][ T9932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.098105][ T9932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.098144][ T9932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.163074][ T9932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.163111][ T9932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.212145][T18200] wg2 speed is unknown, defaulting to 1000 [ 421.407716][ T9932] vlan2: left allmulticast mode [ 421.407740][ T9932] geneve0: left allmulticast mode [ 421.411568][ T9932] bridge0: port 1(vlan2) entered disabled state [ 421.876291][ T9932] bond1 (unregistering): (slave gretap1): Releasing active interface [ 421.946149][ T9932] bond5 (unregistering): (slave geneve2): Releasing backup interface [ 421.962033][ T9932] batman_adv: batadv0: Interface deactivated: macvlan2 [ 421.966176][ T9932] batman_adv: batadv0: Removing interface: macvlan2 [ 422.018073][ T9932] team0: Port device bridge3 removed [ 422.063623][ T9932] bond0 (unregistering): Released all slaves [ 422.067540][ T9932] bond1 (unregistering): Released all slaves [ 422.085880][ T9932] bond2 (unregistering): (slave veth3): Releasing active interface [ 422.089320][ T9932] bond2 (unregistering): Released all slaves [ 422.117513][ T9932] bond3 (unregistering): (slave veth5): Releasing active interface [ 422.118874][ T9932] bond3 (unregistering): Released all slaves [ 422.132319][ T9932] bond4 (unregistering): Released all slaves [ 422.145946][ T9932] bond5 (unregistering): Released all slaves [ 422.160691][ T9932] bond6 (unregistering): (slave veth9): Releasing active interface [ 422.162102][ T9932] bond6 (unregistering): Released all slaves [ 422.169253][ T9932] bond7 (unregistering): Released all slaves [ 422.206029][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.272315][ T1050] net_ratelimit: 44 callbacks suppressed [ 422.272337][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 422.272373][ T1050] bond0: (slave gretap1): failed to get link speed/duplex [ 422.286613][ T9932] : left promiscuous mode [ 422.381655][ T9930] bond0: (slave gretap1): failed to get link speed/duplex [ 422.381706][ T9930] bond4: (slave bridge4): failed to get link speed/duplex [ 422.433569][ T9932] tipc: Left network mode [ 422.493224][ T9932] IPVS: stopping master sync thread 13546 ... [ 422.507556][ T9932] IPVS: stopping backup sync thread 15566 ... [ 422.774323][T18200] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.777207][T18200] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.777352][T18200] bridge_slave_0: entered allmulticast mode [ 422.779184][T18200] bridge_slave_0: entered promiscuous mode [ 422.785566][T18200] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.785736][T18200] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.785861][T18200] bridge_slave_1: entered allmulticast mode [ 422.791757][T18200] bridge_slave_1: entered promiscuous mode [ 422.836849][ T52] Bluetooth: hci0: command tx timeout [ 422.873043][T18200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.876416][T18200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.931083][T18200] team0: Port device team_slave_0 added [ 422.934780][T18200] team0: Port device team_slave_1 added [ 423.003245][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 423.003894][T18200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.003907][T18200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.003928][T18200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.005542][T18200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.005663][T18200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.005689][T18200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.137106][T18200] hsr_slave_0: entered promiscuous mode [ 423.138097][T18200] hsr_slave_1: entered promiscuous mode [ 423.138773][T18200] debugfs: 'hsr0' already exists in 'hsr' [ 423.138792][T18200] Cannot create hsr debugfs directory [ 423.300267][T14279] bond0: (slave gretap1): failed to get link speed/duplex [ 423.300308][T14279] bond4: (slave bridge4): failed to get link speed/duplex [ 423.431410][T14279] bond4: (slave bridge4): failed to get link speed/duplex [ 423.431456][T14279] bond0: (slave gretap1): failed to get link speed/duplex [ 423.592387][ T9932] : left promiscuous mode [ 423.618615][ T9932] team0: left promiscuous mode [ 423.618638][ T9932] bond_slave_0: left promiscuous mode [ 423.638875][ T9932] hsr_slave_0: left promiscuous mode [ 423.656109][ T9932] veth1_vlan: left promiscuous mode [ 423.656204][ T9932] veth0_vlan: left promiscuous mode [ 423.908275][ T9932] team0 (unregistering): Port device bond_slave_0 removed [ 423.978284][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 424.186740][T14273] bond4: (slave bridge4): failed to get link speed/duplex [ 424.186784][T14273] bond0: (slave gretap1): failed to get link speed/duplex [ 424.308611][ T9932] IPVS: stop unused estimator thread 0... [ 424.462921][T18200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.468443][T18200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.469295][T18200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.494536][T18200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.495642][T18200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.519161][T18200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.530828][T18200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.534908][T18200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.647458][T18200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.668579][T18200] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.684721][T14273] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.684806][T14273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.712627][ T9930] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.712729][ T9930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.911595][ T52] Bluetooth: hci0: command tx timeout [ 425.231180][T18200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.528746][T18200] veth0_vlan: entered promiscuous mode [ 425.547027][T18200] veth1_vlan: entered promiscuous mode [ 425.582926][T18200] veth0_macvtap: entered promiscuous mode [ 425.588853][T18200] veth1_macvtap: entered promiscuous mode [ 425.615792][T18200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.631480][T18200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.702572][T14277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.703318][T14277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.703350][T14277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.703376][T14277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.781393][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.781414][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.832519][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.832539][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.990394][ T52] Bluetooth: hci0: command tx timeout [ 427.310601][T14273] net_ratelimit: 51 callbacks suppressed [ 427.310624][T14273] bond0: (slave gretap1): failed to get link speed/duplex [ 427.369954][T14279] bond4: (slave bridge4): failed to get link speed/duplex [ 427.420003][T14279] bond0: (slave gretap1): failed to get link speed/duplex [ 427.480020][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 427.529894][T14273] bond0: (slave gretap1): failed to get link speed/duplex [ 427.590029][ T9932] bond4: (slave bridge4): failed to get link speed/duplex [ 427.639919][T14273] bond0: (slave gretap1): failed to get link speed/duplex [ 427.699919][T14273] bond4: (slave bridge4): failed to get link speed/duplex [ 427.759976][T14273] bond0: (slave gretap1): failed to get link speed/duplex [ 427.809845][T14273] bond4: (slave bridge4): failed to get link speed/duplex [ 429.070733][ T52] Bluetooth: hci0: command tx timeout [ 432.355739][ T1050] net_ratelimit: 80 callbacks suppressed [ 432.355763][ T1050] bond0: (slave gretap1): failed to get link speed/duplex [ 432.420357][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 432.469960][ T1050] bond0: (slave gretap1): failed to get link speed/duplex [ 432.540091][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 432.579988][T14279] bond0: (slave gretap1): failed to get link speed/duplex [ 432.659907][T14277] bond4: (slave bridge4): failed to get link speed/duplex [ 432.689876][T14279] bond0: (slave gretap1): failed to get link speed/duplex [ 432.769899][T14279] bond4: (slave bridge4): failed to get link speed/duplex [ 432.800159][T14277] bond0: (slave gretap1): failed to get link speed/duplex [ 432.880024][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 437.370057][ T9930] net_ratelimit: 80 callbacks suppressed [ 437.370080][ T9930] bond0: (slave gretap1): failed to get link speed/duplex [ 437.419950][T14273] bond4: (slave bridge4): failed to get link speed/duplex [ 437.479986][ T9930] bond0: (slave gretap1): failed to get link speed/duplex [ 437.529896][T14273] bond4: (slave bridge4): failed to get link speed/duplex [ 437.589934][ T1050] bond0: (slave gretap1): failed to get link speed/duplex [ 437.639985][ T9930] bond4: (slave bridge4): failed to get link speed/duplex [ 437.699994][ T9930] bond0: (slave gretap1): failed to get link speed/duplex [ 437.749887][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 437.809922][T14273] bond0: (slave gretap1): failed to get link speed/duplex [ 437.859960][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 439.049919][T18354] __nla_validate_parse: 2 callbacks suppressed [ 439.049938][T18354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'. [ 439.104789][T18362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3038'. [ 439.123073][T18362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3038'. [ 439.141890][T18360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3037'. [ 439.177441][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 439.207992][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.210423][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.213607][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.236803][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.244560][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.291573][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 439.483891][T18367] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.636744][T18376] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 439.756670][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.788728][T18367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.885014][T18367] veth3: left allmulticast mode [ 439.914684][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3040'. [ 439.972273][ T9930] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.972308][ T9930] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.972342][ T9930] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.972367][ T9930] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.972399][ T9930] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.972431][ T9930] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.980036][ T9930] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.980066][ T9930] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.270246][T18395] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 440.270946][T18395] batman_adv: batadv0: Adding interface: gretap1 [ 440.270961][T18395] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.270993][T18395] batman_adv: batadv0: Interface activated: gretap1 [ 440.337251][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 440.337273][T18399] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3045'. [ 440.392176][T18364] wg2 speed is unknown, defaulting to 1000 [ 440.495441][T18399] ip6t_hbh: Not strict - not implemented [ 440.793587][T18364] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.793693][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.793923][T18364] bridge_slave_0: entered allmulticast mode [ 440.795044][T18364] bridge_slave_0: entered promiscuous mode [ 440.797709][T18364] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.797866][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.798013][T18364] bridge_slave_1: entered allmulticast mode [ 440.799965][T18364] bridge_slave_1: entered promiscuous mode [ 440.838541][T18364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.844993][T18364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.877241][T18364] team0: Port device team_slave_0 added [ 440.879075][T18364] team0: Port device team_slave_1 added [ 440.918675][T18364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.918691][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.918705][T18364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.936129][T18364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.936146][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.936170][T18364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.046451][T18364] hsr_slave_0: entered promiscuous mode [ 441.048725][T18364] hsr_slave_1: entered promiscuous mode [ 441.143179][T18419] tc_dump_action: action bad kind [ 441.310520][ T52] Bluetooth: hci1: command tx timeout [ 441.317264][T18425] : renamed from vlan0 (while UP) [ 441.393736][T18433] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3050'. [ 441.524329][T18425] netlink: 'syz.3.3050': attribute type 11 has an invalid length. [ 441.912382][T18438] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 441.912419][T18438] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 441.912455][T18438] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 442.077650][T18438] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 442.482217][ T9930] net_ratelimit: 551 callbacks suppressed [ 442.482238][ T9930] bond0: (slave gretap1): failed to get link speed/duplex [ 442.482266][ T9930] bond4: (slave bridge4): failed to get link speed/duplex [ 442.530781][T18439] smbdirect: ib_dev[syz2] renamed to [sy] [ 442.587393][T18468] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 442.740022][ T1050] bond0: (slave gretap1): failed to get link speed/duplex [ 442.740062][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 442.850024][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 442.850065][ T1050] bond0: (slave gretap1): failed to get link speed/duplex [ 443.000477][T14277] bond0: (slave gretap1): failed to get link speed/duplex [ 443.000518][T14277] bond4: (slave bridge4): failed to get link speed/duplex [ 443.258512][T18478] veth3: entered allmulticast mode [ 443.391297][ T52] Bluetooth: hci1: command tx timeout [ 443.392257][ T1050] bond0: (slave gretap1): failed to get link speed/duplex [ 443.443782][T18364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.464690][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.466876][T18364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.519159][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.524094][T18364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 443.558781][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.591145][T18364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 443.638498][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.766567][T18518] netlink: 'syz.3.3067': attribute type 11 has an invalid length. [ 443.914296][T18364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.959827][T18364] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.984748][T12379] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.984851][T12379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.036044][ T9930] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.036185][ T9930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.058841][T18539] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 444.197964][T18546] __nla_validate_parse: 10 callbacks suppressed [ 444.197985][T18546] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3073'. [ 444.198108][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3073'. [ 444.236456][T18541] syzkaller0: entered promiscuous mode [ 444.236479][T18541] syzkaller0: entered allmulticast mode [ 444.244466][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3071'. [ 444.244514][T18541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3071'. [ 444.284840][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3071'. [ 444.284875][T18541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3071'. [ 444.438980][T18548] wg2 speed is unknown, defaulting to 1000 [ 444.693229][T18557] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3076'. [ 445.184675][T18567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'. [ 445.471405][ T52] Bluetooth: hci1: command tx timeout [ 445.526954][T18598] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20003 [ 445.529589][T18364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.614237][T18364] veth0_vlan: entered promiscuous mode [ 445.677367][T18364] veth1_vlan: entered promiscuous mode [ 446.001330][T18364] veth0_macvtap: entered promiscuous mode [ 446.025975][T18364] veth1_macvtap: entered promiscuous mode [ 446.176602][T18364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.247374][T18364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.401690][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.401784][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.401818][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.401850][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.491615][T14277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.491635][T14277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.596335][T14273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.596357][T14273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.759648][T18631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3036'. [ 446.873535][T18629] tipc: Started in network mode [ 446.873567][T18629] tipc: Node identity 0659a58f9a3a, cluster identity 4711 [ 446.875446][T18629] tipc: Enabled bearer , priority 0 [ 446.883396][T18629] syzkaller0: entered promiscuous mode [ 446.883423][T18629] syzkaller0: entered allmulticast mode [ 446.930499][T18629] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 447.058475][T18629] tipc: Resetting bearer [ 447.095240][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.103076][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.114169][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.124985][T18627] tipc: Resetting bearer [ 447.125241][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.125946][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.278499][T18627] tipc: Disabling bearer [ 447.406200][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 447.553203][T18653] bond1: option broadcast_neighbor: invalid value (3) [ 447.560127][ T5631] Bluetooth: hci1: command tx timeout [ 447.578798][T18653] bond1 (unregistering): Released all slaves [ 447.604020][T18665] netlink: 'syz.1.3097': attribute type 21 has an invalid length. [ 447.650984][T12379] net_ratelimit: 42 callbacks suppressed [ 447.651003][T12379] bond4: (slave bridge4): failed to get link speed/duplex [ 447.651043][T12379] bond0: (slave gretap1): failed to get link speed/duplex [ 447.714423][T18654] bond1: option broadcast_neighbor: invalid value (3) [ 447.760953][T18654] bond1 (unregistering): Released all slaves [ 447.842556][T14273] bond0: (slave gretap1): failed to get link speed/duplex [ 447.842624][T14273] bond4: (slave bridge4): failed to get link speed/duplex [ 447.873196][T18663] tipc: Enabling of bearer rejected, failed to enable media [ 447.874785][T18664] tipc: Enabling of bearer rejected, failed to enable media [ 448.009049][ T5615] bond17: (slave syz_tun): Removing an active aggregator [ 448.009588][ T5615] bond17: (slave syz_tun): Releasing backup interface [ 448.180618][ T13] bond0: (slave gretap1): failed to get link speed/duplex [ 448.180673][ T13] bond4: (slave bridge4): failed to get link speed/duplex [ 448.290423][ T1050] bond4: (slave bridge4): failed to get link speed/duplex [ 448.290462][ T1050] bond0: (slave gretap1): failed to get link speed/duplex [ 448.393397][T14273] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.393434][T14273] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.442463][ T13] bond0: (slave gretap1): failed to get link speed/duplex [ 448.452963][ T13] bond4: (slave bridge4): failed to get link speed/duplex [ 448.491467][T14273] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.491502][T14273] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.655851][T14273] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.655886][T14273] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.778076][T18643] wg2 speed is unknown, defaulting to 1000 [ 448.844960][T14273] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.844997][T14273] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.858661][T18704] netlink: 'syz.0.3103': attribute type 2 has an invalid length. [ 448.945525][T18705] netlink: 'syz.1.3104': attribute type 32 has an invalid length. [ 449.230690][ T5631] Bluetooth: hci4: command tx timeout [ 449.333737][T18718] __nla_validate_parse: 5 callbacks suppressed [ 449.333757][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'. [ 449.376815][T18716] veth3: entered promiscuous mode [ 449.376838][T18716] veth3: entered allmulticast mode [ 449.377840][T18716] team0: Device veth3 is up. Set it down before adding it as a team port [ 449.481875][T18719] veth3: entered promiscuous mode [ 449.481897][T18719] veth3: entered allmulticast mode [ 449.482625][T18719] team0: Device veth3 is up. Set it down before adding it as a team port [ 449.623050][T18716] veth3: entered promiscuous mode [ 449.623121][T18716] veth3: entered allmulticast mode [ 449.623803][T18716] team0: Device veth3 is up. Set it down before adding it as a team port [ 449.680297][T18719] veth3: entered promiscuous mode [ 449.680320][T18719] veth3: entered allmulticast mode [ 449.681038][T18719] team0: Device veth3 is up. Set it down before adding it as a team port [ 449.867891][T18716] veth3: entered promiscuous mode [ 449.867913][T18716] veth3: entered allmulticast mode [ 449.878578][T18716] team0: Device veth3 is up. Set it down before adding it as a team port [ 449.918451][T18743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.954725][T18719] veth3: entered promiscuous mode [ 449.954747][T18719] veth3: entered allmulticast mode [ 449.955674][T18719] team0: Device veth3 is up. Set it down before adding it as a team port [ 449.974624][T18743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.032507][T18745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.076411][T18716] veth3: entered promiscuous mode [ 450.076433][T18716] veth3: entered allmulticast mode [ 450.077223][T18716] team0: Device veth3 is up. Set it down before adding it as a team port [ 450.219659][T18719] veth3: entered promiscuous mode [ 450.219683][T18719] veth3: entered allmulticast mode [ 450.222996][T18719] team0: Device veth3 is up. Set it down before adding it as a team port [ 450.562925][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 451.129175][T14273] bond7 (unregistering): (slave gretap4): Releasing active interface [ 451.165681][T14273] bond0 (unregistering): (slave gretap1): Releasing active interface [ 451.192848][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3119'. [ 451.272091][T18780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3119'. [ 451.311023][ T5631] Bluetooth: hci4: command tx timeout [ 451.354738][T14273] bond4 (unregistering): (slave bridge4): Removing an active aggregator [ 451.355036][T14273] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 451.355054][T14273] bond4 (unregistering): (slave bridge4): the permanent HWaddr of slave - 86:ea:38:f9:83:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 451.373979][T14273] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 451.404346][T14273] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 451.435100][T14273] bond14 (unregistering): (slave bridge9): Releasing backup interface [ 451.448427][T14273] bond1 (unregistering): Released all slaves [ 451.475401][T14273] bond0 (unregistering): Released all slaves [ 451.488493][T14273] bond2 (unregistering): (slave veth3): Releasing active interface [ 451.494522][T14273] bond2 (unregistering): Released all slaves [ 451.508175][T14273] bond3 (unregistering): Released all slaves [ 451.525357][T14273] bond4 (unregistering): Released all slaves [ 451.538779][T14273] bond5 (unregistering): (slave veth5): Releasing backup interface [ 451.542928][T14273] bond5 (unregistering): Released all slaves [ 451.570740][T14273] bond6 (unregistering): Released all slaves [ 451.578383][T14273] bond7 (unregistering): Released all slaves [ 451.601891][T14273] bond8 (unregistering): Released all slaves [ 451.622807][T14273] bond9 (unregistering): Released all slaves [ 451.636809][T14273] bond10 (unregistering): Released all slaves [ 451.652278][T14273] bond11 (unregistering): Released all slaves [ 451.669408][T14273] bond12 (unregistering): Released all slaves [ 451.686897][T14273] bond13 (unregistering): Released all slaves [ 451.704863][T14273] bond14 (unregistering): Released all slaves [ 451.721935][T14273] bond15 (unregistering): (slave veth11): Releasing active interface [ 451.721971][T14273] batadv1: entered promiscuous mode [ 451.724266][T14273] bond15 (unregistering): (slave batadv1): Releasing active interface [ 451.724293][T14273] batadv1: left promiscuous mode [ 451.725920][T14273] bond15 (unregistering): Released all slaves [ 451.774051][T14273] bond16 (unregistering): Released all slaves [ 451.785998][T14273] bond17 (unregistering): Released all slaves [ 451.800519][T14273] bond18 (unregistering): Released all slaves [ 451.854670][T18760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3117'. [ 451.874406][T18775] bridge0: port 2(bond0) entered blocking state [ 451.874551][T18775] bridge0: port 2(bond0) entered disabled state [ 451.874716][T18775] bond0: entered allmulticast mode [ 451.874733][T18775] bond_slave_0: entered allmulticast mode [ 451.874772][T18775] bond_slave_1: entered allmulticast mode [ 451.876606][T18775] bond0: entered promiscuous mode [ 451.876620][T18775] bond_slave_0: entered promiscuous mode [ 451.876833][T18775] bond_slave_1: entered promiscuous mode [ 452.087378][T18785] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3120'. [ 452.236696][T14273] ovs-s!: left promiscuous mode [ 452.337673][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'. [ 452.354823][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 452.678703][T14273] tipc: Disabling bearer [ 452.690109][T14273] tipc: Left network mode [ 452.695398][T18643] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.696120][T18643] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.696281][T18643] bridge_slave_0: entered allmulticast mode [ 452.705726][T18643] bridge_slave_0: entered promiscuous mode [ 452.717356][T18643] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.721833][T18643] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.721998][T18643] bridge_slave_1: entered allmulticast mode [ 452.736637][T18643] bridge_slave_1: entered promiscuous mode [ 452.846337][T18643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.864481][T18643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.284904][T18822] Bluetooth: MGMT ver 1.23 [ 453.284940][T18822] Bluetooth: hci0: unsupported parameter 5135 [ 453.284954][T18822] Bluetooth: hci0: unsupported parameter 8192 [ 453.284968][T18822] Bluetooth: hci0: unsupported parameter 5135 [ 453.284979][T18822] Bluetooth: hci0: unsupported parameter 8192 [ 453.327290][T18643] team0: Port device team_slave_0 added [ 453.392858][ T5631] Bluetooth: hci4: command tx timeout [ 453.557788][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 453.558155][T18643] team0: Port device team_slave_1 added [ 453.575102][T18827] netlink: 'syz.1.3129': attribute type 4 has an invalid length. [ 453.589168][T18827] Bluetooth: MGMT ver 1.23 [ 453.809115][T18847] sctp: [Deprecated]: syz.2.3131 (pid 18847) Use of int in max_burst socket option deprecated. [ 453.809115][T18847] Use struct sctp_assoc_value instead [ 453.873636][T18643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.873655][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.873682][T18643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.889008][T18643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.889023][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.891068][T18643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.980591][T18853] net_ratelimit: 9 callbacks suppressed [ 453.980611][T18853] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 454.035668][T18853] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3134'. [ 454.139428][T18643] hsr_slave_0: entered promiscuous mode [ 454.146908][T18643] hsr_slave_1: entered promiscuous mode [ 454.152345][T18643] debugfs: 'hsr0' already exists in 'hsr' [ 454.152366][T18643] Cannot create hsr debugfs directory [ 454.339118][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 454.357044][T18870] __nla_validate_parse: 1 callbacks suppressed [ 454.357063][T18870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3138'. [ 454.465781][T14273] hsr_slave_0: left promiscuous mode [ 454.466686][T14273] batman_adv: batadv0: Removing interface: ipvlan2 [ 454.467679][T14273] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 454.467699][T14273] batman_adv: batadv0: Removing interface: ipvlan5 [ 454.484192][T14273] batman_adv: batadv0: Interface deactivated: ipvlan6 [ 454.484214][T14273] batman_adv: batadv0: Removing interface: ipvlan6 [ 454.553384][T14273] veth1_vlan: left allmulticast mode [ 454.553421][T14273] veth1_vlan: left promiscuous mode [ 454.553481][T14273] veth0_vlan: left promiscuous mode [ 454.553710][T18879] Bluetooth: hci0: unsupported parameter 5135 [ 454.553727][T18879] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 454.707784][ T5617] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 454.738719][ T5617] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 454.962364][T18889] fido_id[18889]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 455.014301][T18894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3140'. [ 455.473951][ T5631] Bluetooth: hci4: command tx timeout [ 455.661165][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 455.981189][T18918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3150'. [ 456.384439][T14273] IPVS: stop unused estimator thread 0... [ 456.942499][T18960] tc_dump_action: action bad kind [ 456.942693][T18955] netlink: 'syz.1.3155': attribute type 12 has an invalid length. [ 456.942711][T18955] netlink: 'syz.1.3155': attribute type 29 has an invalid length. [ 456.942724][T18955] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3155'. [ 456.990297][T18961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3157'. [ 457.346272][T18971] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 457.607731][T18977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3160'. [ 457.689423][T18976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3161'. [ 457.777062][T18982] netlink: 'syz.4.3162': attribute type 7 has an invalid length. [ 457.777085][T18982] netlink: 'syz.4.3162': attribute type 3 has an invalid length. [ 457.777097][T18982] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3162'. [ 457.841649][T18980] bridge0: port 3(wlan1) entered blocking state [ 457.841743][T18980] bridge0: port 3(wlan1) entered disabled state [ 457.841875][T18980] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 457.856550][T18980] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 457.895545][T18985] xt_hashlimit: size too large, truncated to 1048576 [ 457.901085][T18982] netlink: 'syz.4.3162': attribute type 1 has an invalid length. [ 457.901103][T18982] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3162'. [ 457.968647][T18977] mac80211_hwsim hwsim35 wlan1 (unregistering): left allmulticast mode [ 457.968680][T18977] mac80211_hwsim hwsim35 wlan1 (unregistering): left promiscuous mode [ 457.970626][T18977] bridge0: port 3(wlan1) entered disabled state [ 458.128969][T18994] netlink: 'syz.1.3164': attribute type 1 has an invalid length. [ 458.285507][T18985] netlink: 'syz.2.3163': attribute type 14 has an invalid length. [ 458.358047][T19005] syzkaller1: entered promiscuous mode [ 458.358070][T19005] syzkaller1: entered allmulticast mode [ 460.084371][T18643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.118305][T18643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.222998][T19050] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 460.228668][T19065] ip_tables: iptables: counters copy to user failed while replacing table [ 460.286071][T18643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.305737][T18643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.698325][T19080] netlink: 'syz.0.3173': attribute type 1 has an invalid length. [ 460.698345][T19080] __nla_validate_parse: 2 callbacks suppressed [ 460.698356][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 461.184085][T19082] netlink: 'syz.2.3174': attribute type 10 has an invalid length. [ 461.248408][T19083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3174'. [ 461.335835][T19084] netlink: 'syz.2.3174': attribute type 10 has an invalid length. [ 463.011658][T18643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.013930][T18643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.014613][T18643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.018448][T18643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.078136][T19082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.081353][T19082] team0: Port device netdevsim1 added [ 463.153271][T19084] team0: Port device netdevsim1 removed [ 463.158066][T19084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.174662][T19084] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 463.183691][T19093] ip_tables: iptables: counters copy to user failed while replacing table [ 463.383174][T18643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.422032][T18643] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.436019][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.436128][T14277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.468084][T14273] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.468189][T14273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.615557][T19107] gtp0: entered promiscuous mode [ 463.615579][T19107] gtp0: entered allmulticast mode [ 463.750436][T19119] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3181'. [ 464.005548][T19123] wg2 speed is unknown, defaulting to 1000 [ 464.395909][T19144] netlink: 'syz.1.3186': attribute type 1 has an invalid length. [ 464.751237][T19160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3191'. [ 464.765470][T19155] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3189'. [ 464.765491][T19155] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 464.818136][T18643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.912468][T18643] veth0_vlan: entered promiscuous mode [ 464.935268][T18643] veth1_vlan: entered promiscuous mode [ 464.983058][T18643] veth0_macvtap: entered promiscuous mode [ 465.012986][T18643] veth1_macvtap: entered promiscuous mode [ 465.015270][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3194'. [ 465.053679][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 465.069373][T18643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.074068][T18643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.105287][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3195'. [ 465.107647][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 465.108049][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 465.117049][T12379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.118152][T12379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.118365][T12379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.118543][T12379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.521421][ T9930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.521442][ T9930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.697217][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.697239][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.979098][T19208] __nla_validate_parse: 4 callbacks suppressed [ 465.979120][T19208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 466.004859][T19208] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 466.127789][T19220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3209'. [ 466.152692][T19218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3210'. [ 466.319049][T19229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.373554][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3211'. [ 466.784165][T19251] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3219'. [ 466.840094][T19258] tc_dump_action: action bad kind [ 466.984433][T19223] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 466.984460][T19223] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 467.072931][T19259] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 467.099485][T19223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.099507][T19223] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 467.124122][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 467.178998][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 467.183273][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 467.183836][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 467.206332][T19223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.206363][T19223] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 467.427637][T19223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 467.427660][T19223] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 467.630403][T19223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 467.630428][T19223] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 467.807635][T19278] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 467.809473][T19278] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 467.809637][T19278] veth0_virt_wifi: entered allmulticast mode [ 467.811734][T19278] veth0_virt_wifi: entered promiscuous mode [ 467.840665][T19278] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 467.840767][T19278] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 468.088938][T19283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'. [ 468.654953][T19316] netlink: 'syz.3.3235': attribute type 21 has an invalid length. [ 471.221351][T19316] netlink: 'syz.3.3235': attribute type 5 has an invalid length. [ 471.221373][T19316] __nla_validate_parse: 5 callbacks suppressed [ 471.221384][T19316] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3235'. [ 471.465973][T19334] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3238'. [ 471.573657][T19341] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3242'. [ 471.884407][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'. [ 471.914589][T19343] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 472.562758][T19377] openvswitch: netlink: Tunnel attr 16 has unexpected len 9776 expected 0 [ 473.186124][T19409] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 473.352116][T19409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3259'. [ 473.358051][T19413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.385460][T19413] bond1: (slave bond2): making interface the new active one [ 473.388371][T19413] bond1: (slave bond2): Enslaving as an active interface with an up link [ 473.417029][T19415] ip_tables: iptables: counters copy to user failed while replacing table [ 473.434987][T19416] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 473.475582][T19409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.800278][T19442] ip6gretap0: entered promiscuous mode [ 473.800465][T19442] macsec1: entered allmulticast mode [ 473.800480][T19442] ip6gretap0: entered allmulticast mode [ 473.967873][T19448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3267'. [ 474.126440][T19455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3266'. [ 474.452728][T19476] tipc: Started in network mode [ 474.452759][T19476] tipc: Node identity 1e46fdcf318f, cluster identity 4711 [ 474.452907][T19476] tipc: Enabled bearer , priority 0 [ 474.453801][T19477] syzkaller0: entered promiscuous mode [ 474.453822][T19477] syzkaller0: entered allmulticast mode [ 474.491253][T14279] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.491344][T14279] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.491380][T14279] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.491418][T14279] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.547018][T19473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3272'. [ 474.600964][T19477] tipc: Resetting bearer [ 475.196811][T19508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3282'. [ 475.452900][ T1217] tipc: Node number set to 801766863 [ 475.477591][T19512] netlink: 'syz.3.3284': attribute type 15 has an invalid length. [ 476.280086][T19544] syzkaller0: entered promiscuous mode [ 476.280109][T19544] syzkaller0: entered allmulticast mode [ 476.808818][T19564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3295'. [ 477.243569][T19577] netlink: 3784 bytes leftover after parsing attributes in process `syz.0.3299'. [ 477.444808][T19591] netlink: 'syz.0.3303': attribute type 1 has an invalid length. [ 477.562077][T19592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.642944][T19599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.714702][T19592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.145560][T19621] ipt_ah: unknown flags FF [ 478.177320][T19621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3308'. [ 478.472713][T19635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3312'. [ 478.649180][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3312'. [ 478.676601][T19642] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3314'. [ 478.756708][T19637] syzkaller0: entered promiscuous mode [ 478.756731][T19637] syzkaller0: entered allmulticast mode [ 478.771858][T19647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3314'. [ 478.771881][T19647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3314'. [ 478.819616][T19647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3314'. [ 479.178747][ T31] audit: type=1800 audit(1789608171.111:9): pid=19647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3314" name="memory.events" dev="tmpfs" ino=149 res=0 errno=0 [ 479.344472][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'. [ 480.288225][T19712] bond1: entered promiscuous mode [ 480.288654][T19712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.383645][T19715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.384019][T19715] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 480.415485][T19715] bond1: (slave gre1): Error -95 calling set_mac_address [ 480.444397][T19721] netlink: 'syz.2.3333': attribute type 11 has an invalid length. [ 480.511504][T19712] bond1 (unregistering): Released all slaves [ 480.763056][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.763267][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.765032][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.775771][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.775912][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.776034][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.776363][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.776495][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.776617][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.776941][T19734] Dead loop on virtual device lo (net 902), fix it urgently! [ 480.876908][T19734] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.046688][T19734] bridge_slave_1 (unregistering): left allmulticast mode [ 481.046716][T19734] bridge_slave_1 (unregistering): left promiscuous mode [ 481.046802][T19734] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.706035][T19764] xt_limit: Overflow, try lower: 268435456/134217728 [ 481.891905][T19772] __nla_validate_parse: 10 callbacks suppressed [ 481.891925][T19772] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3349'. [ 481.968713][T19777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 482.387551][T19795] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 482.467770][T19807] netlink: 'syz.1.3355': attribute type 4 has an invalid length. [ 482.682017][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3359'. [ 482.750392][T19819] syzkaller1: entered promiscuous mode [ 482.750415][T19819] syzkaller1: entered allmulticast mode [ 483.346551][T19833] syzkaller1: entered promiscuous mode [ 483.346575][T19833] syzkaller1: entered allmulticast mode [ 483.356261][T19826] syzkaller1: left promiscuous mode [ 483.356282][T19826] syzkaller1: left allmulticast mode [ 483.637968][T19850] veth0: entered promiscuous mode [ 483.638080][T19850] veth0: left promiscuous mode [ 483.807334][T14277] bond0: (slave bond_slave_0): interface is now down [ 483.807365][T14277] bond0: (slave bond_slave_1): interface is now down [ 483.834068][ T13] bond0: (slave bond_slave_0): interface is now down [ 483.834092][ T13] bond0: (slave bond_slave_1): interface is now down [ 483.864116][ T9932] bond0: (slave bond_slave_0): interface is now down [ 483.864148][ T9932] bond0: (slave bond_slave_1): interface is now down [ 483.872715][T19856] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3367'. [ 483.892008][ T9932] bond0: (slave bond_slave_0): interface is now down [ 483.892033][ T9932] bond0: (slave bond_slave_1): interface is now down [ 483.898938][ T9932] bond0: now running without any active interface! [ 484.042704][T19871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3372'. [ 484.169589][T19879] xt_connbytes: Forcing CT accounting to be enabled [ 484.372534][T19885] netlink: 'syz.3.3377': attribute type 3 has an invalid length. [ 484.372558][T19885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3377'. [ 484.713719][T19902] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 484.756201][T14285] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 484.756560][T14285] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 484.758247][T14285] bond0: active interface up! [ 484.762247][T19902] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 484.765850][T19900] --map-set only usable from mangle table [ 484.866799][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3384'. [ 485.297013][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3389'. [ 485.378015][T19930] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 485.402450][T19928] IPVS: stopping master sync thread 19930 ... [ 485.884600][T19948] gre1: entered promiscuous mode [ 486.049760][T19956] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 486.266840][T19973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3404'. [ 486.711959][T19985] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 486.800688][ T9930] IPVS: starting estimator thread 0... [ 486.852453][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3410'. [ 486.899824][T19988] IPVS: using max 32 ests per chain, 76800 per kthread [ 486.932959][T19997] __nla_validate_parse: 1 callbacks suppressed [ 486.932988][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 487.041888][T19997] bond0: (slave bond_slave_0): Releasing backup interface [ 487.090947][T20006] lo: entered allmulticast mode [ 487.133925][T20004] lo: left allmulticast mode [ 487.415139][T20019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3417'. [ 487.762556][T20030] macvlan0: entered promiscuous mode [ 487.762830][T20030] macvlan0: entered allmulticast mode [ 487.762846][T20030] veth1_vlan: entered allmulticast mode [ 487.796691][T20034] wg2 speed is unknown, defaulting to 1000 [ 487.796751][T20034] wg2 speed is unknown, defaulting to 1000 [ 487.798364][T20034] wg2 speed is unknown, defaulting to 1000 [ 487.812630][T20032] netlink: 'syz.3.3422': attribute type 1 has an invalid length. [ 487.813607][T20034] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 487.813638][T20034] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 487.813675][T20034] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 487.839164][T20034] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 487.892244][T20032] bond1: entered promiscuous mode [ 487.895087][T20032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.975670][T20032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.976074][T20032] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 487.976093][T20032] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 488.013264][T20032] bond1: (slave xfrm1): making interface the new active one [ 488.013288][T20032] xfrm1: entered promiscuous mode [ 488.053255][T20032] xfrm1: left promiscuous mode [ 488.095818][T20034] wg2 speed is unknown, defaulting to 1000 [ 488.138555][T20034] wg2 speed is unknown, defaulting to 1000 [ 488.165181][T20034] wg2 speed is unknown, defaulting to 1000 [ 488.166239][T20034] wg2 speed is unknown, defaulting to 1000 [ 488.174049][T20034] wg2 speed is unknown, defaulting to 1000 [ 488.182951][T20034] wg2 speed is unknown, defaulting to 1000 [ 488.197440][T20034] wg2 speed is unknown, defaulting to 1000 [ 488.198503][T20034] wg2 speed is unknown, defaulting to 1000 [ 488.377321][T20055] nft_compat: unsupported protocol 0 [ 488.563670][T20067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3425'. [ 488.854073][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3431'. [ 488.870576][T20083] ip6gre2: entered promiscuous mode [ 488.870597][T20083] ip6gre2: entered allmulticast mode [ 489.048601][T20093] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3433'. [ 489.553985][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3441'. [ 489.554001][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3441'. [ 489.554017][T20124] netlink: 'syz.3.3441': attribute type 18 has an invalid length. [ 489.606332][T20121] syzkaller0: entered promiscuous mode [ 489.606355][T20121] syzkaller0: entered allmulticast mode [ 489.611066][T14285] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 489.611157][T14285] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 489.611185][T14285] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 489.611219][T14285] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 489.987093][T20137] netlink: 'syz.0.3444': attribute type 10 has an invalid length. [ 490.222961][T20155] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3449'. [ 490.257164][T20158] netlink: 'syz.0.3450': attribute type 4 has an invalid length. [ 490.331037][T20144] erspan0: entered promiscuous mode [ 490.337942][T20144] vlan2: entered promiscuous mode [ 490.372822][T20146] netlink: 'syz.4.3446': attribute type 10 has an invalid length. [ 490.502138][T20167] tipc: Enabling of bearer <h:tunl0> rejected, media not registered [ 490.681934][T20178] netlink: 'syz.2.3457': attribute type 29 has an invalid length. [ 490.745957][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'. [ 490.745985][T20185] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3457'. [ 490.920089][T20190] netlink: 'syz.3.3459': attribute type 1 has an invalid length. [ 491.108255][T20207] netlink: 'syz.1.3464': attribute type 3 has an invalid length. [ 491.287668][T20214] netlink: 'syz.1.3468': attribute type 5 has an invalid length. [ 491.416387][T20219] 8021q: VLANs not supported on ip_vti0 [ 491.478158][T20221] FAULT_INJECTION: forcing a failure. [ 491.478158][T20221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 491.478192][T20221] CPU: 0 UID: 0 PID: 20221 Comm: syz.1.3470 Not tainted syzkaller #0 PREEMPT(full) [ 491.478214][T20221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.478225][T20221] Call Trace: [ 491.478232][T20221] [ 491.478241][T20221] dump_stack_lvl+0xe8/0x150 [ 491.478275][T20221] should_fail_ex+0x410/0x560 [ 491.478302][T20221] prepare_alloc_pages+0x223/0x600 [ 491.478326][T20221] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 491.478349][T20221] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 491.478369][T20221] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 491.478393][T20221] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 491.478418][T20221] ? __pfx_policy_nodemask+0x10/0x10 [ 491.478439][T20221] ? __get_vm_area_node+0x155/0x2f0 [ 491.478463][T20221] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 491.478489][T20221] ? __vmalloc_noprof+0xd2/0x120 [ 491.478519][T20221] __alloc_pages_noprof+0x10/0x100 [ 491.478541][T20221] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 491.478570][T20221] ? alloc_pages_noprof+0x140/0x2b0 [ 491.478597][T20221] __kasan_populate_vmalloc+0xb7/0x1c0 [ 491.478623][T20221] alloc_vmap_area+0xd1a/0x1420 [ 491.478664][T20221] ? __pfx_alloc_vmap_area+0x10/0x10 [ 491.478687][T20221] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 491.478709][T20221] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 491.478727][T20221] ? __get_vm_area_node+0x155/0x2f0 [ 491.478758][T20221] __get_vm_area_node+0x200/0x2f0 [ 491.478791][T20221] __vmalloc_node_range_noprof+0x343/0x1540 [ 491.478820][T20221] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 491.478842][T20221] ? __lock_acquire+0x747/0x2de0 [ 491.478885][T20221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.478928][T20221] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 491.478949][T20221] __vmalloc_noprof+0xd2/0x120 [ 491.478976][T20221] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 491.479001][T20221] bpf_prog_alloc_no_stats+0x47/0x560 [ 491.479022][T20221] ? bpf_prog_alloc+0x2a/0x1a0 [ 491.479047][T20221] bpf_prog_alloc+0x3c/0x1a0 [ 491.479072][T20221] bpf_prog_load+0x7f8/0x1c20 [ 491.479106][T20221] ? __pfx_bpf_prog_load+0x10/0x10 [ 491.479152][T20221] __sys_bpf+0xd0d/0xd90 [ 491.479180][T20221] ? __pfx___sys_bpf+0x10/0x10 [ 491.479212][T20221] ? __fget_files+0x2a/0x420 [ 491.479255][T20221] ? ksys_write+0x242/0x270 [ 491.479288][T20221] ? __pfx_ksys_write+0x10/0x10 [ 491.479321][T20221] __x64_sys_bpf+0xba/0xd0 [ 491.479344][T20221] do_syscall_64+0x166/0x520 [ 491.479365][T20221] ? trace_irq_disable+0x3b/0x140 [ 491.479385][T20221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.479404][T20221] ? clear_bhb_loop+0x70/0xc0 [ 491.479426][T20221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.479445][T20221] RIP: 0033:0x7ffbd8b9e159 [ 491.479465][T20221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.479482][T20221] RSP: 002b:00007ffbd9a70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.479504][T20221] RAX: ffffffffffffffda RBX: 00007ffbd8e25fa0 RCX: 00007ffbd8b9e159 [ 491.479519][T20221] RDX: 0000000000000094 RSI: 0000200000001300 RDI: 0000000000000005 [ 491.479532][T20221] RBP: 00007ffbd9a70090 R08: 0000000000000000 R09: 0000000000000000 [ 491.479545][T20221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.479557][T20221] R13: 00007ffbd8e26038 R14: 00007ffbd8e25fa0 R15: 00007ffdf2b94a88 [ 491.479589][T20221] [ 491.521981][T20221] syz.1.3470: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 491.522086][T20221] CPU: 1 UID: 0 PID: 20221 Comm: syz.1.3470 Not tainted syzkaller #0 PREEMPT(full) [ 491.522107][T20221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.522119][T20221] Call Trace: [ 491.522127][T20221] [ 491.522134][T20221] dump_stack_lvl+0xe8/0x150 [ 491.522166][T20221] warn_alloc+0x24d/0x270 [ 491.522186][T20221] ? lockdep_hardirqs_on+0x7b/0x110 [ 491.522287][T20221] ? __pfx_warn_alloc+0x10/0x10 [ 491.522306][T20221] ? kfree+0x1c5/0x650 [ 491.522337][T20221] ? __get_vm_area_node+0x219/0x2f0 [ 491.522370][T20221] __vmalloc_node_range_noprof+0x36b/0x1540 [ 491.522423][T20221] ? __lock_acquire+0x747/0x2de0 [ 491.522465][T20221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.522502][T20221] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 491.522522][T20221] __vmalloc_noprof+0xd2/0x120 [ 491.522548][T20221] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 491.522572][T20221] bpf_prog_alloc_no_stats+0x47/0x560 [ 491.522592][T20221] ? bpf_prog_alloc+0x2a/0x1a0 [ 491.522615][T20221] bpf_prog_alloc+0x3c/0x1a0 [ 491.522641][T20221] bpf_prog_load+0x7f8/0x1c20 [ 491.522674][T20221] ? __pfx_bpf_prog_load+0x10/0x10 [ 491.522719][T20221] __sys_bpf+0xd0d/0xd90 [ 491.522747][T20221] ? __pfx___sys_bpf+0x10/0x10 [ 491.522778][T20221] ? __fget_files+0x2a/0x420 [ 491.522819][T20221] ? ksys_write+0x242/0x270 [ 491.522848][T20221] ? __pfx_ksys_write+0x10/0x10 [ 491.522879][T20221] __x64_sys_bpf+0xba/0xd0 [ 491.522901][T20221] do_syscall_64+0x166/0x520 [ 491.522920][T20221] ? trace_irq_disable+0x3b/0x140 [ 491.522938][T20221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.522957][T20221] ? clear_bhb_loop+0x70/0xc0 [ 491.522980][T20221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.522999][T20221] RIP: 0033:0x7ffbd8b9e159 [ 491.523017][T20221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.523033][T20221] RSP: 002b:00007ffbd9a70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.523052][T20221] RAX: ffffffffffffffda RBX: 00007ffbd8e25fa0 RCX: 00007ffbd8b9e159 [ 491.523065][T20221] RDX: 0000000000000094 RSI: 0000200000001300 RDI: 0000000000000005 [ 491.523078][T20221] RBP: 00007ffbd9a70090 R08: 0000000000000000 R09: 0000000000000000 [ 491.523090][T20221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.523101][T20221] R13: 00007ffbd8e26038 R14: 00007ffbd8e25fa0 R15: 00007ffdf2b94a88 [ 491.523131][T20221] [ 491.526582][T20221] Mem-Info: [ 491.526594][T20221] active_anon:6148 inactive_anon:0 isolated_anon:0 [ 491.526594][T20221] active_file:0 inactive_file:43701 isolated_file:0 [ 491.526594][T20221] unevictable:1425 dirty:202 writeback:0 [ 491.526594][T20221] slab_reclaimable:11701 slab_unreclaimable:117400 [ 491.526594][T20221] mapped:31385 shmem:2019 pagetables:1397 [ 491.526594][T20221] sec_pagetables:0 bounce:0 [ 491.526594][T20221] kernel_misc_reclaimable:0 [ 491.526594][T20221] free:1297277 free_pcp:12099 free_cma:0 [ 491.526864][T20221] Node 0 active_anon:24592kB inactive_anon:0kB active_file:0kB inactive_file:174600kB unevictable:5700kB isolated(anon):0kB isolated(file):0kB mapped:125540kB dirty:808kB writeback:0kB shmem:8076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15632kB pagetables:5464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 491.526919][T20221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 491.526971][T20221] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.527026][T20221] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 491.527061][T20221] Node 0 DMA32 free:1233620kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24592kB inactive_anon:0kB active_file:0kB inactive_file:174600kB unevictable:5700kB writepending:808kB zspages:0kB present:3129332kB managed:2546612kB mlocked:6000kB bounce:0kB free_pcp:48396kB local_pcp:26712kB free_cma:0kB [ 491.527118][T20221] lowmem_reserve[]: 0 0 0 0 0 [ 491.527150][T20221] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.527203][T20221] lowmem_reserve[]: 0 0 0 0 0 [ 491.527235][T20221] Node 1 Normal free:3940128kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.527290][T20221] lowmem_reserve[]: 0 0 0 0 0 [ 491.527323][T20221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 491.527437][T20221] Node 0 DMA32: 1219*4kB (UE) 1035*8kB (UME) 853*16kB (UM) 500*32kB (UME) 183*64kB (UME) 31*128kB (UME) 30*256kB (UME) 18*512kB (UME) 9*1024kB (UM) 7*2048kB (UM) 277*4096kB (UM) = 1233524kB [ 491.527587][T20221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 491.535481][T20221] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 8*16kB (UM) 8*32kB (UM) 6*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3940128kB [ 491.536298][T20221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.536314][T20221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.536341][T20221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.536357][T20221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.536371][T20221] 45741 total pagecache pages [ 491.536382][T20221] 0 pages in swap cache [ 491.536389][T20221] Free swap = 124996kB [ 491.536396][T20221] Total swap = 124996kB [ 491.536404][T20221] 2097051 pages RAM [ 491.536411][T20221] 0 pages HighMem/MovableOnly [ 491.536424][T20221] 428782 pages reserved [ 491.536430][T20221] 0 pages cma reserved [ 491.975478][T20230] net_ratelimit: 46 callbacks suppressed [ 491.975499][T20230] netlink: Unknown nat attribute (0) [ 491.975524][T20230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.440887][T20237] netlink: 'syz.4.3473': attribute type 32 has an invalid length. [ 492.683197][T20249] x_tables: ip_tables: osf match: only valid for protocol 6 [ 492.781106][T20254] FAULT_INJECTION: forcing a failure. [ 492.781106][T20254] name failslab, interval 1, probability 0, space 0, times 0 [ 492.781139][T20254] CPU: 0 UID: 0 PID: 20254 Comm: syz.3.3482 Not tainted syzkaller #0 PREEMPT(full) [ 492.781159][T20254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.781170][T20254] Call Trace: [ 492.781178][T20254] [ 492.781186][T20254] dump_stack_lvl+0xe8/0x150 [ 492.781217][T20254] should_fail_ex+0x410/0x560 [ 492.781247][T20254] should_failslab+0xa8/0x100 [ 492.781272][T20254] __kmalloc_node_noprof+0x100/0x720 [ 492.781290][T20254] ? __get_vm_area_node+0x200/0x2f0 [ 492.781316][T20254] ? __get_vm_area_node+0x283/0x2f0 [ 492.781339][T20254] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 492.781365][T20254] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 492.781399][T20254] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 492.781434][T20254] ? __lock_acquire+0x747/0x2de0 [ 492.781478][T20254] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.781515][T20254] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 492.781537][T20254] __vmalloc_noprof+0xd2/0x120 [ 492.781564][T20254] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 492.781589][T20254] bpf_prog_alloc_no_stats+0x47/0x560 [ 492.781610][T20254] ? bpf_prog_alloc+0x2a/0x1a0 [ 492.781634][T20254] bpf_prog_alloc+0x3c/0x1a0 [ 492.781658][T20254] bpf_prog_load+0x7f8/0x1c20 [ 492.781692][T20254] ? __pfx_bpf_prog_load+0x10/0x10 [ 492.781737][T20254] __sys_bpf+0xd0d/0xd90 [ 492.781766][T20254] ? __pfx___sys_bpf+0x10/0x10 [ 492.781798][T20254] ? __fget_files+0x2a/0x420 [ 492.781846][T20254] ? ksys_write+0x242/0x270 [ 492.781876][T20254] ? __pfx_ksys_write+0x10/0x10 [ 492.781907][T20254] __x64_sys_bpf+0xba/0xd0 [ 492.781927][T20254] do_syscall_64+0x166/0x520 [ 492.781947][T20254] ? trace_irq_disable+0x3b/0x140 [ 492.781966][T20254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.781987][T20254] ? clear_bhb_loop+0x70/0xc0 [ 492.782011][T20254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.782031][T20254] RIP: 0033:0x7f5cdc39e159 [ 492.782049][T20254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.782067][T20254] RSP: 002b:00007f5cdd314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.782089][T20254] RAX: ffffffffffffffda RBX: 00007f5cdc625fa0 RCX: 00007f5cdc39e159 [ 492.782104][T20254] RDX: 0000000000000094 RSI: 0000200000001300 RDI: 0000000000000005 [ 492.782117][T20254] RBP: 00007f5cdd314090 R08: 0000000000000000 R09: 0000000000000000 [ 492.782130][T20254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.782142][T20254] R13: 00007f5cdc626038 R14: 00007f5cdc625fa0 R15: 00007ffc3bcec618 [ 492.782174][T20254] [ 493.587286][T20290] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 493.602031][T20303] validate_nla: 1 callbacks suppressed [ 493.602049][T20303] netlink: 'syz.3.3490': attribute type 2 has an invalid length. [ 493.602062][T20303] __nla_validate_parse: 4 callbacks suppressed [ 493.602072][T20303] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3490'. [ 493.621198][T20302] netlink: 'syz.1.3489': attribute type 11 has an invalid length. [ 493.677903][T20304] netlink: 'syz.1.3489': attribute type 15 has an invalid length. [ 493.677924][T20304] netlink: 'syz.1.3489': attribute type 7 has an invalid length. [ 493.677936][T20304] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3489'. [ 493.706273][T20290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.783796][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 493.973106][T20310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3492'. [ 494.523441][T20341] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3501'. [ 494.723448][T20350] netlink: 'syz.4.3503': attribute type 2 has an invalid length. [ 494.749244][T20350] : entered promiscuous mode [ 494.927276][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'. [ 495.073710][T20365] FAULT_INJECTION: forcing a failure. [ 495.073710][T20365] name failslab, interval 1, probability 0, space 0, times 0 [ 495.073743][T20365] CPU: 0 UID: 0 PID: 20365 Comm: syz.3.3508 Not tainted syzkaller #0 PREEMPT(full) [ 495.073765][T20365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.073776][T20365] Call Trace: [ 495.073788][T20365] [ 495.073797][T20365] dump_stack_lvl+0xe8/0x150 [ 495.073829][T20365] should_fail_ex+0x410/0x560 [ 495.073859][T20365] should_failslab+0xa8/0x100 [ 495.073889][T20365] __kmalloc_cache_noprof+0xa3/0x600 [ 495.073910][T20365] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 495.073932][T20365] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 495.073961][T20365] bpf_prog_alloc_no_stats+0xd8/0x560 [ 495.073982][T20365] ? bpf_prog_alloc+0x2a/0x1a0 [ 495.074005][T20365] bpf_prog_alloc+0x3c/0x1a0 [ 495.074028][T20365] bpf_prog_load+0x7f8/0x1c20 [ 495.074059][T20365] ? __pfx_bpf_prog_load+0x10/0x10 [ 495.074106][T20365] __sys_bpf+0xd0d/0xd90 [ 495.074133][T20365] ? __pfx___sys_bpf+0x10/0x10 [ 495.074166][T20365] ? __fget_files+0x2a/0x420 [ 495.074209][T20365] ? ksys_write+0x242/0x270 [ 495.074239][T20365] ? __pfx_ksys_write+0x10/0x10 [ 495.074272][T20365] __x64_sys_bpf+0xba/0xd0 [ 495.074292][T20365] do_syscall_64+0x166/0x520 [ 495.074313][T20365] ? trace_irq_disable+0x3b/0x140 [ 495.074332][T20365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.074352][T20365] ? clear_bhb_loop+0x70/0xc0 [ 495.074376][T20365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.074395][T20365] RIP: 0033:0x7f5cdc39e159 [ 495.074413][T20365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.074430][T20365] RSP: 002b:00007f5cdd314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.074451][T20365] RAX: ffffffffffffffda RBX: 00007f5cdc625fa0 RCX: 00007f5cdc39e159 [ 495.074466][T20365] RDX: 0000000000000094 RSI: 0000200000001300 RDI: 0000000000000005 [ 495.074479][T20365] RBP: 00007f5cdd314090 R08: 0000000000000000 R09: 0000000000000000 [ 495.074492][T20365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.074503][T20365] R13: 00007f5cdc626038 R14: 00007f5cdc625fa0 R15: 00007ffc3bcec618 [ 495.074534][T20365] [ 495.393359][T20372] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3511'. [ 495.506769][T20378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3514'. [ 495.526286][T20378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3514'. [ 496.044890][T20418] netlink: zone id is out of range [ 496.044904][T20418] netlink: zone id is out of range [ 496.044912][T20418] netlink: zone id is out of range [ 496.044919][T20418] netlink: zone id is out of range [ 496.044926][T20418] netlink: zone id is out of range [ 496.044933][T20418] netlink: zone id is out of range [ 496.044940][T20418] netlink: zone id is out of range [ 496.182999][T20407] wg2 speed is unknown, defaulting to 1000 [ 496.233490][T20407] wg2 speed is unknown, defaulting to 1000 [ 496.235133][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3522'. [ 496.255181][T20423] tc_dump_action: action bad kind [ 496.545062][T20440] xt_LOG: prefix is not null-terminated [ 496.863009][T20463] netlink: 'syz.3.3528': attribute type 2 has an invalid length. [ 497.261869][T20475] bridge2: entered allmulticast mode [ 497.300439][T20478] syzkaller0: entered promiscuous mode [ 497.300478][T20478] syzkaller0: entered allmulticast mode [ 498.098049][T20523] : renamed from bond_slave_0 [ 498.191917][T20531] netlink: 'syz.4.3544': attribute type 1 has an invalid length. [ 498.318433][T20531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.469629][T20547] IPv6: Can't replace route, no match found [ 499.226929][T20585] __nla_validate_parse: 1 callbacks suppressed [ 499.226948][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3556'. [ 499.247059][T20585] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 499.268309][T20585] bond1 (unregistering): Released all slaves [ 499.435785][T20591] netlink: 'syz.2.3558': attribute type 21 has an invalid length. [ 499.435848][T20591] netlink: 'syz.2.3558': attribute type 6 has an invalid length. [ 499.435862][T20591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3558'. [ 499.479290][T20591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3558'. [ 499.700289][T20598] bridge0: port 3(vlan2) entered blocking state [ 499.700556][T20598] bridge0: port 3(vlan2) entered disabled state [ 499.700710][T20598] vlan2: entered allmulticast mode [ 499.700725][T20598] geneve0: entered allmulticast mode [ 499.704233][T20598] vlan2: entered promiscuous mode [ 499.704250][T20598] geneve0: entered promiscuous mode [ 500.129297][T20618] netlink: 'syz.4.3566': attribute type 7 has an invalid length. [ 500.452090][T20624] net_ratelimit: 9 callbacks suppressed [ 500.452111][T20624] netlink: zone id is out of range [ 500.452149][T20624] netlink: zone id is out of range [ 500.452267][T20624] netlink: zone id is out of range [ 500.452303][T20624] netlink: zone id is out of range [ 500.452311][T20624] netlink: zone id is out of range [ 500.452319][T20624] netlink: zone id is out of range [ 500.452326][T20624] netlink: zone id is out of range [ 500.452334][T20624] netlink: zone id is out of range [ 500.452342][T20624] netlink: zone id is out of range [ 500.452349][T20624] netlink: zone id is out of range [ 501.057075][T20646] veth0_macvtap: left promiscuous mode [ 501.122447][T20639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.235042][T20654] pimreg: entered allmulticast mode [ 501.433164][T20665] wg2 speed is unknown, defaulting to 1000 [ 501.441411][T20665] wg2 speed is unknown, defaulting to 1000 [ 501.665276][T20668] wg2 speed is unknown, defaulting to 1000 [ 501.688003][T20668] wg2 speed is unknown, defaulting to 1000 [ 501.817216][T20686] x_tables: duplicate underflow at hook 1 [ 501.963494][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'. [ 501.981801][T20702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3584'. [ 502.040664][T20702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3584'. [ 502.144179][T20709] Bluetooth: hci0: unsupported parameter 5161 [ 502.144202][T20709] Bluetooth: hci0: unsupported parameter 8192 [ 502.144214][T20709] Bluetooth: hci0: unsupported parameter 5161 [ 502.144227][T20709] Bluetooth: hci0: unsupported parameter 8192 [ 502.410092][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'. [ 502.658652][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'. [ 502.729607][T20717] syzkaller0: entered promiscuous mode [ 502.729630][T20717] syzkaller0: entered allmulticast mode [ 502.809044][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3593'. [ 502.819079][T20731] netlink: 'syz.2.3592': attribute type 1 has an invalid length. [ 502.867260][T20731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.882126][T20731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3592'. [ 502.905268][T20717] syzkaller0: left promiscuous mode [ 502.905289][T20717] syzkaller0: left allmulticast mode [ 502.905559][T20705] syz_tun: entered allmulticast mode [ 503.045012][T20704] syz_tun: left allmulticast mode [ 503.206574][T20742] bridge1: entered promiscuous mode [ 503.206635][T20742] bridge1: entered allmulticast mode [ 503.248869][T20748] netlink: 'syz.0.3596': attribute type 1 has an invalid length. [ 503.598430][T20748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.672186][T20741] bond1: (slave veth7): Enslaving as an active interface with a down link [ 503.707341][T20753] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 503.722062][T20753] bond1: (slave batadv1): making interface the new active one [ 503.740511][T20753] batadv1: entered promiscuous mode [ 503.745457][T20753] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 503.866370][T20776] netlink: 'syz.4.3603': attribute type 4 has an invalid length. [ 503.932528][T20770] syzkaller0: entered promiscuous mode [ 503.932551][T20770] syzkaller0: entered allmulticast mode [ 505.552596][ C0] net_ratelimit: 68 callbacks suppressed [ 505.552618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.596566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.758901][T20786] hsr_slave_1 (unregistering): left promiscuous mode [ 506.776768][T20780] wg2 speed is unknown, defaulting to 1000 [ 506.812275][T20780] wg2 speed is unknown, defaulting to 1000 [ 506.904094][T20808] __nla_validate_parse: 2 callbacks suppressed [ 506.904116][T20808] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3607'. [ 507.082705][T20821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3611'. [ 507.091637][T20821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.169449][T20821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.179239][T20827] ip_tables: iptables: counters copy to user failed while replacing table [ 507.205139][T20822] gretap0: entered promiscuous mode [ 507.216925][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 507.238834][T20828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 507.395113][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'. [ 507.629846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.804929][T20855] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 508.006128][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006219][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006300][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006383][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006464][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006541][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006617][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006718][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006799][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006880][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.006960][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.007072][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.007153][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.007232][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.007312][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.007395][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.007476][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.023251][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.023361][T20867] syzkaller1: linktype set to 520 [ 508.023650][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.023703][T20867] syzkaller1: linktype set to 520 [ 508.023932][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.023981][T20867] syzkaller1: linktype set to 520 [ 508.145657][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.145766][T20867] syzkaller1: linktype set to 520 [ 508.162775][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.162891][T20867] syzkaller1: linktype set to 520 [ 508.163164][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.163221][T20867] syzkaller1: linktype set to 520 [ 508.163451][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.163502][T20867] syzkaller1: linktype set to 520 [ 508.163904][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.163993][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164068][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164142][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164214][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164288][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164359][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164433][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164515][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164591][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.164793][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.164872][T20867] syzkaller1: linktype set to 520 [ 508.165194][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.165278][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.165354][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.165430][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.165510][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.165584][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.165660][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.165736][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.165916][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.165980][T20867] syzkaller1: linktype set to 520 [ 508.166210][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.166261][T20867] syzkaller1: linktype set to 520 [ 508.166472][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.166519][T20867] syzkaller1: linktype set to 520 [ 508.166745][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.166795][T20867] syzkaller1: linktype set to 520 [ 508.167088][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167178][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167251][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167506][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167588][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167669][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167747][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167822][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167906][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.167981][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.168156][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.168215][T20867] syzkaller1: linktype set to 520 [ 508.168457][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.168509][T20867] syzkaller1: linktype set to 520 [ 508.168732][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.168783][T20867] syzkaller1: linktype set to 520 [ 508.169005][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.169054][T20867] syzkaller1: linktype set to 520 [ 508.169346][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.169431][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.169508][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.169588][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.169664][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.181439][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.181525][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.181605][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.181680][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.181773][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.181861][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.181939][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.182018][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.182094][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.182171][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.182249][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.188258][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.188364][T20867] syzkaller1: linktype set to 520 [ 508.188640][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.188692][T20867] syzkaller1: linktype set to 520 [ 508.205486][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.205571][T20867] syzkaller1: linktype set to 520 [ 508.205833][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.205884][T20867] syzkaller1: linktype set to 520 [ 508.208834][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.208906][T20867] syzkaller1: linktype set to 520 [ 508.209157][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.209206][T20867] syzkaller1: linktype set to 520 [ 508.232556][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.232620][T20867] syzkaller1: linktype set to 520 [ 508.232869][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.232919][T20867] syzkaller1: linktype set to 520 [ 508.233129][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.233177][T20867] syzkaller1: linktype set to 520 [ 508.233433][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.233484][T20867] syzkaller1: linktype set to 520 [ 508.233696][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.233744][T20867] syzkaller1: linktype set to 520 [ 508.238563][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.238661][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.238738][T20866] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 508.259553][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.259661][T20867] syzkaller1: linktype set to 520 [ 508.260019][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.260069][T20867] syzkaller1: linktype set to 520 [ 508.260279][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.260334][T20867] syzkaller1: linktype set to 520 [ 508.264225][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.264321][T20867] syzkaller1: linktype set to 520 [ 508.264581][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.266244][T20867] syzkaller1: linktype set to 520 [ 508.266595][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.266647][T20867] syzkaller1: linktype set to 520 [ 508.269106][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.269182][T20867] syzkaller1: linktype set to 520 [ 508.269456][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.269506][T20867] syzkaller1: linktype set to 520 [ 508.273652][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.278741][T20867] syzkaller1: linktype set to 520 [ 508.279025][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.280675][T20867] syzkaller1: linktype set to 520 [ 508.282001][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.282053][T20867] syzkaller1: linktype set to 520 [ 508.282268][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.282317][T20867] syzkaller1: linktype set to 520 [ 508.282532][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.282580][T20867] syzkaller1: linktype set to 520 [ 508.289511][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.292985][T20867] syzkaller1: linktype set to 520 [ 508.293243][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.293293][T20867] syzkaller1: linktype set to 520 [ 508.293517][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.293565][T20867] syzkaller1: linktype set to 520 [ 508.297966][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.298056][T20867] syzkaller1: linktype set to 520 [ 508.298308][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.298365][T20867] syzkaller1: linktype set to 520 [ 508.304720][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.304824][T20867] syzkaller1: linktype set to 520 [ 508.305146][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.305260][T20867] syzkaller1: linktype set to 520 [ 508.305555][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.305606][T20867] syzkaller1: linktype set to 520 [ 508.305831][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.305880][T20867] syzkaller1: linktype set to 520 [ 508.306088][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.306136][T20867] syzkaller1: linktype set to 520 [ 508.317065][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.317127][T20867] syzkaller1: linktype set to 520 [ 508.317359][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.317408][T20867] syzkaller1: linktype set to 520 [ 508.321024][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.321102][T20867] syzkaller1: linktype set to 520 [ 508.322949][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.323003][T20867] syzkaller1: linktype set to 520 [ 508.327795][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.327851][T20867] syzkaller1: linktype set to 520 [ 508.328103][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.328152][T20867] syzkaller1: linktype set to 520 [ 508.328371][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.328420][T20867] syzkaller1: linktype set to 520 [ 508.333410][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.333480][T20867] syzkaller1: linktype set to 520 [ 508.338948][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.339025][T20867] syzkaller1: linktype set to 520 [ 508.339295][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.339352][T20867] syzkaller1: linktype set to 520 [ 508.339586][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.339635][T20867] syzkaller1: linktype set to 520 [ 508.354298][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.354371][T20867] syzkaller1: linktype set to 520 [ 508.354603][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.354652][T20867] syzkaller1: linktype set to 520 [ 508.354861][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.354911][T20867] syzkaller1: linktype set to 520 [ 508.357635][T20867] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 508.357708][T20867] syzkaller1: linktype set to 520 [ 508.672596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.762121][T20843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3617'. [ 509.332383][T20891] ip_tables: iptables: counters copy to user failed while replacing table [ 509.498363][T20901] netlink: 'syz.4.3630': attribute type 9 has an invalid length. [ 509.512466][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 509.528502][T20901] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3630'. [ 509.688787][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'. [ 509.709756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.953864][T20925] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.3633'. [ 510.474553][T20958] x_tables: duplicate underflow at hook 2 [ 510.749941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.789818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.829825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.869852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.273298][ T4980] udevd[4980]: worker [5630] /devices/virtual/block/nbd1 is taking a long time [ 514.909858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.940020][ T9922] batadv1: left promiscuous mode [ 515.949811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.989817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.029862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.069800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.109800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.149793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.189838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.230336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.269817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.309842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.349878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.389838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.429830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.469847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.624742][T20965] netlink: 'syz.3.3643': attribute type 10 has an invalid length. [ 529.644910][T20965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.655143][T20965] team0: Port device netdevsim1 added [ 529.906911][T20966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.913741][T20965] netlink: 'syz.3.3643': attribute type 10 has an invalid length. [ 530.000132][T20965] team0: Port device netdevsim1 removed [ 530.002918][T20965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.007371][T20965] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 530.509797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.658022][T21016] netlink: 'syz.4.3656': attribute type 1 has an invalid length. [ 530.698369][T21016] bond2: entered promiscuous mode [ 530.698815][T21016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.744981][T21016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.745217][T21016] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 530.745237][T21016] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 530.766418][T21016] bond2: (slave ip6gre1): making interface the new active one [ 530.766440][T21016] ip6gre1: entered promiscuous mode [ 530.788892][T21016] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 530.906189][T21026] netlink: 'syz.4.3659': attribute type 2 has an invalid length. [ 530.925838][T21026] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 531.277291][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'. [ 531.412807][T21048] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 531.549996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.577777][T21062] ip_tables: iptables: counters copy to user failed while replacing table [ 531.612407][T21059] veth1_to_bond: entered allmulticast mode [ 531.633567][T21058] veth1_to_bond: entered promiscuous mode [ 531.637795][T21059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3665'. [ 531.718125][T21059] veth1_to_bond (unregistering): left promiscuous mode [ 531.718168][T21059] veth1_to_bond (unregistering): left allmulticast mode [ 531.774456][T21059] bond0: (slave bond_slave_1): Releasing backup interface [ 532.163954][T21083] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3673'. [ 532.381202][T21097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3677'. [ 532.485488][T21097] bond2 (unregistering): Released all slaves [ 532.543050][T21107] xt_hashlimit: size too large, truncated to 1048576 [ 532.591444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.812315][T21107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3679'. [ 532.840084][T21107] ipvlan0: entered allmulticast mode [ 532.840110][T21107] veth0_vlan: entered allmulticast mode [ 533.186686][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3688'. [ 533.186978][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3688'. [ 533.406788][T21139] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3692'. [ 533.487407][T21145] ip_tables: iptables: counters copy to user failed while replacing table [ 533.505807][T21145] tipc: Started in network mode [ 533.505826][T21145] tipc: Node identity ac1414aa, cluster identity 4711 [ 533.505967][T21145] tipc: New replicast peer: 172.20.20.187 [ 533.533872][T21145] tipc: Enabled bearer , priority 26 [ 533.629796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.765555][T21167] netlink: 'syz.2.3696': attribute type 12 has an invalid length. [ 533.787340][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3696'. [ 533.821435][T21171] FAULT_INJECTION: forcing a failure. [ 533.821435][T21171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.821469][T21171] CPU: 1 UID: 0 PID: 21171 Comm: syz.3.3698 Not tainted syzkaller #0 PREEMPT(full) [ 533.821491][T21171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.821504][T21171] Call Trace: [ 533.821512][T21171] [ 533.821521][T21171] dump_stack_lvl+0xe8/0x150 [ 533.821554][T21171] should_fail_ex+0x410/0x560 [ 533.821582][T21171] _copy_to_user+0x31/0xb0 [ 533.821610][T21171] simple_read_from_buffer+0xe1/0x170 [ 533.821641][T21171] proc_fail_nth_read+0x1bb/0x230 [ 533.821670][T21171] ? common_file_perm+0x20e/0x2b0 [ 533.821697][T21171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.821731][T21171] ? rw_verify_area+0x24a/0x4c0 [ 533.821760][T21171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.821789][T21171] vfs_read+0x213/0xa80 [ 533.821822][T21171] ? __pfx___mutex_lock+0x10/0x10 [ 533.821935][T21171] ? __pfx_vfs_read+0x10/0x10 [ 533.821964][T21171] ? __fget_files+0x2a/0x420 [ 533.821995][T21171] ? __fget_files+0x3a2/0x420 [ 533.822019][T21171] ? __fget_files+0x2a/0x420 [ 533.822053][T21171] ksys_read+0x150/0x270 [ 533.822084][T21171] ? __pfx_ksys_read+0x10/0x10 [ 533.822121][T21171] do_syscall_64+0x166/0x520 [ 533.822143][T21171] ? trace_irq_disable+0x3b/0x140 [ 533.822163][T21171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.822184][T21171] ? clear_bhb_loop+0x70/0xc0 [ 533.822208][T21171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.822228][T21171] RIP: 0033:0x7f5cdc35e98e [ 533.822246][T21171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.822270][T21171] RSP: 002b:00007f5cdd313fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.822289][T21171] RAX: ffffffffffffffda RBX: 00007f5cdd3146c0 RCX: 00007f5cdc35e98e [ 533.822302][T21171] RDX: 000000000000000f RSI: 00007f5cdd3140a0 RDI: 0000000000000003 [ 533.822313][T21171] RBP: 00007f5cdd314090 R08: 0000000000000000 R09: 0000000000000000 [ 533.822325][T21171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.822336][T21171] R13: 00007f5cdc626038 R14: 00007f5cdc625fa0 R15: 00007ffc3bcec618 [ 533.822366][T21171] [ 533.947378][T21172] netlink: 'syz.2.3696': attribute type 1 has an invalid length. [ 533.948272][T21168] netlink: 'syz.2.3696': attribute type 1 has an invalid length. [ 534.097667][T21174] syzkaller0: entered promiscuous mode [ 534.097690][T21174] syzkaller0: entered allmulticast mode [ 534.131988][T21174] netlink: 'syz.0.3699': attribute type 11 has an invalid length. [ 534.318719][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'. [ 534.619962][T10846] tipc: Node number set to 2886997162 [ 534.670615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.091319][T21210] bridge_slave_0: left allmulticast mode [ 535.091345][T21210] bridge_slave_0: left promiscuous mode [ 535.091577][T21210] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.133718][T21210] bridge_slave_1: left allmulticast mode [ 535.133746][T21210] bridge_slave_1: left promiscuous mode [ 535.135196][T21210] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.168392][T21210] bond0: (slave bond_slave_0): Releasing backup interface [ 535.188422][T21210] bond0: (slave bond_slave_1): Releasing backup interface [ 535.217927][T21210] team0: Port device team_slave_0 removed [ 535.242386][T21210] team0: Port device team_slave_1 removed [ 535.244998][T21210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.245022][T21210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.266138][T21210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.266161][T21210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.294956][T21210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 535.295179][ T25] wg2 speed is unknown, defaulting to 1000 [ 535.711579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.996849][T21247] FAULT_INJECTION: forcing a failure. [ 535.996849][T21247] name failslab, interval 1, probability 0, space 0, times 0 [ 535.996883][T21247] CPU: 0 UID: 0 PID: 21247 Comm: syz.0.3717 Not tainted syzkaller #0 PREEMPT(full) [ 535.996906][T21247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.996918][T21247] Call Trace: [ 535.996926][T21247] [ 535.996935][T21247] dump_stack_lvl+0xe8/0x150 [ 535.996969][T21247] should_fail_ex+0x410/0x560 [ 535.996996][T21247] should_failslab+0xa8/0x100 [ 535.997022][T21247] __kvmalloc_node_noprof+0x176/0x820 [ 535.997046][T21247] ? __kvmalloc_node_noprof+0x345/0x820 [ 535.997065][T21247] ? bpf_check_cfg+0x1ad/0x3840 [ 535.997082][T21247] ? bpf_check_cfg+0x1ad/0x3840 [ 535.997110][T21247] bpf_check_cfg+0x1ad/0x3840 [ 535.997146][T21247] ? kasan_quarantine_put+0xbb/0x1f0 [ 535.997164][T21247] ? lockdep_hardirqs_on+0x7b/0x110 [ 535.997188][T21247] ? __pfx_bpf_check_cfg+0x10/0x10 [ 535.997204][T21247] ? bpf_prog_calc_tag+0x310/0x370 [ 535.997224][T21247] ? vfree+0x42b/0x490 [ 535.997254][T21247] ? bpf_prog_calc_tag+0x310/0x370 [ 535.997280][T21247] ? check_and_resolve_insns+0x1d54/0x21d0 [ 535.997309][T21247] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 535.997333][T21247] ? add_kfuncs+0x251/0x2e0 [ 535.997357][T21247] bpf_check+0x24b6/0x2e10 [ 535.997383][T21247] ? ktime_get_with_offset+0x93/0x2d0 [ 535.997405][T21247] ? __pfx_bpf_check+0x10/0x10 [ 535.997424][T21247] ? bpf_obj_name_cpy+0x194/0x1e0 [ 535.997448][T21247] bpf_prog_load+0x14d6/0x1c20 [ 535.997476][T21247] ? __pfx_bpf_prog_load+0x10/0x10 [ 535.997513][T21247] __sys_bpf+0xd0d/0xd90 [ 535.997537][T21247] ? __pfx___sys_bpf+0x10/0x10 [ 535.997562][T21247] ? __fget_files+0x2a/0x420 [ 535.997596][T21247] ? ksys_write+0x242/0x270 [ 535.997622][T21247] ? __pfx_ksys_write+0x10/0x10 [ 535.997656][T21247] __x64_sys_bpf+0xba/0xd0 [ 535.997675][T21247] do_syscall_64+0x166/0x520 [ 535.997692][T21247] ? trace_irq_disable+0x3b/0x140 [ 535.997708][T21247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.997725][T21247] ? clear_bhb_loop+0x70/0xc0 [ 535.997745][T21247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.997761][T21247] RIP: 0033:0x7f9ad8d9e159 [ 535.997776][T21247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.997791][T21247] RSP: 002b:00007f9ad9be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 535.997809][T21247] RAX: ffffffffffffffda RBX: 00007f9ad9025fa0 RCX: 00007f9ad8d9e159 [ 535.997822][T21247] RDX: 0000000000000094 RSI: 0000200000001300 RDI: 0000000000000005 [ 535.997833][T21247] RBP: 00007f9ad9be7090 R08: 0000000000000000 R09: 0000000000000000 [ 535.997843][T21247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.997853][T21247] R13: 00007f9ad9026038 R14: 00007f9ad9025fa0 R15: 00007ffc72d5fa58 [ 535.997878][T21247] [ 536.554980][T21269] __nla_validate_parse: 3 callbacks suppressed [ 536.555001][T21269] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3724'. [ 536.584857][T21268] tipc: Started in network mode [ 536.584873][T21268] tipc: Node identity , cluster identity 4711 [ 536.584885][T21268] tipc: Failed to obtain node identity [ 536.584909][T21268] tipc: Enabling of bearer rejected, failed to enable media [ 536.587094][T21266] tipc: Started in network mode [ 536.587107][T21266] tipc: Node identity , cluster identity 4711 [ 536.587121][T21266] tipc: Failed to obtain node identity [ 536.587145][T21266] tipc: Enabling of bearer rejected, failed to enable media [ 536.749768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.018893][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3728'. [ 537.139397][T21293] FAULT_INJECTION: forcing a failure. [ 537.139397][T21293] name failslab, interval 1, probability 0, space 0, times 0 [ 537.139432][T21293] CPU: 0 UID: 0 PID: 21293 Comm: syz.2.3730 Not tainted syzkaller #0 PREEMPT(full) [ 537.139455][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 537.139467][T21293] Call Trace: [ 537.139485][T21293] [ 537.139495][T21293] dump_stack_lvl+0xe8/0x150 [ 537.139528][T21293] should_fail_ex+0x410/0x560 [ 537.139556][T21293] should_failslab+0xa8/0x100 [ 537.139583][T21293] __kvmalloc_node_noprof+0x176/0x820 [ 537.139609][T21293] ? bpf_compute_postorder+0x83/0x970 [ 537.139629][T21293] ? bpf_compute_postorder+0x83/0x970 [ 537.139655][T21293] bpf_compute_postorder+0x83/0x970 [ 537.139678][T21293] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 537.139702][T21293] ? add_kfuncs+0x251/0x2e0 [ 537.139726][T21293] bpf_check+0x24d6/0x2e10 [ 537.139757][T21293] ? ktime_get_with_offset+0x93/0x2d0 [ 537.139782][T21293] ? __pfx_bpf_check+0x10/0x10 [ 537.139807][T21293] ? bpf_obj_name_cpy+0x194/0x1e0 [ 537.139839][T21293] bpf_prog_load+0x14d6/0x1c20 [ 537.139872][T21293] ? __pfx_bpf_prog_load+0x10/0x10 [ 537.139919][T21293] __sys_bpf+0xd0d/0xd90 [ 537.139950][T21293] ? __pfx___sys_bpf+0x10/0x10 [ 537.139981][T21293] ? __fget_files+0x2a/0x420 [ 537.140026][T21293] ? ksys_write+0x242/0x270 [ 537.140056][T21293] ? __pfx_ksys_write+0x10/0x10 [ 537.140090][T21293] __x64_sys_bpf+0xba/0xd0 [ 537.140113][T21293] do_syscall_64+0x166/0x520 [ 537.140134][T21293] ? trace_irq_disable+0x3b/0x140 [ 537.140153][T21293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.140173][T21293] ? clear_bhb_loop+0x70/0xc0 [ 537.140197][T21293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.140215][T21293] RIP: 0033:0x7f8c0339e159 [ 537.140234][T21293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.140251][T21293] RSP: 002b:00007f8c04275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.140273][T21293] RAX: ffffffffffffffda RBX: 00007f8c03625fa0 RCX: 00007f8c0339e159 [ 537.140288][T21293] RDX: 0000000000000094 RSI: 0000200000001300 RDI: 0000000000000005 [ 537.140300][T21293] RBP: 00007f8c04275090 R08: 0000000000000000 R09: 0000000000000000 [ 537.140314][T21293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.140327][T21293] R13: 00007f8c03626038 R14: 00007f8c03625fa0 R15: 00007ffe5e60cfe8 [ 537.140358][T21293] [ 537.575045][T21296] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3731'. [ 537.617623][T21303] IPVS: set_ctl: invalid protocol: 8 135.107.8.0:5120 [ 537.847185][T21318] ip_tables: iptables: counters copy to user failed while replacing table [ 537.926091][T21314] tipc: Started in network mode [ 537.926111][T21314] tipc: Node identity ceb396619bd8, cluster identity 4711 [ 537.926206][T21314] tipc: Enabled bearer , priority 0 [ 537.926412][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.926644][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.926872][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.927097][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.927323][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.940033][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.940455][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.941323][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.954793][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.955222][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.955604][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.960906][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.961379][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.961796][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.962180][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.972841][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.973299][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.973687][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.993310][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.993776][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.994203][T21314] tipc: Enabling of bearer rejected, already enabled [ 537.994601][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.001427][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.001868][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.002274][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.008406][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.008804][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.009208][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.015630][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.016083][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.016472][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.016860][T21314] tipc: Enabling of bearer rejected, already enabled [ 538.067848][T21314] tipc: Disabling bearer [ 538.416089][T21341] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 538.450210][T21341] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 539.038598][T21358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3741'. [ 539.061500][T21363] netlink: 'syz.4.3744': attribute type 21 has an invalid length. [ 539.095076][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3743'. [ 539.095112][T21360] netlink: 'syz.3.3743': attribute type 29 has an invalid length. [ 539.095125][T21360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3743'. [ 539.234531][ T32] INFO: task kworker/1:1H:1992 blocked for more than 143 seconds. [ 539.234556][ T32] Not tainted syzkaller #0 [ 539.234567][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.234577][ T32] task:kworker/1:1H state:D stack:26184 pid:1992 tgid:1992 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 539.234631][ T32] Workqueue: kblockd blk_mq_run_work_fn ** replaying previous printk message ** [ 539.234631][ T32] Workqueue: kblockd blk_mq_run_work_fn [ 539.234780][ T32] Call Trace: [ 539.234789][ T32] [ 539.234802][ T32] __schedule+0x17db/0x58f0 [ 539.234826][ T32] ? __lock_acquire+0x747/0x2de0 [ 539.234874][ T32] ? __pfx___schedule+0x10/0x10 [ 539.234904][ T32] ? schedule+0x90/0x2b0 [ 539.234928][ T32] schedule+0x164/0x2b0 [ 539.234950][ T32] schedule_timeout+0x152/0x2c0 [ 539.234978][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 539.235007][ T32] ? __pfx_process_timeout+0x10/0x10 [ 539.235043][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 539.235073][ T32] ? prepare_to_wait_event+0x436/0x480 [ 539.235110][ T32] nbd_queue_rq+0x96f/0xff0 [ 539.235176][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 539.235197][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 539.235236][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 539.235275][ T32] ? sbitmap_get+0x229/0x390 [ 539.235345][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 539.235368][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 539.235397][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 539.235441][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 539.235465][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 539.235497][ T32] ? lock_acquire+0x115/0x350 [ 539.235521][ T32] ? process_scheduled_works+0x97a/0x1630 [ 539.235551][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 539.235577][ T32] ? blk_mq_run_work_fn+0x144/0x300 [ 539.235604][ T32] blk_mq_run_work_fn+0x16c/0x300 [ 539.235632][ T32] ? process_scheduled_works+0x97a/0x1630 [ 539.235658][ T32] process_scheduled_works+0xc3d/0x1630 [ 539.235717][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.235749][ T32] ? assign_work+0x3cf/0x5d0 [ 539.235780][ T32] worker_thread+0xa47/0xfb0 [ 539.235821][ T32] ? __kthread_parkme+0x71/0x1f0 [ 539.235859][ T32] kthread+0x38b/0x480 [ 539.235880][ T32] ? __pfx_worker_thread+0x10/0x10 [ 539.235929][ T32] ? __pfx_kthread+0x10/0x10 [ 539.235952][ T32] ret_from_fork+0x514/0xb70 [ 539.235975][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 539.236007][ T32] ? __switch_to+0xc89/0x1420 [ 539.236037][ T32] ? __pfx_kthread+0x10/0x10 [ 539.236059][ T32] ret_from_fork_asm+0x1a/0x30 [ 539.236105][ T32] [ 539.236130][ T32] INFO: task kworker/0:1H:2596 blocked for more than 143 seconds. [ 539.236146][ T32] Not tainted syzkaller #0 [ 539.236155][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.236165][ T32] task:kworker/0:1H state:D stack:25928 pid:2596 tgid:2596 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 539.236217][ T32] Workqueue: kblockd blk_mq_run_work_fn [ 539.236244][ T32] Call Trace: [ 539.236252][ T32] [ 539.236264][ T32] __schedule+0x17db/0x58f0 [ 539.236313][ T32] ? __pfx___schedule+0x10/0x10 [ 539.236350][ T32] ? schedule+0x90/0x2b0 [ 539.236373][ T32] schedule+0x164/0x2b0 [ 539.236396][ T32] schedule_timeout+0x152/0x2c0 [ 539.236425][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 539.236454][ T32] ? __pfx_process_timeout+0x10/0x10 [ 539.236488][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 539.236519][ T32] ? prepare_to_wait_event+0x436/0x480 [ 539.236554][ T32] nbd_queue_rq+0x96f/0xff0 [ 539.236588][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 539.236611][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 539.236637][ T32] ? lock_acquire+0x115/0x350 [ 539.236658][ T32] ? blk_queue_exit+0x26/0x240 [ 539.236725][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 539.236760][ T32] ? sbitmap_get+0x229/0x390 [ 539.236787][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 539.236809][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 539.236837][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 539.236882][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 539.236909][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 539.236940][ T32] ? lock_acquire+0x115/0x350 [ 539.236966][ T32] ? process_scheduled_works+0x97a/0x1630 [ 539.236997][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 539.237023][ T32] ? blk_mq_run_work_fn+0x144/0x300 [ 539.237050][ T32] blk_mq_run_work_fn+0x16c/0x300 [ 539.237078][ T32] ? process_scheduled_works+0x97a/0x1630 [ 539.237105][ T32] process_scheduled_works+0xc3d/0x1630 [ 539.237163][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.237196][ T32] ? assign_work+0x3cf/0x5d0 [ 539.237228][ T32] worker_thread+0xa47/0xfb0 [ 539.237269][ T32] ? __kthread_parkme+0x71/0x1f0 [ 539.237308][ T32] kthread+0x38b/0x480 [ 539.237335][ T32] ? __pfx_worker_thread+0x10/0x10 [ 539.237360][ T32] ? __pfx_kthread+0x10/0x10 [ 539.237382][ T32] ret_from_fork+0x514/0xb70 [ 539.237404][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 539.237436][ T32] ? __switch_to+0xc89/0x1420 [ 539.237466][ T32] ? __pfx_kthread+0x10/0x10 [ 539.237488][ T32] ret_from_fork_asm+0x1a/0x30 [ 539.237534][ T32] [ 539.237686][ T32] [ 539.237686][ T32] Showing all locks held in the system: [ 539.237740][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 539.237842][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 539.237909][ T32] locks held by kworker/1:1H/1992: 4, on CPU#1: [ 539.237924][ T32] #0: ffff88801fe83540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 539.237978][ T32] #1: ffffc900069cfc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 539.238029][ T32] #2: ffff888026fff518 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 539.238079][ T32] #3: ffff88805131e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 539.238125][ T32] locks held by kworker/0:1H/2596: 4, on CPU#0: [ 539.238140][ T32] #0: ffff88801fe83540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 539.238188][ T32] #1: ffffc9000a5efc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 539.238240][ T32] #2: ffff888026fff518 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 539.238294][ T32] #3: ffff8880513051f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 539.238357][ T32] locks held by udevd/4980: 3, last CPU#1: [ 539.238371][ T32] #0: ffff88802b0a1998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 539.238420][ T32] #1: ffff888056bb4480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 539.238513][ T32] #2: ffff888026b9b0f8 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 539.238568][ T32] locks held by getty/5372: 2, on CPU#1: [ 539.238582][ T32] #0: ffff8880318c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 539.238704][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 539.238776][ T32] locks held by udevd/5630: 1, on CPU#1: [ 539.238791][ T32] #0: ffff888026fc3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 539.238877][ T32] locks held by syz-executor/17372: 1, last CPU#1: [ 539.238891][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: tomoyo_path_perm+0x251/0x560 [ 539.238971][ T32] locks held by syz-executor/18364: 4, last CPU#0: [ 539.238986][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 539.239038][ T32] #1: ffff88805062a9f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 539.239092][ T32] #2: ffff8880293de9b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 539.239148][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 539.239203][ T32] locks held by syz.3.3743/21359: 1, last CPU#1: [ 539.239218][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 539.239299][ T32] [ 539.239305][ T32] ============================================= [ 539.239305][ T32] [ 539.239326][ T32] NMI backtrace for cpu 0 [ 539.239339][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 539.239361][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.239372][ T32] Call Trace: [ 539.239380][ T32] [ 539.239388][ T32] dump_stack_lvl+0xe8/0x150 [ 539.239418][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 539.239479][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 539.239511][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 539.239541][ T32] sys_info+0x135/0x170 [ 539.239589][ T32] watchdog+0xfd7/0x1030 [ 539.239613][ T32] ? watchdog+0x1c7/0x1030 [ 539.239637][ T32] kthread+0x38b/0x480 [ 539.239655][ T32] ? __pfx_watchdog+0x10/0x10 [ 539.239674][ T32] ? __pfx_kthread+0x10/0x10 [ 539.239692][ T32] ret_from_fork+0x514/0xb70 [ 539.239713][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 539.239742][ T32] ? __switch_to+0xc89/0x1420 [ 539.239768][ T32] ? __pfx_kthread+0x10/0x10 [ 539.239787][ T32] ret_from_fork_asm+0x1a/0x30 [ 539.239828][ T32] [ 539.239927][ T32] Sending NMI from CPU 0 to CPUs 1: [ 539.239958][ C1] NMI backtrace for cpu 1 [ 539.239972][ C1] CPU: 1 UID: 0 PID: 21366 Comm: syz.4.3746 Not tainted syzkaller #0 PREEMPT(full) [ 539.239992][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.240003][ C1] RIP: 0010:unwind_next_frame+0x1993/0x2550 [ 539.240026][ C1] Code: bf 04 24 48 01 c6 4c 89 f7 48 89 da eb 41 49 8d 5d 02 49 83 c5 03 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 b6 0a 00 00 <4c> 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 c5 0a 00 00 48 0f [ 539.240042][ C1] RSP: 0000:ffffc90000a18740 EFLAGS: 00000046 [ 539.240058][ C1] RAX: 0000000000000000 RBX: ffffffff91202c22 RCX: 0000000000000000 [ 539.240070][ C1] RDX: ffffffff91202c24 RSI: 0000000000000008 RDI: ffffc90000a18848 [ 539.240082][ C1] RBP: 1ffffffff2240584 R08: ffffc90006ec7a80 R09: 0000000000000000 [ 539.240095][ C1] R10: ffffc90000a18838 R11: fffff52000143109 R12: dffffc0000000000 [ 539.240108][ C1] R13: ffffffff91202c23 R14: ffffc90000a187e8 R15: ffffc90000a18830 [ 539.240121][ C1] FS: 00007f09127376c0(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 539.240137][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.240149][ C1] CR2: 00007f0912736ff8 CR3: 0000000035c32000 CR4: 00000000003526f0 [ 539.240165][ C1] Call Trace: [ 539.240171][ C1] [ 539.240181][ C1] ? folio_alloc_mpol_noprof+0x39/0x160 [ 539.240203][ C1] ? unwind_next_frame+0x8f/0x2550 [ 539.240224][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 539.240242][ C1] arch_stack_walk+0x11b/0x150 [ 539.240263][ C1] ? vma_alloc_folio_noprof+0xe1/0x1e0 [ 539.240287][ C1] stack_trace_save+0xa9/0x100 [ 539.240311][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 539.240342][ C1] kasan_save_stack+0x3e/0x60 [ 539.240359][ C1] ? kasan_save_stack+0x3e/0x60 [ 539.240375][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 539.240400][ C1] ? insert_work+0x3d/0x330 [ 539.240418][ C1] ? __queue_work+0xd07/0x10d0 [ 539.240440][ C1] ? call_timer_fn+0x18d/0x5f0 [ 539.240458][ C1] ? __run_timer_base+0x67e/0x8b0 [ 539.240475][ C1] ? run_timer_softirq+0xb7/0x170 [ 539.240492][ C1] ? handle_softirqs+0x226/0x860 [ 539.240513][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 539.240533][ C1] ? irq_exit_rcu+0x9/0x30 [ 539.240553][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 539.240570][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.240588][ C1] ? post_alloc_hook+0x115/0x250 [ 539.240611][ C1] ? get_page_from_freelist+0x2209/0x2280 [ 539.240629][ C1] ? __alloc_frozen_pages_noprof+0x217/0x5a0 [ 539.240646][ C1] ? alloc_pages_mpol+0x21e/0x390 [ 539.240665][ C1] ? folio_alloc_mpol_noprof+0x39/0x160 [ 539.240705][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 539.240728][ C1] insert_work+0x3d/0x330 [ 539.240750][ C1] __queue_work+0xd07/0x10d0 [ 539.240773][ C1] ? __queue_work+0x1f8/0x10d0 [ 539.240800][ C1] call_timer_fn+0x18d/0x5f0 [ 539.240825][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 539.240847][ C1] ? call_timer_fn+0xd5/0x5f0 [ 539.240866][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 539.240891][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 539.240913][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 539.240937][ C1] __run_timer_base+0x67e/0x8b0 [ 539.240963][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 539.240984][ C1] ? ktime_get+0x1f5/0x220 [ 539.241001][ C1] ? lapic_next_event+0x11/0x20 [ 539.241021][ C1] run_timer_softirq+0xb7/0x170 [ 539.241040][ C1] handle_softirqs+0x226/0x860 [ 539.241062][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 539.241087][ C1] __irq_exit_rcu+0xcb/0x220 [ 539.241108][ C1] irq_exit_rcu+0x9/0x30 [ 539.241128][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 539.241145][ C1] [ 539.241151][ C1] [ 539.241158][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.241176][ C1] RIP: 0010:post_alloc_hook+0x115/0x250 [ 539.241199][ C1] Code: 48 c1 e8 03 42 80 3c 28 00 74 0c 48 c7 c7 00 ff 73 8e e8 4e da 0e 00 4c 03 25 87 0e 4b 0c 44 89 f9 48 c1 e1 0c 31 c0 4c 89 e7 aa 0f 1f 44 00 00 e8 5f a2 0e 00 e9 c4 00 00 00 e9 d3 00 00 00 [ 539.241214][ C1] RSP: 0000:ffffc90006ec76e0 EFLAGS: 00010246 [ 539.241229][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000f80 [ 539.241240][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888067764080 [ 539.241251][ C1] RBP: 0000000000140dca R08: ffffffff907a327f R09: 0000000000000000 [ 539.241263][ C1] R10: ffffed100ceec800 R11: fffffbfff20f4650 R12: ffff888067764000 [ 539.241276][ C1] R13: dffffc0000000000 R14: ffffea00019dd900 R15: 0000000000000001 [ 539.241299][ C1] get_page_from_freelist+0x2209/0x2280 [ 539.241325][ C1] ? lock_acquire+0x115/0x350 [ 539.241356][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 539.241377][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 539.241397][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 539.241419][ C1] ? __lock_acquire+0x747/0x2de0 [ 539.241437][ C1] alloc_pages_mpol+0x21e/0x390 [ 539.241461][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 539.241482][ C1] vma_alloc_folio_noprof+0xe1/0x1e0 [ 539.241505][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 539.241527][ C1] ? lock_acquire+0x115/0x350 [ 539.241546][ C1] do_pte_missing+0x173a/0x34b0 [ 539.241581][ C1] handle_mm_fault+0x1a53/0x3750 [ 539.241608][ C1] ? handle_mm_fault+0xf1/0x3750 [ 539.241636][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 539.241657][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 539.241694][ C1] do_user_addr_fault+0xa4f/0x1340 [ 539.241715][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 539.241734][ C1] exc_page_fault+0x6a/0xc0 [ 539.241752][ C1] asm_exc_page_fault+0x26/0x30 [ 539.241768][ C1] RIP: 0033:0x7f091174c69f [ 539.241783][ C1] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 539.241797][ C1] RSP: 002b:00007f0912736ff0 EFLAGS: 00010246 [ 539.241811][ C1] RAX: 00007f09127370d0 RBX: 0000000000020000 RCX: 00007f0912736ff0 [ 539.241829][ C1] RDX: 00007f09118518ad RSI: 0000000000000023 RDI: 00007f09127370d0 [ 539.241840][ C1] RBP: 00007f0912718000 R08: 0000000000000000 R09: 00007ffc1e247b37 [ 539.241852][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: 00007f09127370d0 [ 539.241864][ C1] R13: 000000000000000b R14: 00007ffc1e247a50 R15: 00007ffc1e247b38 [ 539.241885][ C1] [ 539.281062][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 540.754159][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 540.763261][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.773304][ T32] Call Trace: [ 540.776574][ T32] [ 540.779494][ T32] vpanic+0x56d/0xa60 [ 540.783479][ T32] ? __pfx___schedule+0x10/0x10 [ 540.788319][ T32] ? __pfx_vpanic+0x10/0x10 [ 540.792824][ T32] panic+0xc5/0xd0 [ 540.796539][ T32] ? __pfx_panic+0x10/0x10 [ 540.800949][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 540.806398][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 540.811759][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 540.817914][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 540.824065][ T32] watchdog+0x1030/0x1030 [ 540.828390][ T32] ? watchdog+0x1c7/0x1030 [ 540.832803][ T32] kthread+0x38b/0x480 [ 540.836888][ T32] ? __pfx_watchdog+0x10/0x10 [ 540.841552][ T32] ? __pfx_kthread+0x10/0x10 [ 540.846132][ T32] ret_from_fork+0x514/0xb70 [ 540.850711][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 540.855817][ T32] ? __switch_to+0xc89/0x1420 [ 540.860488][ T32] ? __pfx_kthread+0x10/0x10 [ 540.865066][ T32] ret_from_fork_asm+0x1a/0x30 [ 540.869841][ T32] [ 540.873123][ T32] Kernel Offset: disabled [ 540.877440][ T32] Rebooting in 86400 seconds..