last executing test programs: 7.924439682s ago: executing program 3 (id=2091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0xce) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 7.477679463s ago: executing program 3 (id=2095): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES64, @ANYRES16=r1, @ANYBLOB="0000010000000000000000000000ffffac1414aa8edd000020000100", @ANYRES32, @ANYBLOB="000102000a010101000023ab74f6d800000000000000000000080000", @ANYRES32=r1, @ANYBLOB="01020300fc000000000000000000000000000001d17d0000", @ANYRES8=r1], 0x78}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x19) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8015}, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, 0x0}, 0x4000840) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x24000800}, 0x40884) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$inet(0x2, 0x5, 0x5) socket(0x3, 0x800, 0xfffeffff) 7.169038258s ago: executing program 4 (id=2098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @mss={0x2, 0x8004}, @timestamp, @mss={0x2, 0x2}, @sack_perm, @timestamp, @window={0x3, 0x218, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) socket(0x2, 0xa, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @mss={0x2, 0x8004}, @timestamp, @mss={0x2, 0x2}, @sack_perm, @timestamp, @window={0x3, 0x218, 0x5}], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendto$inet(r0, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) (async) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10) (async) 6.70749606s ago: executing program 4 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) r2 = socket(0x1d, 0xa, 0x7) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r4, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@newtclass={0x68, 0x28, 0x0, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xd}, {0xc, 0x2}, {0x1, 0xffff}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3}}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x22, 0x1}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x4, 0xf5}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc800}, 0x4000001) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x7d}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) writev(r1, &(0x7f0000001580)=[{&(0x7f00000000c0)="81454920f4355b30bdcac3903eea1ab1c967", 0x12}, {&(0x7f0000000100)="f19b4cfeaddd0a9327aac595a43dcc7a8529acc1318575", 0x17}, {&(0x7f0000001880)="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", 0x818}], 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xb65, 0x6, 0x2, 0x9}, {0x64, 0x10, 0x6, 0x4}, {0x3f, 0x40, 0x97, 0xb}, {0xb, 0x0, 0x8, 0x1}, {0xf55d, 0x5}]}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @private2, 0x8}, 0x1c) 6.450933402s ago: executing program 0 (id=2105): syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000006c06e3bcee5586dd6001010000161100fc020000000000000000000000000000fe8000000000000000000000000000aa00000e220006"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) recvfrom(r2, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x120}}, 0x4015) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0xfffc, @empty}}, 0x15}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004844}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) 5.991515761s ago: executing program 3 (id=2106): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) pipe(&(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="02ef667db5e53f", 0x7}], 0x1) 5.988750612s ago: executing program 0 (id=2107): r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0xfc2, 0x3ff}, 0x50) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200), &(0x7f0000000240)=0x8) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r2, &(0x7f0000000080)=""/253, 0xfd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r4, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x917bebe71bbf920a}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5e7ff860529e5c0cabbd0b7d39a8fa288151cc455022770d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4044004}, 0x50) read(r2, 0x0, 0x0) 5.987968899s ago: executing program 1 (id=2108): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac06, 0xfac11, 0xfac10]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.987488918s ago: executing program 4 (id=2109): syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500282c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa5e0402"], 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000800)=""/254, 0xfe, 0x40000002, &(0x7f0000000900)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @void, @mpls={[{0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}], @ipv6=@esp={0x3, 0x6, "12dad6", 0x5f3, 0x32, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x3a, 0x9, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x10, 0x5, [0x9, 0xd2, 0x0]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0xd7, 0x3c8, [0x2, 0x6]}}, @hao={0xc9, 0x10, @mcast2}]}], {0x4d6, 0x1, @cc={0x1, 0x0, 0x4, 0x76cf7dd6, 0x9, 0x4, 0xb9, [@ipv6=@gre_packet={0x7, 0x6, "4892b9", 0x54b, 0x2f, 0xff, @remote, @mcast2, {[@hopopts={0x89, 0x5, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x20, {0x0, 0x6, 0x1, 0x7, [0x40, 0xc, 0x1]}}, @enc_lim]}, @srh={0x11, 0xc, 0x4, 0x6, 0x40, 0x20, 0x3, [@loopback, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x42}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x33, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xc, 0x7, [0x7, 0x6]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x8, 0x64}, @srh={0x5c, 0x4, 0x4, 0x2, 0xd, 0x60, 0x9, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2]}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x17, 0x65}, @hopopts={0x3c, 0x14, '\x00', [@generic={0x5, 0x78, "3c212ef90f251f6cff733abb6700ca4a16fe8dc5f96d4506fe87159e997e23785848108f956509ebc72b5b01fc43f54f1640a7c678686f852a163d82ec0ea4173820799b63982ea23baca81fd9838fcaf35f9d447a89357dddeb1e96a849686ae0bbe516a7aa1a655da78fa105ba318c500e81ade6af585e"}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x101}, @enc_lim, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x2, 0x0, 0x6, 0x0, 0x0, 0x16, 0x66}, @dstopts={0x39, 0x22, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x1, [0x8]}}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x6, 0xe5, "4ff793b9d7bb862f7b6633d0cddfe677edd157dc5cc6b5829bc984870502a86458cc2299ee3132883cbfb633725dc4704537893c9f0151950718f057e0948238d4c201623711eda1ef7ea8094590980fe37c2ffd118235632b47eabff3464735a5de42856c3abd7ab86c8e5fd26102bd61ac0429d4519a17696397d799a499c517677a5cbb2b1d67fb55064f4524041774e79d7351ee115479cea93c80c7c0f56b3d647b4087cd9d7807a856cae0f9c3c43229a02fe28d4655296908b656b6ce38e11e5ff06cb5438715f146007f8f87a7912205c3d78858f02b10572f5e6ba26119927832"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x9b, 0x0, [0x1e90, 0x1], "2fd81a663d72e7ed8a15e1bfdfe40be8df16064f431836c8cd95c478b95fac8c288b8da6152773fc3c31c1751b5692f21937ebdf4e773fbec93e8a6a23b3a0e7db47c83323c15aff7034323879877dbb6a3313fdbd6f055ebcc050d4296021e134ca2b47636dcea31687639f6c6a47af39670d948ca06ab66ff486aeb91b1690a585c5d0a8cab83217dab418222be7b1125393153e92491d726fb3"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "3dcbc3ed8f484f1d43496949ef4867221cf0325d8d4ae2a419eee470738dc67ecaef440e7b748e8a7b09c505847d419b6c20f0c3d0e6f66ed6098508bfc1221a389f28b303051e70ba294bd58cdfa36c52fdb864e3ff35d4acbabcc52ea22c03dfba8a70c9655505555d6a9cdafbb1a4d0b3da06b0817c63671fc8b6"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "693855ae6f0ad181d6c15b8bd042654b160062a86a2a8b7039"}, {0x8, 0x88be, 0x0, {{0xc, 0x1, 0x2, 0x0, 0x0, 0x3, 0x5, 0x6}, 0x1, {0x93}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x10, 0x1, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x1, 0x3, 0x2, 0x4, 0x0, 0x1, 0x2}}}, {0x8, 0x6558, 0x2, "9a14cbb9b38f927eada2f8ce30acc099bf6d0d66bd2ecc74c26d3a01a9e8d617305b5ad0ff697eee7dff2d0f85f99853e2cdecb58b8a7bf39de38d9299b823419f620f66d595dc04fbbfe0be882c29a4061708b1dbce0a81e1487b653220a6b78e7158ee3cbe7c9a500039e6efa13c33418bccb6f4115a20ad01fe6f69fe67c5ba49534394a508f69b6774e9ebd3ca90e2faf48b440a1afd2a6c7a11d57636382477f362e55563c402cb872691eb64e7c03e514c28e298bbafe0ca16b83ba036fe764930891cade00faf66b28a4d827f85996d195793b4ac31879e45aa96682fcd46e2d86e6ee1eeea2f86"}}}}]}, "8267bc978983", 0x6}}}}}, 0x627) 5.984077192s ago: executing program 2 (id=2110): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20480, 0x0) 5.864297495s ago: executing program 1 (id=2111): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'sit0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback}}, 0xe8) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.736817675s ago: executing program 2 (id=2112): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) 5.681857488s ago: executing program 4 (id=2113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @loopback, 0x7}, 0x1c, 0x0}}], 0x1, 0x20080058) 5.593054818s ago: executing program 1 (id=2114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@multicast2, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@multicast2}, {@dev}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x321, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008841}, 0x4004000) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xe4, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff4ad7}, @IPVS_CMD_ATTR_DEST={0x68, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x84f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1000}, 0x44005) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) 5.40973574s ago: executing program 4 (id=2115): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) r2 = socket$kcm(0x28, 0x1, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001200)={{r1}, 0x0, 0x4, @unused=[0x8, 0x80000001, 0x4, 0x4], @name="706516632bb1ade9e0dfb8f5121a2d7fe7496e4940f28c29a036ec3b73051e67a2c3ce00075260b5045146aaf1ac15f7ba70463057829dfda98e80538b3df67c37b48dba18ba84680cdb792c81dd1abfc439d478dac24106d4026bf8554377f88e16e67ca39f0d6527cdcc8da88a9ed89377ea7f757d4fe8d611d94051aef2e68dd0f05e4d06e07719d012f62920c958f24af9a9ced0426c618e333a3f9967cb2be475c098d24f3bbe4ff289b34da8b478c6ca6b81dc94d4d8f18d60f861e1a9a46f5ee11ece949d371be68ed95084b05b6dfb2f7787dcb812ee458c6d48e5af62f5eaf83281f669843c351063a1eca7b37cd31612cfe0c8451c39001e84fddaf0d805a5dd9abce54f4e1e279dfd188b0e1080432b9514531475709691ec390fc267f577d180b1ab8bb3edec0d698aee9f6c5fdc1087ebc5214ec3b0f56e6308aaabfb4cc4742d25ecb26208e2e1537d814a059cc982624dcbb245d5a2d6986b112054d798bc052cfb89caff361771b93bd01f0c2e98bcae725e1e7a0d2fe5519e73ef3fb0b9578eba2db1a37b04db71e658fec7a557193d22fc7e2a87bf36bbbd4510651bbb502a06e844628a694dd592cbe30dd7af3421197a8ef9730f7528f49208b327d45bd875126b8353832c4fb80871fdd2c269437b36658a62a57c2be5d9ca354cee8d938328858f765a396163fc051c367a0b7d9e7633f0d6a9689015a20bc425e73d698c76dfecd14a3c4b455c08b97ab7e71762d174fda96c94a7f8d414f6b561d3b8c0a1848c4e4f94f0da838c5f1d72e946ad0b658eb6f4fd47d13c007d6ecc94ea7477ef29d4f0ccea3fa91285d2703178f3b90853126febc3e297ad314d776c422d83a857efcf5680b47f6a94ca24e5a662e8c53e04557e147d0ad1275e8f4dc000b8080f2723269fc2e4a347c14eb6011c3a803ce0718012267312178129bf26199b280007a17ffaf591bdea275dc2242d72e099a50262dbeb784786ace5155beee508378311e7089fdf127d3176bc31ea4f53bd324569ba20a967bf04b33982138d2d8faa2bfd6e76df8298068e5bee21b762c429de266446d8bd9dee86b6c9cd9100e63d7f5de056e00d8ca0babb155b19d6d84eb2f3e1baa43d27870f551e32495f4d4d2d1cef14f4048c7d9119e5a7062ef2d533fff6e6c57bbee113db6d82e31cc930a29cb1c4a453124d4e94d906ad770eaed1cabcc2454fef208f5581c712e1a5502bfafad462dbd9c661ca80b89d1a394429df19e8a9f73c157bd0715a4fd4d2a88f431d80dce7e1ae49556f0ec369fd7e8b2cd14abd3168bbef73a3b37f42631e34ee015c2b0fdc9ae3778ad95e71cad7a00c911b4a6956a62d89beadf87117b017bc9eac0b84761f689387b90c6016666863867c8f1ec2378905765e9bf2cec10db74f121f700c161df15b7e92b8b44ee1e7bab386449e5456b961d76519ed2d76b3b83029e5954c22a7cf445c8a73f5b2a752725f943560fb923127c69c295b7a02ace92ca110e9f052d05598d3c1f3c95902c8de29507b0b249d0e2c95a44d0e9462f3ebe1b238ec917ae3b5d4f2729833b253cf6978f98ab82050e69a4958ea1c1019cbffcaa707a6b7523b0f8a12e4d2f3cee859903b9a1a8b213d2a6889d81aba9d740814aeffc17e7dbfde8ac7a5d71559805955ad4234c9e7feed3dee4a756c7b5d4304d8ed67665dbbd255d309f8d1990a5c5c540626a50e81b6619a2d20c01185df337a8cd3eba67236766c2e2b39a87d33e3066c299340c21c87398c08256b1fd7e010ee8a21b1dfd8d2404120ddc32436f236d6440af7a693c055cedcdd4c71706bfb167be6d3b7febfef90529f3177b0927a627e96b44c930e85ddbb473184dcc6ab1d2d7d817a83cf6fc535235551eca6c42372665e82277eedf038cfe14b772fded6fa455470f1bf827373db3bb088d039eeb55f0ce39c1171d0798993615b0a32b59f133a26bee8fc4cccd7b557f286d9fd25d900b2895db82fd3e6e8d275d6215480c2914f2fff9b88cf007f1932ea28896c446299880f2d63569bbaad93a7a4421c3a775e0d9b0fb90738b1ca4c63942d6e2f783e612380cd04cc3474e323be1f86df4328bbfa8a7a47086a08c2f4af4bfe2d3b7a45df05b04bac16905ee22c5bdc3856aac09a12665e53e39d8893cf83913da1f342f6072f437c09d301d0d6ae611d6868706a60625ff827b6c7179884d428df45cfaed6ac2ffeabb6eecffb0dea38a21462f977e86437d74f47144fb1938c18744944dc27154742c65d03c3b57ef1f817367660d4abeb5625e9cb869837d1ab6e5d1f36352ca3042045d5f3e1bdfabc965792c31922ece92796bc06c5e7c7dad7501a63fef8b5045768dc772bce7b71d4737c2711319cc51122f0e246f28eef27f37c0d30eac2eb61cc6bd6ba0450f9368cfba76015a96b23258c315d636c2011a866862cca2004b094f46b3ae5c16a88c9730752c1d2b58d041ebdd8aaa71c6d9144d3a434e47c731d70f371c97bed1a050c84ddc6a52d70e60c256024c33744e7aee588d2d9b027a1618137eaeff973491500ff00dc87653055d6fd536f9e1ec90a988123707e06e942a46c707a9b16bb3cdd02e6d77bde99f43c24a02afabe9c9c867f0ecf57af305702dad2446bf1478a86fc05d96c79b994d908c076978bd78c443db2f75dc790e5e1017e0a88aa2d4daf88d55d1bb4b3bf387177724650a4dc707e615371c5ee42d9334268425da6c0e099224e06f1fd2cffea912dfd9853616d5fe112e83c4101c6dc8c46ffe0e776f0810b2572733105598c1a10349647fecb21eaa80bc72d5742d1709e93dffaa4b252047f77f7376df19014e673f3e581a3db39aaa52a6425733e9b3cf74b6c2ccca2a4b4fdaf5d46fa60b52b1475293270db798052c0178a4f429b9c2244dff668ecc183a3fd8a358fef66622e5a96c9e304cb34506b88ee745ddc96985a195385df898d7940fb988da29aabf5e1f5c1ed28aefc68dac1c64f185df7d5ba59af02e4d3f16ddf42ffdb94177438aee84eb9ca790eac6d498f433a2528de08f638efa435d9ad24de296ab62a5e50585903f9de8780140983aecc22a91986a94a1bc5d4b639a3b8da3ef36dbf5bdc8ba282e7f5e0651464f4c1e27edb8a44340fb336184b3838d108c899fdad37b45cff1dac1c251046b84924e61786d6a78c280b17ed0ed3d0a183331d29984a75e3f95ea2ab0808d6dfd4af99c00c85bae7700c93d578febbc71b466b66cd8a63ebc87a5db7659016c91a3300feb1af61a170d1938585e4a3774d48e7b2afbcaecaaa6622320dc63438f2f57074b1d0eaf7ce9e1ca5d780c2558a46c71f05f904299eecf8b9c3060096b0ef0a571d87c6faee7a9eb3cedc6c4ee7e62774dc943bbc693f37d4be84180e41c336c58411e881c3e84dbaa70173dcc2208d97aac447a7128eb91215b4e097668296da30c6740b943606e0b6025faefec0d36d4da3d82245d09bd4a40de8d310dd18c6b22b4c2316297fecce4cdecef9cec9a2f472161bc054f0e810a8ffc9b7eac9180836e1e2aaafa6817a40c4fa7781965d89cd274b69988a79417f99bee45d666092daa81ca3d9f7c5f90ffad30cd3992bed091e0d48dd6b75e8603bfdc9e122f7accc6a4a61b9fc69ddd80347ce74c01b0fe646a99f3cf37d2d90abd0cf901a5850429ca96e5cb826b185bd6ca6e486845a24c4d079727a554f7caa267afe85625bfc4470566b8f9d6ec1b65edcaa4fc08332fdf02d5e551733209d83d93629c310ffd81bb3d12bf9586282a344d0b39c28b26c7f4ba7ed18eff86cfcca377d6a2d421e60fb986d42a08ff4db30f424308626a86acc815fb5dc1fdd20744ed93064225e32d147b56fc511ed2bd3ec71303aead93471cff4f8fa7ab9285e3c08eecbd37a0c53b0f926c2beccdef221a0f476588e3ae6a38d2d018e4a48a944a33f77107671672e6d40b2e43873fcd8ca26bb6f664b9e8bcfd82a0e74ee94ee5274b5313d2dc17ef5b7ad203243c663dfcf2f612969680dd5217924904d6cb58c47f2b6726eb4b6290150fd322f03edbab2a3c62695071108c12f8865911b3fa4930a150c35dc0d47f3540b44c56ce66452ecbfe80debb322f42d848ad091dda9016fe4d36ec2c0e4dbfcd698ebccc1e9d880bfc98281d60439bf8d9a7499b444656d13aa3b1d674cc498b14df64392568263326bbc4cf4513149a125a5cb3a4b42b84c2196e56b342d91496dc4079cc2b5c5a0dec771091c74f3de202eef0ab2f541226c9d1dbe8a9bfa6e577c48ebd3b3b2127a8d9a0cc30edaa255336089fbd1baeb642270ec83442f603d48087cb1f0e35033bc420303114e9bb84950149e7c5208937d741e779e2408dc6dbc5d9047e7cb4dfe81b167065fade9e92e8f7be8061144d3180e8e4f613e1e08ce021315141902db073f306a80e9bc168c6a4d4c8d4be2ca6fffd601d0295b7165b56a919c2823551348832f538f090da78ede111f570a4ac6e71d00cc31cc594552f8b9e7b58e72aab53d116ba7a6687be619391b1c6838df3afcb6be7dfa405820399f8932e423ad98bd9c4043d7c7f4c8f4b27fa8a2c227db91c0f3ffff01501bface74b63d4ef53a83674e2fcc46fb305fd3b49dbb92999d0375d6768264fea3a6dba8ada1b8450ad77993666b22b4c65601f6d0737625084f639dce7e852785ba82f7635531a3d0a160630d80b297e1ad161242820503f872c9223bc68b35c245d9672c3d054c68177219de303baac54c5b1a62d8a0af7ad729c42b8bdc0acf84f241944b2a77a63b90deac87c74c71428a268b8b6a0a747fe34fb95db9ee579009bcf49781553fd700104418f05fb82a20c3da55e4d309ff315086d3cf70875e0d7248c072579c0897245d7e380fd199ea6f59244329d4b68e0f9ed7aa553599bd0042b26f49e8fb2c3e240f1680fdb343b49667c031f48b11a7840944ae581be17167b68e754ad0bf457ed091defa1c6ab34824ff0fd9167f3ee71a9908e409df927e203d689ed6c30370eb1b19430814ef52e9bf2092ce6f2ae05daeb40b49b933618dc06a773a9904c37449c073c872cf19f93a9dd8fd32a9d1d1884e599772b6f10af30e206c66a84269b695e8b886fcd4c95ac4d60411e1705b79267e79ff6e95f072ad7289b1cb195fec6506a03fdda5b7bc16fbeb6bf01bf59044fd6226da5947cd6d0d85cd7e0802aece8dd3e2114f710b9fcdddfc09edb2d54ef0ff12ec10d9d7963a0f5ede396f025fec6f651fb71bd981e6ec69d643654c3b22e6ae0471342b825a3f3778ccb46314a3812709e20c216f20e9cc569a9574cbeb8f506cd7eb7b09b424dfa1b091b0d38c6a3a387bb17d75934a9df011d815e3d7b3032042bbcfb44deb8127e44f9580221e25fbfab7007765549540fdb1433c52e29247d3769658dd2e0fb302a85177a9bdc861d623b59cfc382d9903c4c464ba413c280c67ef7520404c617618ccb9ae2d4c107284a391129642dc2aa768593cc361349e8c0f659b5097774c920f3f7c7f6fd0e10c167bfdd527804a9f8671208998a233d75b8cb85b4e7971ce8c72f11375685d5e4bc5e0d6a8094594387113663a0e4e54be74b740f6db3a285c9b9a4c1a74c4b089526d64d38a69167ad1e3deb1f96ae1927fbd77ca165e0bb1be7ead0d398fdc3fa0023d8ef0d585a3baa4ac3d1ca0"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000691050000000000004000000000000009500000000000000116f8af5"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000003c1600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 5.385955015s ago: executing program 2 (id=2116): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0x8c11, 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4) (async) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1, 0x0, 0xb8, 0x1f9b9880, 0xd2c6, 0x7}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xadd}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f0000000380)="4f85306cda", &(0x7f00000003c0)=""/149}, 0x20) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000004c0)=0x5, &(0x7f0000000500)=0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) splice(r3, &(0x7f0000000540)=0x200, r6, &(0x7f0000000580)=0x3, 0x5, 0x541792d7eafcc7a4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000005c0)=@ccm_128={{0x303}, "e735cc8c30d1261d", "b4eff0bf53d271705cd5cb43ea313180", "d4a6fbc3", "76bd1f6937c606b2"}, 0x28) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000600)=0x9, 0x4) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', r4}, 0x18) (async) sendmsg(r3, &(0x7f0000001940)={&(0x7f00000006c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000740)="9bd36eeb0d2cfb85887f038057bd6e0353609153374fc52be783d92bc10906f48d4acdfce13bde689370e5a68035402fd3058201574f7ea04430d30b7694e369ec7509468c7b1b223fade06e0be5c4d7", 0x50}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="e0674ab317f0a5da4904c67902775d6a17598188bd0e395ae26fe0ccc5cf0e59ebf614ab5c4a835ff50447072f5e7bbb9bbd453b862d706680f95f327a89c5406e978788a0aeb5740737d9de531342e64703c41eef353f930f7e955b9f5a5795ebaf22a366e32b775ab07efe99c78e3d921ba68288df1e6c2a946239d17b9178f6f433c15673673760817f3535052073d9f1cda9844a85955a0ee4de642acdf45328c44d4e5e31271bf7535418f04cbf6f6947479b1945c3e3511a497f1c0a67c45169faef74810bfed4777b69fe5058e999d07371828984dd5e348104701c6ac5b52d4f0fcf93871280aa4d", 0xec}], 0x3, &(0x7f0000001900)=[{0x38, 0x102, 0xd9, "fdc3766f657a7a17e934cea69931818d90595f6b0ee0b36333882e816b7d06f26e02bff5c895ad"}], 0x38}, 0x4881) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000001980)=@abs, &(0x7f0000001a00)=0x6e, 0x80000) bind$unix(r7, &(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000001ac0), 0x80000) getsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000001b00), &(0x7f0000001b40)=0x10) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000001e40)={{r8, &(0x7f0000001b80)='\x00', 0x400, &(0x7f0000001bc0)={@align=0x7, {0x7, 0x1, 0x2, 0x10001}}, 0x3, &(0x7f0000001c00)={@_ha_fsid}, &(0x7f0000001c40)=0x615}, 0x2, &(0x7f0000001e00)=[{0x1, 0x1, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)="3ab5f50419fc9c0f1f1aae8aff96128f3e47d4378518d18bdb401757dd7ea6fb8ae3b0dd74890468af081308661fbcfa5efaeda3bb483a180e532324a5c3aa445af8ca455f1a392bfa0990fb809d60386810fb0bd42cdb5e6ce0b317527099cdc3b3c567c03a06abf4c511c676dcb07da36f07489ed60bb0a8ea8b437503033c2901a0e39c06c3ca7f942a183d267fe5e7e3da46992bd3c05d5f11582166c86c87e45e2ddddcf93f83b1e66500d380a06e5c2baa07238cba7abd1f030e9f", 0xbe, 0x30}, {0x2, 0x2, &(0x7f0000001d80)='\x00', &(0x7f0000001dc0)="4f56e9eb07b7f0e4d73b9732be69a382fbf2da5706448380f445256e6c1a88d6f59cb54d1c0cc852", 0x28, 0x8}]}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002040)={'sit0\x00', &(0x7f0000001fc0)={'sit0\x00', 0x0, 0x80, 0x20, 0x9, 0x400, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@generic={0x7, 0xf, "5a615feb3daa65f7116d81be0f"}, @end, @lsrr={0x83, 0xb, 0x99, [@broadcast, @rand_addr=0x64010102]}]}}}}}) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000002080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@fwd={0xd}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f, 0x7f79579002306e85, 0x2e, 0x2e, 0x30, 0x0, 0x5f]}}, &(0x7f00000020c0)=""/119, 0x39, 0x77, 0x1, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x10, &(0x7f0000001ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@generic={0x8, 0x8, 0x1, 0x8, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f40)='syzkaller\x00', 0xc, 0x25, &(0x7f0000001f80)=""/37, 0x41100, 0x28, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000002180)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000021c0)={0x0, 0x7, 0x6, 0x3ff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002200)=[{0x0, 0x3, 0x1, 0x2}, {0x1, 0x4, 0xf, 0x6}, {0x1, 0x5, 0x2, 0x3}], 0x10, 0x7}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002340)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x130, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000002300), {[{{@ipv6={@remote, @loopback, [0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x6, 0x4, 0x4}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x1, 0x1, [0x0, 0x2, 0xe, 0x1, 0x40, 0xd, 0x6, 0xd, 0x8000, 0x1000, 0x3, 0x7, 0x1, 0x3ff, 0x5, 0x3]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x57, 0x3, {0xe5be}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [0xffffff00, 0xffffff00, 0xff], [0xff000000, 0xffffff00, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0xd0, 0x4, 0x29}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x26], 0x3, 0xf, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'nicvf0\x00', {0x3}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x400, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xef}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x5) 5.25711556s ago: executing program 0 (id=2117): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005000e"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010727bd7000fbdbdf25190000002000018008000300040000001400020067726574617030"], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x4040094) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f00000000c0), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000120001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="ad8b68a8f83a75584e3fef1f05819960f5f665bdaa04e781f384d51e930e4401fc583558f0304255e8488fd6bf134d8cd86e86966bb3b07e86dbd1b4d878892a494b782468d3632f3774225bc247bdeadfc2447bc21d48e6472346d243e819827bd218db16f4570fb343c61f89ff3a80269a687f9647f93f2bd729b3674df5d71dc78b4e05d3b85a58b5333aed7392d8467340719c5a452a302c5f54abf55b661abe4b2399d8c9ff187d99fb9bfa3beb85cce22482068cc9bc5f7e612f45e942eb", 0xc1}, {&(0x7f0000000280)="a6bf091600028bf35fced279d42b525ef364f3a2d4016f35afcf7b0b4c5da2d73e7791380fb556f26dd9a809ba10c9e9e91e590c60822f80e6804d6ebbe0edf53b93db3daa431dfc22227b11965d6ce9baebfdaa16b71dc7a8ccaea01c601ae8ba71631d8641188dbe2b8cf8cd441a01f5272d1e1c9e26a1c11fb5641e304f21ce3db3908389e3127bd8cb9b46f4d11fc86007be4768870dc5904cf9d0b073b791f5d75e6ffb8aff05f18c3260b8f2d2d6a871f11845aa7fe00f7c21239616c2a16739e03aa066aa60b7bf", 0xcb}], 0x2}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x4}, 0xfff}) 5.125421028s ago: executing program 1 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x4000080) 5.12457303s ago: executing program 2 (id=2119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9b6d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r5, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x2313}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000000180)=""/227, 0xc3200, 0x10, '\x00', r1, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x3, 0x8001}, 0x10, r2, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[r3, 0xffffffffffffffff, r4, r5, r6, r7, 0x1, r8, r9], &(0x7f0000000900)=[{0x1, 0x2, 0x4, 0x5}, {0x0, 0x1, 0x4, 0x3}, {0x1, 0x3, 0x10}], 0x10, 0x7f}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x0, r9}, 0x18) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000a80)=""/95, &(0x7f0000000b00)=0x5f) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0) 5.123711587s ago: executing program 3 (id=2120): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@newtclass={0x50, 0x28, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7, 0xf}, {0x3, 0x10}, {0xfff3, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7fff}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c0}, 0x8084) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32=r2, @ANYBLOB="9ae68957f3dd711a2de26527c4d7ba47081ab2d539b09dd0da4329886cf90518aa4ed4af393ce8e768ba54c79f1d03006c89d80f169ecf1c55b827bfbf35cef41dd654e7bd6df5f7aaa6257b71881d89c172a8027ceaf99c0f9163b73341223d030f29896235cc64ab149241312fda52d528cf3b95a9bb9e64ce5e900883e23dbf6235be843c72cec5a0b6b7d01ec84d0f48a58d26f97a430a0000000000000000000000000000bc096c0000"], 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600884800000c00030008000c0004"]}, 0x58}}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r7) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7d}]}, 0x30}}, 0x8000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, r8, 0x121, 0x70bd24, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4548}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4001004) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_stats={0x1d, 0x5, [0x285c1ae3, 0xa, 0x5, 0x8000000000000000, 0x5]}}) 4.94841453s ago: executing program 0 (id=2121): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000) r1 = accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x4e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0x12, &(0x7f0000000240)=""/18, 0x41100, 0x1, '\x00', r2, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x10, 0x9}, 0x10, r4, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[r5, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x3, 0x6, 0x6}], 0x10, 0x2}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000800)={0x7, 0x20, '\x00', 0x1, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xd, 0x13, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0xa, 0x9, 0x3, 0x8, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf48463b2e544e077}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='syzkaller\x00', 0x10000, 0x6c, &(0x7f00000009c0)=""/108, 0x41000, 0x5, '\x00', r2, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x1, 0x7, 0x3}, 0x10, r4, r5, 0x7, &(0x7f0000000ac0)=[r5], &(0x7f0000000b00)=[{0x0, 0x2, 0x10, 0x9}, {0x0, 0x3, 0x7, 0xc}, {0x4, 0x4, 0x3, 0xa}, {0x5, 0x3, 0x2, 0x6}, {0x4, 0x3, 0x5, 0xb}, {0x1, 0x4, 0x9, 0x2}, {0x4, 0x2, 0xb, 0xa}], 0x10, 0x7}, 0x94) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000c40)={@empty, @empty, @void, {@canfd={0xd, {{0x3, 0x1, 0x1}, 0x9, 0x1, 0x0, 0x0, "1b79dcf7279d1902dfb1760458875d099bdc1c11e6caba0441f6a19a77797982d4d6a81a33e6aea1763bd0178f01ccb84c1ed8addca8017d2d0dc24bb5912bd8"}}}}, &(0x7f0000000cc0)={0x0, 0x1, [0x97b, 0x3a5, 0x14a, 0x7c1]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc4, 0x2, 0x9, 0x2101b5fb724109, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_STATUS={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24008040}, 0x20008010) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r10, 0x5) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000000ec0)={@dev={0xfe, 0x80, '\x00', 0xe}, r3}, 0x14) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000f00)='ns/cgroup\x00') r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f40)={0x2, 0x10, 0x3, 0x8, 0x2a, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_ident={0x2, 0xf, 0x7}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0x5, {0x6, 0x2b, 0x9, 0x5, 0x0, 0x7a, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x35}, @in6=@local}}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@private=0xa010101, 0x21, 0x14, 0x4}, @sadb_key={0x7, 0x9, 0x180, 0x0, "3e539d9a435aa280295a9933d02d7acbd6617c428183b551ed3cc9ff89b0b238475db2a49310253fb6b23a244b729607"}, @sadb_key={0xd, 0x8, 0x2c8, 0x0, "9ab280bb278acaf5e10871ba1dffe6f06fc1dfab0d54386b38cf0f81b518df2ea8696414f4c19e567a5fe85741aa9642ad58af260b2ffc03cf0da54b09d5b64305ba8dd880b89012afc9fdddae94a51821c2d3a60c5ce6299a"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d6, 0x8, 0x3, 0x4b, 0x1, 0x20000003}]}, 0x150}}, 0x840) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000001140)={{r12}, 0x8, 0x1, 0xc}) getsockopt$inet6_tcp_int(r13, 0x6, 0x8, &(0x7f0000001180), &(0x7f00000011c0)=0x4) r15 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x8914, &(0x7f0000001200)={'nr0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000012c0)={'ip6gre0\x00', &(0x7f0000001240)={'ip6gre0\x00', r3, 0x2f, 0x3, 0xe, 0x8000, 0x21, @mcast1, @mcast2, 0x20, 0x7, 0xe, 0x9}}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000002680)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002640)={&(0x7f0000001340)={0x12e0, 0x12, 0x100, 0x70bd26, 0x25dfdbff, {0x26, 0x2, 0x89, 0xd, {0x4e21, 0x4e21, [0x4, 0xff, 0x5, 0x2], [0xff, 0x3, 0x9, 0x2], r16, [0x9, 0x101]}, 0x2, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "517976ca3ef7ade276b64d3297a11a4b2df2a2ea686279fc877e3549c3e578f27c400873cf30c5776c43b8f0b7ea3d84f99b3abf073d448390c04ad57e2d451fc2591cc377682e6f702176a9"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "e4698a52a7fa2c07010889c8653bb293253f42d5e7f41fb91554f9de80e3ec38220102487d57fdae6c0d460872a98246d66d1979ba3fca8e35a4cd046e2b808c0f627d7e3cbc23bf44386eaf7ca6a34d92867a9e38fc100b4eecb0cb686f9ee219c472f1d61e1e48973965d6425c571b9bce062fb780fa0e94c438855edcdbc27237366c2501046a28c15b6191872d1b9784597909f9c4d866df3b883852081e66d702b712ed808d7b1d42a5e78c678e"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "64ba2d31f1ca6159b0f32f5a7013505ef25112a2d368719604412d444d91968b0d5966cc5d6484605da0b470b8ec331bc36b7bcafdbb618cf7d7776e70c4933adf1ac3190448cd5c36abf9a79455c7ec1c3f0c2d28356fb650de22d7"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, "63d0"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "2e027ffb00795574ea3567c1fcf0cf45c62ecda9d629d7537803f895a29e1579eedf8dc756c2ca6bba999c7a166bf78e86397c0fc70ef55d02f08f16b70fd76922afd096c930e29ed38c0607d6b31b80c18000803d1924f2239634248e54748e46daa5c74ceb5844482239f5571a924afbcb911f3b90283648eaf9"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "b9e87cf71a81d07b19820fd1a08ae6daf3f30c695bcab6fd517e9a1d8579ac149a54521080405a771e95508c1b57d62406be56658c9975f13e703940d174053ec3c869978ed3fbb825cf60a73cf0b10c268172beb18aa8fab148b380d1df70373d999977e524d448ddd705ef488d935874f59f3c6bf52adf1ea297537c2b925bfffd79d828a64efa18894800770427aec3ef71aa5917c1be63c6de06aa"}]}, 0x12e0}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r17 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r17, 0x89e0, &(0x7f00000026c0)={r12, r11}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002740)={'macvtap0\x00', 0x4000}) 4.854094759s ago: executing program 1 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @local, @multicast1}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES64=0x0, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 4.658700512s ago: executing program 4 (id=2123): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e2b, 0x400006, @loopback, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000280)={r4, r2}) sendmsg$netlink(r5, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f00000003c0)=ANY=[], 0x10}], 0x1, &(0x7f0000000d00)=ANY=[], 0x60, 0x24004065}, 0x20000014) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)=r2}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r8}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r9, 0xc252d000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000c000000000000000300000018230000", @ANYRES32=r6, @ANYBLOB="000000000000000018130000", @ANYRES32, @ANYBLOB="0000050000008000080000000200c1e0456ec7728aaa64539500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x9, 0xfe, &(0x7f0000000540)=""/254, 0x41100, 0x30, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x6, 0x4, 0x9}, 0x10, 0x2d537, r2, 0x9, &(0x7f00000006c0)=[r8, 0x1, r9], &(0x7f0000000700)=[{0x3, 0x5, 0x1, 0x7}, {0x2, 0x4, 0x4, 0x1}, {0x4, 0x5, 0x6}, {0x0, 0x2, 0xb, 0x9}, {0x1, 0x5, 0x7, 0x2}, {0x5, 0x3, 0xf, 0xc}, {0x3, 0x3, 0xc, 0x6}, {0x2, 0x2, 0x1, 0xb}, {0x2, 0x2, 0x9, 0x6}], 0x10, 0x101}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000080060000000000000095000400"/29], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000500)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}}], 0x1, 0x45833af96e4a38fd, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2b, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) 4.519482913s ago: executing program 3 (id=2124): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@remote, @in=@multicast2, 0xfffe, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x1}, 0x3fc}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x4c050) 4.442739173s ago: executing program 2 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x1, 0x2, 0x4, 0xd, 0x0, 0x9, 0x1, 0x91f}}) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001700090025bd7000fddbdf25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4008083}, 0x4000080) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, "4750547fdbd652d41eeaf4ddce178da2"}}}]}, 0x48}}, 0x44080) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x34, 0x15, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f0000000180)={0x5, 0x3, 0x44f5}) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000140)=0x800, 0x4) 4.435186397s ago: executing program 1 (id=2126): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000aff74b6edda906ea5b70cec23dee09152ee47cbc9b4a19aa8da5517ab674e487b2ba7db217fbaca89e2e5a77328b777cb0b6c52d3d5103622252d8ca7b6f9986ed1934e1bde104547845b208ae563f0473051643c627d744e62eb3f3dc60fd041f9348e2df59ef420497b3ea4ee0664a76b9139a", @ANYRES16=r0, @ANYBLOB="a78727bd7000010000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000aff74b6edda906ea5b70cec23dee09152ee47cbc9b4a19aa8da5517ab674e487b2ba7db217fbaca89e2e5a77328b777cb0b6c52d3d5103622252d8ca7b6f9986ed1934e1bde104547845b208ae563f0473051643c627d744e62eb3f3dc60fd041f9348e2df59ef420497b3ea4ee0664a76b9139a", @ANYRES16=r0, @ANYBLOB="a78727bd7000010000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) 4.21963657s ago: executing program 0 (id=2127): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800ffd0b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.041306019s ago: executing program 3 (id=2128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x6}, 0x10}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r2, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2988a80c0081004c0086dd6d00200810082fff"], 0x104a) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0xb026e000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 3.909671217s ago: executing program 2 (id=2129): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x3, 0x1, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x80, 0x9, 0x7fffffff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="185ca17227000000000000620008000071102b00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3d5]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69a0a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4b0) 0s ago: executing program 0 (id=2130): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) kernel console output (not intermixed with test programs): ode balance-rr(0) [ 97.256004][ T6578] bond3 (unregistering): Released all slaves [ 97.453142][ T6596] netlink: 'syz.3.205': attribute type 21 has an invalid length. [ 97.453162][ T6596] netlink: 'syz.3.205': attribute type 22 has an invalid length. [ 97.453174][ T6596] netlink: 'syz.3.205': attribute type 23 has an invalid length. [ 97.453185][ T6596] netlink: 'syz.3.205': attribute type 25 has an invalid length. [ 97.689287][ T6605] netlink: 'syz.3.208': attribute type 10 has an invalid length. [ 97.752679][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.777619][ T6605] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.791533][ T6608] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.810242][ T59] wlan0: Trigger new scan to find an IBSS to join [ 97.928012][ T6613] netlink: 'syz.3.213': attribute type 4 has an invalid length. [ 98.038882][ T6619] Cannot find del_set index 0 as target [ 99.623213][ T6681] netlink: 'syz.4.229': attribute type 4 has an invalid length. [ 99.688931][ T6678] Cannot find add_set index 0 as target [ 99.811562][ T148] wlan1: Trigger new scan to find an IBSS to join [ 100.164253][ T6706] __nla_validate_parse: 44 callbacks suppressed [ 100.164301][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 100.165619][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 100.211836][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.239'. [ 100.535288][ T6714] netlink: 60 bytes leftover after parsing attributes in process `syz.4.240'. [ 100.535313][ T6714] netlink: 60 bytes leftover after parsing attributes in process `syz.4.240'. [ 100.619911][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.240'. [ 100.857729][ T1165] wlan0: Trigger new scan to find an IBSS to join [ 100.973814][ T6740] netlink: 44 bytes leftover after parsing attributes in process `syz.4.245'. [ 101.319548][ T6749] ip_tables: iptables: counters copy to user failed while replacing table [ 101.411198][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.411228][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.479118][ T6755] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 102.264711][ T6755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.348867][ T6765] bond1: (slave ip6erspan0): making interface the new active one [ 102.374577][ T6765] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 102.591975][ T6792] netlink: 'syz.4.254': attribute type 21 has an invalid length. [ 102.592083][ T6792] netlink: 132 bytes leftover after parsing attributes in process `syz.4.254'. [ 102.849917][ T148] wlan1: Trigger new scan to find an IBSS to join [ 103.067500][ T6806] only policy match revision 0 supported [ 103.067513][ T6806] unable to load match [ 103.748504][ T59] wlan1: Creating new IBSS network, BSSID ce:f8:9c:a9:e9:59 [ 103.811698][ T83] wlan0: Creating new IBSS network, BSSID b6:c4:7b:ce:5d:84 [ 105.547291][ T6791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.942237][ T6846] netlink: 'syz.2.261': attribute type 21 has an invalid length. [ 105.942257][ T6846] netlink: 'syz.2.261': attribute type 22 has an invalid length. [ 105.942267][ T6846] netlink: 'syz.2.261': attribute type 23 has an invalid length. [ 105.942277][ T6846] netlink: 'syz.2.261': attribute type 25 has an invalid length. [ 105.942288][ T6846] netlink: 'syz.2.261': attribute type 26 has an invalid length. [ 105.942299][ T6846] __nla_validate_parse: 6 callbacks suppressed [ 105.942308][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'. [ 106.013202][ T6853] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 7, id = 0 [ 106.025210][ T6859] netlink: 56 bytes leftover after parsing attributes in process `syz.1.265'. [ 106.080101][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 106.080164][ T6862] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 106.080195][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 106.298101][ T6862] geneve2: entered promiscuous mode [ 106.298140][ T6862] geneve2: entered allmulticast mode [ 106.527660][ T6865] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.558845][ T6865] team0: Device ipvlan2 is already an upper device of the team interface [ 107.340678][ T6911] sock: sock_set_timeout: `syz.2.272' (pid 6911) tries to set negative timeout [ 107.344019][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'. [ 107.395300][ T6912] sock: sock_set_timeout: `syz.2.272' (pid 6912) tries to set negative timeout [ 107.397455][ T6902] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 107.397540][ T6902] syzkaller1: Refused to change device type [ 107.411982][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.272'. [ 107.448535][ T6902] netlink: 'syz.4.271': attribute type 12 has an invalid length. [ 107.537318][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.275'. [ 107.694827][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 107.694852][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 107.739280][ T6913] syzkaller0: entered promiscuous mode [ 107.739319][ T6913] syzkaller0: entered allmulticast mode [ 107.865840][ T6925] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 108.031831][ T6925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.126194][ T6934] bond1: (slave geneve2): making interface the new active one [ 108.137170][ T6934] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.497698][ T6957] netlink: 112 bytes leftover after parsing attributes in process `syz.2.285'. [ 108.828335][ T6966] block nbd0: Unsupported socket: should be TCP or UNIX. [ 108.871656][ T6970] block nbd0: Unsupported socket: should be TCP or UNIX. [ 108.997655][ T6980] syz_tun: entered allmulticast mode [ 109.497119][ T7007] netlink: 'syz.4.300': attribute type 5 has an invalid length. [ 109.555129][ T7001] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 109.555155][ T7001] bond2: option packets_per_slave: allowed values 0 - 65535 [ 109.591897][ T7001] bond2 (unregistering): Released all slaves [ 110.537137][ T7036] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 111.560277][ T7077] __nla_validate_parse: 6 callbacks suppressed [ 111.560297][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 111.845300][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 111.845530][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 111.946308][ T7087] pim6reg: entered allmulticast mode [ 112.018028][ T7091] pim6reg: left allmulticast mode [ 112.018427][ T7091] vcan0: left allmulticast mode [ 112.968490][ T7125] netlink: 'syz.0.332': attribute type 18 has an invalid length. [ 113.006137][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.331'. [ 113.154693][ T7112] netlink: Failed to add helper -22 [ 113.154794][ T7112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.195666][ T30] audit: type=1800 audit(1789875729.651:2): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.335" name=0A dev="tmpfs" ino=365 res=0 errno=0 [ 113.408625][ T7134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.334'. [ 113.431025][ T5632] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 114.099415][ T7157] netlink: 6 bytes leftover after parsing attributes in process `syz.1.339'. [ 114.106600][ T7157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.425297][ T7166] veth0: entered promiscuous mode [ 114.425860][ T7166] veth0: left promiscuous mode [ 114.466818][ T7139] netlink: 32 bytes leftover after parsing attributes in process `syz.0.334'. [ 114.479540][ T5632] Bluetooth: hci3: unexpected event 0x0e length: 257 > 255 [ 114.587940][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 114.733166][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.342'. [ 114.838364][ T7180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.344'. [ 114.983489][ T7176] veth2: entered promiscuous mode [ 114.983513][ T7176] veth2: entered allmulticast mode [ 115.084783][ T7182] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 116.006191][ T7204] netlink: 'syz.0.346': attribute type 2 has an invalid length. [ 116.646059][ T7236] __nla_validate_parse: 5 callbacks suppressed [ 116.646079][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 117.328310][ T7253] ªªªªª»: renamed from bond_slave_0 (while UP) [ 117.399419][ T3741] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.530600][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 118.236973][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 118.305526][ T7270] team0 (unregistering): Port device team_slave_0 removed [ 118.322261][ T7270] team0 (unregistering): Port device team_slave_1 removed [ 118.386343][ T7277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.361'. [ 118.871114][ T7285] netlink: 48 bytes leftover after parsing attributes in process `syz.4.364'. [ 118.871325][ T7285] netlink: 48 bytes leftover after parsing attributes in process `syz.4.364'. [ 119.403969][ T7303] netlink: 48 bytes leftover after parsing attributes in process `syz.3.369'. [ 119.403991][ T7303] netlink: 5 bytes leftover after parsing attributes in process `syz.3.369'. [ 119.404002][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 119.404014][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 119.896090][ T7309] wg1 speed is unknown, defaulting to 1000 [ 119.899484][ T7309] wg1 speed is unknown, defaulting to 1000 [ 119.903353][ T7309] wg1 speed is unknown, defaulting to 1000 [ 120.339546][ T7332] netlink: 'syz.1.376': attribute type 16 has an invalid length. [ 120.339585][ T7332] netlink: 'syz.1.376': attribute type 17 has an invalid length. [ 120.641017][ T7337] netlink: 'syz.1.376': attribute type 83 has an invalid length. [ 120.886864][ T7332] bond1: left promiscuous mode [ 120.886886][ T7332] wireguard0: left promiscuous mode [ 120.905843][ T7332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.019333][ T6900] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.019374][ T6900] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.019404][ T6900] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.019432][ T6900] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.973484][ T7309] infiniband syz2: set active [ 121.973505][ T7309] infiniband syz2: added wg1 [ 121.977063][ T4948] wg1 speed is unknown, defaulting to 1000 [ 122.088656][ T7309] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 122.088692][ T7309] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 122.088728][ T7309] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 122.275488][ T7377] ip_tables: iptables: counters copy to user failed while replacing table [ 122.333581][ T7309] RDS/IB: syz2: added [ 122.334022][ T7309] smc: adding ib device syz2 with port count 1 [ 122.334134][ T7309] smc: ib device syz2 port 1 has no pnetid [ 122.336334][ T7121] Set syz1 is full, maxelem 65536 reached [ 122.338368][ T9] wg1 speed is unknown, defaulting to 1000 [ 122.397868][ T7309] wg1 speed is unknown, defaulting to 1000 [ 122.677979][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.386'. [ 123.163577][ T7396] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 123.281974][ T7309] wg1 speed is unknown, defaulting to 1000 [ 123.397428][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 123.741200][ T7309] wg1 speed is unknown, defaulting to 1000 [ 123.796964][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 124.288997][ T7429] netlink: 'syz.1.401': attribute type 3 has an invalid length. [ 125.270028][ T7309] wg1 speed is unknown, defaulting to 1000 [ 125.367645][ T7483] netlink: 92 bytes leftover after parsing attributes in process `syz.1.413'. [ 125.528841][ T7490] trusted_key: syz.0.415 sent an empty control message without MSG_MORE. [ 126.076280][ T7510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.194413][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 126.377941][ T7521] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 126.391207][ T7521] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 126.391227][ T7521] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.422'. [ 126.425051][ T7521] netlink: 52 bytes leftover after parsing attributes in process `syz.2.422'. [ 126.556184][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 126.731721][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.425'. [ 126.731755][ T7531] netlink: 'syz.1.425': attribute type 7 has an invalid length. [ 126.731767][ T7531] netlink: 'syz.1.425': attribute type 8 has an invalid length. [ 126.731777][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 126.832122][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.835978][ T7531] syz_tun: entered promiscuous mode [ 126.837367][ T7531] erspan0: entered promiscuous mode [ 126.838955][ T7531] gretap0: entered promiscuous mode [ 127.051588][ T7309] wg1 speed is unknown, defaulting to 1000 [ 127.138236][ T7544] netlink: 'syz.2.428': attribute type 62 has an invalid length. [ 127.215625][ T7549] netlink: 'syz.0.429': attribute type 2 has an invalid length. [ 128.236083][ T7581] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 128.555353][ T7596] : renamed from bond0 (while UP) [ 128.765255][ T7606] syz.4.444 (7606) used obsolete PPPIOCDETACH ioctl [ 128.793996][ T7609] IPVS: Error connecting to the multicast addr [ 129.681913][ T7639] 8021q: VLANs not supported on ipvlan0 [ 130.456024][ T7666] __nla_validate_parse: 4 callbacks suppressed [ 130.456060][ T7666] netlink: 5 bytes leftover after parsing attributes in process `syz.4.458'. [ 130.582536][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b21b400: rx timeout, send abort [ 130.585788][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b21b400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.794939][ T7680] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 131.045400][ T7686] x_tables: duplicate underflow at hook 3 [ 131.380172][ T7702] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 131.403089][ T7702] sctp: [Deprecated]: syz.4.471 (pid 7702) Use of int in max_burst socket option. [ 131.403089][ T7702] Use struct sctp_assoc_value instead [ 131.455853][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'. [ 131.455875][ T7704] netlink: 84 bytes leftover after parsing attributes in process `syz.1.472'. [ 131.496746][ T7704] tc_dump_action: action bad kind [ 131.524587][ T7706] netlink: 64 bytes leftover after parsing attributes in process `syz.2.473'. [ 131.714630][ T7706] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 131.803330][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 131.862564][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 131.862602][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 131.908161][ T7725] sctp: [Deprecated]: syz.4.479 (pid 7725) Use of int in max_burst socket option deprecated. [ 131.908161][ T7725] Use struct sctp_assoc_value instead [ 131.957294][ T7728] x_tables: ip_tables: ECN target: only valid in mangle table, not [ 131.957294][ T7728] [ 132.077110][ T7733] netlink: 'syz.0.483': attribute type 11 has an invalid length. [ 132.116183][ T7736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.481'. [ 132.337535][ T7747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 132.337569][ T7747] netlink: 80 bytes leftover after parsing attributes in process `syz.3.485'. [ 132.537063][ T7754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.772834][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.279022][ T7780] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.774445][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 134.274050][ T7828] C: renamed from lo [ 134.287811][ T7828] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 135.721710][ T7879] ip_tables: iptables: counters copy to user failed while replacing table [ 135.843285][ T7883] __nla_validate_parse: 76 callbacks suppressed [ 135.843303][ T7883] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'. [ 135.852474][ T7883] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'. [ 135.892544][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 135.892575][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 135.915816][ T7883] netlink: 'syz.1.518': attribute type 32 has an invalid length. [ 135.920819][ T7886] netlink: 'syz.1.518': attribute type 32 has an invalid length. [ 136.169954][ T7899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.521'. [ 136.173147][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 136.296536][ T7901] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.299580][ T7901] batman_adv: batadv0: Adding interface: gretap1 [ 136.299593][ T7901] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.299617][ T7901] batman_adv: batadv0: Interface activated: gretap1 [ 136.352443][ T7902] bond0: entered promiscuous mode [ 136.352463][ T7902] bond_slave_0: entered promiscuous mode [ 136.352661][ T7902] bond_slave_1: entered promiscuous mode [ 136.381319][ T7902] batadv0: entered promiscuous mode [ 136.412353][ T7906] openvswitch: netlink: Message has 8 unknown bytes. [ 136.428618][ T7902] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 136.482550][ T7902] bond0: left promiscuous mode [ 136.482574][ T7902] bond_slave_0: left promiscuous mode [ 136.482799][ T7902] bond_slave_1: left promiscuous mode [ 136.492698][ T7902] batadv0: left promiscuous mode [ 136.747861][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 136.747907][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 136.747970][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 136.831736][ T7924] openvswitch: netlink: IP tunnel dst address not specified [ 136.833683][ T7922] netlink: 128 bytes leftover after parsing attributes in process `syz.2.527'. [ 136.869869][ T7922] netlink: 'syz.2.527': attribute type 14 has an invalid length. [ 136.869890][ T7922] netlink: 'syz.2.527': attribute type 13 has an invalid length. [ 137.027343][ T7930] netlink: 'syz.1.529': attribute type 21 has an invalid length. [ 137.052851][ T5632] Bluetooth: hci0: Malformed HCI Event [ 137.421692][ T1155] IPVS: starting estimator thread 0... [ 137.520219][ T7953] IPVS: using max 30 ests per chain, 72000 per kthread [ 137.644196][ T7965] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 137.733228][ T7965] bond4: entered promiscuous mode [ 137.734667][ T7965] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.802895][ T7973] ipvlan2: entered allmulticast mode [ 137.802915][ T7973] bond4: entered allmulticast mode [ 137.804081][ T7973] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.804101][ T7973] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 137.804115][ T7973] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 137.824284][ T7973] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 137.918178][ T7980] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.832608][ T8009] sctp: [Deprecated]: syz.0.551 (pid 8009) Use of int in max_burst socket option deprecated. [ 138.832608][ T8009] Use struct sctp_assoc_value instead [ 139.813926][ T50] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 139.851814][ T8053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.247994][ T8080] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 140.248019][ T8080] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿ [ 140.473793][ T8089] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 140.473854][ T8089] batadv0: entered promiscuous mode [ 140.473869][ T8089] batadv0: entered allmulticast mode [ 140.493196][ T8089] bridge0: port 3(batadv0) entered blocking state [ 140.513771][ T8089] bridge0: port 3(batadv0) entered disabled state [ 140.528299][ T8089] bridge0: port 3(batadv0) entered blocking state [ 140.528512][ T8089] bridge0: port 3(batadv0) entered forwarding state [ 140.654485][ T8092] netlink: 'syz.2.571': attribute type 64 has an invalid length. [ 140.710609][ T7011] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 140.710626][ T7011] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 141.488311][ T8130] __nla_validate_parse: 7 callbacks suppressed [ 141.488329][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 141.500309][ T30] audit: type=1800 audit(1789875757.961:3): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.581" name="memory.events" dev="tmpfs" ino=586 res=0 errno=0 [ 141.502885][ T30] audit: type=1804 audit(1789875757.961:4): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.581" name="/newroot/112/memory.events" dev="tmpfs" ino=586 res=1 errno=0 [ 141.771742][ T8142] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.583'. [ 141.772402][ T8142] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.583'. [ 141.842893][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 144.210844][ T8123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.996007][ T8181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 145.073583][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 145.073639][ T8186] netlink: 14 bytes leftover after parsing attributes in process `syz.0.597'. [ 145.151050][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 145.937504][ T8209] Cannot find add_set index 34 as target [ 146.159614][ T8209] syzkaller0: entered promiscuous mode [ 146.159637][ T8209] syzkaller0: entered allmulticast mode [ 146.308035][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 146.492152][ T8209] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 146.497837][ T8209] bond0 (unregistering): Released all slaves [ 146.587744][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 146.593428][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.607'. [ 147.075111][ T8243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.263067][ T8252] netlink: 'syz.2.612': attribute type 21 has an invalid length. [ 147.263109][ T8252] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.272421][ T8252] netlink: 88 bytes leftover after parsing attributes in process `syz.2.612'. [ 147.462314][ T8266] netlink: 'syz.2.617': attribute type 18 has an invalid length. [ 147.488318][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.613'. [ 147.508621][ T8266] netlink: 'syz.2.617': attribute type 18 has an invalid length. [ 147.946652][ T8285] openvswitch: netlink: Key type 30 is not supported [ 148.157085][ T8292] : renamed from bond0 (while UP) [ 148.187949][ T8290] syzkaller0: entered promiscuous mode [ 148.187987][ T8290] syzkaller0: entered allmulticast mode [ 148.313569][ T8281] ip_tables: iptables: counters copy to user failed while replacing table [ 148.407766][ T59] IPVS: starting estimator thread 0... [ 148.482517][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 148.498409][ T8300] IPVS: using max 32 ests per chain, 76800 per kthread [ 148.506303][ T8299] IPVS: rr: UDP [::1]:8080 - no destination available [ 148.664773][ T8307] Bluetooth: hci0: unsupported parameter 5135 [ 148.664794][ T8307] Bluetooth: hci0: unsupported parameter 8192 [ 148.664809][ T8307] Bluetooth: hci0: unsupported parameter 5135 [ 148.664819][ T8307] Bluetooth: hci0: unsupported parameter 8192 [ 148.892741][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 164.801548][ T7011] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.170289][ T1155] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.256478][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.638'. [ 175.258053][ T8352] netlink: 256 bytes leftover after parsing attributes in process `syz.1.638'. [ 175.344919][ T8353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.637'. [ 175.382139][ T8353] netlink: 2 bytes leftover after parsing attributes in process `syz.0.637'. [ 175.454691][ T8361] netlink: 76 bytes leftover after parsing attributes in process `syz.4.642'. [ 175.454718][ T8361] netlink: 76 bytes leftover after parsing attributes in process `syz.4.642'. [ 175.458510][ T8354] netlink: 52 bytes leftover after parsing attributes in process `syz.2.639'. [ 175.458529][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'. [ 175.458546][ T8354] netlink: 52 bytes leftover after parsing attributes in process `syz.2.639'. [ 175.458558][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'. [ 175.557449][ T8363] block nbd0: not configured, cannot reconfigure [ 175.900982][ T1165] IPVS: starting estimator thread 0... [ 175.945966][ T8379] veth0: entered promiscuous mode [ 175.954665][ T8379] veth0: left promiscuous mode [ 175.992100][ T8381] IPVS: using max 41 ests per chain, 98400 per kthread [ 176.039657][ T8377] can: request_module (can-proto-0) failed. [ 176.534424][ T8412] netlink: 'syz.1.655': attribute type 10 has an invalid length. [ 176.598008][ T8412] team0: Port device dummy0 added [ 176.723294][ T8414] xt_MASQUERADE: bad MAP_IPS. [ 177.346453][ T8443] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 177.346512][ T8444] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 177.788146][ T8455] bond5 (unregistering): Released all slaves [ 177.990808][ T8458] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 178.013068][ T8458] bond0 (unregistering): Released all slaves [ 178.128680][ T8477] syzkaller1: entered promiscuous mode [ 178.128737][ T8477] syzkaller1: entered allmulticast mode [ 178.263932][ T8481] ip6t_rt: unknown flags 36 [ 178.967243][ T8504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 179.366116][ T8526] bridge_slave_1: left allmulticast mode [ 179.366141][ T8526] bridge_slave_1: left promiscuous mode [ 179.368753][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.396184][ T8522] xt_hashlimit: size too large, truncated to 1048576 [ 179.506223][ T8526] bridge_slave_0: left allmulticast mode [ 179.506280][ T8526] bridge_slave_0: left promiscuous mode [ 179.506675][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.913784][ T8544] sctp: [Deprecated]: syz.2.694 (pid 8544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.913784][ T8544] Use struct sctp_sack_info instead [ 180.052865][ T8552] x_tables: duplicate underflow at hook 1 [ 180.377819][ T8557] can: request_module (can-proto-0) failed. [ 180.472275][ T8570] digital: digital_start_poll: Unknown protocol [ 180.809517][ T8576] netlink: 'syz.0.701': attribute type 29 has an invalid length. [ 181.354222][ T8605] __nla_validate_parse: 12 callbacks suppressed [ 181.354241][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.709'. [ 181.430184][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 181.430221][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 181.499835][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 181.614829][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 181.614868][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 181.631517][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 181.641383][ T1155] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.641475][ T1155] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.641540][ T1155] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.641605][ T1155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.263385][ T8637] netlink: ct family unspecified [ 183.056690][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.726'. [ 183.190710][ T8673] macvtap1: entered promiscuous mode [ 183.191058][ T8673] macvtap1: entered allmulticast mode [ 183.191072][ T8673] veth1_vlan: entered allmulticast mode [ 183.232205][ T8677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.731'. [ 183.630809][ T8696] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 183.716785][ T8701] netlink: 'syz.0.737': attribute type 5 has an invalid length. [ 183.833711][ T8707] netlink: 'syz.2.739': attribute type 1 has an invalid length. [ 183.979828][ T8713] netlink: 'syz.2.740': attribute type 10 has an invalid length. [ 184.079534][ T8714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.740'. [ 184.087726][ T8713] team0: Port device dummy0 added [ 184.262290][ T8718] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 184.311061][ T8718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.396763][ T8725] xt_hashlimit: size too large, truncated to 1048576 [ 184.453751][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.537427][ T8726] bridge_slave_0 (unregistering): left allmulticast mode [ 184.537450][ T8726] bridge_slave_0 (unregistering): left promiscuous mode [ 184.537535][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.813370][ T8718] bond0: (slave bridge0): making interface the new active one [ 184.889824][ T8718] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 185.004068][ T8731] team0: Port device dummy0 removed [ 185.033991][ T8731] bridge_slave_0: left allmulticast mode [ 185.034018][ T8731] bridge_slave_0: left promiscuous mode [ 185.034304][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.086505][ T8731] bridge_slave_1: left allmulticast mode [ 185.086530][ T8731] bridge_slave_1: left promiscuous mode [ 185.086706][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.176689][ T8731] bond0: (slave bond_slave_0): Releasing backup interface [ 185.243341][ T8731] bond0: (slave bond_slave_1): Releasing backup interface [ 185.337913][ T8731] team0: Port device team_slave_0 removed [ 185.386553][ T8731] team0: Port device team_slave_1 removed [ 185.396050][ T8731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.398685][ T8740] netlink: 'syz.4.747': attribute type 15 has an invalid length. [ 186.185691][ T8764] pimreg: entered allmulticast mode [ 186.428734][ T8788] __nla_validate_parse: 4 callbacks suppressed [ 186.428771][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 186.563767][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 187.246429][ T8827] netlink: 'syz.1.768': attribute type 1 has an invalid length. [ 187.310596][ T8827] bond4: entered promiscuous mode [ 187.311124][ T8827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.312016][ T8823] syzkaller1: entered allmulticast mode [ 187.355890][ T8804] syzkaller0: entered promiscuous mode [ 187.355926][ T8804] syzkaller0: entered allmulticast mode [ 187.549647][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 187.549674][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 187.549754][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 187.956113][ T8824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.064844][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 189.064868][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 189.112800][ T8882] geneve2: entered promiscuous mode [ 189.112838][ T8882] geneve2: entered allmulticast mode [ 189.135434][ T8887] vlan0: entered promiscuous mode [ 189.189701][ T7011] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 189.190571][ T7011] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 189.199860][ T50] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 189.276487][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 189.837659][ T8910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.787'. [ 190.041558][ T8919] netlink: 'syz.2.791': attribute type 21 has an invalid length. [ 190.041582][ T8919] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.041669][ T8919] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 190.446397][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.793'. [ 192.065285][ T50] IPVS: starting estimator thread 0... [ 192.155594][ T8980] IPVS: using max 33 ests per chain, 79200 per kthread [ 192.460640][ T8986] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 192.525598][ T8986] team0: Port device dummy0 added [ 193.007311][ T8927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.248103][ T8990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.301217][ T8991] xt_l2tp: v2 doesn't support IP mode [ 193.413620][ T9000] Bluetooth: MGMT ver 1.23 [ 193.431788][ T8996] __nla_validate_parse: 1 callbacks suppressed [ 193.431805][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.431941][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.434354][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.434489][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.434614][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.434738][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.434880][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.435000][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.435122][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.435248][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.812475][ T148] wlan1: Trigger new scan to find an IBSS to join [ 194.024385][ T9024] gtp0: entered promiscuous mode [ 194.024406][ T9024] gtp0: entered allmulticast mode [ 194.218412][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.103647][ T9062] syzkaller0: entered promiscuous mode [ 195.103670][ T9062] syzkaller0: entered allmulticast mode [ 195.807347][ C0] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 195.808136][ T9081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 196.281973][ T9099] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 196.292161][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 196.292297][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 196.293386][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 196.293480][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 197.178602][ T9131] netlink: 'syz.1.837': attribute type 83 has an invalid length. [ 197.832478][ T9155] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.836800][ T9155] bond0: (slave lo): Enslaving as an active interface with an up link [ 197.866329][ T9155] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 197.906516][ T9162] netlink: 'syz.0.847': attribute type 12 has an invalid length. [ 197.906537][ T9162] netlink: 'syz.0.847': attribute type 11 has an invalid length. [ 198.203810][ T9178] netlink: 'syz.4.853': attribute type 15 has an invalid length. [ 198.204304][ T9178] netlink: 'syz.4.853': attribute type 15 has an invalid length. [ 198.823688][ T30] audit: type=1804 audit(1789875815.281:5): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.859" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=974 res=1 errno=0 [ 198.851516][ T50] wlan1: Trigger new scan to find an IBSS to join [ 198.866338][ T30] audit: type=1800 audit(1789875815.321:6): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.859" name="cgroup.controllers" dev="tmpfs" ino=974 res=0 errno=0 [ 198.874060][ T30] audit: type=1800 audit(1789875815.331:7): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.859" name="cgroup.controllers" dev="tmpfs" ino=974 res=0 errno=0 [ 198.960355][ T9209] __nla_validate_parse: 19 callbacks suppressed [ 198.960374][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 199.050933][ T9209] bond6: option all_slaves_active: invalid value (179) [ 199.071370][ T9209] bond6 (unregistering): Released all slaves [ 199.609053][ T9239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.867'. [ 199.628793][ T9240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.867'. [ 199.688111][ T9238] netlink: 'syz.2.867': attribute type 21 has an invalid length. [ 199.688267][ T9238] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 199.834167][ T83] wlan1: Creating new IBSS network, BSSID fe:42:a5:2a:b4:8c [ 200.014944][ T9261] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 200.014964][ T9261] netlink: 17 bytes leftover after parsing attributes in process `syz.4.868'. [ 200.078326][ T9256] netlink: 'syz.1.873': attribute type 2 has an invalid length. [ 200.078363][ T9256] netlink: 'syz.1.873': attribute type 11 has an invalid length. [ 200.078392][ T9256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'. [ 200.193997][ T9255] bond1: entered allmulticast mode [ 200.440434][ T9257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.448419][ T9257] bond2: entered allmulticast mode [ 200.467812][ T9257] bond1: (slave bond2): Enslaving as an active interface with an up link [ 200.491151][ T9258] bond1 (unregistering): (slave bond2): Releasing backup interface [ 200.494066][ T9258] bond2: left allmulticast mode [ 200.521488][ T9258] bond1 (unregistering): Released all slaves [ 200.552554][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 200.871212][ T9280] batman_adv: batadv0: Adding interface: wlan1 [ 200.871260][ T9280] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.871301][ T9280] batman_adv: batadv0: Interface activated: wlan1 [ 200.944649][ T9282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.876'. [ 201.140560][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.880'. [ 201.327503][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 201.345493][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.881'. [ 202.755587][ T9370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.172599][ T7011] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.561037][ T9407] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 203.583126][ T9406] validate_nla: 4 callbacks suppressed [ 203.583161][ T9406] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 204.040060][ T9424] syzkaller0: entered promiscuous mode [ 204.040098][ T9424] syzkaller0: entered allmulticast mode [ 204.258763][ T9435] __nla_validate_parse: 11 callbacks suppressed [ 204.258782][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 204.258802][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 204.258872][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 204.370111][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 204.370174][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 204.370280][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 204.660898][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 204.792400][ T9454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.928'. [ 204.851515][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.928'. [ 204.936091][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 205.150526][ T1155] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 205.663600][ T9497] xt_CONNSECMARK: invalid mode: 0 [ 205.841402][ T9505] Bluetooth: hci0: unsupported parameter 5134 [ 205.841421][ T9505] Bluetooth: hci0: unsupported parameter 8192 [ 205.841433][ T9505] Bluetooth: hci0: unsupported parameter 5134 [ 205.841443][ T9505] Bluetooth: hci0: unsupported parameter 8192 [ 205.848021][ T9505] Bluetooth: hci0: unsupported parameter 5134 [ 205.848039][ T9505] Bluetooth: hci0: unsupported parameter 8192 [ 205.848050][ T9505] Bluetooth: hci0: unsupported parameter 5134 [ 205.848060][ T9505] Bluetooth: hci0: unsupported parameter 8192 [ 205.941982][ T9489] macvtap1: entered promiscuous mode [ 205.942004][ T9489] vlan0: entered promiscuous mode [ 205.942502][ T9489] macvtap1: entered allmulticast mode [ 205.942515][ T9489] vlan0: entered allmulticast mode [ 205.942526][ T9489] veth0_vlan: entered allmulticast mode [ 206.237312][ T9517] geneve3: entered promiscuous mode [ 206.671744][ T9549] wg1: entered promiscuous mode [ 206.671801][ T9549] wg1: entered allmulticast mode [ 208.290345][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.239177][ T9523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.542670][ T9559] __nla_validate_parse: 4 callbacks suppressed [ 209.542689][ T9559] netlink: 112 bytes leftover after parsing attributes in process `syz.3.953'. [ 209.578982][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.643620][ T9565] SET target dimension over the limit! [ 210.005297][ T9588] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 210.179057][ T9588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.192593][ T9585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.257970][ T9599] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 210.473540][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 210.675172][ T9620] batman_adv: batadv0: Adding interface: syzkaller0 [ 210.675190][ T9620] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.675217][ T9620] batman_adv: batadv0: Interface activated: syzkaller0 [ 210.872612][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 211.002562][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 211.037856][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.968'. [ 211.037887][ T9626] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 211.857718][ T9620] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 211.965238][ T9620] batman_adv: batadv0: Removing interface: syzkaller0 [ 212.003655][ T9638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.971'. [ 212.003687][ T9638] netlink: 'syz.2.971': attribute type 7 has an invalid length. [ 212.003699][ T9638] netlink: 'syz.2.971': attribute type 8 has an invalid length. [ 212.003710][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 212.046648][ T861] wg1 speed is unknown, defaulting to 1000 [ 212.047743][ T861] syz2: Port: 1 Link DOWN [ 212.048149][ T861] wg1 speed is unknown, defaulting to 1000 [ 212.194538][ T9638] syz_tun: entered promiscuous mode [ 212.195818][ T9638] erspan0: entered promiscuous mode [ 212.197446][ T9638] gretap0: entered promiscuous mode [ 212.198161][ T9638] debugfs: 'hsr1' already exists in 'hsr' [ 212.198201][ T9638] Cannot create hsr debugfs directory [ 212.669482][ T9668] netlink: 'syz.3.979': attribute type 15 has an invalid length. [ 213.300798][ T9695] netlink: 'syz.4.982': attribute type 58 has an invalid length. [ 213.300841][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.982'. [ 213.374866][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'. [ 213.374932][ T9690] netlink: 'syz.3.986': attribute type 7 has an invalid length. [ 213.374962][ T9690] netlink: 'syz.3.986': attribute type 8 has an invalid length. [ 213.374989][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 213.378274][ T9697] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 213.655672][ T9690] syz_tun: entered promiscuous mode [ 213.661370][ T9690] erspan0: entered promiscuous mode [ 213.699999][ T9690] gretap0: entered promiscuous mode [ 213.705705][ T9690] debugfs: 'hsr1' already exists in 'hsr' [ 213.705760][ T9690] Cannot create hsr debugfs directory [ 213.928361][ T9715] netlink: 'syz.3.992': attribute type 4 has an invalid length. [ 213.938009][ T9715] netlink: 'syz.3.992': attribute type 24 has an invalid length. [ 214.275338][ T9722] Cannot find set identified by id 4 to match [ 214.275919][ T9724] netlink: 'syz.0.996': attribute type 7 has an invalid length. [ 214.336284][ T9732] bond0: option mode: unable to set because the bond device has slaves [ 214.481380][ T9744] batman_adv: batadv0: Adding interface: syzkaller0 [ 214.481396][ T9744] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.481422][ T9744] batman_adv: batadv0: Interface activated: syzkaller0 [ 214.689910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.889987][ T9764] __nla_validate_parse: 7 callbacks suppressed [ 214.890006][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 214.890035][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 215.050687][ T9773] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 215.141668][ T9773] validate_nla: 2 callbacks suppressed [ 215.141707][ T9773] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 215.325827][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 215.531698][ T9771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.558112][ T9771] bond3: (slave bond4): making interface the new active one [ 215.573378][ T9771] bond3: (slave bond4): Enslaving as an active interface with an up link [ 215.577925][ T9742] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 215.638011][ T9742] batman_adv: batadv0: Removing interface: syzkaller0 [ 215.683872][ T9779] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 215.923869][ T9803] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1013'. [ 216.018179][ T9809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 216.179892][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'. [ 216.179936][ T9816] netlink: 'syz.0.1019': attribute type 7 has an invalid length. [ 216.179948][ T9816] netlink: 'syz.0.1019': attribute type 8 has an invalid length. [ 216.179958][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 216.180475][ T9810] tipc: New replicast peer: 172.20.20.187 [ 216.180891][ T9810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.181273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.181536][ T9810] tipc: Enabled bearer , priority 10 [ 216.260025][ T9816] syz_tun: entered promiscuous mode [ 216.262129][ T9816] erspan0: entered promiscuous mode [ 216.265565][ T9816] gretap0: entered promiscuous mode [ 216.267828][ T9816] debugfs: 'hsr1' already exists in 'hsr' [ 216.267880][ T9816] Cannot create hsr debugfs directory [ 216.320049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.321670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.538545][ T9830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1020'. [ 216.589296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.589897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.787335][ T9836] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 216.787950][ T9836] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 216.788467][ T9836] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 216.788999][ T9836] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 216.809702][ T9836] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 216.810194][ T9836] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 216.810658][ T9836] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 216.840574][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1022'. [ 216.864558][ T9842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1021'. [ 217.076035][ T9848] Cannot find set identified by id 65534 to match [ 217.119883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.120265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.615720][ T9868] : renamed from bond0 (while UP) [ 217.695031][ T9876] bridge: RTM_NEWNEIGH with invalid ether address [ 219.169646][ C0] net_ratelimit: 6 callbacks suppressed [ 219.169667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.170327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.170800][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.818971][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.819496][ T6900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.837148][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.872809][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.930954][ T9971] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 220.024999][ T9965] bond3: entered promiscuous mode [ 220.025437][ T9965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.220503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.221234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.736699][T10006] __nla_validate_parse: 9 callbacks suppressed [ 220.736718][T10006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1061'. [ 220.996375][T10014] validate_nla: 60 callbacks suppressed [ 220.996395][T10014] netlink: 'syz.4.1063': attribute type 32 has an invalid length. [ 221.072235][T10013] netlink: 'syz.1.1065': attribute type 2 has an invalid length. [ 221.072274][T10013] netlink: 'syz.1.1065': attribute type 2 has an invalid length. [ 221.193538][T10024] Bluetooth: hci0: unsupported parameter 5135 [ 221.193582][T10024] Bluetooth: hci0: unsupported parameter 8192 [ 221.193612][T10024] Bluetooth: hci0: unsupported parameter 5135 [ 221.193640][T10024] Bluetooth: hci0: unsupported parameter 8192 [ 221.207511][T10025] Bluetooth: hci0: unsupported parameter 5135 [ 221.207547][T10025] Bluetooth: hci0: unsupported parameter 8192 [ 221.207578][T10025] Bluetooth: hci0: unsupported parameter 5135 [ 221.207604][T10025] Bluetooth: hci0: unsupported parameter 8192 [ 223.775545][T10020] syz_tun: left allmulticast mode [ 224.186890][T10072] pimreg: entered allmulticast mode [ 224.198982][T10074] vlan0: entered promiscuous mode [ 224.208677][T10074] vlan0: entered allmulticast mode [ 224.208696][T10074] veth0_vlan: entered allmulticast mode [ 224.231594][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 224.236437][T10068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1071'. [ 224.245391][T10070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1071'. [ 224.369385][ C0] net_ratelimit: 6 callbacks suppressed [ 224.369404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.370805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.634827][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1077'. [ 224.657370][T10083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.657614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.676852][T10083] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 224.802553][T10083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.856437][T10099] netlink: 'syz.0.1080': attribute type 3 has an invalid length. [ 225.057104][T10111] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 225.202934][T10119] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 225.203277][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.308102][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 225.352979][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 225.405850][T10119] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.409373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.410880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.583532][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'. [ 225.584137][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'. [ 225.668648][T10136] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 225.686473][T10134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'. [ 225.786944][T10141] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 225.869880][T10120] bond8: (slave geneve3): making interface the new active one [ 225.897893][T10120] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 225.912862][T10120] syz.2.1083 (10120) used greatest stack depth: 19080 bytes left [ 225.968279][T10136] bond5: entered promiscuous mode [ 225.968302][T10136] bond5: entered allmulticast mode [ 225.968902][T10136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.005627][T10141] block nbd296: server does not support multiple connections per device. [ 226.006166][T10141] block nbd296: shutting down sockets [ 226.379017][T10164] __nla_validate_parse: 1 callbacks suppressed [ 226.379066][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1093'. [ 226.449354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.450162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.636815][T10175] netlink: 'syz.3.1097': attribute type 1 has an invalid length. [ 226.800578][T10187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.206487][T10201] Bluetooth: MGMT ver 1.23 [ 227.332001][T10207] ip6t_rt: too many addresses specified [ 227.489255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.751008][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 227.751074][T10215] netlink: 'syz.0.1107': attribute type 7 has an invalid length. [ 227.751103][T10215] netlink: 'syz.0.1107': attribute type 8 has an invalid length. [ 227.751114][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 227.842504][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 228.161229][T10231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1110'. [ 228.359564][T10231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'. [ 228.928992][T10271] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1122'. [ 228.994488][T10276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1122'. [ 229.416685][ T1221] net_ratelimit: 3 callbacks suppressed [ 229.416705][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.583342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.584305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.930470][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 230.610573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.613200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.547683][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 231.649380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.649799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.243704][T10312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.580532][T10322] netlink: 'syz.4.1136': attribute type 5 has an invalid length. [ 232.580575][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 232.607568][T10322] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 232.689423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.689856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.813489][T10335] netlink: 'syz.4.1140': attribute type 8 has an invalid length. [ 232.888224][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 233.047109][T10340] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1141'. [ 233.243654][T10337] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 233.255946][T10337] bond7 (unregistering): Released all slaves [ 233.426790][T10333] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1141'. [ 233.462953][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'. [ 233.551575][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1143'. [ 234.034148][T10387] netlink: 'syz.0.1148': attribute type 83 has an invalid length. [ 234.367760][T10399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1150'. [ 234.503603][T10403] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 234.738444][T10412] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 234.769280][ C0] net_ratelimit: 4 callbacks suppressed [ 234.769301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.769910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.774372][T10412] bond1: (slave veth0_to_bond): Releasing backup interface [ 234.823214][T10412] bond7: (slave veth0_to_bond): making interface the new active one [ 234.824242][T10412] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 234.848276][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 234.859354][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 235.048171][T10424] syzkaller0: entered promiscuous mode [ 235.048192][T10424] syzkaller0: entered allmulticast mode [ 235.179640][ T148] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.662829][T10450] tipc: Started in network mode [ 235.662892][T10450] tipc: Node identity ac1414aa, cluster identity 4711 [ 235.671499][T10450] tipc: New replicast peer: 172.20.20.187 [ 235.672619][T10450] tipc: Enabled bearer , priority 10 [ 235.809419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.810318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.849364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.851122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.066837][ T861] tipc: Node number set to 2886997162 [ 237.143331][T10507] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 237.201678][T10507] 8021q: adding VLAN 0 to HW filter on device bond8 [ 237.253631][T10507] bond8: (slave geneve4): making interface the new active one [ 237.258770][T10507] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 237.692758][T10528] nbd1: detected capacity change from 0 to 63 [ 237.697977][T10528] block nbd1: NBD_DISCONNECT [ 237.715905][T10528] block nbd1: Disconnected due to user request. [ 237.723678][ T2019] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 237.723797][ T2019] Buffer I/O error on dev nbd1, logical block 1, async page read [ 237.723855][ T2019] Buffer I/O error on dev nbd1, logical block 2, async page read [ 237.723869][ T2019] Buffer I/O error on dev nbd1, logical block 3, async page read [ 237.725104][T10528] block nbd1: shutting down sockets [ 237.736543][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.736740][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 237.746365][ T1997] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 237.746413][ T1997] Buffer I/O error on dev nbd1, logical block 0, async page read [ 237.746448][ T1997] Buffer I/O error on dev nbd1, logical block 1, async page read [ 237.746498][ T1997] Buffer I/O error on dev nbd1, logical block 2, async page read [ 237.746528][ T1997] Buffer I/O error on dev nbd1, logical block 3, async page read [ 237.747647][ T1997] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 237.747690][ T1997] Buffer I/O error on dev nbd1, logical block 0, async page read [ 237.747722][ T1997] Buffer I/O error on dev nbd1, logical block 1, async page read [ 237.748017][ T1997] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 237.748268][ T1997] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.748444][ T1997] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.748609][ T1997] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.748771][ T1997] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.749024][ T1997] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.753881][ T8385] ldm_validate_partition_table(): Disk read failed. [ 237.763108][ T8385] Dev nbd1: unable to read RDB block 0 [ 237.784610][ T8385] nbd1: unable to read partition table [ 237.886684][ T8385] ldm_validate_partition_table(): Disk read failed. [ 237.892938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.893324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.896915][ T8385] Dev nbd1: unable to read RDB block 0 [ 237.907013][ T8385] nbd1: unable to read partition table [ 238.115321][T10543] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 238.115342][T10543] __nla_validate_parse: 4 callbacks suppressed [ 238.115352][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 238.118433][T10543] Bluetooth: hci0: unsupported parameter 5134 [ 238.118453][T10543] Bluetooth: hci0: unsupported parameter 8192 [ 238.118463][T10543] Bluetooth: hci0: unsupported parameter 5134 [ 238.118487][T10543] Bluetooth: hci0: unsupported parameter 8192 [ 238.338057][T10543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1189'. [ 238.585630][T10552] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1193'. [ 238.929342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.930051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.161968][T10595] ip6t_rt: too many addresses specified [ 239.572152][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 239.807445][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1213'. [ 239.969714][ C0] net_ratelimit: 1 callbacks suppressed [ 239.969733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.971285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.115403][T10634] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 240.275041][T10634] bond9: entered promiscuous mode [ 240.276740][T10634] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.412684][T10651] Cannot find del_set index 4 as target [ 240.425955][T10654] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 240.426483][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 240.427040][T10652] netlink: 'syz.4.1218': attribute type 16 has an invalid length. [ 240.478264][T10648] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.479791][T10648] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 240.479829][T10648] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 240.499567][T10648] bond9: (slave xfrm1): making interface the new active one [ 240.499619][T10648] xfrm1: entered promiscuous mode [ 240.525222][T10648] bond9: (slave xfrm1): Enslaving as an active interface with an up link [ 240.995720][T10674] netlink: 'syz.0.1222': attribute type 11 has an invalid length. [ 240.995740][T10674] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1222'. [ 241.017614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.018316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.293095][T10683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.294820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.513529][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'. [ 241.559628][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 241.806095][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 241.952724][T10712] bond5: option xmit_hash_policy: invalid value (64) [ 241.956462][T10712] bond5 (unregistering): Released all slaves [ 242.050760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.052419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.455531][T10698] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 243.089415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.444511][T10666] IPVS: starting estimator thread 0... [ 243.513655][T10778] __nla_validate_parse: 2 callbacks suppressed [ 243.513705][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1248'. [ 243.540199][T10775] IPVS: using max 35 ests per chain, 84000 per kthread [ 243.728606][T10792] IPv6: Can't replace route, no match found [ 243.728938][T10792] IPv6: Can't replace route, no match found [ 243.882984][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 243.953563][T10774] bond2: option fail_over_mac: invalid value (16) [ 243.962642][T10774] bond2 (unregistering): Released all slaves [ 243.984565][T10807] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 243.984601][T10807] netlink: 16002 bytes leftover after parsing attributes in process `syz.3.1255'. [ 243.985259][T10808] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 243.985291][T10808] netlink: 16002 bytes leftover after parsing attributes in process `syz.3.1255'. [ 243.985878][T10807] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 243.985908][T10807] netlink: 16002 bytes leftover after parsing attributes in process `syz.3.1255'. [ 244.161714][T10796] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:0 [ 244.741239][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1262'. [ 244.741276][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 244.819594][T10834] Unknown status report in ack skb [ 245.169238][ C0] net_ratelimit: 3 callbacks suppressed [ 245.169258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.170505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.227300][T10857] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1267'. [ 245.331705][T10860] netlink: 'syz.0.1268': attribute type 2 has an invalid length. [ 245.383083][T10857] team0: Port device dummy0 removed [ 245.543279][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 245.899331][T10890] netlink: 'syz.0.1276': attribute type 49 has an invalid length. [ 246.209956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.211085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.274077][T10908] netlink: 844 bytes leftover after parsing attributes in process `syz.4.1281'. [ 246.767305][T10902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.060174][T10941] dvmrp8: entered allmulticast mode [ 247.249419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.250089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.714119][T10973] netlink: 'syz.1.1295': attribute type 10 has an invalid length. [ 247.751314][T10973] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 248.000104][T10966] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 248.155345][T10986] syzkaller0: entered promiscuous mode [ 248.155383][T10986] syzkaller0: entered allmulticast mode [ 248.265803][T10994] Bluetooth: ISO socket layer initialized [ 248.289379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.290127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.338653][T10986] vcan0: tx address claim with broadcast sa [ 248.611125][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.948818][T11026] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 249.032918][T11035] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 249.163604][T11023] netlink: 'syz.2.1305': attribute type 1 has an invalid length. [ 249.921215][T11052] __nla_validate_parse: 6 callbacks suppressed [ 249.921233][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 250.338414][T11077] smc: removing ib device syz2 [ 250.369345][ C0] net_ratelimit: 3 callbacks suppressed [ 250.369365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.370455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.730529][T11077] smbdirect: ib_dev[syz2] removed [ 250.901215][T11096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'. [ 250.902518][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'. [ 251.409240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.410184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.582806][T11107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.583485][T11107] bridge0: port 1(bond2) entered blocking state [ 251.585359][T11107] bridge0: port 1(bond2) entered disabled state [ 251.585508][T11107] bond2: entered allmulticast mode [ 251.668015][T11107] bond2: entered promiscuous mode [ 251.677527][T11107] bridge0: port 1(bond2) entered blocking state [ 251.677653][T11107] bridge0: port 1(bond2) entered forwarding state [ 251.708453][T11113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.080094][T11127] x_tables: duplicate underflow at hook 1 [ 252.102166][T11127] x_tables: duplicate underflow at hook 1 [ 252.117467][T11123] syzkaller0: entered promiscuous mode [ 252.117488][T11123] syzkaller0: entered allmulticast mode [ 252.324643][T10659] bridge0: port 1(bond2) entered disabled state [ 252.449303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.450009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.987595][T11155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.245460][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 253.322030][T11164] x_tables: duplicate underflow at hook 1 [ 253.346681][T11173] x_tables: duplicate underflow at hook 1 [ 253.490254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.490969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.762731][T11184] bridge0: port 4(veth1_to_bridge) entered blocking state [ 253.762935][T11184] bridge0: port 4(veth1_to_bridge) entered disabled state [ 253.763233][T11184] veth1_to_bridge: entered allmulticast mode [ 253.825726][T11184] veth1_to_bridge: entered promiscuous mode [ 253.841084][T11184] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.845244][T11184] bridge0: port 4(veth1_to_bridge) entered blocking state [ 253.846175][T11184] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 254.305159][T11197] netlink: 'syz.3.1344': attribute type 5 has an invalid length. [ 254.305198][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'. [ 254.542450][T11204] x_tables: duplicate underflow at hook 2 [ 254.704689][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 254.871338][T11216] syzkaller0: entered promiscuous mode [ 254.871359][T11216] syzkaller0: entered allmulticast mode [ 255.185742][T11233] netlink: 'syz.1.1351': attribute type 21 has an invalid length. [ 255.185763][T11233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1351'. [ 255.185835][T11233] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1351'. [ 255.190351][T11233] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 255.205535][T11233] team0: Device vxcan1 is of different type [ 255.569312][ C0] net_ratelimit: 2 callbacks suppressed [ 255.569330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.570051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.651787][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.087675][T11265] openvswitch: netlink: Missing key (keys=50, expected=80) [ 256.172924][T11273] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1364'. [ 256.186019][T11263] IPVS: Scheduler module ip_vs_sip not found [ 256.374760][T11283] ip_tables: iptables: counters copy to user failed while replacing table [ 256.497124][T11263] IPVS: Scheduler module ip_vs_sip not found [ 256.609474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.609844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.864581][T11302] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 256.893976][T11293] xt_hashlimit: size too large, truncated to 1048576 [ 256.955971][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.956038][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.018123][T11307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 257.142546][T11306] bond9: (slave geneve4): making interface the new active one [ 257.160266][T11306] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 257.164776][T11307] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.200744][T10664] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 20000 - 0 [ 257.200789][T10664] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 257.200821][T10664] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 257.201707][T10664] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 257.302039][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 257.342498][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1374'. [ 257.474858][T11319] netlink: 'syz.0.1375': attribute type 62 has an invalid length. [ 257.557225][T11293] xt_hashlimit: size too large, truncated to 1048576 [ 257.604773][T11321] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1376'. [ 257.649462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.650750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.003052][T11339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'. [ 258.003084][T11339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'. [ 258.036903][T11333] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 258.121761][T11340] digital: digital_start_poll: Unknown protocol [ 258.856775][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 259.600198][ T148] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.601043][ T148] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.601088][ T148] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.769935][ C0] net_ratelimit: 11 callbacks suppressed [ 260.769955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.772628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.859006][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.373446][T11482] __nla_validate_parse: 6 callbacks suppressed [ 261.373487][T11482] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1422'. [ 261.443485][T11482] syzkaller1: entered promiscuous mode [ 261.443507][T11482] syzkaller1: entered allmulticast mode [ 261.809353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.810344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.815652][T11503] atomic_op ffff8880571a51e0 conn xmit_atomic 0000000000000000 [ 261.815879][T11503] atomic_op ffff8880571a39e0 conn xmit_atomic 0000000000000000 [ 261.816050][T11503] atomic_op ffff8880571a31e0 conn xmit_atomic 0000000000000000 [ 261.816235][T11503] atomic_op ffff8880571a49e0 conn xmit_atomic 0000000000000000 [ 261.816398][T11503] atomic_op ffff8880571a79e0 conn xmit_atomic 0000000000000000 [ 261.816565][T11503] atomic_op ffff8880571a69e0 conn xmit_atomic 0000000000000000 [ 261.847933][T11503] atomic_op ffff8880571a71e0 conn xmit_atomic 0000000000000000 [ 261.848132][T11503] atomic_op ffff8880571a61e0 conn xmit_atomic 0000000000000000 [ 261.848328][T11503] atomic_op ffff8880571a09e0 conn xmit_atomic 0000000000000000 [ 261.848511][T11503] atomic_op ffff8880571a41e0 conn xmit_atomic 0000000000000000 [ 261.956027][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1430'. [ 262.192751][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 262.244279][T11520] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1435'. [ 262.251119][T11516] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1431'. [ 262.258373][T11516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1431'. [ 262.560192][T11528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1438'. [ 262.560219][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 262.786143][T11537] netlink: 'syz.4.1440': attribute type 3 has an invalid length. [ 262.786595][T11534] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20004 [ 262.849254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.850129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.855380][T11538] sctp: [Deprecated]: syz.3.1439 (pid 11538) Use of int in max_burst socket option. [ 262.855380][T11538] Use struct sctp_assoc_value instead [ 263.112228][T11550] xt_IDLETIMER: label is empty or not nul-terminated [ 263.565412][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 263.737199][T11577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.749457][T11577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.749644][T11577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.749797][T11577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.754523][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 263.978890][T11586] netlink: 'syz.3.1453': attribute type 83 has an invalid length. [ 264.295724][T11606] nbd: must specify at least one socket [ 264.333220][T11610] syzkaller1: entered promiscuous mode [ 264.333243][T11610] syzkaller1: entered allmulticast mode [ 265.253977][T11649] nft_compat: unsupported protocol 0 [ 265.764232][T11670] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 265.969292][ C0] net_ratelimit: 15 callbacks suppressed [ 265.969313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.971042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.164952][T11691] netlink: 'syz.0.1472': attribute type 2 has an invalid length. [ 266.164974][T11691] netlink: 'syz.0.1472': attribute type 2 has an invalid length. [ 266.438267][T11700] __nla_validate_parse: 8 callbacks suppressed [ 266.438286][T11700] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1475'. [ 266.769967][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 266.774189][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 266.996548][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 267.009346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.010538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.170842][T10664] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.767312][T11757] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 267.768629][T11754] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 267.790065][T11756] vcan0: tx address claim with broadcast sa [ 267.811118][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.049336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.049813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.103992][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 268.156046][T11772] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.396193][T11787] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 268.396251][T11787] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 268.430893][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 268.744126][T11803] tipc: Enabling of bearer rejected, failed to enable media [ 268.837355][T11806] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1502'. [ 268.888654][T11806] netlink: 'syz.2.1502': attribute type 4 has an invalid length. [ 268.925042][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 268.925064][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 269.089735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.090531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.311106][T11833] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 269.542651][T11833] bond10: entered promiscuous mode [ 269.543496][T11833] 8021q: adding VLAN 0 to HW filter on device bond10 [ 269.690868][T11833] ipvlan2: entered allmulticast mode [ 269.690899][T11833] bond10: entered allmulticast mode [ 269.722248][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 269.813488][T11860] netlink: 'syz.3.1514': attribute type 1 has an invalid length. [ 269.814639][T11837] bond10: (slave bridge3): making interface the new active one [ 269.814658][T11837] bridge3: entered promiscuous mode [ 269.814848][T11837] bridge3: entered allmulticast mode [ 269.817852][T11837] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 270.102312][T11860] 8021q: adding VLAN 0 to HW filter on device bond10 [ 270.129411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.322777][T11866] bond10: (slave veth5): Enslaving as an active interface with a down link [ 270.345760][T11867] bond10: (slave dummy0): making interface the new active one [ 270.346937][T11867] dummy0: entered promiscuous mode [ 270.369073][T11867] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 270.906226][T11899] netlink: 'syz.3.1527': attribute type 15 has an invalid length. [ 270.947247][T11899] netlink: 'syz.3.1527': attribute type 15 has an invalid length. [ 270.976318][T11912] netlink: 'syz.3.1527': attribute type 15 has an invalid length. [ 270.978021][T11912] netlink: 'syz.3.1527': attribute type 15 has an invalid length. [ 271.000136][T10657] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 271.000181][T10657] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 271.001405][T10657] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 271.169353][ C0] net_ratelimit: 1 callbacks suppressed [ 271.169374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.170148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.197413][T11922] bond1: entered allmulticast mode [ 271.197436][T11922] wireguard0: entered allmulticast mode [ 271.370290][T11921] bond1: left allmulticast mode [ 271.370313][T11921] wireguard0: left allmulticast mode [ 271.526342][T11939] __nla_validate_parse: 14 callbacks suppressed [ 271.526379][T11939] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1535'. [ 272.127545][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 272.209589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.210480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.307761][T11971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.346846][T11974] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 272.346882][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1547'. [ 272.346910][T11974] netlink: 'syz.3.1547': attribute type 2 has an invalid length. [ 272.346921][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 272.349080][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 272.413048][T11977] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 272.413101][T11977] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1547'. [ 272.413141][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 272.428251][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 272.438391][T11974] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 272.438933][T11974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.441438][T11974] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1547'. [ 272.441609][T11978] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1547'. [ 272.795883][T11996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.818758][T11997] xt_hashlimit: size too large, truncated to 1048576 [ 272.883551][T12000] C: renamed from lo (while UP) [ 272.896324][T12000] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 273.249301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.250359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.289497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.290191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.381371][T12057] netlink: zone id is out of range [ 274.572297][T12064] validate_nla: 1 callbacks suppressed [ 274.572348][T12064] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 274.836092][T12064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.332629][T12108] netlink: 'syz.2.1584': attribute type 21 has an invalid length. [ 275.882267][ T5625] Bluetooth: hci4: link tx timeout [ 275.882445][ T5625] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.963854][ T5619] Bluetooth: hci4: link tx timeout [ 275.963877][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.993621][ T5619] Bluetooth: hci4: link tx timeout [ 275.993641][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.160363][ T5619] Bluetooth: hci4: link tx timeout [ 276.160386][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.302192][ T5619] Bluetooth: hci4: link tx timeout [ 276.302214][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.369312][ C0] net_ratelimit: 10 callbacks suppressed [ 276.369336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.370306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.334369][ T5619] Bluetooth: hci4: link tx timeout [ 277.334391][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 277.409586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.410006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.410252][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.574457][ T5619] Bluetooth: hci4: link tx timeout [ 277.574510][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 277.646471][T12070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.894899][ T5619] Bluetooth: hci4: command 0x0405 tx timeout [ 278.449299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.449910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.662669][T12165] __nla_validate_parse: 16 callbacks suppressed [ 278.662688][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 278.845785][T12170] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1596'. [ 279.290170][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.290236][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.489365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.490310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.577527][T12213] openvswitch: netlink: Duplicate or invalid key (type 0). [ 279.620602][T12220] tipc: New replicast peer: 255.255.255.255 [ 279.621336][T12220] tipc: Enabled bearer , priority 10 [ 279.798963][T12227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1610'. [ 279.992996][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 280.068559][T12236] netlink: 'syz.1.1614': attribute type 17 has an invalid length. [ 280.068579][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 280.068601][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1614'. [ 280.106505][T12242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1613'. [ 280.142041][T12236] bond0: entered promiscuous mode [ 280.142061][T12236] bond_slave_0: entered promiscuous mode [ 280.142255][T12236] bond_slave_1: entered promiscuous mode [ 280.144526][T12236] bond0: left promiscuous mode [ 280.144542][T12236] bond_slave_0: left promiscuous mode [ 280.144798][T12236] bond_slave_1: left promiscuous mode [ 280.282851][T12245] syzkaller0: entered promiscuous mode [ 280.282872][T12245] syzkaller0: entered allmulticast mode [ 280.353891][T12246] tipc: Started in network mode [ 280.353977][T12246] tipc: Node identity 12e4315ab95c, cluster identity 4711 [ 280.364403][T12246] tipc: Enabled bearer , priority 0 [ 280.438657][T12246] tipc: Resetting bearer [ 280.548825][T12256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1619'. [ 280.548997][T12256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1619'. [ 280.715226][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 281.117573][T12244] tipc: Resetting bearer [ 281.214569][T12244] tipc: Disabling bearer [ 281.510456][T12299] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 281.535893][T12301] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 281.563750][T12301] syzkaller0: entered promiscuous mode [ 281.563773][T12301] syzkaller0: entered allmulticast mode [ 281.680970][ T148] dummy0: left promiscuous mode [ 281.911827][T12314] net_ratelimit: 2 callbacks suppressed [ 281.911862][T12314] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 282.300472][T12327] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 282.404502][T12325] tipc: Enabled bearer , priority 0 [ 282.556784][T12324] tipc: Disabling bearer [ 282.966493][T12353] syzkaller0: entered promiscuous mode [ 282.966530][T12353] syzkaller0: entered allmulticast mode [ 283.477710][T12371] batman_adv: batadv0: Adding interface: veth0 [ 283.477727][T12371] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.477755][T12371] batman_adv: batadv0: Interface activated: veth0 [ 283.546238][T12371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.546274][T12371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.581653][T12371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.581671][T12371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.621104][T12371] batman_adv: batadv0: Interface deactivated: gretap1 [ 283.621121][T12371] batman_adv: batadv0: Removing interface: gretap1 [ 283.642675][T12371] batman_adv: batadv0: Interface deactivated: veth0 [ 283.642711][T12371] batman_adv: batadv0: Removing interface: veth0 [ 283.820851][ T12] wlan1: Trigger new scan to find an IBSS to join [ 283.937156][T12395] __nla_validate_parse: 6 callbacks suppressed [ 283.937176][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'. [ 283.937835][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 283.951632][T12389] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 283.988116][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 284.059980][T12401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1656'. [ 284.060014][T12401] netlink: 'syz.0.1656': attribute type 7 has an invalid length. [ 284.060026][T12401] netlink: 'syz.0.1656': attribute type 8 has an invalid length. [ 284.060037][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 284.162597][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 284.268436][T12404] bond11: option xmit_hash_policy: invalid value (64) [ 284.284267][T12404] bond11 (unregistering): Released all slaves [ 284.516880][T12414] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 284.558783][T12414] syzkaller0: entered promiscuous mode [ 284.558806][T12414] syzkaller0: entered allmulticast mode [ 284.594559][T12417] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 284.594578][T12417] netlink: 'syz.3.1661': attribute type 2 has an invalid length. [ 284.594589][T12417] netlink: 'syz.3.1661': attribute type 3 has an invalid length. [ 284.594599][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'. [ 285.095687][T12430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1666'. [ 285.127436][T12434] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1667'. [ 285.127476][T12434] nbd: illegal input index 65508 [ 285.406697][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 285.947935][ T30] audit: type=1804 audit(1789875902.401:8): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1675" name="/newroot/331/cgroup.controllers" dev="tmpfs" ino=1708 res=1 errno=0 [ 285.949471][ T30] audit: type=1800 audit(1789875902.411:9): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1675" name="cgroup.controllers" dev="tmpfs" ino=1708 res=0 errno=0 [ 286.597395][T12500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.770890][ T148] wlan1: Trigger new scan to find an IBSS to join [ 287.175768][T12529] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 287.575617][T12555] netlink: 'syz.0.1696': attribute type 7 has an invalid length. [ 287.575653][T12555] netlink: 'syz.0.1696': attribute type 8 has an invalid length. [ 287.681603][ T12] wlan1: Creating new IBSS network, BSSID 00:00:00:00:01:00 [ 290.107930][T12529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.433757][T12595] syzkaller0: left promiscuous mode [ 290.433778][T12595] syzkaller0: left allmulticast mode [ 290.483183][T12600] macvlan0: entered promiscuous mode [ 290.563529][T12607] __nla_validate_parse: 3 callbacks suppressed [ 290.563549][T12607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1705'. [ 290.638107][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 290.866181][T12622] netlink: 'syz.2.1706': attribute type 12 has an invalid length. [ 290.923656][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 290.983812][T12625] syzkaller0: entered promiscuous mode [ 290.983835][T12625] syzkaller0: entered allmulticast mode [ 290.998522][T12634] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.1709'. [ 291.143299][T12606] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 291.143344][T12606] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 291.217379][T12625] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.710516][T12662] netlink: set zone limit has 4 unknown bytes [ 292.333099][T12689] tipc: Enabling of bearer rejected, failed to enable media [ 292.494395][T12680] syz.1.1718 (12680) used greatest stack depth: 15744 bytes left [ 292.776642][T12713] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 292.776680][T12713] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 292.807258][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 293.008033][T12726] Cannot find del_set index 4 as target [ 294.313870][T12768] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1736'. [ 294.423041][T12771] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 294.562231][T12779] netlink: 'syz.4.1738': attribute type 2 has an invalid length. [ 294.565130][T12779] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1738'. [ 294.596203][T12779] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1738'. [ 295.037069][T12792] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 295.087673][T12792] bond4 (unregistering): Released all slaves [ 295.131298][T12805] Bluetooth: hci0: unsupported parameter 5135 [ 295.131318][T12805] Bluetooth: hci0: unsupported parameter 8192 [ 295.131330][T12805] Bluetooth: hci0: unsupported parameter 5135 [ 295.131340][T12805] Bluetooth: hci0: unsupported parameter 8192 [ 295.148275][T12805] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1745'. [ 295.168483][T12809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1746'. [ 295.234986][T12805] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 295.303602][T12794] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 295.305776][T12794] bond4 (unregistering): Released all slaves [ 295.344747][T12817] netlink: 'syz.1.1748': attribute type 4 has an invalid length. [ 296.056492][T12845] __nla_validate_parse: 1 callbacks suppressed [ 296.056517][T12845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1758'. [ 296.056545][T12845] netlink: 'syz.1.1758': attribute type 7 has an invalid length. [ 296.056553][T12845] netlink: 'syz.1.1758': attribute type 8 has an invalid length. [ 296.056559][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 296.072305][T12847] bond0: entered promiscuous mode [ 296.074268][T12847] batadv0: entered promiscuous mode [ 296.075585][T12847] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 296.075665][T12847] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 296.076195][T12847] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 296.085580][T12847] bond0: left promiscuous mode [ 296.094724][T12847] batadv0: left promiscuous mode [ 296.518670][T12859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1763'. [ 296.724152][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.724611][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.725011][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.725380][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.725792][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.779602][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.779996][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.780418][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.780816][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.784252][T12872] openvswitch: netlink: Flow key attr not present in new flow. [ 296.954305][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 296.978059][T12882] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.145999][T12882] bridge_slave_1 (unregistering): left allmulticast mode [ 297.146025][T12882] bridge_slave_1 (unregistering): left promiscuous mode [ 297.146096][T12882] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.497413][T12899] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1769'. [ 297.497614][T12899] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1769'. [ 297.704972][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1771'. [ 297.705006][T12905] netlink: 'syz.0.1771': attribute type 7 has an invalid length. [ 297.705019][T12905] netlink: 'syz.0.1771': attribute type 8 has an invalid length. [ 297.705030][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 297.808017][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 297.988387][T12918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1775'. [ 298.471036][T12951] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 298.487660][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491299][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491331][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491353][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491375][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491396][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491418][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491441][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491463][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.491484][T12955] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.635127][T12951] bond11: entered promiscuous mode [ 298.656305][T12951] 8021q: adding VLAN 0 to HW filter on device bond11 [ 298.680819][T12958] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 298.680842][T12958] netlink: 'syz.0.1784': attribute type 2 has an invalid length. [ 298.808434][T12974] netlink: 'syz.1.1786': attribute type 7 has an invalid length. [ 298.808487][T12974] netlink: 'syz.1.1786': attribute type 8 has an invalid length. [ 299.170923][ T42] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.805956][T13011] Cannot find map_set index 135 as target [ 299.881618][T13017] netlink: 'syz.0.1799': attribute type 7 has an invalid length. [ 299.881639][T13017] netlink: 'syz.0.1799': attribute type 8 has an invalid length. [ 300.932443][T13054] bond4: Unable to set up delay as MII monitoring is disabled [ 300.936494][T13054] bond4 (unregistering): Released all slaves [ 301.125485][T13060] bond4: Unable to set up delay as MII monitoring is disabled [ 301.132295][T13060] bond4 (unregistering): Released all slaves [ 301.221601][T13078] __nla_validate_parse: 11 callbacks suppressed [ 301.221620][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 301.234739][T13073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1813'. [ 301.558884][T13087] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 301.608286][T13087] bond12: entered promiscuous mode [ 301.608741][T13087] 8021q: adding VLAN 0 to HW filter on device bond12 [ 301.627083][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'. [ 302.328217][T13131] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 302.614417][T13142] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1832'. [ 302.702449][T13142] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 302.712656][T13143] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 302.895974][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'. [ 302.918025][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1837'. [ 302.952088][T13160] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1836'. [ 303.119615][T13170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1837'. [ 303.208019][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1838'. [ 303.208047][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1838'. [ 303.887595][T13201] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 306.244931][T13294] __nla_validate_parse: 8 callbacks suppressed [ 306.244951][T13294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1892'. [ 306.394402][T13299] net_ratelimit: 26 callbacks suppressed [ 306.394431][T13299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.413899][T13301] netlink: 'syz.0.1895': attribute type 37 has an invalid length. [ 306.509602][T13303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1896'. [ 306.511176][T13303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1896'. [ 306.670270][T13311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1900'. [ 308.612647][T13365] netlink: zone id is out of range [ 308.612679][T13365] netlink: zone id is out of range [ 308.614218][T13365] netlink: set zone limit has 4 unknown bytes [ 309.968988][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1950'. [ 309.969055][T13422] netlink: 'syz.2.1950': attribute type 7 has an invalid length. [ 309.999733][T13422] netlink: 'syz.2.1950': attribute type 8 has an invalid length. [ 309.999784][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 310.585269][T13443] netlink: 'syz.2.1956': attribute type 1 has an invalid length. [ 310.585398][T13443] netlink: 'syz.2.1956': attribute type 1 has an invalid length. [ 310.588211][T13437] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.588244][T13437] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.610494][T13443] vcan0: tx address claim with dest, not broadcast [ 310.707540][T13449] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 310.748887][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1958'. [ 310.751685][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 310.775345][T13456] netlink: 'syz.2.1960': attribute type 8 has an invalid length. [ 311.014347][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 311.018055][T13460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1961'. [ 311.378396][T13473] __nla_validate_parse: 1 callbacks suppressed [ 311.378442][T13473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1965'. [ 311.378486][T13473] netlink: 'syz.1.1965': attribute type 7 has an invalid length. [ 311.378514][T13473] netlink: 'syz.1.1965': attribute type 8 has an invalid length. [ 311.378543][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 311.393241][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 312.235454][T13512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.328399][T13512] syzkaller1: entered promiscuous mode [ 312.328421][T13512] syzkaller1: entered allmulticast mode [ 312.482693][T13515] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 312.566190][T13526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.643173][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.983479][T13524] netlink: 'syz.1.1974': attribute type 5 has an invalid length. [ 312.983517][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 313.063231][T13545] FAULT_INJECTION: forcing a failure. [ 313.063231][T13545] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 313.063334][T13545] CPU: 1 UID: 0 PID: 13545 Comm: syz.0.1984 Not tainted syzkaller #0 PREEMPT(full) [ 313.063358][T13545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.063376][T13545] Call Trace: [ 313.063388][T13545] [ 313.063396][T13545] dump_stack_lvl+0xe8/0x150 [ 313.063433][T13545] should_fail_ex+0x410/0x560 [ 313.063460][T13545] _copy_to_user+0x31/0xb0 [ 313.063485][T13545] simple_read_from_buffer+0xe1/0x170 [ 313.063517][T13545] proc_fail_nth_read+0x1bb/0x230 [ 313.063544][T13545] ? common_file_perm+0x20e/0x2b0 [ 313.063569][T13545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.063601][T13545] ? rw_verify_area+0x24a/0x4c0 [ 313.063625][T13545] ? tun_chr_write_iter+0x18a/0x200 [ 313.063646][T13545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 313.063672][T13545] vfs_read+0x213/0xa80 [ 313.063703][T13545] ? __pfx___mutex_lock+0x10/0x10 [ 313.063727][T13545] ? __pfx_vfs_read+0x10/0x10 [ 313.063754][T13545] ? __fget_files+0x2a/0x420 [ 313.063790][T13545] ? __fget_files+0x3a2/0x420 [ 313.063812][T13545] ? __fget_files+0x2a/0x420 [ 313.063846][T13545] ksys_read+0x150/0x270 [ 313.063875][T13545] ? __pfx_ksys_read+0x10/0x10 [ 313.063914][T13545] do_syscall_64+0x166/0x520 [ 313.063936][T13545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.063956][T13545] ? clear_bhb_loop+0x70/0xc0 [ 313.063979][T13545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.063997][T13545] RIP: 0033:0x7f2bf7d5e98e [ 313.064019][T13545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.064034][T13545] RSP: 002b:00007f2bf8c56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.064058][T13545] RAX: ffffffffffffffda RBX: 00007f2bf8c576c0 RCX: 00007f2bf7d5e98e [ 313.064071][T13545] RDX: 000000000000000f RSI: 00007f2bf8c570a0 RDI: 0000000000000003 [ 313.064083][T13545] RBP: 00007f2bf8c57090 R08: 0000000000000000 R09: 0000000000000000 [ 313.064094][T13545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.064105][T13545] R13: 00007f2bf8026038 R14: 00007f2bf8025fa0 R15: 00007ffe2cdf1428 [ 313.064137][T13545] [ 313.356596][T13549] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 313.356618][T13549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1988'. [ 313.357677][T13549] netlink: 'syz.1.1988': attribute type 2 has an invalid length. [ 313.358350][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 313.693573][T13558] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.693669][T13558] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.693733][T13558] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.693801][T13558] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.693864][T13558] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.693928][T13558] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.693977][T13558] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 313.702351][T13560] netlink: 7896 bytes leftover after parsing attributes in process `syz.2.1985'. [ 314.081446][T13576] 8021q: adding VLAN 0 to HW filter on device bond4 [ 314.111261][T13578] bond4: (slave ip6erspan0): making interface the new active one [ 314.112625][T13578] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 314.655598][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 314.655620][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1999'. [ 314.680472][T13591] IPVS: Scheduler module ip_vs_mh not found [ 314.722890][T13585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.752279][T13600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2003'. [ 314.814794][T13598] xt_hashlimit: overflow, try lower: 3/0 [ 315.036191][T13603] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 315.036227][T13603] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 315.036264][T13603] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 315.130572][T13603] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 315.170776][T13603] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.461466][T13631] validate_nla: 4 callbacks suppressed [ 315.461485][T13631] netlink: 'syz.3.2009': attribute type 21 has an invalid length. [ 315.461535][T13631] netlink: 'syz.3.2009': attribute type 6 has an invalid length. [ 316.360713][T13667] netlink: 'syz.4.2021': attribute type 39 has an invalid length. [ 316.708586][T13680] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 316.794648][T13689] __nla_validate_parse: 4 callbacks suppressed [ 316.794695][T13689] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2027'. [ 316.870376][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 316.870442][T13690] netlink: 'syz.2.2026': attribute type 15 has an invalid length. [ 316.870468][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 317.018350][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 317.018423][T13690] netlink: 'syz.2.2026': attribute type 15 has an invalid length. [ 317.018454][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 317.052759][T10657] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 317.055030][ T42] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 2816 - 0 [ 317.055089][ T42] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 317.055154][ T42] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 317.099017][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.418617][T13712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2035'. [ 317.509823][T13706] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2032'. [ 317.684647][T10664] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.932416][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 317.956846][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 318.268660][T13752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2046'. [ 318.903153][T13776] netlink: 'syz.1.2051': attribute type 7 has an invalid length. [ 318.945628][T13777] smc: net device lo applied user defined pnetid SYZ0 [ 318.945834][T13777] smc: smcd device lo applied user defined pnetid SYZ0 [ 319.005181][T13781] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 319.025008][T13787] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 319.491775][T13802] netlink: 'syz.3.2056': attribute type 4 has an invalid length. [ 319.550953][T13803] xt_hashlimit: size too large, truncated to 1048576 [ 319.558712][T13802] net_ratelimit: 3323 callbacks suppressed [ 319.558759][T13802] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 320.005604][T13812] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 320.005670][T13812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.864165][T13857] netlink: 'syz.3.2071': attribute type 10 has an invalid length. [ 321.348006][T13879] nbd: socks must be embedded in a SOCK_ITEM attr [ 321.621999][ T10] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 321.848761][T13901] fido_id[13901]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 321.954317][T13908] __nla_validate_parse: 7 callbacks suppressed [ 321.954369][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 322.044796][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 322.044832][T13875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2075'. [ 322.081606][T13875] geneve0: entered promiscuous mode [ 322.081629][T13875] geneve0: entered allmulticast mode [ 322.131244][T10657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.292106][T13876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.567181][T13934] sock: sock_timestamping_bind_phc: sock not bind to device [ 324.680488][T13940] syzkaller0: entered promiscuous mode [ 324.680510][T13940] syzkaller0: entered allmulticast mode [ 324.850953][T13949] netlink: 'syz.0.2092': attribute type 8 has an invalid length. [ 325.084904][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2094'. [ 325.422391][T13980] wg1: entered promiscuous mode [ 325.422447][T13980] wg1: entered allmulticast mode [ 326.036734][T14004] lo: entered promiscuous mode [ 326.039944][T14004] tunl0: entered promiscuous mode [ 326.048828][T14002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.050367][T14002] IPv6: NLM_F_CREATE should be set when creating new route [ 326.076447][T14004] gre0: entered promiscuous mode [ 326.222149][T14004] gretap0: entered promiscuous mode [ 326.281492][T14004] erspan0: entered promiscuous mode [ 326.348040][T14004] ip_vti0: entered promiscuous mode [ 327.439696][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 327.483241][T14052] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2117'. [ 327.811709][T14060] netlink: ct family unspecified [ 327.922895][T14067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2122'. [ 327.950829][T14066] netlink: 'syz.0.2121': attribute type 2 has an invalid length. [ 327.950849][T14066] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 336.559228][ C0] sched: DL replenish lagged too much [ 337.004163][T10657] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.878612][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 382.735697][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.094646][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.268130][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.940353][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.549010][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 605.555997][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14090/1:b..l P5617/1:b..l P14087/1:b..l P2/1:b..l P10657/1:b..l [ 605.568504][ C0] rcu: (detected by 0, t=10502 jiffies, g=60281, q=682 ncpus=2) [ 605.576249][ C0] task:kworker/u8:14 state:R running task stack:22568 pid:10657 tgid:10657 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 605.589860][ C0] Workqueue: krds_cp_wq#3/5 rds_connect_worker [ 605.596277][ C0] Call Trace: [ 605.599655][ C0] [ 605.602667][ C0] __schedule+0x17db/0x58f0 [ 605.607343][ C0] ? __lock_acquire+0x747/0x2de0 [ 605.612392][ C0] ? __pfx___schedule+0x10/0x10 [ 605.617261][ C0] ? __lock_acquire+0x747/0x2de0 [ 605.622221][ C0] preempt_schedule_irq+0x4b/0x90 [ 605.627260][ C0] irqentry_exit+0x14f/0x910 [ 605.631959][ C0] ? trace_irq_disable+0x3b/0x140 [ 605.637036][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 605.643064][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 605.648432][ C0] Code: ff ff ff e8 50 85 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 89 45 0a cc 48 8d 3d 97 4b da [ 605.668109][ C0] RSP: 0018:ffffc90003a470c0 EFLAGS: 00000296 [ 605.674288][ C0] RAX: 9bc5f97e8d63c000 RBX: 0000000000000000 RCX: 0000000000000046 [ 605.682269][ C0] RDX: 0000000054a3c17c RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 605.690251][ C0] RBP: ffff88802efd1f40 R08: ffffffff8177f1df R09: 0000000000000000 [ 605.698232][ C0] R10: ffffc90003a471f8 R11: ffffffff81b28ab0 R12: ffffffff8ed5c8e0 [ 605.706215][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 605.714201][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 605.720419][ C0] ? unwind_next_frame+0x8f/0x2550 [ 605.725591][ C0] ? sk_alloc+0x2c7/0x390 [ 605.730071][ C0] ? unwind_next_frame+0x8f/0x2550 [ 605.735202][ C0] unwind_next_frame+0xac/0x2550 [ 605.740155][ C0] ? unwind_next_frame+0x8f/0x2550 [ 605.745282][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 605.750570][ C0] ? unwind_next_frame+0x8f/0x2550 [ 605.755703][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 605.761868][ C0] arch_stack_walk+0x11b/0x150 [ 605.766652][ C0] ? sk_alloc+0x2c7/0x390 [ 605.771004][ C0] stack_trace_save+0xa9/0x100 [ 605.775782][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 605.781161][ C0] ? __lock_acquire+0x747/0x2de0 [ 605.786115][ C0] save_stack+0x122/0x230 [ 605.790516][ C0] ? __pfx_save_stack+0x10/0x10 [ 605.795373][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 605.800712][ C0] ? __slab_free+0x274/0x2c0 [ 605.805305][ C0] ? qlist_free_all+0x99/0x100 [ 605.810073][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 605.815715][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 605.820756][ C0] ? __kmalloc_cache_noprof+0x29f/0x600 [ 605.826311][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 605.831435][ C0] ? sk_alloc+0x2c7/0x390 [ 605.835792][ C0] ? page_ext_put+0x97/0xc0 [ 605.840312][ C0] __reset_page_owner+0x71/0x1f0 [ 605.845266][ C0] __free_frozen_pages+0xc93/0xd90 [ 605.850409][ C0] __slab_free+0x274/0x2c0 [ 605.854859][ C0] qlist_free_all+0x99/0x100 [ 605.859463][ C0] kasan_quarantine_reduce+0x148/0x160 [ 605.864933][ C0] __kasan_slab_alloc+0x22/0x80 [ 605.869796][ C0] __kmalloc_cache_noprof+0x29f/0x600 [ 605.875181][ C0] ? __kmalloc_cache_noprof+0x14d/0x600 [ 605.880735][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 605.885858][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 605.890992][ C0] ref_tracker_alloc+0x15b/0x4b0 [ 605.895944][ C0] ? trace_kmalloc+0x2a/0xf0 [ 605.900540][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 605.906015][ C0] ? __kmalloc_noprof+0x38c/0x720 [ 605.911048][ C0] ? sk_prot_alloc+0x57/0x210 [ 605.915747][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 605.921070][ C0] sk_alloc+0x2c7/0x390 [ 605.925333][ C0] inet6_create+0x81a/0x1270 [ 605.930062][ C0] ? inet6_create+0x80/0x1270 [ 605.934755][ C0] __sock_create+0x4b3/0x9d0 [ 605.939445][ C0] rds_tcp_conn_path_connect+0x2d8/0x920 [ 605.945181][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 605.951372][ C0] rds_connect_worker+0x1d8/0x290 [ 605.956404][ C0] ? process_scheduled_works+0x97a/0x1630 [ 605.962183][ C0] process_scheduled_works+0xc3d/0x1630 [ 605.967779][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.973786][ C0] ? assign_work+0x3cf/0x5d0 [ 605.978484][ C0] worker_thread+0xa47/0xfb0 [ 605.983123][ C0] kthread+0x38b/0x480 [ 605.987210][ C0] ? __pfx_worker_thread+0x10/0x10 [ 605.992419][ C0] ? __pfx_kthread+0x10/0x10 [ 605.997021][ C0] ret_from_fork+0x514/0xb70 [ 606.001625][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 606.006750][ C0] ? __switch_to+0xc89/0x1420 [ 606.011515][ C0] ? __pfx_kthread+0x10/0x10 [ 606.016123][ C0] ret_from_fork_asm+0x1a/0x30 [ 606.020984][ C0] [ 606.024011][ C0] task:kthreadd state:R running task stack:25872 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00080000 [ 606.037773][ C0] Call Trace: [ 606.041057][ C0] [ 606.043996][ C0] __schedule+0x17db/0x58f0 [ 606.048536][ C0] ? __lock_acquire+0x747/0x2de0 [ 606.053488][ C0] ? __pfx___schedule+0x10/0x10 [ 606.058354][ C0] ? __lock_acquire+0x747/0x2de0 [ 606.063314][ C0] preempt_schedule_irq+0x4b/0x90 [ 606.068353][ C0] irqentry_exit+0x14f/0x910 [ 606.072958][ C0] ? trace_irq_disable+0x3b/0x140 [ 606.078000][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.083988][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 606.089282][ C0] Code: ff ff ff e8 50 85 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 89 45 0a cc 48 8d 3d 97 4b da [ 606.108898][ C0] RSP: 0018:ffffc90000077280 EFLAGS: 00000292 [ 606.114979][ C0] RAX: aedfc0a4fb199e00 RBX: 0000000000000000 RCX: 0000000000000046 [ 606.122959][ C0] RDX: 0000000010d5a36a RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 606.130938][ C0] RBP: ffff88801dae3e80 R08: ffffffff8177f1df R09: 0000000000000000 [ 606.139003][ C0] R10: ffffc900000773b8 R11: ffffffff81b28ab0 R12: ffffffff8ed5c8e0 [ 606.146984][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 606.154971][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.161143][ C0] ? unwind_next_frame+0x8f/0x2550 [ 606.166276][ C0] ? kernel_thread+0x13f/0x1b0 [ 606.171064][ C0] ? unwind_next_frame+0x8f/0x2550 [ 606.176196][ C0] unwind_next_frame+0xac/0x2550 [ 606.181149][ C0] ? unwind_next_frame+0x8f/0x2550 [ 606.186277][ C0] ? kernel_clone+0x2d7/0x940 [ 606.190973][ C0] ? unwind_next_frame+0x8f/0x2550 [ 606.196099][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.202267][ C0] arch_stack_walk+0x11b/0x150 [ 606.207056][ C0] ? kernel_thread+0x13f/0x1b0 [ 606.211928][ C0] stack_trace_save+0xa9/0x100 [ 606.216701][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 606.222078][ C0] ? __lock_acquire+0x747/0x2de0 [ 606.227037][ C0] save_stack+0x122/0x230 [ 606.231382][ C0] ? __pfx_save_stack+0x10/0x10 [ 606.236239][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 606.241544][ C0] ? __slab_free+0x274/0x2c0 [ 606.246145][ C0] ? qlist_free_all+0x99/0x100 [ 606.250924][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 606.256565][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 606.261598][ C0] ? __kmalloc_noprof+0x307/0x720 [ 606.266628][ C0] ? security_prepare_creds+0x52/0x360 [ 606.272195][ C0] ? prepare_creds+0x57d/0x820 [ 606.276973][ C0] ? copy_creds+0x109/0x9f0 [ 606.281492][ C0] ? copy_process+0xd1f/0x43e0 [ 606.286271][ C0] ? kernel_clone+0x2d7/0x940 [ 606.290961][ C0] ? kernel_thread+0x13f/0x1b0 [ 606.295755][ C0] ? page_ext_put+0x97/0xc0 [ 606.300272][ C0] __reset_page_owner+0x71/0x1f0 [ 606.305223][ C0] __free_frozen_pages+0xc93/0xd90 [ 606.310365][ C0] __slab_free+0x274/0x2c0 [ 606.314792][ C0] ? lock_acquire+0x115/0x350 [ 606.319487][ C0] ? qlist_free_all+0x8e/0x100 [ 606.324271][ C0] qlist_free_all+0x99/0x100 [ 606.328875][ C0] kasan_quarantine_reduce+0x148/0x160 [ 606.334349][ C0] __kasan_slab_alloc+0x22/0x80 [ 606.339222][ C0] __kmalloc_noprof+0x307/0x720 [ 606.344081][ C0] ? prepare_creds+0x30/0x820 [ 606.348778][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 606.353810][ C0] ? security_prepare_creds+0x52/0x360 [ 606.359276][ C0] ? security_prepare_creds+0x52/0x360 [ 606.364751][ C0] security_prepare_creds+0x52/0x360 [ 606.370051][ C0] prepare_creds+0x57d/0x820 [ 606.374664][ C0] copy_creds+0x109/0x9f0 [ 606.379011][ C0] copy_process+0xd1f/0x43e0 [ 606.383637][ C0] ? rcu_is_watching+0x16/0xb0 [ 606.388415][ C0] ? trace_hrtimer_start+0x82/0x200 [ 606.393678][ C0] ? __pfx_copy_process+0x10/0x10 [ 606.398738][ C0] kernel_clone+0x2d7/0x940 [ 606.403259][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 606.408477][ C0] ? rcu_is_watching+0x16/0xb0 [ 606.413257][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 606.418307][ C0] ? __lock_acquire+0x747/0x2de0 [ 606.423264][ C0] kernel_thread+0x13f/0x1b0 [ 606.427875][ C0] ? __pfx_kthread+0x10/0x10 [ 606.432473][ C0] ? __pfx_kernel_thread+0x10/0x10 [ 606.437614][ C0] ? __pfx_kthread+0x10/0x10 [ 606.442228][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 606.447369][ C0] kthreadd+0x4ec/0x6e0 [ 606.451553][ C0] ? kthreadd+0x286/0x6e0 [ 606.455896][ C0] ? __pfx_kthreadd+0x10/0x10 [ 606.460599][ C0] ret_from_fork+0x514/0xb70 [ 606.465202][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 606.470323][ C0] ? __switch_to+0xc89/0x1420 [ 606.475021][ C0] ? __pfx_kthreadd+0x10/0x10 [ 606.479718][ C0] ret_from_fork_asm+0x1a/0x30 [ 606.484519][ C0] [ 606.487546][ C0] task:dhcpcd-run-hook state:R running task stack:24232 pid:14087 tgid:14087 ppid:5282 task_flags:0x400000 flags:0x00080800 [ 606.501043][ C0] Call Trace: [ 606.504324][ C0] [ 606.507265][ C0] __schedule+0x17db/0x58f0 [ 606.511803][ C0] ? __lock_acquire+0x747/0x2de0 [ 606.516745][ C0] ? __pfx___schedule+0x10/0x10 [ 606.521609][ C0] ? __lock_acquire+0x747/0x2de0 [ 606.526565][ C0] preempt_schedule_irq+0x4b/0x90 [ 606.531625][ C0] irqentry_exit+0x14f/0x910 [ 606.536229][ C0] ? trace_irq_disable+0x3b/0x140 [ 606.541269][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.547260][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 606.552553][ C0] Code: ff ff ff e8 50 85 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 89 45 0a cc 48 8d 3d 97 4b da [ 606.572257][ C0] RSP: 0018:ffffc9000c99f640 EFLAGS: 00000292 [ 606.578343][ C0] RAX: 4d841a7c73e4f200 RBX: 0000000000000000 RCX: 0000000000000046 [ 606.586320][ C0] RDX: 0000000010d5a36a RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 606.594311][ C0] RBP: ffff888025b61f40 R08: ffffffff8177f1df R09: 0000000000000000 [ 606.602385][ C0] R10: ffffc9000c99f778 R11: ffffffff81b28ab0 R12: ffffffff8ed5c8e0 [ 606.610365][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 606.618442][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.624614][ C0] ? unwind_next_frame+0x8f/0x2550 [ 606.629752][ C0] ? __slab_free+0x274/0x2c0 [ 606.634356][ C0] ? unwind_next_frame+0x8f/0x2550 [ 606.639481][ C0] unwind_next_frame+0xac/0x2550 [ 606.644433][ C0] ? unwind_next_frame+0x8f/0x2550 [ 606.649562][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 606.654866][ C0] ? unwind_next_frame+0x8f/0x2550 [ 606.659992][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.666160][ C0] arch_stack_walk+0x11b/0x150 [ 606.670948][ C0] ? __slab_free+0x274/0x2c0 [ 606.675555][ C0] stack_trace_save+0xa9/0x100 [ 606.680327][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 606.685717][ C0] save_stack+0x122/0x230 [ 606.690059][ C0] ? __pfx_save_stack+0x10/0x10 [ 606.694919][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 606.700224][ C0] ? __slab_free+0x274/0x2c0 [ 606.704834][ C0] ? page_ext_put+0x97/0xc0 [ 606.709358][ C0] __reset_page_owner+0x71/0x1f0 [ 606.714399][ C0] __free_frozen_pages+0xc93/0xd90 [ 606.719542][ C0] __slab_free+0x274/0x2c0 [ 606.723978][ C0] ? qlist_free_all+0x8e/0x100 [ 606.728759][ C0] qlist_free_all+0x99/0x100 [ 606.733538][ C0] ? do_getname+0x2e/0x250 [ 606.737983][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 606.743645][ C0] kasan_quarantine_reduce+0x148/0x160 [ 606.749121][ C0] __kasan_slab_alloc+0x22/0x80 [ 606.753987][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 606.759469][ C0] ? do_getname+0x2e/0x250 [ 606.763897][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 606.769561][ C0] ? do_getname+0x2e/0x250 [ 606.774027][ C0] do_getname+0x2e/0x250 [ 606.778300][ C0] ? getname_flags+0x11/0x20 [ 606.782904][ C0] user_statfs+0x97/0x1c0 [ 606.787293][ C0] ? __pfx_user_statfs+0x10/0x10 [ 606.792434][ C0] __x64_sys_statfs+0x120/0x270 [ 606.797299][ C0] ? __pfx___x64_sys_statfs+0x10/0x10 [ 606.802682][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 606.807978][ C0] do_syscall_64+0x166/0x520 [ 606.812663][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.818739][ C0] ? clear_bhb_loop+0x70/0xc0 [ 606.823428][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.829330][ C0] RIP: 0033:0x7f95d852e487 [ 606.833756][ C0] RSP: 002b:00007ffecf0974e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 606.842176][ C0] RAX: ffffffffffffffda RBX: 00007f95d8405305 RCX: 00007f95d852e487 [ 606.850157][ C0] RDX: 0000000000000000 RSI: 00007ffecf097570 RDI: 00007f95d8405305 [ 606.858137][ C0] RBP: 00007ffecf097570 R08: 00007f95d8718af8 R09: 0000000000000000 [ 606.866118][ C0] R10: 00007ffecf097320 R11: 0000000000000246 R12: 00007ffecf0976f8 [ 606.874108][ C0] R13: 00007ffecf097710 R14: 00007f95d840c4d0 R15: 0000000000000000 [ 606.882115][ C0] [ 606.885144][ C0] task:syz-executor state:R running task stack:22280 pid:5617 tgid:5617 ppid:5609 task_flags:0x400140 flags:0x00080000 [ 606.898642][ C0] Call Trace: [ 606.901936][ C0] [ 606.904876][ C0] __schedule+0x17db/0x58f0 [ 606.909405][ C0] ? __lock_acquire+0x747/0x2de0 [ 606.914380][ C0] ? __pfx___schedule+0x10/0x10 [ 606.919250][ C0] ? __lock_acquire+0x747/0x2de0 [ 606.924213][ C0] preempt_schedule_irq+0x4b/0x90 [ 606.929250][ C0] irqentry_exit+0x14f/0x910 [ 606.933859][ C0] ? trace_irq_disable+0x3b/0x140 [ 606.938904][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.944895][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 606.950279][ C0] Code: ff ff ff e8 50 85 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 89 45 0a cc 48 8d 3d 97 4b da [ 606.969901][ C0] RSP: 0018:ffffc90003b17430 EFLAGS: 00000296 [ 606.975986][ C0] RAX: cb2517beed37f500 RBX: 0000000000000000 RCX: 0000000000000046 [ 606.983970][ C0] RDX: 000000003a180b14 RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 606.991956][ C0] RBP: ffff8880350e8000 R08: ffffffff81d871b6 R09: 0000000000000000 [ 606.999954][ C0] R10: ffffc90003b17558 R11: ffffffff81b28ab0 R12: ffffffff8ed5c8e0 [ 607.007938][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 607.015929][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 607.022105][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 607.027335][ C0] is_bpf_text_address+0x47/0x2b0 [ 607.032375][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 607.037593][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 607.042812][ C0] kernel_text_address+0xa5/0xe0 [ 607.047768][ C0] __kernel_text_address+0xd/0x30 [ 607.052804][ C0] unwind_get_return_address+0x4d/0x90 [ 607.058280][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 607.064459][ C0] arch_stack_walk+0xfb/0x150 [ 607.069219][ C0] stack_trace_save+0xa9/0x100 [ 607.074090][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 607.079501][ C0] ? __lock_acquire+0x747/0x2de0 [ 607.084489][ C0] save_stack+0x122/0x230 [ 607.088858][ C0] ? __pfx_save_stack+0x10/0x10 [ 607.093733][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 607.099050][ C0] ? __slab_free+0x274/0x2c0 [ 607.103655][ C0] ? qlist_free_all+0x99/0x100 [ 607.108437][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 607.114090][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 607.119133][ C0] ? __kvmalloc_node_noprof+0x49f/0x820 [ 607.124698][ C0] ? do_replace_table+0x18c/0x610 [ 607.129890][ C0] ? xt_replace_table+0x2c/0x140 [ 607.134850][ C0] ? __do_replace+0x170/0xac0 [ 607.139685][ C0] ? do_arpt_set_ctl+0x892/0xb50 [ 607.144642][ C0] ? nf_setsockopt+0x26f/0x290 [ 607.149503][ C0] ? do_sock_setsockopt+0x17c/0x1b0 [ 607.154721][ C0] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 607.160111][ C0] ? do_syscall_64+0x166/0x520 [ 607.164899][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.170984][ C0] ? page_ext_put+0x97/0xc0 [ 607.175512][ C0] __reset_page_owner+0x71/0x1f0 [ 607.180464][ C0] __free_frozen_pages+0xc93/0xd90 [ 607.185605][ C0] __slab_free+0x274/0x2c0 [ 607.190036][ C0] ? lock_acquire+0x115/0x350 [ 607.194732][ C0] ? qlist_free_all+0x8e/0x100 [ 607.199522][ C0] qlist_free_all+0x99/0x100 [ 607.204149][ C0] kasan_quarantine_reduce+0x148/0x160 [ 607.209626][ C0] __kasan_slab_alloc+0x22/0x80 [ 607.214493][ C0] __kvmalloc_node_noprof+0x49f/0x820 [ 607.219885][ C0] ? __kvmalloc_node_noprof+0x345/0x820 [ 607.225443][ C0] ? do_replace_table+0x18c/0x610 [ 607.230490][ C0] ? do_replace_table+0x18c/0x610 [ 607.235543][ C0] do_replace_table+0x18c/0x610 [ 607.240419][ C0] xt_replace_table+0x2c/0x140 [ 607.245201][ C0] __do_replace+0x170/0xac0 [ 607.249728][ C0] ? __pfx_translate_table+0x10/0x10 [ 607.255041][ C0] ? __pfx___do_replace+0x10/0x10 [ 607.260104][ C0] ? _copy_from_user+0x94/0xb0 [ 607.265119][ C0] do_arpt_set_ctl+0x892/0xb50 [ 607.269903][ C0] ? trace_contention_end+0x3d/0x140 [ 607.275215][ C0] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 607.280517][ C0] ? nf_setsockopt+0x221/0x290 [ 607.285299][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 607.290954][ C0] ? errseq_sample+0x40/0x70 [ 607.295581][ C0] nf_setsockopt+0x26f/0x290 [ 607.300185][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 607.306087][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 607.311132][ C0] __x64_sys_setsockopt+0x13d/0x1b0 [ 607.316365][ C0] do_syscall_64+0x166/0x520 [ 607.320971][ C0] ? trace_irq_disable+0x3b/0x140 [ 607.326002][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.332081][ C0] ? clear_bhb_loop+0x70/0xc0 [ 607.336779][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.342682][ C0] RIP: 0033:0x7f2bf7d9f99a [ 607.347104][ C0] RSP: 002b:00007ffe2cdf10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 607.355524][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2bf7d9f99a [ 607.363515][ C0] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 607.371496][ C0] RBP: 00007ffe2cdf1130 R08: 0000000000000408 R09: 0000000000000000 [ 607.379480][ C0] R10: 00007f2bf7fed7b0 R11: 0000000000000246 R12: 00007ffe2cdf10dc [ 607.387461][ C0] R13: 00007f2bf7e35ab9 R14: 0000000000050366 R15: 00007ffe2cdf1820 [ 607.395473][ C0] [ 607.398507][ C0] task:syz.3.2128 state:R running task stack:25608 pid:14090 tgid:14090 ppid:5615 task_flags:0x40044c flags:0x00080002 [ 607.412011][ C0] Call Trace: [ 607.415300][ C0] [ 607.418243][ C0] __schedule+0x17db/0x58f0 [ 607.422771][ C0] ? irqentry_exit+0x218/0x910 [ 607.427560][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 607.432600][ C0] ? __pfx___schedule+0x10/0x10 [ 607.437476][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 607.442865][ C0] preempt_schedule_common+0x7f/0xd0 [ 607.448166][ C0] preempt_schedule_thunk+0x16/0x40 [ 607.453397][ C0] _raw_spin_unlock+0x41/0x50 [ 607.458185][ C0] __zap_vma_range+0x40e1/0x4f80 [ 607.463185][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 607.468499][ C0] ? mas_find+0x6d6/0xcb0 [ 607.472964][ C0] unmap_vmas+0x390/0x550 [ 607.477326][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 607.482183][ C0] ? mas_next_slot+0xc91/0xd70 [ 607.486989][ C0] exit_mmap+0x293/0x9f0 [ 607.491250][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 607.496062][ C0] ? __pfx_exit_aio+0x10/0x10 [ 607.500772][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 607.506028][ C0] __mmput+0x118/0x420 [ 607.510117][ C0] exit_mm+0x221/0x2d0 [ 607.514197][ C0] do_exit+0x6cd/0x2360 [ 607.518365][ C0] ? count_memcg_event_mm+0x21/0x260 [ 607.523674][ C0] ? lock_acquire+0x115/0x350 [ 607.528360][ C0] ? __pfx_do_exit+0x10/0x10 [ 607.532961][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 607.538014][ C0] do_group_exit+0x22d/0x2f0 [ 607.542610][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.547831][ C0] get_signal+0x121b/0x12c0 [ 607.552373][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 607.557950][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 607.564137][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 607.569453][ C0] irqentry_exit+0x2ba/0x910 [ 607.574059][ C0] ? trace_irq_disable+0x3b/0x140 [ 607.579101][ C0] asm_exc_page_fault+0x26/0x30 [ 607.583966][ C0] RIP: 0033:0x7efd46272809 [ 607.588394][ C0] RSP: 002b:00007fff49fe4fc0 EFLAGS: 00010202 [ 607.594495][ C0] RAX: 0000001b33c24000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 607.602475][ C0] RDX: 0000001b33c23ffc RSI: 00000000003ffde8 RDI: 00007efd47155700 [ 607.610455][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007efd46612000 [ 607.618435][ C0] R10: 00007efd47155700 R11: 0000000000000001 R12: 0000000000000000 [ 607.626417][ C0] R13: 00000000000001df R14: ffffffff816d65ce R15: 00007efd47155720 [ 607.634403][ C0] ? fpregs_assert_state_consistent+0xee/0x150 [ 607.640596][ C0] [ 607.643640][ C0] rcu: rcu_preempt kthread starved for 5093 jiffies! g60281 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 607.654578][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 607.664550][ C0] rcu: RCU grace-period kthread stack dump: [ 607.670443][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 607.683949][ C0] Call Trace: [ 607.687230][ C0] [ 607.690172][ C0] __schedule+0x17db/0x58f0 [ 607.694699][ C0] ? __lock_acquire+0x747/0x2de0 [ 607.699661][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 607.704799][ C0] ? __pfx___schedule+0x10/0x10 [ 607.709658][ C0] ? lock_acquire+0x115/0x350 [ 607.714355][ C0] ? schedule+0x90/0x2b0 [ 607.718617][ C0] schedule+0x164/0x2b0 [ 607.722785][ C0] schedule_timeout+0x152/0x2c0 [ 607.727658][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 607.733052][ C0] ? __pfx_process_timeout+0x10/0x10 [ 607.738361][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 607.744177][ C0] ? prepare_to_swait_event+0x322/0x350 [ 607.749744][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 607.754616][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 607.760785][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 607.766076][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 607.771287][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 607.777116][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 607.781720][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.786932][ C0] ? __kthread_parkme+0x71/0x1f0 [ 607.791910][ C0] ? __kthread_parkme+0x199/0x1f0 [ 607.796960][ C0] kthread+0x38b/0x480 [ 607.801036][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.806238][ C0] ? __pfx_kthread+0x10/0x10 [ 607.810838][ C0] ret_from_fork+0x514/0xb70 [ 607.815442][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 607.820562][ C0] ? __switch_to+0xc89/0x1420 [ 607.825265][ C0] ? __pfx_kthread+0x10/0x10 [ 607.829869][ C0] ret_from_fork_asm+0x1a/0x30 [ 607.834663][ C0] [ 607.837685][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 607.844098][ C0] CPU: 0 UID: 0 PID: 3229 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 607.853820][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.863879][ C0] Workqueue: bat_events batadv_tt_purge [ 607.869688][ C0] RIP: 0010:nf_hook_slow+0x48/0x220 [ 607.874897][ C0] Code: 7c 24 08 49 bc 00 00 00 00 00 fc ff df e8 f0 2a ca f7 4d 89 fe 49 c1 ee 03 43 0f b6 04 26 84 c0 0f 85 b8 01 00 00 41 0f b7 2f <89> df 89 ee e8 df 2c ca f7 39 eb 0f 83 18 01 00 00 41 89 dc 4c 89 [ 607.894515][ C0] RSP: 0018:ffffc90000007290 EFLAGS: 00000246 [ 607.900600][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802c129f40 [ 607.908575][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: ffff8881b1ac03c0 [ 607.916556][ C0] RBP: 0000000000000001 R08: 0000000000000100 R09: 0000000000000004 [ 607.924531][ C0] R10: 000000000000000a R11: 8000000000000100 R12: dffffc0000000000 [ 607.932516][ C0] R13: ffffffff8abef952 R14: 1ffff1100b2b58c0 R15: ffff8880595ac600 [ 607.940495][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 607.949457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.956133][ C0] CR2: 00007f95d840e1d4 CR3: 000000007ecc8000 CR4: 00000000003526f0 [ 607.964115][ C0] Call Trace: [ 607.967398][ C0] [ 607.970247][ C0] ? NF_HOOK+0xa2/0x6e0 [ 607.974555][ C0] NF_HOOK+0x560/0x6e0 [ 607.978646][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 607.983251][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 607.989003][ C0] ? net_generic+0x1e/0x240 [ 607.993518][ C0] ? net_generic+0x1e/0x240 [ 607.998040][ C0] br_nf_forward+0xf53/0x18d0 [ 608.002730][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 608.008471][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 608.013601][ C0] nf_hook_slow+0xc5/0x220 [ 608.018029][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 608.023597][ C0] NF_HOOK+0x23e/0x3f0 [ 608.027683][ C0] ? NF_HOOK+0xa2/0x3f0 [ 608.031850][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 608.036454][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 608.041934][ C0] ? br_handle_vlan+0x5e/0x530 [ 608.046808][ C0] __br_forward+0x397/0x540 [ 608.051409][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 608.056890][ C0] br_flood+0x3e3/0x8d0 [ 608.061075][ C0] br_handle_frame_finish+0x1119/0x1950 [ 608.066652][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 608.072560][ C0] ? net_generic+0x1e/0x240 [ 608.077087][ C0] ? br_nf_pre_routing+0xc41/0x14b0 [ 608.082310][ C0] br_handle_frame+0x92e/0x1600 [ 608.087271][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 608.092237][ C0] ? unwind_next_frame+0x8f/0x2550 [ 608.097378][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 608.102694][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 608.108607][ C0] ? __lock_acquire+0x747/0x2de0 [ 608.113563][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 608.118870][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 608.124639][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 608.130754][ C0] ? process_backlog+0x3de/0x18b0 [ 608.135790][ C0] ? process_backlog+0x3de/0x18b0 [ 608.140830][ C0] process_backlog+0x727/0x18b0 [ 608.145700][ C0] ? process_backlog+0x3de/0x18b0 [ 608.150748][ C0] __napi_poll+0xaa/0x330 [ 608.155093][ C0] net_rx_action+0x61d/0xf50 [ 608.159707][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 608.164859][ C0] handle_softirqs+0x226/0x860 [ 608.169650][ C0] ? do_softirq+0x77/0xd0 [ 608.174003][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 608.179482][ C0] do_softirq+0x77/0xd0 [ 608.183655][ C0] [ 608.186592][ C0] [ 608.189525][ C0] __local_bh_enable_ip+0x100/0x140 [ 608.194820][ C0] batadv_tt_local_purge+0x2c1/0x340 [ 608.200137][ C0] ? process_scheduled_works+0x97a/0x1630 [ 608.205877][ C0] batadv_tt_purge+0x35/0xa10 [ 608.210577][ C0] ? rcu_is_watching+0x16/0xb0 [ 608.215352][ C0] ? process_scheduled_works+0x97a/0x1630 [ 608.221083][ C0] process_scheduled_works+0xc3d/0x1630 [ 608.226671][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.232660][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 608.237712][ C0] ? assign_work+0x3af/0x5d0 [ 608.242321][ C0] rescuer_thread+0x7c5/0x10e0 [ 608.247110][ C0] ? rescuer_thread+0xb8/0x10e0 [ 608.251998][ C0] kthread+0x38b/0x480 [ 608.256070][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 608.261281][ C0] ? __pfx_kthread+0x10/0x10 [ 608.265882][ C0] ret_from_fork+0x514/0xb70 [ 608.270479][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 608.275597][ C0] ? __switch_to+0xc89/0x1420 [ 608.280292][ C0] ? __pfx_kthread+0x10/0x10 [ 608.284890][ C0] ret_from_fork_asm+0x1a/0x30 [ 608.289684][ C0]