last executing test programs: 8.59283314s ago: executing program 1 (id=1656): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00), 0x0, 0x20004840) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "8440e33d", "faa71d9800"}, 0xc) close(0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000875c7378000000000057"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0xffffff69, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) bind$rds(r6, &(0x7f00000001c0)={0x2, 0x6e23, @multicast2}, 0x10) r7 = socket(0x8, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000440)={0x2d, 0xffffffffffffffff, 0x7ffe}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) 6.196912433s ago: executing program 4 (id=1667): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x8040480) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ee1}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0xf7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) nanosleep(&(0x7f0000000180), 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@gettaction={0x28, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4000) writev(r4, &(0x7f00000014c0)=[{&(0x7f0000000fc0)="258295f97211aae7515a8e271ed4c33e10fd", 0x12}], 0x1) 5.936626052s ago: executing program 4 (id=1668): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x2a}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x88}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.852618637s ago: executing program 4 (id=1669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x3b, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000010405000000479d90a6e2840cedac3a00000000000000000000060006400003"], 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000380), &(0x7f0000000040)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x12021) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000006800010003001000fbffff7f00000000000000000400020004000b00060003000120"], 0x28}, 0x1, 0x0, 0x0, 0x400401a}, 0x4000080) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r9) r10 = socket(0x10, 0x809, 0x8) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a500000000"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) 5.457406045s ago: executing program 1 (id=1672): syz_emit_ethernet(0xcc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bbbbbbbbbbbb6cf6566994c681001000080046b400ba00000000a3069078ac1414bb00000000070309004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000050600000004fe06f98968fb28c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03821a000026151b57b834e7f22d4b6d3e45af82f2d6581f2458041235bc729d69b1d88b185a8dd46c3ad4c7a50fa045dd9c7af0844ce54a9e76417ce8500c8fce7eb2dd9ced7be7deceb9f0b0c3fb5615ea55918ce2a1aa7bbcf15623ff987f609d"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x7fffffff}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000240)=""/10, 0x2}, 0x20) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) unshare(0x20400) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x33, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a5797519416b67598b50000000b000080000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r13, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r14}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) 4.966903652s ago: executing program 1 (id=1675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000091110700000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001140)={{r0, &(0x7f0000000640)='#\x00', 0x40000, &(0x7f0000000680)={@align=0x295, {0x4, 0x4, 0x2, 0x1ff}}, 0xb, &(0x7f00000006c0), &(0x7f0000000700)=0x3}, 0x4, &(0x7f00000010c0)=[{0x2, 0x2, &(0x7f00000007c0)='memory.events\x00', &(0x7f0000000800)="a8a215c3ce5d5d674e0f9542fd2fd955dd6985482798a14884009f146a7229a2605fcf64bf6edee5989f9fdeab1185375f73cb465960e19cda4f80e3731e97f5f699d6a49e806317761e72ff1301eceae4731317e6ba56c92220b735bf741cc93413b79c678a19ab8383962bc34ad8e55520e468da3536af8c5b9d452624d6a32694f3fae3316da0e95199f6e41f3b988286fccb8a742f476284062b83e85010396a23d72fd74b9d9b80189bc63eb416a2d57d0a1377c2443e1d", 0xba, 0x2}, {0x3, 0x8, &(0x7f00000008c0)='%(\x00', &(0x7f0000000900)="b0fbfbd90f808b24ad9009ca08b95c6b1b4a190e02a462f993cc17e54fb5677d56ab8417", 0x24, 0x38}, {0x1, 0x10001, &(0x7f0000000940)='%(\x00', &(0x7f0000000ac0)="a1ddf6c80bc584e8ef874b5e4004a0a9002acd277103f9c4f43963b6313ae86d73b4fec643e57fd08194c9c5bf98523a82fb16dbd90c2f557552de110f5a67f1ee955ccb70e76372875e11102c9eadc5428b99063a07b8fdcf4c18187213817444d4fe69cec4072a5bcf5a9419438336f66d4b6b2a0ae135123d31318d689099348d436e032045e37c371b0e0bb5b165b4b6", 0x92, 0xa}, {0x1, 0x7, &(0x7f0000000b80)='rng\x00', &(0x7f0000000fc0)="2108142b5b683af74711077056c449f1b46cb6f290fb2ae05bbc7e4aebc7dc13920b8763287c25c7e92e6e5104ea1b74fc1a732d4321498cdd538e7eb9299eac670e7705d2acab9adcb9f79ff39254ef5eb0732b4d92abd0ad85e31b6c3cdfc38fc85f3ae465c70b7c80259fd18ab3cf82c79608548062eb235446ddeab4c831f4d72e38fd1f572bb5eba594f16cd42e9096dfde0ac05ec643bf3c3905f472be7a1f922c1d6e15109304592a28ce4fb2811ca10e4005f38b2ec8d3c09fdb4f3dfe6e61828a9cb6e1d31439bed7ada99fcafbae06a69e7be3aac1b3a4cc0ba7bb859221a44f245e", 0xe7, 0x8}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0xc, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYRES64, @ANYRES16=r1, @ANYRESHEX, @ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r4, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='%(\x00', 0x80800, &(0x7f00000000c0)={@align=0xee, {0x86, 0x81, 0x80000000, 0xfb000000000000}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x5}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162", 0xc8}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)}, {&(0x7f0000001400)="bd5604c6392c80aa3e4486c24d6f5ac30b17b6d7920ce82d9dcfd8a84488381f097d4bb918042dec0f35df3fd68b08a4d32fdb55bb89de32b1526e8e6590854ddaaa019917e65c5585e4823788346cad1702000000000000004f08ae0e531f507a5590a37c", 0x65}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x4, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvfrom$inet6(r6, &(0x7f0000001280)=""/132, 0x84, 0x10000, &(0x7f0000001340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0e0000e904000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.91635678s ago: executing program 2 (id=1676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000005080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.680540964s ago: executing program 2 (id=1677): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004880)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid}]}]}, 0x24}], 0x1}, 0x44010) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425", 0xb2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331", 0x92}, {&(0x7f00000000c0)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3}}], 0x2, 0x20000044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x40, r6, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x34}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfb}]}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x45}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8008010) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r12, 0x29, 0x1f, 0x0, 0x0) 4.56742638s ago: executing program 1 (id=1678): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012bbd70000000000001010008", @ANYBLOB="080002800400338008000900", @ANYBLOB="281fc7db"], 0x34}, 0x1, 0x0, 0x0, 0x4004004}, 0x4040) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c000018003780130003007114d6bba919736d3429"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8, 0x18, 0x8, 0xff, {{0x43, 0x4, 0x0, 0x20, 0x10c, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x7b, 0x1, 0x8, [{@loopback, 0x2f2}, {@remote, 0xffffff61}, {@broadcast, 0x1}, {@multicast1, 0x1}, {@loopback, 0x1}, {@empty, 0x4}, {@broadcast, 0x6}, {@local, 0x1}]}, @rr={0x7, 0xb, 0x60, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x4a, 0x2, [{0x0, 0xd, "293b4ca87651d81545a990"}, {0x0, 0x8, "0503b528c8a3"}, {0x7, 0x6, "0f6fe3f8"}, {0x6, 0x6, "9a4121cc"}, {0x6, 0x5, "178001"}, {0x5, 0x2}, {0x5, 0x11, "5e2f2f9938df8e7b180bfef0217109"}, {0x2, 0xb, "44c3662000c8534cd9"}]}, @cipso={0x86, 0x51, 0x2, [{0x7, 0xa, "345fd0cdd556fb9b"}, {0x6, 0x6, "44148fb3"}, {0x7, 0x7, "2d66e97ae2"}, {0x6, 0x4, "1445"}, {0x5, 0x12, "8e0d71e3a0cbb857c458a25b33555164"}, {0x5, 0xf, "3e968377458beadca72e1818e5"}, {0x5, 0xf, "9339ca4a0ddd701ab549399ae8"}]}, @rr={0x7, 0xb, 0xaf, [@dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102]}]}}}}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'syzkaller0\x00', @local}) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_getneigh={0x6c, 0x1e, 0x8, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x0, 0x80}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_MTU={0x8, 0x4, 0x53}, @IFLA_EVENT={0x8, 0x2c, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_PHYS_PORT_ID={0xe, 0x22, "861e0a725842e5f29b48"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x6c}}, 0x4000800) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001000000", 0x24) 4.542333919s ago: executing program 4 (id=1679): socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) (async) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) 4.388763958s ago: executing program 2 (id=1680): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180001ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180001ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x2, 0x5, 0x20, @loopback, @loopback, 0x7800, 0x20, 0x7, 0x6}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000480)="81b641f1", 0x4}, {&(0x7f0000000d00)="bcdca9f047", 0x5}], 0x2}, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/139, 0x8b}], 0x1}, 0x0) (async) recvmsg$can_j1939(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/139, 0x8b}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getuid() gettid() getuid() getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000004f40), &(0x7f0000004f80)=0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000004f40), &(0x7f0000004f80)=0xc) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x10, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe, 0x1fff5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0x3, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}]}}]}, 0x58}}, 0x4000010) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) (async) setsockopt$inet6_tcp_int(r10, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r10, 0x6, 0x5, 0x0, &(0x7f00000009c0)) 4.388389482s ago: executing program 1 (id=1681): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x22, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_open_procfs$namespace(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0xa, 0x5, 0x10000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x957}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008011}, 0x1080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6gre0\x00', r4, 0x29, 0x4, 0xf2, 0x0, 0x0, @loopback, @remote, 0x1, 0x7, 0x8, 0x5}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000010c0)=ANY=[@ANYBLOB="60020000", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2511000000780001801400020065727370616e30000000000000000000140002006772657461703000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRESHEX=r3, @ANYBLOB="1400020076657468305f746f5f627269646765001400020076657468315f766972745f776966690014000200626f6e645f736c6176655f3100000000740001801400020067656e6576653000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002007866726d3000000000000000000000000800030000000000080003000100000014000200776c616effffffff0000000000000000140002006970365f76746930470000000000000020000180080003000300000014000200697036746e6c3000000000000000000038000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300000000001400020067656e657665300000000000000000002c000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="4c000180140002007866726d30e700000000000000000000080003000300000008000300020000001400020065727370616e300000000000000000000800030002000000080003000100000014000180080001001cfeda39bddeba4df9d163381c9175e9279d2ab836a5b1484ef1c2193e7106470a3694128d3d06ede963534b60caefcb2065ac2e61eeb6ba7feafa8a0a948dcd0d76887af47f58b0ff7eefe7c035057e95ab5345eed61d80a772bcaf35597be6e66de8a1f748a8cdb5d59f89e5bc1fa22427e3b326aa7a2de553ee1e52066b104b16bd9fc8e3b12957547a4dbc9aee0402551ecd26", @ANYRES32=r3, @ANYBLOB="08000300020000001800018014000200626174616476300000000000000000003000018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0800030003008ac1140002006970766c616e300000000000000000003400018008000300010000000800030002000000080003000200000008000300010000000800f8ff040000000800010033efdbef3372f6f225bfe1d746361acf038cf2fc50aa5a9a4583e33714a7849bebab1a86d9a30efb73091559b93e", @ANYRES32=r3, @ANYBLOB], 0x260}, 0x1, 0x0, 0x0, 0x4000045}, 0x30046085) 4.346807684s ago: executing program 0 (id=1682): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x603, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) listen(r4, 0x3) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) 3.984423997s ago: executing program 2 (id=1684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000000d40)={0x4ec, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x28}}}}, [@NL80211_ATTR_TID_CONFIG={0x13c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x19c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xffff, 0x2, 0x6, 0x9, 0x4, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0xba, 0x200, 0xf1cf, 0x7fff, 0x1, 0xff]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf0e7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x72c, 0x1, 0x9, 0x0, 0x9, 0x8bf6, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x3, 0x7, 0x1, 0x88, 0xac9, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x4}, {0x2, 0x2}, {0x4, 0x4}, {}, {0x7, 0x3}, {0x0, 0x4}, {0x5, 0x2}, {0x3, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc326, 0x5, 0x800, 0x3, 0xfffa, 0x1ff, 0xb, 0x1ff]}}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xeb}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x330, 0x11d, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x1}, {0x1, 0x2}, {0x5, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x8}, {0x7, 0xa}, {0x0, 0x6}, {0x3, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x5, 0x1, 0x6, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x11, 0xfffc, 0x9, 0x6, 0x5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x3}, {}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0xb}, {0x2, 0x6}, {0x1}, {0x2, 0x7}, {0x6, 0x6}, {0x1, 0x6}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x5}, {}, {0x4, 0x2}, {0x3, 0x4}, {0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x7, 0xa}, {0x6, 0x3}, {0x2, 0xa}, {0x3, 0x8}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x6, 0x1627, 0x4, 0x0, 0x34, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffa}]}, {0x180, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x16, 0x2, 0x1, 0x48, 0x36, 0x2]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x2}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x7, 0x8}, {0x6, 0x9}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0x8}, {0x7, 0x2}, {0x5, 0x5}, {0x4, 0x9}, {0x4, 0x2}, {0x1, 0x1}, {0x6, 0x4}, {0x5, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x7}, {0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x4}, {0x6, 0x1}, {0x3}, {}, {0x3, 0x2}, {0x5, 0x9}, {0x5, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x6}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x30, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x63, 0x6, 0x8, 0x8, 0x3, 0x4, 0x1]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x24]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x6}, {0x5, 0xa}, {0x4, 0x9}, {0x2, 0x9}, {0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x5}, {0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x9}, {0x2}, {0x6, 0x6}, {0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x5, 0x6}, {0x4, 0x4}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0xa}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xfff8, 0x8, 0x5, 0x2, 0x723, 0x7, 0xfffd]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x2}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x8, 0x9, 0x6, 0x1, 0x4, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x3, 0xfc01, 0x9, 0x3, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x46506d19}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newsa={0x180, 0x10, 0x1, 0x8000001, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x20}, {@in=@rand_addr=0x64010101, 0x2, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x134, 0x0, 0x2a, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x8003}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e24, 0x1, @local, 0xc}}, 0x3, 0xb2d2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40044481) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x61, 0x8, 0x0, 0x0}}, 0x10) r8 = socket(0x8, 0x4, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x40106150, &(0x7f0000001940)={{r3, 0x0, 0x18102, 0x0, 0xa, 0x0, 0x0}, 0x0, 0x0}) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000000)=""/30, &(0x7f0000000040)=0x1e) ioctl$sock_netrom_SIOCADDRT(r8, 0x6180, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 3.980670188s ago: executing program 0 (id=1685): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1a, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x102}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x2010000}, 0x94) 3.856784365s ago: executing program 0 (id=1686): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x8f9cc90, 0x216fc554, 0x1}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x4, 0x4, 0x1}) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r6, 0x0, 0x0) 3.189589612s ago: executing program 1 (id=1688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000ffb9ffff00000000000000008500000036000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x83f00, 0x49, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)="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", 0x202}, {&(0x7f0000000640)="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", 0x125}, {&(0x7f0000000540)="040520ad59a69ef9025d69b0234a7c093f7153b9647417f2bb5f273cf9245a875b76257925b8c407c6c9866839cc68aec0c7fca5ef981108d178165bc2a0f9a812b9ad2e940cf2587cc7261de9bc429b0180636ae546485bc85de06b3bcca99dd3f880cac0fb4caadc884ad400e69a1d3ee5464868afcd64cf8e4d908cac2ca06dd8cfed7dfce044028261cefba08ee99396147745153aa9fab9473300a89e13639ceeb7b304c57962283b387a8bc2667d88ee93d543eee1b7", 0xb9}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x8d1) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x34c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x61d0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000220002002bbd7000fcdb250a8000020000000808000000"], 0x1c}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffd8f) 2.227595358s ago: executing program 3 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000030429bd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800800010067726500200002800600030010000002050008000000000004001200060002003e"], 0x4c}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000004c0)={r3, &(0x7f0000000180)='PPPPPP', 0x2, &(0x7f0000000240)={@align=0x2, {0xfff9, 0xe, 0x0, 0xda0}}, 0x5, &(0x7f0000000380), &(0x7f0000000480)=0x8}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}}, 0x8001) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a006b897b7d8378ef9a881b01000181c2000018c334d621ff7bc288c42d34cb15d00f461d49f80cf36816a3302e4678feac062509269cfcaa396b6ed0dcf87013059f6c5eba25c989d9a7f2efd48ea3c228948069430119c33cf0cefcb1c5cfb2a0781fc64c790e8ea94b8ba5d137d6f27da3f5112fbcc6337f74abcb7ac8bdcd"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r7, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c8}, 0x8000) 1.66835752s ago: executing program 3 (id=1690): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x5) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.633799524s ago: executing program 3 (id=1691): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x48799000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0xfffffffc, 0xfffffffd, 0x7, 0x7}, 0x3c) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000000)={0x2, 'veth0_virt_wifi\x00', {0x10008}, 0x7f}) 1.481830227s ago: executing program 4 (id=1692): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b80), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000003300)={0x0, 0xfffffffffffffd31, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c021380", @ANYRES16=r1, @ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYRES32=0x0], 0x2c0}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x60600) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100"], 0x1f0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e000000680002"], 0xa4}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 1.103756062s ago: executing program 4 (id=1693): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e24, 0x1, @local, 0xc}}, 0x3, 0xb2d2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40044481) r3 = socket(0x8, 0x4, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x6180, &(0x7f0000001940)={{r1, 0x0, 0x18102, 0x0, 0xa, 0x0, 0x0}, 0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 1.076245734s ago: executing program 2 (id=1694): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{&(0x7f00000004c0)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000540)="79798f85f00d045fbcbc496e0b00a0a1e57d73be2a7006750275e8d7394a5382f38718919e9fc627d9", 0x29}, {&(0x7f0000000640)="168278d5ee2a079a51808d9006aabe4344683c56b3c94fab149f3abcaa6e6a6c6d33de2d5f9c0459c3e823c0adeb91f5162cefae19b382f05d621a7ddc556151e26a80f87761bfb13308c8c52c630d74cd153d1f8b5da996a132f695ba6c457ba2e1d5ad7b5b344fbe4de21d9b76322a082bf0bf95506b007d43734db4f7357a72868edfe6246c9b44e6857de483d40e2afd2508c757378c1de2dd6113ffda2dedb11aae35e6aa4063e698ea8206b5e0031dd6d7932abe2a2292114a5192fb15ceb54e8db52aa7c2ae2bc0eb38440d652131fd405d7e51cab1f063054dd5285bdf1176978e0bf4d2919b420a98304ba3663d3bbac9", 0xf5}, {&(0x7f0000000740)="86bf96604334917832f2a96c7fc9b27fc299263bc3223db289df3b5ccb49548906be72f02f34a1b72af526c51488f6854c372e38", 0x34}, {&(0x7f0000000940)="1f72f7b48508e81611701ec97af85d6abc36f3db03c800dd717871f9db23d1eb6aea185260cb5c2c07971ae0d0d1f47211729d70b9466939d2352ea5d3861394cfc5d7b4e7d19776e33c0e6709a5baa2960a557e9b45c7ffff09ef4cef85768a8262ea2108f071d87620f6ad", 0x6c}, {&(0x7f00000009c0)="8144f9f0bffd0ec4936312907f297d5dcfc81c5ee916bd735a3908cceffa21d229a42d17bdcca0a207ad246b854549a7f1db5495406fe50934c8a6c13f3d3a972dbcef00", 0x44}, {&(0x7f0000000a40)="66637e5821ccd06074bb087746c52471a586dadbe5777fff45e22f45f4dbb227451d279923588df0fada1e7af69cb4fa95d15ed907450debafebfdcedae15756e4e1a4c35d21e7d927ae6671b21ea03fa30ee6925096eaf5007a771f129899027ba640827693cbefe134a3068975ce8be1927b113f99d38ddac602ec63ee408bd2f67d8824aae77a9037b67aaff4248395154e726fea4f41f1800202a3041484d6f03acc60cf15f536afb8c2f904984ec7b75c62236c2944e7c86dece2e3996aaf230c7fe9bcd98dc5b94f5a36104b5bb75a359608253a95c2d872a9f10b6571f1c31887eae98a7153fd31d01dd7521d", 0xf0}], 0x6, &(0x7f0000000bc0)=[{0x38, 0x84, 0xe4, "9351a578ae2c3e23c10ea558b91409b14b27f380603682e0cf3aa2a8b991f4fa0a1ce6e9c073"}, {0x80, 0x1, 0x4, "dce5703fb9aa6ea91fec10a8d3c88351dea2577f8a9af37d52f9140c2ecb1b3ed5a8af929526636ebc01838d78e84aadac34769f82d55a2f1b41a4e1b55acd6269adb02cff18d7d600815a6696b0f6f5973d605415387a5df5ca8d50e228c0ba8ae05cfc3cfb15d91c1b4862aca174"}, {0x70, 0x10a, 0x4, "ad10f2f9b7280dfc9ae7615895dac7725ff3e6ab9dfccc982c392fce5cff90fa3052b3863f43aef596b7ba2660b98ecdffd72bedcbf056b5958a90643bdcac4e29929d495ed9ddfce8d50026eff48e4413ea07864eb81c191c0bac"}, {0x98, 0x84, 0x6, "ec64986bc8c66f5b55f66843539f4879121775df8b0511e05f003d9f02be06a3a8b26d6456efb5af6ef1ccaf5a53fd0ae86c11e49294ab3eefb85110c7653e1437695b126afd40cad72d1480b5030d18bf0ba5382608b462f7c3e37809fbd33d0cbc52320e5185fa545a75fd71ead6910df4a886d4495058a6c7d1db9fd45d3364f18a"}, {0xd8, 0x11, 0x0, "5c2ac380169e6b851f5a5de2ee01ca82ba15cb41b4acbb61adb21c8b9da2d6252f0592512b89a3db69d8ec61caa9a702fa70216c88ad2ba74a6e68308c6ac1323e167580ce80ec1440dfd148331e05b651dae2f073eccae3fcff4e8a1d9dce2b95414e725db3ed22a160f504e9c5f4cbad008ae707e3d0796ed0e166cc267835ee67311c5614bb7748af2b35e3bb2192aed559c46dcfd015210e361bf4c21611acb0120819a3317dddd99e39df44c9e02a70d45d0577b568832c63782c3773742948b23bcbba01"}, {0x80, 0x10e, 0x6, "1816c90b3298b9873e3743c6fe8520c38cc83717d8391bcec554f4da109be3be06a200eada18c68ef4bf02c5b4e284739ce1844393e2e727d54fd7985f20edf627450255be4efe1b46bdcc9eef8557faa25f78eee8225be3820d4ca6de47b7da8ad2f4bad939cfdb82afc2614b030e"}, {0x98, 0x116, 0x7, "e8c52657f7111467d62f0bafdde9503bf5ab644f676863f24fea9dee072c699ca7f1e6cbadc1244c6a5b6ff89b4e7b373bbd7748b9da774bfc567f331c0047cad07160fc782bbb2daae011eccb769ea869b902e3924d8079c5af7a025960795deae3691e55b45a0a8aef05017931a3cccd2d7ef32fd1667929f176218362ddc0b4a2"}], 0x3b0}}], 0x2, 0x9200000000001041) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) sendmmsg$inet(r3, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001000)="5921e82a2e3feabe9dcb689d37806601442766347aa57c2e28d07e3346c18a6beee1c8ee0f11ce6dac71cce37753d67c47c287d44ae055fde028f1ac7deb181424fa0fe751a78ee556b37d3d81af17f9802b38af1bcb20f674e0ddd768c1a44f318e6b97c79c41ae8320342877943debd76bcc1058a26b6248dc17c84ed1071f533cd8e7ecce7734fc43ae1de4ad2ed1", 0x90}, {&(0x7f00000010c0)="340497594fb4de85284593bcf0ddc7b69d95e412d40426679805661e4bb34b99b78503aadb676eaffa5ddb212fb7", 0x2e}], 0x2, &(0x7f0000001140)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @generic={0x44, 0xa, "565fc8e708803849"}, @cipso={0x86, 0x64, 0x0, [{0x7, 0xf, "f372bedcd1f06031d4479af133"}, {0x6, 0x7, "60f4c98a2a"}, {0x7, 0x11, "31786e3e2e7aad98fd0f00e0ab0284"}, {0x1, 0x4, 'oN'}, {0x2, 0x9, "128b8b6a955eb6"}, {0x7, 0xe, "d5440faec74ba59074c2a005"}, {0x6, 0x3, "ba"}, {0x7, 0x11, "843f486d94eac104803538bd0df370"}, {0x3, 0x8, "d2b2785c880d"}]}, @rr={0x7, 0x7, 0x89, [@remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x83, 0xd, "ab1c754f42017bbcd43286"}]}}}, @ip_retopts={{0xac, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xcb, [@local, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, @multicast2, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @lsrr={0x83, 0xb, 0x3d, [@multicast1, @broadcast]}, @rr={0x7, 0xb, 0xd1, [@loopback, @dev={0xac, 0x14, 0x14, 0x34}]}, @ssrr={0x89, 0x2b, 0xf7, [@private=0xa010101, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast2, @broadcast, @local, @loopback, @private=0xa010102]}, @timestamp={0x44, 0x10, 0x70, 0x0, 0x8, [0x9, 0x8, 0x8c04]}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0xb, [{@local, 0x674}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2a2d}]}, @timestamp_prespec={0x44, 0xc, 0x52, 0x3, 0x3, [{@empty, 0x1}]}, @ssrr={0x89, 0x7, 0x8c, [@private=0xa010102]}]}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@generic={0x94, 0x12, "6279085b568ac5a7be83e6499732a9e9"}, @ssrr={0x89, 0x1f, 0x9f, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xd9, [@private=0xa010102, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0x2b, 0xe9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @loopback, @private=0xa0100ff, @empty, @broadcast]}, @rr={0x7, 0x27, 0xeb, [@dev={0xac, 0x14, 0x14, 0x13}, @loopback, @rand_addr=0x64010101, @remote, @local, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}], 0x258}}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000780)) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x17, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 631.861786ms ago: executing program 3 (id=1695): syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6be9e16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005030000000b3302eaee685a10b61b9552f749f9da99d0d30281f9527f9c942a45a38ef66b9caff4cf453bd4893e433d1604d194ea8e", @ANYBLOB="b65e45c3364468c2c0fd66b10885ed147b13c6b3892c8b09b820fd91ca48002ce9c280747875a76d8a3a94ed8a61763fefa20cf738054d31d9c8a22cc65d358243a186b0bfb6fa8826b3bb795134d483"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 519.865059ms ago: executing program 0 (id=1696): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f4}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xeb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x3, 0x10, @private0, 0xb4a9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x3, 0x20000040) (async) sendmmsg$inet6(r4, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xeb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x3, 0x10, @private0, 0xb4a9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x3, 0x20000040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0xfffd, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0xc5, 0x8001]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff}}}}}}}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc) 423.506812ms ago: executing program 3 (id=1697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000001c0)) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1, 0xfffe}, 0x90) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=@newlinkprop={0x17c, 0x6c, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0xd080, 0x20408}, [@IFLA_VFINFO_LIST={0x15c, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x7af}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xc4c, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffff7, 0xd}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x3, 0x59f82af1}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1000, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x35a, 0x9}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffffc, 0x763, 0x6, 0x88a8}}, {0x14, 0x1, {0x8, 0x9e7, 0x5, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x840, 0xaf2}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1ff, 0xffffffff}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x317, 0x8, 0x88a8}}, {0x14, 0x1, {0x5, 0x66f, 0x5, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0xe55, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @broadcast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x9f9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x939, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x223}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x6fd, 0x3ff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x7}}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2011}, 0x81a) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) (async) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x20003, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x300}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20044014) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x20003, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x300}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20044014) 281.643166ms ago: executing program 0 (id=1698): ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0xa2, 0xfffffffffffffffb, 0x4}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) 168.591991ms ago: executing program 3 (id=1699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000040)) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x64a0}], 0x1, 0x0, 0x0, 0x0) 89.780312ms ago: executing program 0 (id=1700): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f1000000000000000000000071108f00000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@local}, &(0x7f0000000240)=0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0xfd, 0x7f, "750538d1ee600000802a04ea7cdcd1cd66159c82f59bac80718336d9bd3501000000ad9f6a120d8bd9d7f8ede5bf5775400386e7d95f0669b760a5418d69d0", 0x10000000000001}, 0x60) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040028bd7000ffdbdf25880000000c00990006000000030000002200330038030000080211000000080211000000fffffffffffffb010c021100000000dd20003300e40002000802110000015058505050500a00060008021100000000000e003300d4000500ffffffffffff0000cc374e1d3d6026a628ca3dbfb4b1496679ff89a653d79cf9ebd6d76c3acf1408336cd9385df740c2dbad980c3e94c7e2295599a9af17ab8393a8f3061aef18f511a1159ae50b3619f74cbb6a7ef7e4a25f055a74013b94fba78665bfc438c564656fbad9369ee3a5"], 0x74}, 0x1, 0x0, 0x0, 0x8804}, 0x4000051) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xfc, 0x81, "a077609475c68411e88509de050000000000f2170e65e3f50327e422170000000000000000000200000000001900", 0x800003c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0xdd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd08, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r7], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x51, '\x00', r7}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000008c0)={'syztnl0\x00', r7, 0x8f, 0x700, 0x2, 0x1, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x65, 0x0, 0x5, 0xaf80e33132eb91a1, 0x0, @broadcast, @empty}}}}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="156cd408baacd657dd32ce2ed35f2332e0924d81c6a3e5aa864e058ac80449f442311a08818acd506f715199b1ff6f7a7c66c8febe62e219859319a009f79d0152e5eccdee8f72fe3f699abe9c37687c000000000e7e75c40000000000000005fd02407dff6e2b78a98928ee463533995b8311ada8", @ANYRES32=r4], 0x48) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x20008000) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x4}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}, 0x0) socket(0xf, 0x2, 0x85) 0s ago: executing program 2 (id=1701): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) getsockopt$inet6_opts(r3, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r4, 0xfa, "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"}, &(0x7f0000000240)=0x102) kernel console output (not intermixed with test programs): ardware; use nl80211 [ 100.987675][ T6194] lo speed is unknown, defaulting to 1000 [ 101.062043][ T6194] lo speed is unknown, defaulting to 1000 [ 101.125273][ T6194] lo speed is unknown, defaulting to 1000 [ 101.243427][ T6202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.74'. [ 101.280556][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'. [ 101.331440][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 101.365371][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.76'. [ 101.466209][ T6216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.088479][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 102.153107][ T6194] infiniband sqz0: set active [ 102.173208][ T6194] infiniband sqz0: added lo [ 102.184317][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'. [ 102.238984][ T6242] netlink: 280 bytes leftover after parsing attributes in process `syz.0.83'. [ 102.299085][ T5896] lo speed is unknown, defaulting to 1000 [ 102.402428][ T6194] RDS/IB: sqz0: added [ 102.433143][ T6194] smc: adding ib device sqz0 with port count 1 [ 102.456907][ T6194] smc: ib device sqz0 port 1 has no pnetid [ 102.485269][ T5921] lo speed is unknown, defaulting to 1000 [ 102.519928][ T6249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.89'. [ 102.549089][ T6194] lo speed is unknown, defaulting to 1000 [ 103.187604][ T6194] lo speed is unknown, defaulting to 1000 [ 103.630238][ T6278] lo speed is unknown, defaulting to 1000 [ 103.837838][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'. [ 103.885090][ T6194] lo speed is unknown, defaulting to 1000 [ 104.090797][ T6194] lo speed is unknown, defaulting to 1000 [ 104.260746][ T6194] lo speed is unknown, defaulting to 1000 [ 104.650621][ T6296] netlink: 'syz.0.100': attribute type 2 has an invalid length. [ 104.673050][ T6296] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 105.846161][ T6314] dvmrp0: entered allmulticast mode [ 105.925803][ T6266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.177286][ T6319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.108'. [ 106.321558][ T6319] bond1: option primary_reselect: invalid value (133) [ 106.398269][ T6319] bond1 (unregistering): Released all slaves [ 106.416067][ T6330] __nla_validate_parse: 1 callbacks suppressed [ 106.416089][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 106.492399][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 110.153360][ T6348] lo speed is unknown, defaulting to 1000 [ 110.840775][ T6358] syz.4.115 (6358) used greatest stack depth: 17560 bytes left [ 110.970834][ T6381] lo speed is unknown, defaulting to 1000 [ 111.063890][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 111.076336][ T54] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.106682][ T54] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.128559][ T54] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.258597][ T6390] netlink: 'syz.4.124': attribute type 1 has an invalid length. [ 111.272641][ T6390] netlink: 1008 bytes leftover after parsing attributes in process `syz.4.124'. [ 111.285876][ T54] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.344348][ T6389] syzkaller0: entered promiscuous mode [ 111.371041][ T6389] syzkaller0: entered allmulticast mode [ 111.405767][ T6389] IPv6: NLM_F_REPLACE set, but no existing node found! [ 111.478802][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.493822][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.055996][ T6410] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.072281][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.080174][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.155223][ T6412] macsec1: entered allmulticast mode [ 112.162701][ T6412] macsec0: entered allmulticast mode [ 112.168093][ T6412] veth1_macvtap: entered allmulticast mode [ 112.432943][ T6419] syzkaller0: entered promiscuous mode [ 112.445492][ T6419] syzkaller0: entered allmulticast mode [ 113.595030][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 113.630218][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 114.023881][ T6458] netlink: 240 bytes leftover after parsing attributes in process `syz.1.147'. [ 114.054235][ T6458] netlink: 56 bytes leftover after parsing attributes in process `syz.1.147'. [ 114.164924][ T6466] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 114.173832][ T6462] netem: unknown loss type 0 [ 114.185767][ T6462] netem: change failed [ 114.226019][ T6469] openvswitch: netlink: IP tunnel dst address not specified [ 114.255272][ T6466] bond1: entered promiscuous mode [ 114.261350][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.299657][ T6471] netlink: 'syz.1.150': attribute type 13 has an invalid length. [ 114.307615][ T6471] netlink: 'syz.1.150': attribute type 17 has an invalid length. [ 114.385518][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.393319][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.498037][ T6482] xt_hashlimit: size too large, truncated to 1048576 [ 114.540506][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 114.692781][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.725156][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.021639][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.036941][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.066315][ T6471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.115608][ T6466] bond1: (slave bridge1): making interface the new active one [ 115.127650][ T6466] bridge1: entered promiscuous mode [ 115.154906][ T6466] bridge1: left promiscuous mode [ 115.357684][ T3555] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.401338][ T3555] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.432491][ T3555] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.470788][ T3555] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.506205][ T3555] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.540075][ T3555] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.549797][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.153'. [ 115.611697][ T6497] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 115.627741][ T6478] syz.0.152 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 115.640808][ T3555] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.651378][ T3555] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.668058][ T3555] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.700481][ T6481] lo speed is unknown, defaulting to 1000 [ 115.709872][ T3555] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.722402][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) [ 115.722432][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.722452][ T6478] Call Trace: [ 115.722461][ T6478] [ 115.722470][ T6478] dump_stack_lvl+0xe8/0x150 [ 115.722522][ T6478] dump_header+0xd3/0x4c0 [ 115.722553][ T6478] oom_kill_process+0x3ab/0x970 [ 115.722591][ T6478] out_of_memory+0x106c/0x1410 [ 115.722621][ T6478] ? try_charge_memcg+0xba6/0x1560 [ 115.722657][ T6478] ? __pfx___mutex_lock+0x10/0x10 [ 115.722701][ T6478] ? __pfx_out_of_memory+0x10/0x10 [ 115.722729][ T6478] ? do_raw_spin_unlock+0xf5/0x210 [ 115.722764][ T6478] try_charge_memcg+0xc53/0x1560 [ 115.722819][ T6478] ? __pfx_try_charge_memcg+0x10/0x10 [ 115.722858][ T6478] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 115.722893][ T6478] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 115.722931][ T6478] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 115.722967][ T6478] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 115.723004][ T6478] __swap_cache_prepare_and_add+0xe8/0x760 [ 115.723041][ T6478] ? page_rmappable_folio+0x9a/0x170 [ 115.723072][ T6478] swap_cache_alloc_folio+0xf1/0x240 [ 115.723104][ T6478] swap_cluster_readahead+0x369/0x690 [ 115.723139][ T6478] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 115.723183][ T6478] ? get_vma_policy+0x27b/0x3c0 [ 115.723209][ T6478] swapin_readahead+0x196/0xc50 [ 115.723242][ T6478] ? swap_table_get+0x1e/0x260 [ 115.723274][ T6478] ? __pfx_swapin_readahead+0x10/0x10 [ 115.723304][ T6478] ? swap_table_get+0x1e/0x260 [ 115.723329][ T6478] ? swap_table_get+0x1e/0x260 [ 115.723351][ T6478] ? swap_table_get+0x1e/0x260 [ 115.723377][ T6478] ? swap_table_get+0x216/0x260 [ 115.723404][ T6478] ? swap_cache_get_folio+0x513/0x520 [ 115.723438][ T6478] do_swap_page+0x56f/0x5a20 [ 115.723490][ T6478] ? do_swap_page+0x127/0x5a20 [ 115.723514][ T6478] ? __pfx_do_swap_page+0x10/0x10 [ 115.723537][ T6478] ? __pte_offset_map+0x1ae/0x240 [ 115.723570][ T6478] ? pte_offset_map_rw_nolock+0xea/0x160 [ 115.723603][ T6478] handle_mm_fault+0x12d2/0x3310 [ 115.723647][ T6478] ? handle_mm_fault+0xee/0x3310 [ 115.723692][ T6478] ? __pfx_handle_mm_fault+0x10/0x10 [ 115.723717][ T6478] ? lock_vma_under_rcu+0x45a/0x500 [ 115.723779][ T6478] do_user_addr_fault+0xa73/0x1340 [ 115.723819][ T6478] ? rcu_is_watching+0x15/0xb0 [ 115.723850][ T6478] ? trace_page_fault_user+0x84/0x1e0 [ 115.723884][ T6478] exc_page_fault+0x6a/0xc0 [ 115.723911][ T6478] asm_exc_page_fault+0x26/0x30 [ 115.723934][ T6478] RIP: 0033:0x7fc08c064f5e [ 115.723963][ T6478] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 9b d0 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 115.723980][ T6478] RSP: 002b:00007fff7f631ad0 EFLAGS: 00010202 [ 115.724008][ T6478] RAX: 00007fc08c415fa0 RBX: 00007fc08c415fa0 RCX: 0000000000000026 [ 115.724023][ T6478] RDX: 0000000000000001 RSI: 00007fc08c416038 RDI: 0000000000000008 [ 115.724036][ T6478] RBP: 00007fc08c417da0 R08: 0000000000000000 R09: 0000000000000001 [ 115.724048][ T6478] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000001c205 [ 115.724060][ T6478] R13: 00007fc08c41618c R14: 000000000001bf89 R15: 00007fc08c416180 [ 115.724094][ T6478] [ 116.079613][ T3555] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.098838][ T3555] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.112578][ T6478] memory: usage 307200kB, limit 307200kB, failcnt 657 [ 116.119774][ T6478] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 116.129479][ T6478] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 116.148917][ T6478] Memory cgroup stats for /syz0: [ 116.152349][ T6478] cache 0 [ 116.255815][ T6478] rss 0 [ 116.272605][ T6478] rss_huge 0 [ 116.304424][ T6478] shmem 0 [ 116.354393][ T6478] mapped_file 0 [ 116.380612][ T6478] dirty 0 [ 116.412047][ T6478] writeback 0 [ 116.422502][ T6478] workingset_refault_anon 10 [ 116.441787][ T6478] workingset_refault_file 60 [ 116.452520][ T6478] swap 167936 [ 116.477385][ T6478] swapcached 249856 [ 116.506055][ T6478] pgpgin 8880 [ 116.516552][ T6478] pgpgout 8870 [ 116.524062][ T6478] pgfault 15682 [ 116.532326][ T6478] pgmajfault 5 [ 116.542534][ T6478] inactive_anon 8192 [ 116.551932][ T6478] active_anon 32768 [ 116.563562][ T6478] inactive_file 0 [ 116.570928][ T6478] active_file 0 [ 116.586249][ T6478] unevictable 0 [ 116.593956][ T6478] hierarchical_memory_limit 314572800 [ 116.610658][ T6478] hierarchical_memsw_limit 9223372036854771712 [ 116.626375][ T6478] total_cache 0 [ 116.631406][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.159'. [ 116.640823][ T6478] total_rss 0 [ 116.740312][ T6478] total_rss_huge 0 [ 116.766614][ T6478] total_shmem 0 [ 116.793315][ T6478] total_mapped_file 0 [ 116.817228][ T6508] ip6gre1: entered promiscuous mode [ 116.834751][ T6478] total_dirty 0 [ 116.835953][ T6508] ip6gre1: entered allmulticast mode [ 116.862616][ T6478] total_writeback 0 [ 116.885325][ T6478] total_workingset_refault_anon 10 [ 116.903393][ T6478] total_workingset_refault_file 60 [ 116.930569][ T6478] total_swap 167936 [ 116.953849][ T6478] total_swapcached 249856 [ 116.983524][ T6478] total_pgpgin 8880 [ 117.002322][ T6478] total_pgpgout 8870 [ 117.014602][ T6478] total_pgfault 15682 [ 117.028227][ T6478] total_pgmajfault 5 [ 117.037444][ T6478] total_inactive_anon 8192 [ 117.056616][ T6478] total_active_anon 32768 [ 117.074154][ T6478] total_inactive_file 0 [ 117.088636][ T6478] total_active_file 0 [ 117.098632][ T6478] total_unevictable 0 [ 117.111891][ T6478] anon_cost 0 [ 117.126354][ T6478] file_cost 0 [ 117.136539][ T6478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.152,pid=6478,uid=0 [ 117.201060][ T6478] Memory cgroup out of memory: Killed process 6478 (syz.0.152) total-vm:102420kB, anon-rss:1268kB, file-rss:23064kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 117.337106][ T6522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'. [ 117.379166][ T6522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'. [ 117.485077][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 117.866585][ T6541] bridge0: port 3(vlan2) entered blocking state [ 117.883985][ T6541] bridge0: port 3(vlan2) entered disabled state [ 117.902655][ T6541] vlan2: entered allmulticast mode [ 117.926543][ T6541] geneve0: entered allmulticast mode [ 117.954610][ T6541] vlan2: entered promiscuous mode [ 117.975356][ T6541] geneve0: entered promiscuous mode [ 118.511255][ T6556] lo speed is unknown, defaulting to 1000 [ 118.893442][ T6572] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 118.927372][ T6574] __nla_validate_parse: 2 callbacks suppressed [ 118.927392][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.173'. [ 119.022538][ T6574] ip6gre1: entered promiscuous mode [ 119.053659][ T6574] ip6gre1: entered allmulticast mode [ 119.104987][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.153297][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.170126][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.249098][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.483425][ T6583] syzkaller1: entered promiscuous mode [ 119.504029][ T6583] syzkaller1: entered allmulticast mode [ 119.614806][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 119.689519][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.738494][ T42] IPVS: starting estimator thread 0... [ 119.860568][ T6597] IPVS: using max 29 ests per chain, 69600 per kthread [ 119.980445][ T6606] netlink: 104 bytes leftover after parsing attributes in process `syz.4.180'. [ 120.034797][ T6608] netlink: 'syz.3.181': attribute type 22 has an invalid length. [ 120.061273][ T6608] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 120.082572][ T6608] netlink: 224 bytes leftover after parsing attributes in process `syz.3.181'. [ 120.676940][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 120.695753][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 120.730860][ T6617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.742434][ T6617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.845210][ T6624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.184'. [ 121.054575][ T6631] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 121.059738][ T6630] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 121.080175][ T6621] lo speed is unknown, defaulting to 1000 [ 121.200597][ T6617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.261543][ T6617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.482181][ T6617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.526048][ T6617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.644883][ T6667] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 121.746668][ T6667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.786456][ T6670] 8021q: VLANs not supported on vcan0 [ 121.903139][ T6617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.925224][ T6617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.019957][ T6669] bond2 (unregistering): Released all slaves [ 122.529263][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 122.581179][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.608981][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.702424][ T6682] veth1_macvtap: left allmulticast mode [ 122.800030][ T6682] macsec0: left allmulticast mode [ 122.923743][ T127] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.932980][ T127] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.944390][ T127] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.944412][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 122.963168][ T127] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.974767][ T6701] vlan2: left allmulticast mode [ 122.984898][ T6701] geneve0: left allmulticast mode [ 122.990862][ T6701] vlan2: left promiscuous mode [ 122.995951][ T6701] geneve0: left promiscuous mode [ 123.018135][ T6701] bridge0: port 3(vlan2) entered disabled state [ 123.033003][ T6701] bridge_slave_1: left allmulticast mode [ 123.050921][ T6701] bridge_slave_1: left promiscuous mode [ 123.068524][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.124845][ T6701] bridge_slave_0: left allmulticast mode [ 123.158335][ T6701] bridge_slave_0: left promiscuous mode [ 123.170643][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.275889][ T6704] tipc: Started in network mode [ 123.287595][ T6704] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 123.322174][ T6704] tipc: Enabled bearer , priority 10 [ 123.797204][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.834683][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.121397][ T3462] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.138970][ T3462] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.152090][ T6754] xt_TCPMSS: Only works on TCP SYN packets [ 124.198514][ T3462] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.210078][ T3462] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.278524][ T6750] syzkaller0: entered promiscuous mode [ 124.292574][ T6750] syzkaller0: entered allmulticast mode [ 124.306941][ T6758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.326023][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.344094][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.502782][ T42] tipc: Node number set to 10136234 [ 124.783516][ T6785] IPVS: length: 35 != 24 [ 124.808136][ T6787] netlink: 84 bytes leftover after parsing attributes in process `syz.4.219'. [ 124.861074][ T6775] nbd0: detected capacity change from 0 to 127 [ 124.942048][ T5834] block nbd0: Receive control failed (result -104) [ 125.368608][ T6806] trusted_key: syz.2.226 sent an empty control message without MSG_MORE. [ 126.083137][ T6784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.222'. [ 126.132227][ T6859] netlink: 220 bytes leftover after parsing attributes in process `syz.4.231'. [ 126.159264][ T6859] tc_dump_action: action bad kind [ 126.358497][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 126.379168][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 126.553188][ T6878] netlink: 'syz.4.236': attribute type 21 has an invalid length. [ 126.580306][ T6878] netlink: 'syz.4.236': attribute type 22 has an invalid length. [ 126.621912][ T6878] netlink: 'syz.4.236': attribute type 23 has an invalid length. [ 126.676091][ T6878] netlink: 'syz.4.236': attribute type 25 has an invalid length. [ 126.722331][ T6878] netlink: 96 bytes leftover after parsing attributes in process `syz.4.236'. [ 126.771292][ T6877] netlink: 'syz.4.236': attribute type 21 has an invalid length. [ 126.798954][ T6877] netlink: 'syz.4.236': attribute type 22 has an invalid length. [ 126.838455][ T6877] netlink: 'syz.4.236': attribute type 23 has an invalid length. [ 126.854715][ T6877] netlink: 'syz.4.236': attribute type 25 has an invalid length. [ 126.862811][ T6877] netlink: 96 bytes leftover after parsing attributes in process `syz.4.236'. [ 127.098165][ T6899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.256033][ T6910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.296335][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.244'. [ 127.315896][ T6911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.244'. [ 127.327172][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.244'. [ 127.394420][ T6911] gretap1: entered promiscuous mode [ 127.414048][ T6911] batman_adv: batadv0: Adding interface: gretap1 [ 127.433205][ T6911] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 127.494070][ T6911] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 128.041195][ T6930] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 128.196342][ T6935] lo speed is unknown, defaulting to 1000 [ 128.243984][ T5204] block nbd0: Connection timed out, retrying (0/1 alive) [ 128.251893][ T5204] block nbd0: Connection timed out, retrying (0/1 alive) [ 128.260440][ T5204] block nbd0: Connection timed out, retrying (0/1 alive) [ 128.269508][ T11] block nbd0: Dead connection, failed to find a fallback [ 128.282592][ T11] block nbd0: shutting down sockets [ 128.291382][ T5204] block nbd0: Connection timed out, retrying (0/1 alive) [ 128.300420][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.312211][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.320234][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.329907][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.341963][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.351234][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 128.359146][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.368224][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 128.377285][ T5883] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.388299][ T5883] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.397661][ T5883] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.407048][ T5883] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.415941][ T5883] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.425868][ T5883] Buffer I/O error on dev nbd0, logical block 2, async page read [ 128.433909][ T5883] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.443341][ T5883] Buffer I/O error on dev nbd0, logical block 3, async page read [ 128.451358][ T5883] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.460565][ T5883] Buffer I/O error on dev nbd0, logical block 0, async page read [ 128.469656][ T5883] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.479598][ T5883] Buffer I/O error on dev nbd0, logical block 1, async page read [ 128.490927][ T5883] ldm_validate_partition_table(): Disk read failed. [ 128.502093][ T5883] Dev nbd0: unable to read RDB block 0 [ 128.509968][ T5883] nbd0: unable to read partition table [ 128.526653][ T5883] ldm_validate_partition_table(): Disk read failed. [ 128.551325][ T5883] Dev nbd0: unable to read RDB block 0 [ 128.572144][ T5883] nbd0: unable to read partition table [ 129.713249][ T6957] netlink: zone id is out of range [ 129.733016][ T6957] netlink: zone id is out of range [ 129.744685][ T6957] netlink: zone id is out of range [ 129.762864][ T6957] netlink: zone id is out of range [ 129.789244][ T6957] netlink: zone id is out of range [ 129.809053][ T6957] netlink: zone id is out of range [ 129.822024][ T6957] netlink: zone id is out of range [ 129.844001][ T6957] netlink: zone id is out of range [ 129.873636][ T6957] netlink: zone id is out of range [ 129.889502][ T6957] netlink: zone id is out of range [ 129.991694][ T6965] netlink: 'syz.3.264': attribute type 30 has an invalid length. [ 130.358439][ T6977] xt_hashlimit: overflow, try lower: 0/0 [ 130.386255][ T6978] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 130.461670][ T6975] lo speed is unknown, defaulting to 1000 [ 130.727617][ T6987] __nla_validate_parse: 2 callbacks suppressed [ 130.727639][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 131.256024][ T6994] dvmrp1: entered allmulticast mode [ 131.527195][ T7001] syzkaller0: entered promiscuous mode [ 131.559400][ T7001] syzkaller0: entered allmulticast mode [ 131.894012][ T7021] validate_nla: 3 callbacks suppressed [ 131.894035][ T7021] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 132.003569][ T7021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.963535][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.973545][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.796024][ T7025] bond1: (slave veth3): Enslaving as an active interface with a down link [ 134.836642][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 134.848192][ T7027] bond1: (slave batadv1): making interface the new active one [ 134.858469][ T7027] batadv1: entered promiscuous mode [ 134.864311][ T7027] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 135.061842][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 135.098062][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 135.107810][ T7043] syzkaller1: entered promiscuous mode [ 135.123495][ T7043] syzkaller1: entered allmulticast mode [ 135.129806][ T7040] netlink: 'syz.2.281': attribute type 13 has an invalid length. [ 135.478557][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 135.487833][ T7059] net_ratelimit: 21 callbacks suppressed [ 135.487856][ T7059] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 135.521044][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 135.635771][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.822307][ T7066] lo speed is unknown, defaulting to 1000 [ 135.838223][ T7061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.287'. [ 135.884946][ T7073] pimreg: entered allmulticast mode [ 135.963969][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 136.263737][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 136.519342][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 136.605410][ T7094] syzkaller0: entered promiscuous mode [ 136.618232][ T7094] syzkaller0: entered allmulticast mode [ 136.846504][ T7101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.298'. [ 136.903733][ T7101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.298'. [ 136.937518][ T7108] netlink: 76 bytes leftover after parsing attributes in process `syz.3.299'. [ 136.947238][ T7103] lo speed is unknown, defaulting to 1000 [ 136.981530][ T7110] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 137.164570][ T7101] xt_CT: No such helper "syz1" [ 137.196617][ T7114] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.234014][ T7114] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.245245][ T7119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.369699][ T7114] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.397382][ T7114] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.595710][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 137.598151][ T7114] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.618956][ T7114] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.660245][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 137.732901][ T7114] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.759227][ T7114] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.852933][ T7132] syzkaller1: entered promiscuous mode [ 137.862927][ T7132] syzkaller1: entered allmulticast mode [ 138.154908][ T6846] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.190502][ T6846] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.261100][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 138.321925][ T6844] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.341496][ T6844] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.526136][ T7153] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 138.671593][ T7159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.843852][ T5875] udevd[5875]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 138.858542][ T7153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.891444][ T7114] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.901922][ T7114] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.952761][ T7156] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 139.022182][ T7114] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.064724][ T7114] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.223208][ T7173] netlink: 'syz.1.318': attribute type 14 has an invalid length. [ 139.318123][ T7173] xt_CT: No such helper "snmp_trap" [ 139.949661][ T7201] sctp: [Deprecated]: syz.0.326 (pid 7201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.949661][ T7201] Use struct sctp_sack_info instead [ 139.970052][ T7202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.186626][ T7208] netlink: 'syz.4.328': attribute type 4 has an invalid length. [ 140.849616][ T7232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.271156][ T7244] syzkaller0: entered promiscuous mode [ 141.282846][ T7244] syzkaller0: entered allmulticast mode [ 141.881405][ T7264] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 141.891799][ T7264] __nla_validate_parse: 6 callbacks suppressed [ 141.891817][ T7264] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.348'. [ 143.804449][ T7281] batman_adv: batadv0: Adding interface: dummy0 [ 143.810937][ T7281] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.837809][ T7281] batman_adv: batadv0: Interface activated: dummy0 [ 143.864031][ T7283] batadv0: mtu less than device minimum [ 143.886094][ T7283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.899805][ T7283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.911613][ T7283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.923469][ T7283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.935329][ T7283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.947196][ T7283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.959047][ T7283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.970877][ T7283] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.255883][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 145.999577][ T6846] batadv1: left promiscuous mode [ 177.010198][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.366'. [ 177.116715][ T7335] €=: option downdelay: invalid value (18446744073709547007) [ 177.124900][ T7335] €=: option downdelay: allowed values 0 - 2147483647 [ 177.138963][ T7335] €= (unregistering): Released all slaves [ 177.173403][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'. [ 177.237104][ T7342] net_ratelimit: 11 callbacks suppressed [ 177.237128][ T7342] openvswitch: netlink: Message has 1085 unknown bytes. [ 177.460617][ T7353] netlink: 72 bytes leftover after parsing attributes in process `syz.2.370'. [ 177.480119][ T7354] netlink: 72 bytes leftover after parsing attributes in process `syz.2.370'. [ 177.732714][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 177.963938][ T7371] netlink: 'syz.3.375': attribute type 10 has an invalid length. [ 177.994291][ T7371] syz_tun: entered promiscuous mode [ 178.020801][ T7371] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 178.043686][ T7369] lo speed is unknown, defaulting to 1000 [ 178.260955][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 178.300702][ T7379] nbd: illegal input index -1113835520 [ 179.221643][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 179.444029][ T7422] bridge0: entered promiscuous mode [ 179.474863][ T7422] bridge0: port 1(macvtap0) entered blocking state [ 179.486538][ T7422] bridge0: port 1(macvtap0) entered disabled state [ 179.503544][ T7422] macvtap0: entered allmulticast mode [ 179.525623][ T7422] bridge0: entered allmulticast mode [ 179.556574][ T7422] macvtap0: left allmulticast mode [ 179.562952][ T7422] bridge0: left allmulticast mode [ 179.571983][ T7422] bridge0: left promiscuous mode [ 179.577648][ T7436] netlink: 'syz.4.393': attribute type 8 has an invalid length. [ 179.596927][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 179.737061][ T7436] netlink: 'syz.4.393': attribute type 8 has an invalid length. [ 179.777333][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 179.793670][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 179.812139][ T6834] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.822548][ T7442] netlink: 'syz.3.395': attribute type 6 has an invalid length. [ 179.844922][ T7442] netlink: 'syz.3.395': attribute type 23 has an invalid length. [ 179.851812][ T6834] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.880099][ T7442] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.904998][ T7439] syzkaller0: left promiscuous mode [ 179.911564][ T7439] syzkaller0: left allmulticast mode [ 179.917867][ T6834] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.941283][ T6834] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.126624][ T7450] tipc: Started in network mode [ 180.139242][ T7450] tipc: Node identity ee8669956086, cluster identity 4711 [ 180.157454][ T7450] tipc: Enabled bearer , priority 0 [ 180.221060][ T7457] syzkaller0: entered promiscuous mode [ 180.226708][ T7457] syzkaller0: entered allmulticast mode [ 180.325267][ T7450] tipc: Resetting bearer [ 180.730369][ T7482] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 180.940576][ T7447] tipc: Resetting bearer [ 181.016781][ T7447] tipc: Disabling bearer [ 181.395830][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.418019][ T7500] lo speed is unknown, defaulting to 1000 [ 182.108521][ T7527] ipvlan2: entered promiscuous mode [ 182.130139][ T7527] bridge0: port 3(ipvlan2) entered blocking state [ 182.148938][ T7527] bridge0: port 3(ipvlan2) entered disabled state [ 182.156925][ T7527] ipvlan2: entered allmulticast mode [ 182.164241][ T7527] bridge0: entered allmulticast mode [ 182.178530][ T7529] __nla_validate_parse: 4 callbacks suppressed [ 182.178550][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.417'. [ 182.184231][ T7527] ipvlan2: left allmulticast mode [ 182.205459][ T7527] bridge0: left allmulticast mode [ 182.276750][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 182.286548][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 182.304372][ T7537] netlink: 'syz.4.419': attribute type 11 has an invalid length. [ 182.333588][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 182.431071][ T7537] netlink: 76 bytes leftover after parsing attributes in process `syz.4.419'. [ 182.483416][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 182.522814][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 182.568813][ T7539] netlink: 'syz.4.419': attribute type 11 has an invalid length. [ 182.871729][ T7551] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 183.046078][ T7551] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 183.219360][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.774767][ T7591] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 183.993496][ T7591] bond2: entered promiscuous mode [ 184.019394][ T7591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.168440][ T7608] nbd: must specify a device to reconfigure [ 184.196639][ T7602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.204069][ T7602] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 184.215090][ T7602] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 184.251380][ T7602] bond2: (slave wireguard0): making interface the new active one [ 184.268843][ T7602] wireguard0: entered promiscuous mode [ 184.293713][ T7602] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 184.404486][ T7608] batadv_slave_1: entered promiscuous mode [ 184.534173][ T7605] batadv_slave_1: left promiscuous mode [ 184.667830][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 184.689540][ T7628] openvswitch: netlink: Invalid VLAN frame [ 184.839401][ T7632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.979751][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 185.314417][ T7650] xt_hashlimit: invalid rate [ 185.362572][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 186.044192][ T7679] block nbd2: Unsupported socket: should be TCP or UNIX. [ 186.287835][ T7683] syzkaller1: entered promiscuous mode [ 186.306278][ T7683] syzkaller1: entered allmulticast mode [ 187.130428][ T7730] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 187.173171][ T7725] lo speed is unknown, defaulting to 1000 [ 187.413313][ T7744] __nla_validate_parse: 11 callbacks suppressed [ 187.413334][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 187.561161][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 187.653415][ T7744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.666019][ T7744] netlink: 104 bytes leftover after parsing attributes in process `syz.4.467'. [ 187.782075][ T7745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.794374][ T7745] bond1: (slave bond2): Enslaving as an active interface with an up link [ 187.902353][ T7750] bond1 (unregistering): (slave bond2): Releasing backup interface [ 188.028930][ T7763] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.471'. [ 188.045892][ T7750] bond1 (unregistering): Released all slaves [ 188.187062][ T7765] netlink: 7 bytes leftover after parsing attributes in process `syz.2.472'. [ 188.229264][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 188.249646][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 188.263205][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 188.278497][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 188.290320][ T7769] netlink: 'syz.0.473': attribute type 19 has an invalid length. [ 188.303636][ T7770] netlink: 'syz.0.473': attribute type 19 has an invalid length. [ 188.321524][ T7769] netlink: 'syz.0.473': attribute type 20 has an invalid length. [ 188.352955][ T7770] netlink: 'syz.0.473': attribute type 20 has an invalid length. [ 188.898145][ T7802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.034872][ T7806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.295806][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.485'. [ 189.371912][ T7813] lo speed is unknown, defaulting to 1000 [ 189.445914][ T7815] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 189.940923][ T7823] lo speed is unknown, defaulting to 1000 [ 190.321032][ T7849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.401154][ T7879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.440348][ T7879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.471657][ T7879] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 191.488530][ T7879] bond0 (unregistering): Released all slaves [ 191.652511][ T2152] IPVS: starting estimator thread 0... [ 191.749203][ T7893] IPVS: using max 24 ests per chain, 57600 per kthread [ 191.946082][ T7896] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 191.973593][ T7898] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 192.242021][ T7924] netlink: 'syz.0.518': attribute type 21 has an invalid length. [ 192.273947][ T7924] netlink: 'syz.0.518': attribute type 4 has an invalid length. [ 192.305079][ T7924] netlink: 'syz.0.518': attribute type 5 has an invalid length. [ 192.348933][ T7921] lo speed is unknown, defaulting to 1000 [ 192.523581][ T7937] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 192.662682][ T7944] __nla_validate_parse: 17 callbacks suppressed [ 192.662699][ T7944] netlink: 148 bytes leftover after parsing attributes in process `syz.0.524'. [ 192.691930][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.740238][ T7939] bond0: (slave veth3): Enslaving as an active interface with a down link [ 192.772461][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 192.783793][ T7941] bond0: (slave batadv1): making interface the new active one [ 192.794409][ T7941] batadv1: entered promiscuous mode [ 192.803325][ T7941] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 192.847791][ T7930] lo speed is unknown, defaulting to 1000 [ 193.367647][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 194.136903][ T7973] bond2: Unable to set down delay as MII monitoring is disabled [ 194.147793][ T7973] bond2 (unregistering): Released all slaves [ 194.276225][ T7982] pim6reg1: entered promiscuous mode [ 194.282302][ T7982] pim6reg1: entered allmulticast mode [ 194.405861][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.422852][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.436999][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.510087][ T7977] dvmrp6: entered allmulticast mode [ 194.863386][ T7996] lo speed is unknown, defaulting to 1000 [ 194.876325][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 194.893414][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 195.248436][ T8010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.294505][ T8010] bond1: (slave bond2): Enslaving as an active interface with an up link [ 195.562800][ T8032] bond1: option arp_all_targets: invalid value (129) [ 195.576310][ T8032] bond1 (unregistering): Released all slaves [ 195.644564][ T8051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.660602][ T8041] netlink: 128 bytes leftover after parsing attributes in process `syz.2.549'. [ 195.747776][ T8054] netlink: 'syz.2.553': attribute type 21 has an invalid length. [ 195.763199][ T8054] netlink: 128 bytes leftover after parsing attributes in process `syz.2.553'. [ 195.784030][ T8054] netlink: 'syz.2.553': attribute type 5 has an invalid length. [ 195.793622][ T8054] netlink: 3 bytes leftover after parsing attributes in process `syz.2.553'. [ 195.974296][ T8059] netlink: 52 bytes leftover after parsing attributes in process `syz.2.555'. [ 196.490314][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.559'. [ 196.502624][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.559'. [ 198.489013][ T8037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.681575][ T8087] nbd: must specify at least one socket [ 198.760976][ T8095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.966580][ T8105] __nla_validate_parse: 1 callbacks suppressed [ 198.966602][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 199.130262][ T8117] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.568'. [ 199.153186][ T8117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.568'. [ 199.275100][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 199.442280][ T8133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.578'. [ 199.480680][ T8135] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 199.564811][ T8139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.597645][ T8135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.710406][ T8137] bond2: (slave veth5): Enslaving as an active interface with a down link [ 199.925638][ T8135] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 200.205669][ T8172] openvswitch: netlink: Flow key attribute not present in set flow. [ 200.216593][ T8166] erspan0: entered promiscuous mode [ 200.263919][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.589'. [ 200.355057][ T8165] lo speed is unknown, defaulting to 1000 [ 200.702317][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 200.763883][ T8188] bpq0: entered promiscuous mode [ 200.781849][ T8188] bpq0: entered allmulticast mode [ 200.875003][ T8188] dummy0: entered promiscuous mode [ 200.891291][ T8188] bond0: entered promiscuous mode [ 200.908102][ T8188] bond_slave_0: entered promiscuous mode [ 200.919413][ T8188] bond_slave_1: entered promiscuous mode [ 200.939411][ T8188] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 200.957405][ T8188] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 200.968473][ T8188] hsr1: entered allmulticast mode [ 200.984709][ T8188] dummy0: entered allmulticast mode [ 201.001396][ T8188] bond0: entered allmulticast mode [ 201.006872][ T8188] bond_slave_0: entered allmulticast mode [ 201.023512][ T8188] bond_slave_1: entered allmulticast mode [ 201.648140][ T8213] netlink: 428 bytes leftover after parsing attributes in process `syz.3.601'. [ 201.668532][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.600'. [ 201.749882][ T8216] dvmrp1: entered allmulticast mode [ 201.755686][ T8213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 201.919344][ T8207] nbd2: detected capacity change from 0 to 127 [ 201.940481][ T8220] lo speed is unknown, defaulting to 1000 [ 201.985059][ T29] audit: type=1800 audit(1776820296.114:2): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.598" name="memory.events" dev="tmpfs" ino=747 res=0 errno=0 [ 202.536501][ T5834] block nbd2: Receive control failed (result -104) [ 203.910436][ T6834] batadv1: left promiscuous mode [ 204.159892][ T8274] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 204.161637][ T8270] lo speed is unknown, defaulting to 1000 [ 204.185472][ T8276] __nla_validate_parse: 2 callbacks suppressed [ 204.185490][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 204.273009][ T8279] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 204.306290][ T8279] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 204.330774][ T8279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.617'. [ 204.350744][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 204.646448][ T8293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.844156][ T8300] netlink: 156 bytes leftover after parsing attributes in process `syz.2.624'. [ 204.891733][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 205.061448][ T8307] syzkaller1: entered promiscuous mode [ 205.081339][ T8307] syzkaller1: entered allmulticast mode [ 205.227665][ T8311] tipc: Started in network mode [ 205.242913][ T8311] tipc: Node identity , cluster identity 4711 [ 205.265593][ T8311] tipc: Failed to obtain node identity [ 205.272672][ T8311] tipc: Enabling of bearer rejected, failed to enable media [ 205.360758][ T1589] block nbd2: Connection timed out, retrying (0/1 alive) [ 205.367986][ T1589] block nbd2: Connection timed out, retrying (0/1 alive) [ 205.375735][ T1589] block nbd2: Connection timed out, retrying (0/1 alive) [ 205.383205][ T1589] block nbd2: Connection timed out, retrying (0/1 alive) [ 205.390895][ T1589] block nbd2: Dead connection, failed to find a fallback [ 205.398006][ T1589] block nbd2: shutting down sockets [ 205.403540][ T1589] blk_print_req_error: 138 callbacks suppressed [ 205.403558][ T1589] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.419179][ T1589] buffer_io_error: 138 callbacks suppressed [ 205.419196][ T1589] Buffer I/O error on dev nbd2, logical block 3, async page read [ 205.435403][ T1589] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.444655][ T1589] Buffer I/O error on dev nbd2, logical block 2, async page read [ 205.452752][ T1589] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.462091][ T1589] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.470228][ T1589] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.480260][ T1589] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.490294][ T7328] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.508111][ T7328] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.516166][ T7328] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.525699][ T7328] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.534737][ T7328] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.543881][ T7328] Buffer I/O error on dev nbd2, logical block 2, async page read [ 205.552039][ T7328] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.561417][ T7328] Buffer I/O error on dev nbd2, logical block 3, async page read [ 205.569497][ T7328] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.578581][ T7328] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.586620][ T7328] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.595737][ T7328] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.615130][ T7328] ldm_validate_partition_table(): Disk read failed. [ 205.624622][ T7328] Dev nbd2: unable to read RDB block 0 [ 205.632479][ T7328] nbd2: unable to read partition table [ 205.655756][ T7328] ldm_validate_partition_table(): Disk read failed. [ 205.664448][ T7328] Dev nbd2: unable to read RDB block 0 [ 205.673843][ T7328] nbd2: unable to read partition table [ 205.786403][ T8332] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 206.022766][ T8330] lo speed is unknown, defaulting to 1000 [ 206.311078][ T8342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.635'. [ 206.606971][ T8354] Bluetooth: MGMT ver 1.23 [ 206.630168][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 206.901631][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'. [ 207.926250][ T8393] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 207.949984][ T8393] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 208.224095][ T8404] openvswitch: netlink: IPv4 tun info is not correct [ 208.244536][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 208.589308][ T8403] syzkaller0: entered promiscuous mode [ 208.604831][ T8403] syzkaller0: entered allmulticast mode [ 208.686375][ T8415] netlink: 1 bytes leftover after parsing attributes in process `syz.3.655'. [ 208.705143][ T8415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.103946][ T8449] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 211.132970][ T8449] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 211.171060][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'. [ 211.294905][ T8460] SET target dimension over the limit! [ 211.846306][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 211.846321][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 211.854362][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 211.859295][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 212.492563][ T8509] tipc: Enabling of bearer rejected, failed to enable media [ 212.522851][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.680'. [ 212.577997][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.680'. [ 212.823017][ T8519] bond0: (slave bond_slave_0): Releasing backup interface [ 212.855130][ T8519] bond0: (slave bond_slave_1): Releasing backup interface [ 212.889040][ T8519] team0: Port device team_slave_0 removed [ 212.915039][ T8524] netlink: 76 bytes leftover after parsing attributes in process `syz.1.682'. [ 212.931949][ T8519] team0: Port device team_slave_1 removed [ 212.950976][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.967589][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 213.692867][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.701488][ T8519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.864224][ T8539] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 214.022552][ T6839] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.077070][ T6839] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.128501][ T6839] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.172608][ T6839] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.221303][ T8557] lo speed is unknown, defaulting to 1000 [ 214.245337][ T8557] lo speed is unknown, defaulting to 1000 [ 214.268957][ T8563] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 214.272117][ T8557] lo speed is unknown, defaulting to 1000 [ 214.318425][ T8557] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 214.432803][ T8557] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 214.506368][ T8563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.563488][ T8570] bond1: (slave geneve2): making interface the new active one [ 214.573437][ T8570] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 214.585280][ T8557] lo speed is unknown, defaulting to 1000 [ 214.599703][ T8557] lo speed is unknown, defaulting to 1000 [ 214.618371][ T6842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.647284][ T6842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.690683][ T6842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.723316][ T6842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.767877][ T8557] lo speed is unknown, defaulting to 1000 [ 214.820427][ T8557] lo speed is unknown, defaulting to 1000 [ 214.875627][ T8584] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 214.940353][ T8557] lo speed is unknown, defaulting to 1000 [ 215.183402][ T8565] smc: removing ib device sqz0 [ 215.403739][ T8601] netlink: 14 bytes leftover after parsing attributes in process `syz.4.703'. [ 215.423564][ T8598] lo speed is unknown, defaulting to 1000 [ 215.458118][ T8601] bond0 (unregistering): left promiscuous mode [ 215.476872][ T8601] bond_slave_0: left promiscuous mode [ 215.499966][ T8601] bond_slave_1: left promiscuous mode [ 215.523302][ T8601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.574187][ T8601] bond_slave_0: left allmulticast mode [ 215.595573][ T8601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.622763][ T8601] bond_slave_1: left allmulticast mode [ 215.631271][ T8601] bond0 (unregistering): Released all slaves [ 215.736131][ T8609] netlink: 'syz.0.705': attribute type 11 has an invalid length. [ 215.888956][ T8611] netlink: 'syz.0.706': attribute type 6 has an invalid length. [ 215.913063][ T8611] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.706'. [ 215.981401][ T8614] netlink: 48 bytes leftover after parsing attributes in process `syz.4.707'. [ 216.119138][ T8618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.708'. [ 216.174379][ T8623] sctp: [Deprecated]: syz.0.708 (pid 8623) Use of int in maxseg socket option. [ 216.174379][ T8623] Use struct sctp_assoc_value instead [ 216.273062][ T8614] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.359768][ T8614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.718311][ T8627] lo speed is unknown, defaulting to 1000 [ 216.855105][ T8633] lo speed is unknown, defaulting to 1000 [ 217.072278][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 217.386368][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 217.804871][ T8650] syzkaller0: entered promiscuous mode [ 217.810704][ T8650] syzkaller0: entered allmulticast mode [ 217.994229][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 218.021081][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 218.274232][ T8669] x_tables: duplicate underflow at hook 1 [ 218.546775][ T8676] lo speed is unknown, defaulting to 1000 [ 218.746464][ T8680] lo speed is unknown, defaulting to 1000 [ 218.963738][ T8692] hsr0: entered promiscuous mode [ 219.042530][ T8678] lo speed is unknown, defaulting to 1000 [ 219.051509][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 219.082078][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 219.206119][ T8685] xt_HMARK: spi-set and port-set can't be combined [ 219.241757][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 219.912460][ T8698] syzkaller1: entered promiscuous mode [ 219.918188][ T8698] syzkaller1: entered allmulticast mode [ 219.956599][ T8711] batman_adv: batadv0: Adding interface: macvlan2 [ 219.976590][ T8711] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 220.020414][ T8711] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 220.832287][ T8735] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 220.938519][ T8735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.102918][ T8740] bond3: (slave veth3): Enslaving as an active interface with a down link [ 221.155217][ T8741] bond3: (slave veth5): Enslaving as an active interface with a down link [ 221.230112][ T8747] wlan0: mtu less than device minimum [ 221.262416][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.737'. [ 221.291885][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 221.533969][ T8766] can: request_module (can-proto-5) failed. [ 221.543584][ T8769] syzkaller0: entered promiscuous mode [ 221.576071][ T8769] syzkaller0: entered allmulticast mode [ 222.134254][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 222.202292][ T8782] syzkaller1: entered promiscuous mode [ 222.244082][ T8782] syzkaller1: entered allmulticast mode [ 222.454778][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.752'. [ 222.556992][ T8803] netlink: 'syz.0.754': attribute type 13 has an invalid length. [ 222.576942][ T8802] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 222.590068][ T8803] netlink: 'syz.0.754': attribute type 12 has an invalid length. [ 222.611292][ T8795] lo speed is unknown, defaulting to 1000 [ 255.841371][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.850390][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.856753][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.904981][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.913381][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.920359][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.927249][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.934160][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.941067][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.947923][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.954862][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 258.961798][ T8835] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 259.000479][ T8839] hsr0: entered promiscuous mode [ 259.007360][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 259.056557][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 259.086719][ T8840] netlink: 348 bytes leftover after parsing attributes in process `syz.3.762'. [ 259.146291][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 259.189623][ T8840] netlink: 348 bytes leftover after parsing attributes in process `syz.3.762'. [ 259.208530][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 259.697231][ T8838] hsr0: left promiscuous mode [ 259.936644][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 260.172060][ T8861] syzkaller0: entered promiscuous mode [ 260.188708][ T8861] syzkaller0: entered allmulticast mode [ 260.196735][ T8865] tipc: Invalid UDP bearer configuration [ 260.198104][ T8865] tipc: Enabling of bearer rejected, failed to enable media [ 260.290420][ T8873] lo speed is unknown, defaulting to 1000 [ 262.352413][ T8889] tipc: Enabling of bearer rejected, failed to enable media [ 262.613220][ T8895] tipc: Enabling of bearer rejected, failed to enable media [ 262.694947][ T8917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.782'. [ 263.034555][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.786'. [ 263.164558][ T8931] syzkaller0: entered promiscuous mode [ 263.185460][ T8931] syzkaller0: entered allmulticast mode [ 263.523160][ T8951] netlink: 14 bytes leftover after parsing attributes in process `syz.2.792'. [ 263.620074][ T8951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.666853][ T8951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.704331][ T8951] bond0 (unregistering): Released all slaves [ 264.188321][ T8978] __nla_validate_parse: 1 callbacks suppressed [ 264.188339][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 266.923288][ T8968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.176316][ T9024] syzkaller0: entered promiscuous mode [ 267.184802][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 267.197898][ T9024] syzkaller0: entered allmulticast mode [ 267.217781][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 267.406661][ T9042] netlink: 176 bytes leftover after parsing attributes in process `syz.2.814'. [ 267.455309][ T9031] lo speed is unknown, defaulting to 1000 [ 267.786201][ T9055] batadv0: entered allmulticast mode [ 268.538150][ T9084] lo speed is unknown, defaulting to 1000 [ 268.633889][ T9066] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 269.050415][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 269.068489][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 269.099421][ T9106] netlink: 'syz.4.827': attribute type 2 has an invalid length. [ 269.124828][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'. [ 269.406840][ T9118] lo speed is unknown, defaulting to 1000 [ 269.417445][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 269.448892][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 269.497888][ T9127] No such timeout policy "syz1" [ 269.667068][ T9113] bond1: entered promiscuous mode [ 269.767424][ T9113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.860422][ T9128] bond1: (slave vti0): refused to change device type [ 269.933283][ T9141] erspan1: entered promiscuous mode [ 269.950629][ T9141] erspan1: entered allmulticast mode [ 269.971904][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 270.375041][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 270.798698][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 271.029815][ T9187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.848'. [ 271.060275][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 271.087476][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 271.514258][ T9206] syzkaller0: entered promiscuous mode [ 271.554504][ T9206] syzkaller0: entered allmulticast mode [ 271.725165][ T9221] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 271.778568][ T9214] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 271.825251][ T9221] team0: Port device dummy0 added [ 271.864099][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 271.891220][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 271.913972][ T9214] team0: Port device dummy0 removed [ 271.932674][ T9224] net_ratelimit: 3321 callbacks suppressed [ 271.932693][ T9224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.982466][ T9214] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 272.006855][ T9230] nftables ruleset with unbound chain [ 272.333575][ T9237] syzkaller0: entered promiscuous mode [ 272.362269][ T9237] syzkaller0: entered allmulticast mode [ 272.761019][ T9259] netlink: 'syz.0.865': attribute type 7 has an invalid length. [ 272.831484][ T9259] netlink: 'syz.0.865': attribute type 8 has an invalid length. [ 273.229300][ T9278] gre2: entered promiscuous mode [ 273.727473][ T9306] netlink: 'syz.2.877': attribute type 9 has an invalid length. [ 273.968575][ T9292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.099213][ T9298] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 274.585625][ T9335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.643164][ T9335] netlink: 'syz.0.882': attribute type 11 has an invalid length. [ 274.774951][ T9338] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.845021][ T9338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.852734][ T9338] IPv6: NLM_F_CREATE should be set when creating new route [ 274.860081][ T9338] IPv6: NLM_F_CREATE should be set when creating new route [ 274.867346][ T9338] IPv6: NLM_F_CREATE should be set when creating new route [ 274.914303][ T9342] FAULT_INJECTION: forcing a failure. [ 274.914303][ T9342] name failslab, interval 1, probability 0, space 0, times 1 [ 274.960222][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.4.884 Not tainted syzkaller #0 PREEMPT(full) [ 274.960252][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.960265][ T9342] Call Trace: [ 274.960278][ T9342] [ 274.960293][ T9342] dump_stack_lvl+0xe8/0x150 [ 274.960332][ T9342] should_fail_ex+0x412/0x560 [ 274.960369][ T9342] should_failslab+0xa8/0x100 [ 274.960395][ T9342] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 274.960432][ T9342] ? ethnl_default_set_doit+0x59d/0xad0 [ 274.960453][ T9342] ? __kmalloc_noprof+0x37d/0x760 [ 274.960490][ T9342] kmemdup_noprof+0x2b/0x70 [ 274.960517][ T9342] ethnl_default_set_doit+0x59d/0xad0 [ 274.960553][ T9342] genl_family_rcv_msg_doit+0x22a/0x330 [ 274.960579][ T9342] ? __asan_memcpy+0x40/0x70 [ 274.960612][ T9342] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.960652][ T9342] ? bpf_lsm_capable+0x9/0x20 [ 274.960676][ T9342] ? security_capable+0x7e/0x2c0 [ 274.960712][ T9342] genl_rcv_msg+0x61c/0x7a0 [ 274.960744][ T9342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.960767][ T9342] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 274.960792][ T9342] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.960821][ T9342] ? __asan_memcpy+0x40/0x70 [ 274.960849][ T9342] ? __skb_clone+0x63/0x7a0 [ 274.960891][ T9342] netlink_rcv_skb+0x232/0x4b0 [ 274.960932][ T9342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.960958][ T9342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.961008][ T9342] ? down_read+0x270/0x2e0 [ 274.961035][ T9342] ? genl_rcv+0xd/0x40 [ 274.961060][ T9342] genl_rcv+0x28/0x40 [ 274.961081][ T9342] netlink_unicast+0x75c/0x8e0 [ 274.961121][ T9342] netlink_sendmsg+0x813/0xb40 [ 274.961165][ T9342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.961201][ T9342] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.961233][ T9342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.961269][ T9342] ____sys_sendmsg+0x972/0x9f0 [ 274.961303][ T9342] ? __might_fault+0xaf/0x130 [ 274.961339][ T9342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.961383][ T9342] ? import_iovec+0x73/0xa0 [ 274.961410][ T9342] ___sys_sendmsg+0x2a5/0x360 [ 274.961441][ T9342] ? __lock_acquire+0x6b5/0x2cf0 [ 274.961475][ T9342] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.961550][ T9342] ? __fget_files+0x2a/0x420 [ 274.961576][ T9342] ? __fget_files+0x3a0/0x420 [ 274.961616][ T9342] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.961653][ T9342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.961700][ T9342] ? __pfx_ksys_write+0x10/0x10 [ 274.961742][ T9342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.961765][ T9342] do_syscall_64+0x15f/0xf80 [ 274.961791][ T9342] ? trace_irq_disable+0x3b/0x140 [ 274.961814][ T9342] ? clear_bhb_loop+0x40/0x90 [ 274.961842][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.961863][ T9342] RIP: 0033:0x7ffa35f9c819 [ 274.961884][ T9342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.961902][ T9342] RSP: 002b:00007ffa36e20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.961932][ T9342] RAX: ffffffffffffffda RBX: 00007ffa36215fa0 RCX: 00007ffa35f9c819 [ 274.961948][ T9342] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 274.961961][ T9342] RBP: 00007ffa36e20090 R08: 0000000000000000 R09: 0000000000000000 [ 274.961974][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.961987][ T9342] R13: 00007ffa36216038 R14: 00007ffa36215fa0 R15: 00007ffe5fe1e6a8 [ 274.962023][ T9342] [ 275.311920][ T9347] netlink: 'syz.1.881': attribute type 13 has an invalid length. [ 275.319887][ T9347] netlink: 'syz.1.881': attribute type 17 has an invalid length. [ 275.476264][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.490270][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.535982][ T9347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.583105][ T9348] netlink: 'syz.0.885': attribute type 39 has an invalid length. [ 275.777203][ T9369] __nla_validate_parse: 6 callbacks suppressed [ 275.777223][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 275.991433][ T9369] bond3: option broadcast_neighbor: invalid value (30) [ 276.011192][ T9369] bond3 (unregistering): Released all slaves [ 276.086579][ T9379] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 276.124655][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.892'. [ 276.157311][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'. [ 276.261432][ T9377] bond0: option primary_reselect: invalid value (48) [ 276.287348][ T9377] bond0 (unregistering): Released all slaves [ 276.344169][ T9391] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 276.389631][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 276.417144][ T9379] netlink: 830 bytes leftover after parsing attributes in process `syz.4.892'. [ 276.526622][ T9390] lo speed is unknown, defaulting to 1000 [ 276.579995][ T9388] lo speed is unknown, defaulting to 1000 [ 276.755528][ T9407] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.821044][ T9410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.810647][ T9465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.867234][ T9464] openvswitch: netlink: IP tunnel dst address not specified [ 278.209901][ T9473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.917'. [ 278.271264][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'. [ 278.314470][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.920'. [ 278.443388][ T9490] syzkaller1: entered promiscuous mode [ 278.472883][ T9490] syzkaller1: entered allmulticast mode [ 278.550731][ T9499] netlink: 'syz.4.922': attribute type 13 has an invalid length. [ 278.579613][ T9499] netlink: 'syz.4.922': attribute type 17 has an invalid length. [ 278.757975][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 278.923045][ T9499] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.963485][ T9499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.013655][ T3555] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.048772][ T3555] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.080877][ T3555] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.097418][ T9518] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.927'. [ 279.125885][ T3555] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.296672][ T9487] delete_channel: no stack [ 279.445309][ T9526] tipc: Started in network mode [ 279.468915][ T9526] tipc: Node identity ac14140f, cluster identity 4711 [ 279.498112][ T9526] tipc: New replicast peer: 255.255.255.255 [ 279.531308][ T9526] tipc: Enabled bearer , priority 10 [ 279.726881][ T9541] netlink: 'syz.3.936': attribute type 3 has an invalid length. [ 279.743510][ T9541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.863705][ T9545] syzkaller1: entered promiscuous mode [ 279.870584][ T9545] syzkaller1: entered allmulticast mode [ 279.880459][ T2152] lo speed is unknown, defaulting to 1000 [ 280.181204][ T9559] C: renamed from team_slave_0 (while UP) [ 280.207253][ T9559] netlink: 'syz.2.939': attribute type 8 has an invalid length. [ 280.219358][ T9559] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 280.299829][ T9573] SET target dimension over the limit! [ 280.604684][ T9581] sctp: [Deprecated]: syz.2.944 (pid 9581) Use of int in maxseg socket option. [ 280.604684][ T9581] Use struct sctp_assoc_value instead [ 280.659737][ T2152] tipc: Node number set to 2886997007 [ 280.757473][ T9582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.940293][ T9593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.081483][ T9598] netlink: 'syz.0.948': attribute type 7 has an invalid length. [ 281.114846][ T9598] netlink: 'syz.0.948': attribute type 7 has an invalid length. [ 281.574182][ T9621] __nla_validate_parse: 4 callbacks suppressed [ 281.574204][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.953'. [ 282.144351][ T9638] lo speed is unknown, defaulting to 1000 [ 282.165579][ T9647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.621585][ T9665] netlink: 216 bytes leftover after parsing attributes in process `syz.2.966'. [ 282.644098][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 282.658224][ T9665] netlink: 'syz.2.966': attribute type 2 has an invalid length. [ 282.684776][ T9665] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 282.814719][ T9671] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 284.025399][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 284.079870][ T9701] erspan0: entered promiscuous mode [ 284.312938][ T9713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.322856][ T9713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.538178][ T9727] netlink: 52 bytes leftover after parsing attributes in process `syz.3.980'. [ 284.580815][ T9728] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 284.645491][ T9727] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 285.016583][ T9741] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 285.156291][ T9748] netlink: 'syz.4.986': attribute type 10 has an invalid length. [ 285.451869][ T9770] batadv_slave_0: entered promiscuous mode [ 285.466463][ T9771] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 285.512658][ T9770] erspan2: entered allmulticast mode [ 285.587641][ T9770] batadv_slave_0: left promiscuous mode [ 285.787150][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'. [ 285.801922][ T9] IPVS: starting estimator thread 0... [ 285.849850][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 285.872697][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 285.899335][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 285.909218][ T9788] IPVS: using max 26 ests per chain, 62400 per kthread [ 285.952763][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 285.993462][ T9781] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20004 [ 286.373115][ T9812] validate_nla: 2 callbacks suppressed [ 286.373136][ T9812] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 286.442609][ T9812] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.460274][ T9812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.467662][ T9812] IPv6: NLM_F_CREATE should be set when creating new route [ 286.475043][ T9812] IPv6: NLM_F_CREATE should be set when creating new route [ 286.482369][ T9812] IPv6: NLM_F_CREATE should be set when creating new route [ 287.542745][ T9871] __nla_validate_parse: 1 callbacks suppressed [ 287.542774][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 287.600253][ T9862] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 287.626656][ T9862] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 287.651038][ T9862] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 287.715139][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 287.759924][ T9881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1014'. [ 287.762446][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1014'. [ 287.782286][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 287.902363][ T9887] xt_HMARK: spi-set and port-set can't be combined [ 288.175876][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 288.216787][ T9898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1018'. [ 288.223483][ T9902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1021'. [ 288.338974][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'. [ 288.613232][ T9914] xt_TCPMSS: Only works on TCP SYN packets [ 288.896633][ T9929] xt_TPROXY: Can be used only with -p tcp or -p udp [ 288.938909][ T9928] xt_TPROXY: Can be used only with -p tcp or -p udp [ 289.075562][ T9935] sctp: [Deprecated]: syz.0.1029 (pid 9935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.075562][ T9935] Use struct sctp_sack_info instead [ 289.135350][ T9939] sctp: [Deprecated]: syz.0.1029 (pid 9939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.135350][ T9939] Use struct sctp_sack_info instead [ 289.206275][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 289.411985][ T9954] netlink: 'syz.2.1036': attribute type 10 has an invalid length. [ 289.452837][ T9954] team0: Port device dummy0 added [ 289.471956][ T9958] netlink: 'syz.2.1036': attribute type 10 has an invalid length. [ 289.508029][ T9958] team0: Port device dummy0 removed [ 289.843901][ T9978] tipc: Enabling of bearer rejected, failed to enable media [ 289.945198][ T9983] x_tables: duplicate underflow at hook 3 [ 290.502163][ T9997] ipvlan1: entered promiscuous mode [ 290.608809][T10000] netlink: 'syz.3.1050': attribute type 14 has an invalid length. [ 291.108421][T10018] syzkaller0: entered promiscuous mode [ 291.124879][T10018] syzkaller0: entered allmulticast mode [ 291.326259][T10029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.423874][T10022] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 291.451259][T10022] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 291.563578][T10029] bridge0: port 3(veth0_to_bridge) entered blocking state [ 291.579991][T10029] bridge0: port 3(veth0_to_bridge) entered disabled state [ 291.603150][T10029] veth0_to_bridge: entered allmulticast mode [ 291.651011][T10029] veth0_to_bridge: entered promiscuous mode [ 292.375773][T10082] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 292.462475][T10082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.586215][T10082] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 292.688206][T10086] bond4: (slave batadv1): Opening slave failed [ 292.740493][T10088] __nla_validate_parse: 31 callbacks suppressed [ 292.740515][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 293.614793][T10116] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1080'. [ 294.117712][T10143] syzkaller0: entered promiscuous mode [ 294.124438][T10143] syzkaller0: entered allmulticast mode [ 294.139622][T10143] TC_ACT_REPEAT abuse ? [ 294.571051][T10138] ip6tnl1: entered allmulticast mode [ 294.577960][T10157] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 294.630221][T10165] nbd: must specify an index to disconnect [ 294.711717][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 294.757536][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 294.792331][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 294.813964][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 294.835039][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 294.869331][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 294.920875][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 294.946841][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 295.117634][T10193] sctp: [Deprecated]: syz.2.1094 (pid 10193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.117634][T10193] Use struct sctp_sack_info instead [ 295.301087][T10200] syzkaller0: entered promiscuous mode [ 295.322123][T10200] syzkaller0: entered allmulticast mode [ 295.691235][T10220] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 296.094860][T10249] bond4 (unregistering): Released all slaves [ 296.246256][T10242] veth7: entered allmulticast mode [ 296.327786][T10242] bond0: (slave veth7): Enslaving as an active interface with an up link [ 296.416831][T10257] bond0 (unregistering): (slave veth7): Releasing backup interface [ 296.439960][T10257] bond0 (unregistering): Released all slaves [ 296.511838][T10269] syzkaller0: entered promiscuous mode [ 296.530471][T10269] syzkaller0: entered allmulticast mode [ 297.133848][T10305] netlink: 'syz.3.1123': attribute type 3 has an invalid length. [ 297.347020][T10309] IPVS: Scheduler module ip_vs_ not found [ 297.616196][T10302] syzkaller0: entered promiscuous mode [ 297.629847][T10302] syzkaller0: entered allmulticast mode [ 298.012307][T10340] netlink: 'syz.4.1129': attribute type 6 has an invalid length. [ 300.120240][T10354] sctp: [Deprecated]: syz.4.1131 (pid 10354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.120240][T10354] Use struct sctp_sack_info instead [ 300.216321][T10346] sctp: [Deprecated]: syz.4.1131 (pid 10346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.216321][T10346] Use struct sctp_sack_info instead [ 300.337974][T10364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.542145][T10372] __nla_validate_parse: 192 callbacks suppressed [ 300.542165][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'. [ 300.563495][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'. [ 301.205846][T10398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1142'. [ 301.257902][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.266864][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.911251][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'. [ 302.391471][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1151'. [ 302.466043][T10443] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1152'. [ 304.291514][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 304.330981][T10506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 304.808348][T10524] tipc: Enabling of bearer rejected, failed to enable media [ 304.885736][T10524] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1169'. [ 305.450630][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1176'. [ 305.517041][T10556] xt_cgroup: xt_cgroup: no path or classid specified [ 305.536965][T10550] syzkaller0: entered promiscuous mode [ 305.557732][T10556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'. [ 305.576656][T10550] syzkaller0: entered allmulticast mode [ 305.593774][ T5920] IPVS: starting estimator thread 0... [ 305.632917][T10559] xt_cgroup: xt_cgroup: no path or classid specified [ 305.694475][T10562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1180'. [ 305.711512][T10557] IPVS: using max 29 ests per chain, 69600 per kthread [ 305.868545][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'. [ 305.947126][T10574] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 305.965646][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 306.157248][T10583] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1182'. [ 306.217756][T10570] bond4 (unregistering): Released all slaves [ 306.454350][T10588] netlink: 'syz.0.1184': attribute type 5 has an invalid length. [ 306.538799][T10569] lo speed is unknown, defaulting to 1000 [ 306.688882][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1186'. [ 306.703287][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 306.713231][T10590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1185'. [ 307.003113][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 307.168726][T10609] netlink: 'syz.0.1191': attribute type 29 has an invalid length. [ 307.732894][T10647] lo speed is unknown, defaulting to 1000 [ 307.959879][T10651] tap0: tun_chr_ioctl cmd 1074812118 [ 307.984847][T10651] tls_set_device_offload_rx: netdev not found [ 308.065126][T10653] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20002 [ 308.086478][T10655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.095057][T10654] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 308.103377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.984458][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 309.113859][T10690] lo speed is unknown, defaulting to 1000 [ 309.600891][ T6848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.610909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.726951][T10748] __nla_validate_parse: 3 callbacks suppressed [ 310.726989][T10748] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1223'. [ 310.748988][T10749] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1224'. [ 310.779448][T10749] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1224'. [ 310.993271][T10755] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1225'. [ 311.052336][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 311.071496][T10755] Bluetooth: MGMT ver 1.23 [ 311.092590][T10750] lo speed is unknown, defaulting to 1000 [ 311.129617][T10719] infiniband syz1: set active [ 311.151816][T10719] infiniband syz1: added bond0 [ 311.172423][T10719] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 311.191828][T10719] infiniband syz1: Couldn't open port 1 [ 311.362205][T10719] RDS/IB: syz1: added [ 311.373623][T10719] smc: adding ib device syz1 with port count 1 [ 311.384837][T10719] smc: ib device syz1 port 1 has no pnetid [ 311.544945][T10770] netlink: 'syz.2.1228': attribute type 21 has an invalid length. [ 311.599060][T10770] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.608558][T10770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.617267][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 311.624635][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 311.631972][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 311.900452][T10779] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 312.176030][T10791] tipc: Enabled bearer , priority 0 [ 312.206244][T10791] syzkaller0: entered promiscuous mode [ 312.225137][T10791] syzkaller0: entered allmulticast mode [ 312.294725][T10791] tipc: Resetting bearer [ 312.331291][T10790] tipc: Resetting bearer [ 312.382304][T10790] tipc: Disabling bearer [ 312.852385][T10814] netlink: 'syz.2.1240': attribute type 28 has an invalid length. [ 312.898094][T10811] team0: Port device syz_tun added [ 312.922995][T10809] bpq0: left promiscuous mode [ 312.937972][T10809] bpq0: left allmulticast mode [ 313.002340][T10816] team0: Port device syz_tun removed [ 313.053023][T10816] bond0: (slave dummy0): Releasing backup interface [ 313.106891][T10816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 313.175676][T10824] bridge5: entered promiscuous mode [ 313.200731][T10824] bridge5: entered allmulticast mode [ 313.222476][T10824] team0: Port device bridge5 added [ 313.257068][T10826] bridge0: port 3(team0) entered blocking state [ 313.271545][T10826] bridge0: port 3(team0) entered disabled state [ 313.288252][T10826] team0: entered allmulticast mode [ 313.293916][T10826] team_slave_0: entered allmulticast mode [ 313.308442][T10826] team_slave_1: entered allmulticast mode [ 313.340323][T10826] team0: entered promiscuous mode [ 313.345605][T10826] team_slave_0: entered promiscuous mode [ 313.352332][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1245'. [ 313.365530][T10826] team_slave_1: entered promiscuous mode [ 313.374298][T10826] bridge0: port 3(team0) entered blocking state [ 313.382360][T10826] bridge0: port 3(team0) entered forwarding state [ 313.598367][T10837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.713268][T10842] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.736962][T10842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.744328][T10842] IPv6: NLM_F_CREATE should be set when creating new route [ 313.745027][T10846] netlink: 'syz.1.1247': attribute type 1 has an invalid length. [ 313.751677][T10842] IPv6: NLM_F_CREATE should be set when creating new route [ 313.751758][T10842] IPv6: NLM_F_CREATE should be set when creating new route [ 313.776127][T10846] netlink: 1008 bytes leftover after parsing attributes in process `syz.1.1247'. [ 313.897189][T10848] No such timeout policy "syz0" [ 314.264344][T10853] syzkaller0: entered promiscuous mode [ 314.270677][T10853] syzkaller0: entered allmulticast mode [ 314.347419][T10854] netlink: 'syz.0.1249': attribute type 9 has an invalid length. [ 314.909051][T10887] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.099272][T10892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'. [ 315.223747][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 315.352115][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1262'. [ 315.367548][T10413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.375987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.407777][T10898] netlink: 'syz.1.1263': attribute type 15 has an invalid length. [ 315.431842][T10898] netlink: 'syz.1.1263': attribute type 25 has an invalid length. [ 315.714454][T10914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.721792][T10914] IPv6: NLM_F_CREATE should be set when creating new route [ 315.729127][T10914] IPv6: NLM_F_CREATE should be set when creating new route [ 315.758865][T10915] __nla_validate_parse: 2 callbacks suppressed [ 315.758886][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 315.938337][T10921] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1270'. [ 315.973024][T10921] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1270'. [ 316.066247][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 316.377062][T10943] netlink: 'syz.2.1276': attribute type 2 has an invalid length. [ 316.640042][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.650204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.661948][T10953] syzkaller0: left promiscuous mode [ 316.683464][T10953] syzkaller0: left allmulticast mode [ 316.839162][T10961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 316.929521][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1281'. [ 317.298450][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.311351][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.434156][T10984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1287'. [ 317.600335][T10989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1289'. [ 317.652657][T10989] No such timeout policy "syz0" [ 317.717216][T11005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.884677][T11012] netlink: 'syz.2.1295': attribute type 1 has an invalid length. [ 318.055826][T11022] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 318.141177][T11022] netlink: 'syz.2.1297': attribute type 29 has an invalid length. [ 318.468405][T11036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 318.550728][T11033] netlink: 'syz.4.1302': attribute type 11 has an invalid length. [ 318.578759][T11033] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1302'. [ 318.752406][T11051] syzkaller0: entered promiscuous mode [ 318.766875][T11051] syzkaller0: entered allmulticast mode [ 318.867644][T11057] netlink: 'syz.2.1309': attribute type 6 has an invalid length. [ 319.319766][T11078] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 319.327773][T11078] netlink: 'syz.0.1315': attribute type 2 has an invalid length. [ 319.575460][T11083] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 319.642491][T11083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.208247][T11090] bond4: (slave veth7): Enslaving as an active interface with a down link [ 320.304833][T11083] bond4: (slave dummy0): making interface the new active one [ 320.357681][T11083] dummy0: entered promiscuous mode [ 320.382653][T11083] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 320.477838][T11091] bond4: (slave dummy0): Releasing active interface [ 320.485054][T10414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.493757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.500675][T11091] dummy0 (unregistering): left promiscuous mode [ 321.050603][T11131] __nla_validate_parse: 6 callbacks suppressed [ 321.050623][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 321.080699][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 321.288444][T11145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.321721][T11145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.351992][T11145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.402410][T11149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.483724][ T29] audit: type=1804 audit(1776820415.614:3): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1334" name="/newroot/255/memory.events" dev="tmpfs" ino=1325 res=1 errno=0 [ 321.509984][T11156] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 321.521547][T11149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.528441][T11158] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1335'. [ 321.531073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.579489][T11156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.587379][ T29] audit: type=1800 audit(1776820415.614:4): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1334" name="memory.events" dev="tmpfs" ino=1325 res=0 errno=0 [ 321.609773][ T29] audit: type=1804 audit(1776820415.644:5): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1334" name="/newroot/255/memory.events" dev="tmpfs" ino=1325 res=1 errno=0 [ 321.630886][T11149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.639918][T11157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.672154][T11145] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1332'. [ 321.747571][T11160] bond5: entered promiscuous mode [ 321.807284][T11165] tipc: Started in network mode [ 321.825447][T11165] tipc: Node identity , cluster identity 4711 [ 321.835358][T11165] tipc: Failed to obtain node identity [ 321.845857][T11165] tipc: Enabling of bearer rejected, failed to enable media [ 321.856390][T11165] syzkaller0: entered promiscuous mode [ 321.862648][T11165] syzkaller0: entered allmulticast mode [ 322.268094][T11181] lo speed is unknown, defaulting to 1000 [ 322.959602][T11221] netlink: 'syz.4.1354': attribute type 13 has an invalid length. [ 322.967772][T11221] netlink: 'syz.4.1354': attribute type 17 has an invalid length. [ 323.028306][T11221] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.069530][T11224] veth11: entered allmulticast mode [ 323.481828][T11241] lo speed is unknown, defaulting to 1000 [ 323.497846][T11244] netlink: 'syz.0.1361': attribute type 9 has an invalid length. [ 323.648357][T11239] lo speed is unknown, defaulting to 1000 [ 323.750500][T11256] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1365'. [ 323.862051][T11258] bridge0: port 4(bond0) entered blocking state [ 323.870268][T11258] bridge0: port 4(bond0) entered disabled state [ 323.879948][T11258] bond0: entered allmulticast mode [ 323.903178][T11258] bond0: entered promiscuous mode [ 323.929318][T11261] bond0: left allmulticast mode [ 323.936603][T11261] bond0: left promiscuous mode [ 323.943424][T11261] bridge0: port 4(bond0) entered disabled state [ 325.240137][T11300] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 325.326233][T11300] bond5: entered promiscuous mode [ 325.332054][T11300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.386617][T11302] bond5: (slave veth7): making interface the new active one [ 325.394323][T11302] veth7: entered promiscuous mode [ 325.405005][T11302] bond5: (slave veth7): Enslaving as an active interface with an up link [ 325.498746][T11306] lo speed is unknown, defaulting to 1000 [ 325.617730][ T6848] net_ratelimit: 299 callbacks suppressed [ 325.617752][ T6848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.632144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.976569][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1380'. [ 326.091736][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'. [ 326.111353][ T9140] block nbd64: NBD_DISCONNECT [ 326.613321][ T9140] udevd[9140]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 327.424207][T11364] lo speed is unknown, defaulting to 1000 [ 328.188937][T11396] tipc: Enabled bearer , priority 0 [ 328.220885][T11396] syzkaller0: entered promiscuous mode [ 328.232200][T11396] syzkaller0: entered allmulticast mode [ 328.338528][T11396] tipc: Resetting bearer [ 328.376591][T11395] tipc: Resetting bearer [ 328.440933][T11395] tipc: Disabling bearer [ 328.566737][T11404] netlink: 'syz.2.1402': attribute type 1 has an invalid length. [ 328.590877][T11404] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1402'. [ 328.691624][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 329.080537][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1407'. [ 329.475718][T11426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.682875][T11426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.809559][T11426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.975738][T11426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.038292][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 330.057655][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 330.178113][T10416] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.250480][T10416] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.260873][T11469] tipc: Started in network mode [ 330.277534][T11469] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 330.293062][T11469] tipc: Enabling of bearer rejected, failed to enable media [ 330.360882][ T6848] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.435529][T10416] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.453412][T11474] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1420'. [ 330.531845][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1420'. [ 330.569895][T11478] lo speed is unknown, defaulting to 1000 [ 330.645833][T11486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.655929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.720471][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.728920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.773616][T11486] lo speed is unknown, defaulting to 1000 [ 330.808125][T11484] lo speed is unknown, defaulting to 1000 [ 330.877930][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 330.942399][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 331.053234][T11498] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20265 [ 331.359033][T10414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.367437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.341053][T11539] ipvlan2: entered promiscuous mode [ 332.353088][T11539] bridge0: port 1(ipvlan2) entered blocking state [ 332.366938][T11539] bridge0: port 1(ipvlan2) entered disabled state [ 332.382185][T11539] ipvlan2: entered allmulticast mode [ 332.400930][T11539] bridge0: entered allmulticast mode [ 332.422454][T11539] ipvlan2: left allmulticast mode [ 332.439190][T11539] bridge0: left allmulticast mode [ 332.709960][T11546] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 332.725288][T11543] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 332.731716][T11547] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 332.906606][T11546] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 333.009193][T11547] bond5: entered promiscuous mode [ 333.023387][T11547] 8021q: adding VLAN 0 to HW filter on device bond5 [ 333.277032][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 333.540936][T11576] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 333.784087][T11583] tipc: Enabled bearer , priority 0 [ 333.823598][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 333.843928][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'. [ 333.868996][T11580] netlink: 'syz.0.1447': attribute type 15 has an invalid length. [ 333.917996][T11582] tipc: Disabling bearer [ 334.104451][T11596] geneve1: entered promiscuous mode [ 334.338129][T11613] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1457'. [ 334.646275][T11634] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1461'. [ 334.772817][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 334.795688][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 334.880049][T11644] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.920797][T11655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1468'. [ 334.932281][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 334.974270][T11654] hsr0: entered promiscuous mode [ 334.981963][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 335.605254][T11688] lo speed is unknown, defaulting to 1000 [ 335.913629][T11714] vlan2: entered allmulticast mode [ 336.002664][T11714] macvtap0: entered allmulticast mode [ 336.176842][T11720] netlink: 'syz.4.1479': attribute type 13 has an invalid length. [ 336.379034][T11724] syzkaller0: entered promiscuous mode [ 336.389440][T11724] syzkaller0: entered allmulticast mode [ 336.478946][ T9805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.119914][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.128281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.278431][T11754] bridge0: port 3(syz_tun) entered blocking state [ 337.286036][T11754] bridge0: port 3(syz_tun) entered disabled state [ 337.293218][T11754] syz_tun: entered allmulticast mode [ 337.762316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.068968][T11797] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 338.336080][T11802] tipc: Enabled bearer , priority 0 [ 338.347228][T11802] syzkaller0: entered promiscuous mode [ 338.364369][T11802] syzkaller0: entered allmulticast mode [ 338.441128][T11802] tipc: Resetting bearer [ 338.460253][T11801] tipc: Resetting bearer [ 338.512609][T11801] tipc: Disabling bearer [ 338.603624][T11811] gre1: entered promiscuous mode [ 338.754924][T11820] __nla_validate_parse: 3 callbacks suppressed [ 338.754944][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 338.779145][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1508'. [ 338.837329][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1507'. [ 338.863913][T11825] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 338.886353][T11825] netlink: 'syz.3.1509': attribute type 2 has an invalid length. [ 338.978193][T11832] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1510'. [ 339.205449][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.214169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.288035][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.296710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.895608][T11859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.094993][T11869] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1521'. [ 340.602729][T11902] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 340.611027][T11902] netlink: 'syz.0.1531': attribute type 2 has an invalid length. [ 340.715733][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 340.737864][T11906] gtp0: entered promiscuous mode [ 340.743430][T11906] gtp0: entered allmulticast mode [ 340.900748][T11865] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 341.883824][T11923] lo speed is unknown, defaulting to 1000 [ 342.170360][T11942] netlink: 'syz.1.1541': attribute type 29 has an invalid length. [ 342.200550][T11942] netlink: 'syz.1.1541': attribute type 29 has an invalid length. [ 342.239674][T10412] net_ratelimit: 3 callbacks suppressed [ 342.241166][T10412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.255196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.280311][T11942] syzkaller0: entered promiscuous mode [ 342.297668][T11942] syzkaller0: entered allmulticast mode [ 342.323648][T11942] tap0: tun_chr_ioctl cmd 1074025677 [ 342.344777][T11942] tap0: linktype set to 6 [ 342.860104][T11975] IPv6: Can't replace route, no match found [ 342.868544][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 342.886497][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 343.143904][T11991] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1555'. [ 343.179247][T11985] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 343.322494][T11995] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 343.335905][T11995] bond3 (unregistering): Released all slaves [ 343.424102][T11985] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.485756][T11997] bond3: (slave ip6gretap1): making interface the new active one [ 343.525644][T11997] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 343.580755][T11999] nr0: tun_chr_ioctl cmd 1074025677 [ 343.599436][T11999] nr0: linktype set to 774 [ 343.741566][T12015] netlink: 'syz.1.1560': attribute type 4 has an invalid length. [ 343.749775][T12015] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1560'. [ 343.781875][T12023] netlink: 'syz.1.1560': attribute type 4 has an invalid length. [ 343.802970][T12023] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1560'. [ 344.161181][T12046] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 344.245910][T12046] bond6: entered promiscuous mode [ 344.251478][T12046] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.286148][T12046] bond6: (slave bridge5): making interface the new active one [ 344.319284][T12046] bridge5: entered promiscuous mode [ 344.339266][T12046] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 344.372353][T12042] lo speed is unknown, defaulting to 1000 [ 344.749519][T12075] netlink: 'syz.3.1575': attribute type 33 has an invalid length. [ 344.763868][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'. [ 344.773803][T12075] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-alb(6) [ 344.798907][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.807359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.955843][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 345.373157][T12108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.487218][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 345.562708][T12121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.599317][T12122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.997079][T12137] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1593'. [ 346.206500][T12146] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1595'. [ 346.307016][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 346.526711][T12133] netlink: 'syz.1.1591': attribute type 4 has an invalid length. [ 346.576374][T12160] netlink: 'syz.1.1591': attribute type 4 has an invalid length. [ 347.378286][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 347.396081][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 347.466910][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 347.478476][ T47] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.501856][ T47] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.519355][ T47] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.596282][ T47] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.615156][T12217] ip6tnl1: entered allmulticast mode [ 347.648259][T12219] macvtap1: entered promiscuous mode [ 347.662302][T12219] macvtap1: entered allmulticast mode [ 347.681741][T12219] veth1_vlan: entered allmulticast mode [ 347.772353][T12221] macvtap2: entered promiscuous mode [ 347.783786][T12221] macvtap2: entered allmulticast mode [ 347.864733][T12225] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.919314][T12243] delete_channel: no stack [ 347.925577][T12225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.966468][T12235] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 348.000878][ T6848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.009343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.094444][T12246] netlink: 'syz.3.1623': attribute type 11 has an invalid length. [ 348.304195][T12259] tipc: Enabled bearer , priority 0 [ 348.341847][T12259] syzkaller0: entered promiscuous mode [ 348.365620][T12259] syzkaller0: entered allmulticast mode [ 348.388106][T12270] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 348.398375][T12269] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 348.656991][T12262] lo speed is unknown, defaulting to 1000 [ 348.672104][T12283] tipc: Resetting bearer [ 348.707840][T12257] tipc: Resetting bearer [ 348.772690][T12257] tipc: Disabling bearer [ 348.902205][T12292] batadv0: entered promiscuous mode [ 348.925773][T12292] batadv0: entered allmulticast mode [ 349.142865][T12304] __nla_validate_parse: 7 callbacks suppressed [ 349.142886][T12304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1638'. [ 349.187455][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1638'. [ 349.836464][T12344] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1644'. [ 349.858785][T12344] openvswitch: netlink: Flow actions attr not present in new flow. [ 350.795227][T12362] lo speed is unknown, defaulting to 1000 [ 350.936214][T12360] lo speed is unknown, defaulting to 1000 [ 351.852994][T12387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1655'. [ 351.895244][T12387] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 352.032327][T12382] lo speed is unknown, defaulting to 1000 [ 352.972917][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 353.121437][ T9805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.152943][ T6848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.609362][T12415] x_tables: duplicate underflow at hook 1 [ 353.625520][T12415] netlink: 'syz.4.1665': attribute type 2 has an invalid length. [ 353.741518][T12407] lo speed is unknown, defaulting to 1000 [ 353.765742][ T6848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.774205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.416942][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1669'. [ 354.825674][T12438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1671'. [ 354.977440][T12444] ip6gretap0: entered promiscuous mode [ 355.381410][T12456] batadv_slave_0: entered promiscuous mode [ 355.499283][T12460] ip6tnl3: entered allmulticast mode [ 355.505059][T12456] batadv_slave_0: left promiscuous mode [ 355.955554][T12469] lo speed is unknown, defaulting to 1000 [ 356.124494][T12481] lo speed is unknown, defaulting to 1000 [ 356.448328][T12500] lo speed is unknown, defaulting to 1000 [ 356.505285][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.516979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.540460][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.560709][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.582815][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.610630][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.681790][T12502] lo speed is unknown, defaulting to 1000 [ 357.741541][T12513] lo speed is unknown, defaulting to 1000 [ 358.191679][T12521] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 358.396778][T12521] bridge0: port 4(batadv2) entered blocking state [ 358.405972][T12521] bridge0: port 4(batadv2) entered disabled state [ 358.413291][T12521] batadv2: entered allmulticast mode [ 358.445226][T12521] batadv2: entered promiscuous mode [ 358.649282][T12528] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1691'. [ 358.659025][T12528] 0ªX¹¦À: renamed from caif0 [ 358.667181][T12528] 0ªX¹¦À: entered allmulticast mode [ 358.673122][T12528] net_ratelimit: 21 callbacks suppressed [ 358.673141][T12528] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 358.874472][T12533] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1692'. [ 358.884299][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.892508][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.900971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.917577][T10412] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 358.927804][T10412] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 359.348237][T12540] lo speed is unknown, defaulting to 1000 [ 359.522411][T10412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.530858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.823126][T12551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.848675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.338540][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 465.345586][ C0] rcu: 1-...!: (1 GPs behind) idle=09fc/1/0x4000000000000000 softirq=59491/59492 fqs=0 [ 465.356232][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12513/1:b..l P12540/1:b..l [ 465.365519][ C0] rcu: (detected by 0, t=10502 jiffies, g=61677, q=302 ncpus=2) [ 465.373284][ C0] Sending NMI from CPU 0 to CPUs 1: [ 465.373324][ C1] NMI backtrace for cpu 1 [ 465.373353][ C1] CPU: 1 UID: 0 PID: 12537 Comm: syz.4.1693 Not tainted syzkaller #0 PREEMPT(full) [ 465.373373][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.373391][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x70 [ 465.373416][ C1] Code: 04 24 65 48 8b 0d 08 52 78 11 65 8b 15 29 52 78 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 cc 16 00 00 00 74 2c <8b> 91 a8 16 00 00 83 fa 02 75 21 48 8b 91 b0 16 00 00 48 8b 32 48 [ 465.373431][ C1] RSP: 0018:ffffc90006d77bd8 EFLAGS: 00000046 [ 465.373446][ C1] RAX: ffffffff8ada2b71 RBX: ffff88804222a000 RCX: ffff888036653d80 [ 465.373478][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90006d77b60 [ 465.373490][ C1] RBP: 1ffff1100844540d R08: 0000000000000003 R09: 0000000000000004 [ 465.373502][ C1] R10: dffffc0000000000 R11: fffff52000daef6c R12: ffff88804222a598 [ 465.373515][ C1] R13: ffff88807b635000 R14: ffff88804222a000 R15: ffff88804222a068 [ 465.373529][ C1] FS: 0000555578153500(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 465.373544][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.373556][ C1] CR2: 0000200000000040 CR3: 0000000042b1a000 CR4: 00000000003526f0 [ 465.373573][ C1] Call Trace: [ 465.373581][ C1] [ 465.373588][ C1] atm_dev_release_vccs+0x2c1/0x360 [ 465.373624][ C1] atm_dev_deregister+0x187/0x2e0 [ 465.373655][ C1] atmtcp_c_close+0x102/0x150 [ 465.373680][ C1] ? __pfx_atmtcp_c_close+0x10/0x10 [ 465.373704][ C1] vcc_release+0x10f/0x580 [ 465.373736][ C1] sock_close+0xc3/0x240 [ 465.373757][ C1] ? __pfx_sock_close+0x10/0x10 [ 465.373775][ C1] __fput+0x44f/0xa60 [ 465.373804][ C1] task_work_run+0x1d9/0x270 [ 465.373827][ C1] ? __pfx_task_work_run+0x10/0x10 [ 465.373851][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.373870][ C1] exit_to_user_mode_loop+0xed/0x480 [ 465.373892][ C1] ? rcu_is_watching+0x15/0xb0 [ 465.373918][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.373936][ C1] do_syscall_64+0x33e/0xf80 [ 465.373959][ C1] ? clear_bhb_loop+0x40/0x90 [ 465.373981][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.374000][ C1] RIP: 0033:0x7ffa35f9c819 [ 465.374017][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.374032][ C1] RSP: 002b:00007ffe5fe1e808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 465.374050][ C1] RAX: 0000000000000000 RBX: 00007ffa36217da0 RCX: 00007ffa35f9c819 [ 465.374062][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 465.374073][ C1] RBP: 00007ffa36217da0 R08: 0000000000000006 R09: 0000000000000000 [ 465.374084][ C1] R10: 00007ffa36217cb0 R11: 0000000000000246 R12: 0000000000057f24 [ 465.374097][ C1] R13: 00007ffa36215fac R14: 0000000000057ef0 R15: 00007ffa36215fa0 [ 465.374120][ C1] [ 465.374314][ C0] task:syz.4.1693 state:R running task stack:25544 pid:12540 tgid:12537 ppid:5823 task_flags:0x400140 flags:0x00080000 [ 465.678927][ C0] Call Trace: [ 465.682238][ C0] [ 465.685203][ C0] __schedule+0x17b4/0x5680 [ 465.689744][ C0] ? unwind_next_frame+0xa6/0x2550 [ 465.694891][ C0] ? ib_setup_port_attrs+0x170d/0x2380 [ 465.700411][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 465.705408][ C0] ? __pfx___schedule+0x10/0x10 [ 465.710313][ C0] preempt_schedule_irq+0x4d/0xa0 [ 465.715371][ C0] irqentry_exit+0x14f/0x730 [ 465.720005][ C0] ? trace_irq_disable+0x3b/0x140 [ 465.725070][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.731106][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 465.736434][ C0] Code: ff ff ff e8 b1 9d 11 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b 38 9c 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 f2 93 [ 465.756093][ C0] RSP: 0018:ffffc90005c9eef8 EFLAGS: 00000282 [ 465.762210][ C0] RAX: 33f9b1e875bcab00 RBX: 0000000000000000 RCX: 0000000000000046 [ 465.770218][ C0] RDX: 000000001d03be93 RSI: ffffffff8e22a119 RDI: ffffffff8c27f000 [ 465.778242][ C0] RBP: ffffffff81766536 R08: ffffffff81766536 R09: ffffffff8e95d020 [ 465.786350][ C0] R10: ffffc90005c9f058 R11: ffffffff81b0a9b0 R12: 0000000000000002 [ 465.794356][ C0] R13: ffffffff8e95d020 R14: 0000000000000000 R15: 0000000000000246 [ 465.802371][ C0] ? unwind_next_frame+0xa6/0x2550 [ 465.807523][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.813719][ C0] ? unwind_next_frame+0xa6/0x2550 [ 465.819006][ C0] ? internal_create_group+0x673/0x1180 [ 465.824599][ C0] ? unwind_next_frame+0xa6/0x2550 [ 465.829762][ C0] unwind_next_frame+0xc3/0x2550 [ 465.834734][ C0] ? unwind_next_frame+0xa6/0x2550 [ 465.839884][ C0] ? unwind_next_frame+0xa6/0x2550 [ 465.845026][ C0] ? sysfs_add_file_mode_ns+0x238/0x300 [ 465.850610][ C0] ? internal_create_group+0x673/0x1180 [ 465.856199][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.862395][ C0] arch_stack_walk+0x11b/0x150 [ 465.867207][ C0] ? internal_create_group+0x673/0x1180 [ 465.872798][ C0] stack_trace_save+0xa9/0x100 [ 465.877595][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 465.883004][ C0] ? stack_trace_save+0xa9/0x100 [ 465.887980][ C0] ? __kernfs_new_node+0xea/0x970 [ 465.893043][ C0] ? stack_depot_save_flags+0x33/0x810 [ 465.898544][ C0] kasan_save_track+0x3e/0x80 [ 465.903256][ C0] ? kasan_save_track+0x3e/0x80 [ 465.908146][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 465.912944][ C0] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 465.919603][ C0] ? kstrdup+0x42/0x100 [ 465.923792][ C0] ? __kernfs_new_node+0xaa/0x970 [ 465.928860][ C0] ? kernfs_new_node+0x102/0x210 [ 465.933831][ C0] ? __kernfs_create_file+0x4b/0x2e0 [ 465.939142][ C0] ? sysfs_add_file_mode_ns+0x238/0x300 [ 465.944717][ C0] ? internal_create_group+0x673/0x1180 [ 465.950364][ C0] __kasan_kmalloc+0x93/0xb0 [ 465.955003][ C0] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 465.961469][ C0] ? __kernfs_new_node+0xaa/0x970 [ 465.966569][ C0] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 465.973213][ C0] kstrdup+0x42/0x100 [ 465.977231][ C0] __kernfs_new_node+0xaa/0x970 [ 465.982135][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 465.987673][ C0] ? kernfs_root+0x1c/0x230 [ 465.992222][ C0] ? kernfs_root+0x1c/0x230 [ 465.996758][ C0] ? kernfs_root+0x1c/0x230 [ 466.001292][ C0] ? kernfs_root+0x1c/0x230 [ 466.005832][ C0] kernfs_new_node+0x102/0x210 [ 466.010644][ C0] __kernfs_create_file+0x4b/0x2e0 [ 466.015792][ C0] sysfs_add_file_mode_ns+0x238/0x300 [ 466.021220][ C0] internal_create_group+0x673/0x1180 [ 466.026646][ C0] ? kobject_add+0x163/0x240 [ 466.031279][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 466.037133][ C0] ? __kmalloc_noprof+0x37d/0x760 [ 466.042202][ C0] sysfs_create_groups+0x59/0x120 [ 466.047271][ C0] ib_setup_port_attrs+0x170d/0x2380 [ 466.052636][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 466.058395][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.063837][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.069874][ C0] ? device_add+0x70b/0xb70 [ 466.074420][ C0] add_one_compat_dev+0x448/0x650 [ 466.079485][ C0] ? down_read+0x270/0x2e0 [ 466.083970][ C0] rdma_dev_init_net+0x243/0x2f0 [ 466.089037][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 466.094543][ C0] ? __kmalloc_noprof+0x37d/0x760 [ 466.099635][ C0] ops_init+0x35c/0x5c0 [ 466.103849][ C0] setup_net+0x118/0x340 [ 466.108143][ C0] ? __pfx_setup_net+0x10/0x10 [ 466.112950][ C0] ? preinit_net+0x492/0x7b0 [ 466.117582][ C0] copy_net_ns+0x50e/0x730 [ 466.122045][ C0] create_new_namespaces+0x3e7/0x6a0 [ 466.127374][ C0] ? security_capable+0x7e/0x2c0 [ 466.132362][ C0] unshare_nsproxy_namespaces+0x149/0x190 [ 466.138124][ C0] ksys_unshare+0x54e/0x970 [ 466.142669][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 466.147724][ C0] ? rcu_is_watching+0x15/0xb0 [ 466.152538][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.158731][ C0] __x64_sys_unshare+0x38/0x50 [ 466.163535][ C0] do_syscall_64+0x15f/0xf80 [ 466.168169][ C0] ? trace_irq_disable+0x3b/0x140 [ 466.173236][ C0] ? clear_bhb_loop+0x40/0x90 [ 466.177947][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.183877][ C0] RIP: 0033:0x7ffa35f9c819 [ 466.188328][ C0] RSP: 002b:00007ffa36dff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 466.196777][ C0] RAX: ffffffffffffffda RBX: 00007ffa36216090 RCX: 00007ffa35f9c819 [ 466.204810][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 466.212817][ C0] RBP: 00007ffa36032c91 R08: 0000000000000000 R09: 0000000000000000 [ 466.220820][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.228820][ C0] R13: 00007ffa36216128 R14: 00007ffa36216090 R15: 00007ffe5fe1e6a8 [ 466.236846][ C0] [ 466.239891][ C0] task:syz.1.1688 state:R running task stack:25248 pid:12513 tgid:12508 ppid:5824 task_flags:0x40054c flags:0x00080001 [ 466.253431][ C0] Call Trace: [ 466.256745][ C0] [ 466.259710][ C0] __schedule+0x17b4/0x5680 [ 466.264271][ C0] ? lock_acquire+0x106/0x350 [ 466.269011][ C0] ? __pfx___schedule+0x10/0x10 [ 466.273917][ C0] preempt_schedule_irq+0x4d/0xa0 [ 466.278978][ C0] irqentry_exit+0x14f/0x730 [ 466.283621][ C0] ? trace_irq_disable+0x3b/0x140 [ 466.288720][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.294739][ C0] RIP: 0010:memset_orig+0x75/0xb0 [ 466.299807][ C0] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 466.319451][ C0] RSP: 0018:ffffc90005e5ed50 EFLAGS: 00000246 [ 466.325556][ C0] RAX: 0000000000000000 RBX: ffffc90005e5ee78 RCX: 0000000000000000 [ 466.333565][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90005e5ee80 [ 466.341577][ C0] RBP: dffffc0000000000 R08: ffffc90005e5ee87 R09: 0000000000000000 [ 466.349585][ C0] R10: ffffc90005e5ee78 R11: fffff52000bcbdd1 R12: ffffc90005e5fef0 [ 466.357613][ C0] R13: 1ffff92000bcbdc7 R14: ffffc90005e5ee28 R15: ffffc90005e5ee70 [ 466.365671][ C0] unwind_next_frame+0xf33/0x2550 [ 466.370754][ C0] ? unwind_next_frame+0xa6/0x2550 [ 466.375908][ C0] ? exit_to_user_mode_loop+0x86/0x480 [ 466.381418][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.387622][ C0] arch_stack_walk+0x11b/0x150 [ 466.392436][ C0] ? do_syscall_64+0x33e/0xf80 [ 466.397257][ C0] stack_trace_save+0xa9/0x100 [ 466.402057][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 466.407467][ C0] ? stack_depot_save_flags+0x33/0x810 [ 466.412975][ C0] save_stack+0x122/0x230 [ 466.417387][ C0] ? __pfx_save_stack+0x10/0x10 [ 466.422289][ C0] ? page_ext_get+0x22/0x2e0 [ 466.426926][ C0] ? free_unref_folios+0xecc/0x16e0 [ 466.432263][ C0] ? folios_put_refs+0x789/0x8d0 [ 466.437241][ C0] ? shmem_undo_range+0x52c/0x1660 [ 466.442394][ C0] ? shmem_evict_inode+0x289/0xae0 [ 466.447582][ C0] ? evict+0x61e/0xb10 [ 466.451719][ C0] ? __dentry_kill+0x1a2/0x5e0 [ 466.456516][ C0] ? finish_dput+0xc9/0x480 [ 466.461057][ C0] ? __fput+0x691/0xa60 [ 466.465252][ C0] ? task_work_run+0x1d9/0x270 [ 466.470046][ C0] ? do_exit+0x70f/0x23c0 [ 466.474455][ C0] ? do_group_exit+0x21b/0x2d0 [ 466.479684][ C0] ? get_signal+0x1284/0x1330 [ 466.484402][ C0] ? arch_do_signal_or_restart+0xbc/0x830 [ 466.490164][ C0] ? exit_to_user_mode_loop+0x86/0x480 [ 466.495672][ C0] ? page_ext_put+0x97/0xc0 [ 466.500240][ C0] __reset_page_owner+0x71/0x1f0 [ 466.505231][ C0] free_unref_folios+0xecc/0x16e0 [ 466.510326][ C0] folios_put_refs+0x789/0x8d0 [ 466.515140][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 466.520468][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 466.526861][ C0] shmem_undo_range+0x52c/0x1660 [ 466.531859][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 466.537365][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 466.542346][ C0] ? percpu_counter_add_batch+0xea/0x1d0 [ 466.548025][ C0] shmem_evict_inode+0x289/0xae0 [ 466.553019][ C0] ? inode_wait_for_writeback+0x16d/0x3b0 [ 466.558780][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 466.564300][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 466.570419][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.575514][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 466.580693][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 466.586245][ C0] evict+0x61e/0xb10 [ 466.590201][ C0] ? __pfx_evict+0x10/0x10 [ 466.594653][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 466.599809][ C0] ? _raw_spin_unlock+0x28/0x50 [ 466.604702][ C0] ? iput+0xb25/0xe80 [ 466.608764][ C0] __dentry_kill+0x1a2/0x5e0 [ 466.613553][ C0] ? finish_dput+0xad/0x480 [ 466.618103][ C0] finish_dput+0xc9/0x480 [ 466.622481][ C0] __fput+0x691/0xa60 [ 466.626518][ C0] task_work_run+0x1d9/0x270 [ 466.631155][ C0] ? __pfx_task_work_run+0x10/0x10 [ 466.636306][ C0] ? do_exit+0x70a/0x23c0 [ 466.640674][ C0] ? kmem_cache_free+0x180/0x630 [ 466.645656][ C0] ? put_net+0x191/0x260 [ 466.649961][ C0] do_exit+0x70f/0x23c0 [ 466.654159][ C0] ? __pfx_do_exit+0x10/0x10 [ 466.658804][ C0] ? cgroup1_freezing+0x20/0x350 [ 466.663788][ C0] ? cgroup1_freezing+0x20/0x350 [ 466.668870][ C0] do_group_exit+0x21b/0x2d0 [ 466.673496][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.678742][ C0] get_signal+0x1284/0x1330 [ 466.683309][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 466.688900][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 466.695116][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.701217][ C0] exit_to_user_mode_loop+0x86/0x480 [ 466.706566][ C0] ? rcu_is_watching+0x15/0xb0 [ 466.711381][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.717488][ C0] do_syscall_64+0x33e/0xf80 [ 466.722122][ C0] ? trace_irq_disable+0x3b/0x140 [ 466.727187][ C0] ? clear_bhb_loop+0x40/0x90 [ 466.731904][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.737828][ C0] RIP: 0033:0x7f049659c819 [ 466.742281][ C0] RSP: 002b:00007f0497385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 466.750733][ C0] RAX: fffffffffffffffc RBX: 00007f0496816090 RCX: 00007f049659c819 [ 466.758735][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 466.766740][ C0] RBP: 00007f0496632c91 R08: 0000000000000000 R09: 0000000000000000 [ 466.774746][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.782833][ C0] R13: 00007f0496816128 R14: 00007f0496816090 R15: 00007ffcf4db28f8 [ 466.790862][ C0] [ 466.793914][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g61677 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 466.805145][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 466.815159][ C0] rcu: RCU grace-period kthread stack dump: [ 466.821071][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 466.834740][ C0] Call Trace: [ 466.838048][ C0] [ 466.841012][ C0] __schedule+0x17b4/0x5680 [ 466.845591][ C0] ? __pfx___schedule+0x10/0x10 [ 466.850534][ C0] ? schedule+0x90/0x360 [ 466.854815][ C0] schedule+0x164/0x360 [ 466.859007][ C0] schedule_timeout+0x158/0x2c0 [ 466.863910][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 466.869315][ C0] ? __pfx_process_timeout+0x10/0x10 [ 466.874641][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.880504][ C0] ? prepare_to_swait_event+0x340/0x370 [ 466.886093][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 466.891006][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.896242][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 466.901054][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 466.906382][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 466.911717][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.917562][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 466.922193][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.927430][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.933291][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 466.938269][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 466.943363][ C0] kthread+0x388/0x470 [ 466.947473][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.952705][ C0] ? __pfx_kthread+0x10/0x10 [ 466.957327][ C0] ret_from_fork+0x514/0xb70 [ 466.961964][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 466.967119][ C0] ? __switch_to+0xc79/0x1410 [ 466.971835][ C0] ? __pfx_kthread+0x10/0x10 [ 466.976515][ C0] ret_from_fork_asm+0x1a/0x30 [ 466.981345][ C0] [ 466.984395][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 466.990743][ C0] CPU: 0 UID: 0 PID: 10412 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 467.000397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.010488][ C0] Workqueue: events_unbound toggle_allocation_gate [ 467.017036][ C0] RIP: 0010:smp_call_function_many_cond+0xe32/0x1210 [ 467.023755][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 77 e7 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 22 e3 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 06 e3 [ 467.043397][ C0] RSP: 0018:ffffc9000d1ff700 EFLAGS: 00000293 [ 467.049499][ C0] RAX: ffffffff81b97aea RBX: 1ffff110170e8165 RCX: ffff88801ffd9ec0 [ 467.057500][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 467.065502][ C0] RBP: ffffc9000d1ff840 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 467.073509][ C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffff8880b8740b28 [ 467.081511][ C0] R13: dffffc0000000000 R14: ffff8880b863c148 R15: 0000000000000001 [ 467.089516][ C0] FS: 0000000000000000(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 467.098535][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.105148][ C0] CR2: 0000200000007038 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 467.113179][ C0] Call Trace: [ 467.116488][ C0] [ 467.119453][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 467.124534][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 467.130908][ C0] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 467.136925][ C0] ? __pfx___text_poke+0x10/0x10 [ 467.141900][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 467.146966][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 467.152123][ C0] smp_text_poke_batch_finish+0x5f5/0x1160 [ 467.157968][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 467.164253][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 467.169319][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 467.175605][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 467.181907][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 467.187933][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 467.193865][ C0] static_key_enable+0x1a/0x20 [ 467.198667][ C0] toggle_allocation_gate+0xab/0x290 [ 467.203987][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 467.209924][ C0] ? process_scheduled_works+0xa70/0x1860 [ 467.215695][ C0] ? process_scheduled_works+0xa70/0x1860 [ 467.221464][ C0] ? process_scheduled_works+0xa70/0x1860 [ 467.227240][ C0] process_scheduled_works+0xb5d/0x1860 [ 467.232868][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.238903][ C0] ? assign_work+0x3d5/0x5e0 [ 467.243543][ C0] worker_thread+0xa53/0xfc0 [ 467.248205][ C0] kthread+0x388/0x470 [ 467.252307][ C0] ? __pfx_worker_thread+0x10/0x10 [ 467.257475][ C0] ? __pfx_kthread+0x10/0x10 [ 467.262103][ C0] ret_from_fork+0x514/0xb70 [ 467.266753][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 467.271916][ C0] ? __switch_to+0xc79/0x1410 [ 467.276722][ C0] ? __pfx_kthread+0x10/0x10 [ 467.281347][ C0] ret_from_fork_asm+0x1a/0x30 [ 467.286189][ C0]