last executing test programs: 6.974500893s ago: executing program 3: socket$inet6(0xa, 0x3, 0x0) r0 = socket(0x0, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) socketpair(0xe09e125e4f71a7b6, 0xa, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000001000)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0xa4fbfd4840e03a43, 0x0, 0x5}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x44000) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000006ed8251d8290f642c1393316cd8952da8d457f92840adef4560ded5476abfe599704cebbefac3a1d9ae14ad3ccffbf5fece4ac790227b6fa247"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10", 0x2b}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x89, 0x0, &(0x7f0000000000)="e0b954f53a000000000000005bec5642cd7dc6754b9c56c4c3410fa6170ed20e3590ee5cb943778b363bc5ae6c6a4e05bad09a6015748fbaae79221e51cb9e5b5296f0a8a58e333218f259d99976c5019337e4f4fc30d39b7717bd83771dcf470baa52252d4b240a8208f59f1ed2c94c13ea9b509e720b12924bfc8d673679c5044a8b0b90f901a23a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = socket(0x15, 0x5, 0x0) connect$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r10) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00b4bc", @ANYRES16=r11, @ANYBLOB="010000000000000000000600000006000b0015000000"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.036992867s ago: executing program 3: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x700, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 5.969329631s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000140)=ANY=[@ANYBLOB="08010000160001000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x108}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 5.913523496s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) 5.826677072s ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINKINFO={0xfffffce6, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r11, 0x0, 0x10003, 0x0) read(r10, &(0x7f0000000140)=""/173, 0xad) readv(r10, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(r9, &(0x7f00000001c0)=ANY=[], 0x10034) listen(r7, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x98}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000200)={'pim6reg\x00', {0x2, 0x0, @loopback}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x2}]}, {0x0, [0x0, 0x2e, 0x5f, 0x5f, 0x2e, 0x61, 0x2e]}}, 0x0, 0x2d}, 0x20) sendmsg$unix(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002b40)='@', 0x1}, {&(0x7f0000000440)='>', 0x1}], 0x2}, 0x2000c095) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x2011) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/78, 0x4e}], 0x1}, 0x2) 3.924613713s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x4}, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 3.092544742s ago: executing program 2: sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x64020180) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f1e3dba0000000c0000ff0c000000020000000000000000004004000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x100020, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, &(0x7f00000005c0)=""/148, 0x94}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000eaffff3f850000006900000095f1672d57f7edd9cf3060"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x81, 0x2, 0x200, 0x514, 0xffffffffffffffff, 0x3e000100, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x80008}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0x1}, 0x0, &(0x7f0000001680)='%-010d \x00'}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000070001000000", @ANYRES32=r6, @ANYBLOB="00000000000000000a0001000180c20000000000"], 0x2c}}, 0x10000) r7 = socket(0x28, 0x1, 0x0) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000180)={{0x0}, 0x0, 0x8}, 0x20) getsockopt$nfc_llcp(r7, 0x28, 0x0, 0x0, 0x20000000) 2.746086046s ago: executing program 2: r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x0) 2.649873442s ago: executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x5) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000200)) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000a40)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0xb9, 0x8, 0x9, 0x0, 0x4a53e8eb, 0x8008000, 0x3ff, 0x1, 0x9, 0x5, 0x5fe, 0x400, 0x1ff, 0x6, 0x1ff, 0x730e, 0x7ff, 0x3, 0x9, 0x9, 0x54d45651, 0x6, 0x3, 0x6, 0x1f, 0x80000000, 0x3, 0x1, 0x6, 0x10000000, 0x1, 0x3ff, 0x7, 0x0, 0x40, 0x5d4, 0x5, 0x4, 0x8, 0x7, 0x1, 0x5, 0x3, 0x6, 0x200, 0xfffffc00, 0x9b1, 0xca, 0x10001, 0x10e7, 0x3, 0xfffff800, 0x47b00, 0xfbf, 0x5, 0xe76e, 0x0, 0x4, 0x2, 0x8000, 0x1, 0x9, 0x6, 0x4, 0x80000001, 0x2529e6d3, 0x1, 0x3, 0x4000007, 0x8, 0xffff0f2e, 0x81, 0x6, 0x4, 0x2, 0xfffffffb, 0x7f, 0x7, 0x92, 0x3f, 0x9a, 0x2, 0x80000000, 0x2, 0x8f6, 0x2, 0x7ff, 0x81, 0x800, 0x4, 0x2, 0x626, 0x4, 0xffffffff, 0xe4dc, 0x0, 0xffffffff, 0x4, 0x5, 0xa553, 0x5, 0x3, 0x3, 0x6, 0x8001, 0x2, 0x6, 0x20, 0x4, 0x7, 0x8, 0x7b44, 0x6, 0xdf, 0x7ff, 0x6187, 0x7, 0x7fff, 0x3, 0x45c, 0x2, 0x3, 0x4, 0x7, 0x1, 0x80000000, 0xffffffff], "23a7f205de7013a72b39fb7d6ce963d05bccb180c1c0515d677ba105b135c8a298723b4fdde82479a671c6088deb4e44e5c819881a68b431d111f33a4cd3518fc406880bd0c2f89af3f11cc5f0c82d805c23befd5a57bdbe552fee5b17416a6b11ca1873378ac3c262898ab5abbe659199152b8e2d264b8b13dca91eef0ae9e7445af5861f4af9249fb0f55e1b08c00db37c49d02bbc45f3c8ffd06e25032772a61f9247635526d0215440d48f824da2957bf8cfbd7728a81fdc8bc8a8dd046f01"}}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async, rerun: 64) socket$kcm(0xa, 0x6, 0x0) (rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="350a00000000000061117c0000c6203ced5392000000000000009500bf1ece1f32f0cfdcd2948ea57f10b1302eed11aed38529b4b0638ef141e8077aff9494757a72de5e45311ca95504b0d1f39e6b1c6cd8e14a45e8a62407f7f9492f3d2a38482d780694d963bfd4e724e3906cb324151bca04158964cd7ee6fd4133a32fd439830c4848a2b01b01cc29895d212a1022ede4f18fd31b76d1b0a0411474e8494d45bb66"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580)) setsockopt$sock_attach_bpf(r4, 0x10d, 0xa, &(0x7f0000000000)=r5, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1e, 0x8, 0x8, 0xb, 0x520, r5, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket(0x22, 0x2, 0x1) ioctl$IMGETVERSION(r7, 0x80044944, &(0x7f0000000000)) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async, rerun: 64) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000060000095001465bf9db5282b2c84716f00000000000086307f627a6bec2c2ecfc49c31ac5964403f6fec2502310a913777926df07124b8e78802053aa551ac2bbfddfb7cb6b92bd839ec84ec3d3c2179c3380ee8697fd213093429a313d8a8d4d2e13381b27618ac492468ebf0710f84b47d29b1016b0f9f38f9c34b888465b3cfbad1cc7ce514dfd8"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (rerun: 32) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x6, 0x2, 0x90, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x400000}, 0xffffffa4) 2.578393793s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3a110000", @ANYRES16=r2, @ANYBLOB="270300000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@generic={0x63b1cc4955e87c68, 0xa26d, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a07, 0x1700) close(0xffffffffffffffff) close(r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x0, 0x1014}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000001200)={'wlan1\x00', @random}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="080005000800000014000400766574683000000000000000000000001c00e700f5a7048e856ffeef7698082fcf9d40a8ae962fe20e74afe8"], 0x54}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@mpls_getnetconf={0x64, 0x52, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x800}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xe82}]}, 0x64}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2.515162083s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200ffff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x005'], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x2}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07180000000000000000210000000c00060001000000010000002c002d8008000200000000000500010000000000050004"], 0x4c}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000001c0)={0x0, "20d808b7389cb790c215e781cf49fbc7"}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000008000b400000000028000480240001800b000100736f636b65740000140002800800024000000015080001400000000e0900010073797a30"], 0xc4}}, 0x0) 2.396686411s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x168, 0x9, 0x138, 0xb, 0x228, 0x250, 0x250, 0x228, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00'}, 0x6000000, 0xf8, 0x138, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@ipv6={@private0, @private0, [], [], 'netdevsim0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x21) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a001a00070282c137153e370e0c1180fc0b10000300", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x33}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES32=r9], 0x7c}, 0x1, 0x0, 0x0, 0x24004060}, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x8850) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000004f98ed060609020000000000000000000000000500010005"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0x3, &(0x7f00000002c0)=0x5, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c00003a060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000000c00048005000100090000000c00038005000100d30000000900010073797a30000000000900020073797a3200000000140000000600"], 0x94}}, 0x0) socket$kcm(0x10, 0x2, 0x4) 2.131352271s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x88, &(0x7f0000000200)={&(0x7f0000000240)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @broadcast, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3]}}]}]}]}, 0x88}}, 0x0) 2.100490242s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x2}}, 0xffffff39) listen(r1, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000002580), 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r4 = openat$cgroup_procs(r3, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) r5 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x0, 'rlimit'}]}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x60}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000140)=0x80, 0x4) 1.999945078s ago: executing program 4: sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x64020180) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f1e3dba0000000c0000ff0c000000020000000000000000004004000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x100020, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, &(0x7f00000005c0)=""/148, 0x94}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000eaffff3f850000006900000095f1672d57f7edd9cf3060"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x81, 0x2, 0x200, 0x514, 0xffffffffffffffff, 0x3e000100, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x80008}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0x1}, 0x0, &(0x7f0000001680)='%-010d \x00'}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000070001000000", @ANYRES32=r6, @ANYBLOB="00000000000000000a0001000180c20000000000"], 0x2c}}, 0x10000) r7 = socket(0x28, 0x1, 0x0) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000640)=""/175, 0xaf}, &(0x7f0000000140), 0x8}, 0x20) getsockopt$nfc_llcp(r7, 0x28, 0x10, 0x0, 0x20000000) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, 0x0, &(0x7f00000002c0)) getsockopt$llc_int(r7, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.944677919s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0xfffffffb, 0x0, {{0x17, 0x4, 0x3, 0x20, 0x5c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, {[@timestamp={0x44, 0x1c, 0xe, 0x0, 0x6, [0x5, 0xbe6, 0x1, 0xeb6, 0x8d4, 0x7fffffff]}, @generic={0x82, 0x11, "c9debcb35173f1cafa30a8f07285a3"}, @cipso={0x86, 0x1a, 0x3, [{0x0, 0xc, "4ade0e490b12c190028d"}, {0x2, 0x8, "df96e93bfa6c"}]}]}}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0x6, 0x1010, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x8002}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x5, 0x15, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRESDEC=r4], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x4c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x4c}}, 0x4000000) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r7}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x90) (async, rerun: 64) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x7fffffff, 0x3}, 0x20) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r11, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000800)={r12, &(0x7f00000007c0)}, 0x20) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x0, 0x80000}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x6, 0x2}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1}, 0x20) (rerun: 64) setsockopt$sock_int(r4, 0x1, 0x1e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300), &(0x7f0000000400)=0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x8000000000000c, &(0x7f00000003c0)="0d9868297169abb002f08e21", 0xc) setsockopt$inet_opts(r13, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) (async) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1.94282846s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60680, 0x0, '\x00', 0x0, 0xe, r2}, 0x90) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9d15b6e4d1cd3030}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendto$inet(r7, 0x0, 0x0, 0x20000000, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x3, 0x0, 0x4) close(r6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) unshare(0x24020400) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x1c, r4, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r11) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r11, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r12, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c00028008000140000000000800034000bd9b134c000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1.764917492s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r2, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffe2e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x8022}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r4, r3, 0x5}, 0x10) r5 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r5}, 0x20) bind$unix(r5, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)="39000000140081ae00002c4b290005000156016185bf2c5075e285af0180000000171300883795c04a31ba3704002cc32b38d3741700ffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r1, 0x0, 0xf03afffe) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000}) unshare(0x2000400) r8 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r8, 0x107, 0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbe525030000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x20050010}, 0x20000010) sendmsg$L2TP_CMD_SESSION_MODIFY(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffeda, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4e894}, 0x24000845) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGSTAMP(r10, 0x8906, &(0x7f0000000140)) 1.759372254s ago: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000300)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x36}, 0x90) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000540)='Y', 0x1}, {&(0x7f0000000640)="b5", 0x1}, {&(0x7f00000006c0)="ce", 0x1}, {&(0x7f0000000680)="13916b957b001e829e9700", 0xb}], 0x4) write$binfmt_script(r3, &(0x7f0000000040), 0x18a3c85) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000f1ffffff00000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f00000007c0)={{r0}, "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"}) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r7 = accept$alg(r4, 0x0, 0x0) sendfile(r7, r3, 0x0, 0xf) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r8, @ANYBLOB="0000000000000000850000002b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r8, @ANYBLOB="0000000000000000850000002b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb4, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000040), 0x4) 1.698250792s ago: executing program 1: r0 = socket(0x0, 0x3, 0xff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001a00000827bd7000fedbdf251c20103c0004c80b000900000c000900d8003803", @ANYRES32=r0, @ANYBLOB="eb34f78d1351efd967fe43db2cbdb1eb20762abea67d6d8ca95516aa24f2f99836a927f4cf22e30732559c3cabe354bd449e150b1a7378cd76a8f200775b29b53312d5c6b191302aa08cf2d060635b0100f012bc445bc2b02089a24c56de77fcb9fac53c1942a1a654bb02258b59b42626f089e53e"], 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7, @none}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x7, @none}, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xffffffff, 0x3}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x2, 0x200000000000006, 0x0) sendmsg$kcm(r5, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xfffffe68, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c02000013006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040014000d000a000e0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r8, 0x4, 0x7, 0x7f, 0x0, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x36, 0x20, 0x5, 0x9}}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) shutdown(r10, 0x1) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x7d, &(0x7f00000001c0), &(0x7f0000000200)=0x8) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.662957579s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x10000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r2}, 0x14}}, 0x0) 1.481614241s ago: executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x9, &(0x7f0000003000)={0x2}, 0x2) 1.469787058s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', '', [{0x20, '}-^'}]}, 0x8) (async) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', '', [{0x20, '}-^'}]}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000001740)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1, &(0x7f00000002c0)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xfdf, &(0x7f0000001e00)=""/4063}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1, &(0x7f00000002c0)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xfdf, &(0x7f0000001e00)=""/4063}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3}, &(0x7f0000000d00), &(0x7f0000000d40)='%pB \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000280)={r3, &(0x7f0000000340), 0x0}, 0x20) 1.323914011s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000100000f1000000000000063e16a00000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000100000f1000000000000063e16a00000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x92, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x41}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x5c, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3}, @md5sig={0x13, 0x12, "231054ae47620b13b0c5a7a10f147909"}, @generic={0x0, 0x4, "71de"}, @mptcp=@synack={0x1e, 0x10}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x76, &(0x7f0000000380)={r5}, 0x8) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x30) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x30) 588.519261ms ago: executing program 4: r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x8}, 0x80, 0x0}, 0x0) 528.598879ms ago: executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x393, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0x7) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) socket$inet(0xa, 0x801, 0x84) listen(r1, 0x20000b33) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x7) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x7fff, 0x10}, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000300)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/236, 0xec}], 0x1}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="3ebced5666469455f67fa7d9633cb93ab42a49cf86615d6c01c43ec56d3a69c9b1d1e961f778c41452c604280eefc2dd001fec0d1c078e2a9ce34b73185a3ffcfaf4a2c7c761b2de5b9ec5ef428b40af93a42444d7e41423d9f5ee63110d3ecd484bc7a5f70d2fcc3b656a66c96a19d699b0a8", 0x73}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000000340)="4abd7f60dbfc0761a92166f771fcd7598d5053a64feea29d555db4b7ac109105b706138aec317deba7dd055b5d4682bfbfaf60adccda91cd8a82eee87b4f09ec91fe67d3ba57adb02963ae941be6bb4019c1bdab21b01dfb8e6b465b2a60740459de4877783d6fcb9698e21edf87ad15e34422764c4216f32c35d011d89878bd14df08217203e072ab0c01048255d9804f4a6f584d6e59fde9acf618f21b2d01b2f4254c3275f45e37b169fde1b6ef1ca027de21e6d7eec0458f4df668506d", 0xbf}, {&(0x7f0000000500)="369ee50ce66dcafe6eff28e9b300cadc0512ce34ef2bd942e1e4553df1cf93cbd0ca3fd1656fbd7f23ae466b9ba034444e3d774f77704bbb26cf674636dceef02aca101d702a7af22cdbc19651ed63b591bc7a8895baa02a0b8adc8a34ec72fe641736198b3e396a4faf3ff2d882069621acfa3e277c3298047e5cc16192eff2505567271cd773d82ade473451042201cfcb00711f75b8eda902a4d7209316d6e8d340a1dd21c322afedb83d", 0xac}, {0x0}], 0x5}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) pwritev(r9, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd05000040", 0x6}], 0x1, 0xfffffffc, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$inet6(0xa, 0x0, 0x0) 330.16995ms ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0x84}}, 0x0) sendmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x4400, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x0) 237.124573ms ago: executing program 4: sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x64020180) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f1e3dba0000000c0000ff0c000000020000000000000000004004000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x100020, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, &(0x7f00000005c0)=""/148, 0x94}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000eaffff3f850000006900000095f1672d57f7edd9cf3060"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x81, 0x2, 0x200, 0x514, 0xffffffffffffffff, 0x3e000100, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x80008}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0x1}, 0x0, &(0x7f0000001680)='%-010d \x00'}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000070001000000", @ANYRES32=r6, @ANYBLOB="00000000000000000a0001000180c20000000000"], 0x2c}}, 0x10000) r7 = socket(0x28, 0x1, 0x0) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000640)=""/175, 0xaf}, &(0x7f0000000140), 0x8}, 0x20) getsockopt$nfc_llcp(r7, 0x28, 0x10, 0x0, 0x20000000) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, 0x0, &(0x7f00000002c0)) getsockopt$llc_int(r7, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 66.595016ms ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/17, 0x11}], 0x1, 0x300, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 0s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)='[', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x24}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000540)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x4, 0x1, 0x0, 0x6, 0x1, 0x37a}, 0x20) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv6_newrule={0x9c, 0x20, 0x4, 0x70bd29, 0x25dfdbff, {0xa, 0x14, 0x0, 0x2, 0x1, 0x0, 0x0, 0x5, 0x10000}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_SRC={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): 20098] ? __pfx__printk+0x10/0x10 [ 465.893047][T20098] ? __pfx_lock_release+0x10/0x10 [ 465.898071][T20098] should_fail_ex+0x3b0/0x4e0 [ 465.902746][T20098] _copy_to_user+0x2f/0xb0 [ 465.907250][T20098] generic_map_lookup_batch+0x8f5/0xf90 [ 465.912814][T20098] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 465.918887][T20098] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 465.924953][T20098] bpf_map_do_batch+0x2d2/0x690 [ 465.929799][T20098] __sys_bpf+0x654/0x810 [ 465.934065][T20098] ? __pfx___sys_bpf+0x10/0x10 [ 465.938830][T20098] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.944811][T20098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.951132][T20098] ? do_syscall_64+0x100/0x230 [ 465.955890][T20098] __x64_sys_bpf+0x7c/0x90 [ 465.960306][T20098] do_syscall_64+0xf3/0x230 [ 465.964897][T20098] ? clear_bhb_loop+0x35/0x90 [ 465.969580][T20098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.975474][T20098] RIP: 0033:0x7f8f46e7cf29 [ 465.979886][T20098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 465.999487][T20098] RSP: 002b:00007f8f47be90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.007902][T20098] RAX: ffffffffffffffda RBX: 00007f8f46fb3f80 RCX: 00007f8f46e7cf29 [ 466.015903][T20098] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 466.023905][T20098] RBP: 00007f8f47be9120 R08: 0000000000000000 R09: 0000000000000000 [ 466.031872][T20098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.039866][T20098] R13: 000000000000004d R14: 00007f8f46fb3f80 R15: 00007ffe80fccd08 [ 466.047866][T20098] [ 466.328894][T20107] vlan0: entered promiscuous mode [ 466.426098][T20105] vlan0: entered promiscuous mode [ 466.547831][ T5124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 466.590807][ T5124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 466.600066][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 466.610994][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 466.620549][ T5124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 466.628440][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 466.727644][T20120] wg1 speed is unknown, defaulting to 1000 [ 466.757303][T20129] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 467.092160][T20120] chnl_net:caif_netlink_parms(): no params data found [ 467.251749][T20120] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.270856][T20120] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.278574][T20120] bridge_slave_0: entered allmulticast mode [ 467.296524][T20120] bridge_slave_0: entered promiscuous mode [ 467.304608][T20165] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 467.314227][T20165] __nla_validate_parse: 42 callbacks suppressed [ 467.314245][T20165] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 467.335734][T20120] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.345531][T20120] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.354163][T20120] bridge_slave_1: entered allmulticast mode [ 467.369050][T20120] bridge_slave_1: entered promiscuous mode [ 467.519145][T20120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.554247][T20120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.676922][T20120] team0: Port device team_slave_0 added [ 467.692799][T20185] FAULT_INJECTION: forcing a failure. [ 467.692799][T20185] name failslab, interval 1, probability 0, space 0, times 0 [ 467.707637][T20185] CPU: 0 PID: 20185 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 467.718253][T20185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 467.728334][T20185] Call Trace: [ 467.731627][T20185] [ 467.734588][T20185] dump_stack_lvl+0x241/0x360 [ 467.739298][T20185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.744525][T20185] ? __pfx__printk+0x10/0x10 [ 467.749142][T20185] ? __pfx_lock_acquire+0x10/0x10 [ 467.754192][T20185] ? __sigqueue_alloc+0x2f/0x540 [ 467.759167][T20185] should_fail_ex+0x3b0/0x4e0 [ 467.761242][T20120] team0: Port device team_slave_1 added [ 467.763848][T20185] ? __sigqueue_alloc+0x42e/0x540 [ 467.774499][T20185] should_failslab+0x9/0x20 [ 467.779159][T20185] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 467.784839][T20185] __sigqueue_alloc+0x42e/0x540 [ 467.789766][T20185] __send_signal_locked+0x22f/0xdc0 [ 467.794999][T20185] ? __lock_task_sighand+0x29/0x2d0 [ 467.800301][T20185] group_send_sig_info+0x292/0x310 [ 467.805419][T20185] ? __pfx_group_send_sig_info+0x10/0x10 [ 467.811041][T20185] bpf_send_signal_common+0x2dd/0x430 [ 467.816523][T20185] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 467.822470][T20185] ? bpf_trace_run2+0x1fc/0x540 [ 467.827318][T20185] bpf_send_signal+0x19/0x30 [ 467.831891][T20185] bpf_prog_875110ef5eb68631+0x22/0x28 [ 467.837331][T20185] bpf_trace_run2+0x2ec/0x540 [ 467.842020][T20185] ? __pfx_bpf_trace_run2+0x10/0x10 [ 467.847206][T20185] ? tomoyo_encode+0x26f/0x540 [ 467.851951][T20185] ? rcu_is_watching+0x15/0xb0 [ 467.856696][T20185] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 467.862572][T20185] ? tomoyo_encode+0x26f/0x540 [ 467.867323][T20185] ? trace_kmalloc+0x1f/0xd0 [ 467.871903][T20185] ? tomoyo_realpath_from_path+0x5a9/0x5e0 [ 467.877717][T20185] kfree+0x2bb/0x360 [ 467.881601][T20185] tomoyo_realpath_from_path+0x5a9/0x5e0 [ 467.887225][T20185] tomoyo_path_number_perm+0x23a/0x880 [ 467.892681][T20185] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 467.898295][T20185] ? tomoyo_path_number_perm+0x208/0x880 [ 467.903910][T20185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 467.909871][T20185] ? sb_end_write+0xe9/0x1c0 [ 467.914460][T20185] ? vfs_write+0x7c4/0xc90 [ 467.918882][T20185] ? __pfx_vfs_write+0x10/0x10 [ 467.923640][T20185] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.929621][T20185] security_file_ioctl+0x75/0xb0 [ 467.934544][T20185] __se_sys_ioctl+0x47/0x170 [ 467.939144][T20185] do_syscall_64+0xf3/0x230 [ 467.943649][T20185] ? clear_bhb_loop+0x35/0x90 [ 467.948346][T20185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.954243][T20185] RIP: 0033:0x7f8f46e7cf29 [ 467.958653][T20185] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 467.978264][T20185] RSP: 002b:00007f8f47be90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.986696][T20185] RAX: ffffffffffffffda RBX: 00007f8f46fb3f80 RCX: 00007f8f46e7cf29 [ 467.994650][T20185] RDX: 0000000020000000 RSI: 00000000c0185879 RDI: 0000000000000008 [ 468.002605][T20185] RBP: 00007f8f47be9120 R08: 0000000000000000 R09: 0000000000000000 [ 468.010612][T20185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.018594][T20185] R13: 000000000000004d R14: 00007f8f46fb3f80 R15: 00007ffe80fccd08 [ 468.026590][T20185] [ 468.108840][T20120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.132879][T20120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.168596][T20120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.188753][T20120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.199740][T20120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.238309][T20120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.371970][T20198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 468.425761][T20207] sock: sock_timestamping_bind_phc: sock not bind to device [ 468.443410][T20120] hsr_slave_0: entered promiscuous mode [ 468.476143][T20120] hsr_slave_1: entered promiscuous mode [ 468.505419][T20120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.514908][T20120] Cannot create hsr debugfs directory [ 468.528887][T20205] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 468.571568][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.580091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.614663][T20221] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.731235][ T5124] Bluetooth: hci6: command tx timeout [ 468.998611][T20120] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.103775][T20120] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.215490][T20120] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.304761][T20120] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.446309][T20120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 469.480822][T20120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 469.491650][T20120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 469.504396][T20120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 469.636673][T20120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.676319][T20253] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 469.706036][T20120] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.731316][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.738552][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.773453][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.780777][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.790353][T20255] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.903172][T20259] ip6gretap2: entered promiscuous mode [ 469.930211][T20259] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 469.964787][T20262] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 470.069750][T20262] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 470.105529][ T5121] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 470.213385][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 470.231471][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 470.391282][T16029] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 470.396651][T20120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.578978][T20120] veth0_vlan: entered promiscuous mode [ 470.603308][T20292] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.639623][T20120] veth1_vlan: entered promiscuous mode [ 470.777252][T20120] veth0_macvtap: entered promiscuous mode [ 470.804061][T20120] veth1_macvtap: entered promiscuous mode [ 470.811339][ T5124] Bluetooth: hci6: command tx timeout [ 470.837349][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.946261][T20120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.964469][T20120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.976456][T20120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.987743][T20120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.998061][T20120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.009514][T20120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.025494][T20120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.063921][T20120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.100838][T20120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.117046][T20120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.133128][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.141539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.155380][T20120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.178722][T20120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.211725][T20120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.235252][T20120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.332203][T20120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.361335][T20120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.400886][T20120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.417821][T20120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.459351][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 471.479061][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 471.534914][T20326] ieee802154 phy0 wpan0: encryption failed: -22 [ 471.735589][ T5206] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 471.742011][ T2829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.789157][ T2829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.900677][ T5124] Bluetooth: hci6: command tx timeout [ 473.384482][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.422567][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.947195][T20406] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.088810][T20419] wg1 speed is unknown, defaulting to 1000 [ 474.333035][ T2811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.341782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.663105][T20449] netlink: 864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.981080][ T5124] Bluetooth: hci6: command tx timeout [ 475.144025][T20469] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 475.222129][T20470] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.500136][T20481] : renamed from bond0 (while UP) [ 475.531214][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 475.632933][T20488] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 475.655305][T20491] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 475.659541][T20488] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 475.691881][T20494] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 476.130994][T20515] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 476.159090][T20515] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.166909][T20515] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.463502][T20536] bond0: entered allmulticast mode [ 476.477909][T20536] bond_slave_0: entered allmulticast mode [ 476.493622][T20536] bond_slave_1: entered allmulticast mode [ 476.535466][T20536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.547833][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.565154][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.631721][T20540] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 476.720187][T20544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 476.892397][ T2887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.901125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.026153][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 477.400261][T20577] wg1 speed is unknown, defaulting to 1000 [ 478.223018][T20635] tipc: Enabling of bearer rejected, failed to enable media [ 478.311143][T20637] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 478.311143][T20637] cct.usage_percpu_sys' [ 478.773888][T20661] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 479.343015][T20693] __nla_validate_parse: 3 callbacks suppressed [ 479.343034][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.392362][T20693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.419272][T20693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.452061][T20693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.467111][T20693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.503834][T20700] tipc: Failed to remove unknown binding: 66,1,1/4294967293:2154440835/2154440837 [ 479.555645][T20701] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 479.886101][T20733] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 480.091121][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.099559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.247178][T20750] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 480.439287][T20760] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 480.489143][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.294278][T20783] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 481.556841][T20793] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 481.564744][T20795] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.774293][T20809] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 481.811462][T20809] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 481.816166][T20814] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.931732][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.940160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.952979][T20823] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.986654][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 482.192301][T20830] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 482.222099][T20830] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 482.240965][T20830] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 482.755193][T20861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.033232][T20861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.086590][T20880] x_tables: duplicate underflow at hook 1 [ 483.247778][T20861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.438550][T20861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.606037][T20861] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.665366][T20861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.737498][T20861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.785734][T20861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.931082][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 484.008351][ T29] audit: type=1804 audit(1718868550.772:54): pid=20923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723930323831383439372F73797A6B616C6C65722E626E445863682F3535342FB5 dev="sda1" ino=1948 res=1 errno=0 [ 484.425479][ T29] audit: type=1800 audit(1718868551.192:55): pid=20939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 484.495263][ T29] audit: type=1804 audit(1718868551.212:56): pid=20939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/368/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 484.537246][T20946] __nla_validate_parse: 4 callbacks suppressed [ 484.537266][T20946] netlink: 888 bytes leftover after parsing attributes in process `syz-executor.3'. [ 484.593142][ T29] audit: type=1804 audit(1718868551.232:57): pid=20939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/368/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 484.691677][ T29] audit: type=1804 audit(1718868551.232:58): pid=20942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/368/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 484.721173][ T4492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 484.731995][ T4492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 484.739381][ T29] audit: type=1804 audit(1718868551.232:59): pid=20939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/368/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 484.741400][ T4492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 484.795029][ T4492] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 484.804163][ T4492] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 484.814081][ T4492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 484.862934][T20951] wg1 speed is unknown, defaulting to 1000 [ 485.050347][T20951] chnl_net:caif_netlink_parms(): no params data found [ 485.082077][T20966] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 485.131672][ T2887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.140062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.224881][T20951] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.250695][T20951] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.258007][T20951] bridge_slave_0: entered allmulticast mode [ 485.309779][T20951] bridge_slave_0: entered promiscuous mode [ 485.319357][T20951] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.327084][T20951] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.339101][T20951] bridge_slave_1: entered allmulticast mode [ 485.357826][T20951] bridge_slave_1: entered promiscuous mode [ 485.436181][T20951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.464455][T20951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.585524][T20951] team0: Port device team_slave_0 added [ 485.610369][T20951] team0: Port device team_slave_1 added [ 485.719010][T20951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.750035][T20951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.801077][T20951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.836634][T20951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.856773][T20951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.942848][T20951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.067700][T21006] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 486.095035][T21006] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.117781][T21006] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 486.209238][T20951] hsr_slave_0: entered promiscuous mode [ 486.224184][T20951] hsr_slave_1: entered promiscuous mode [ 486.252593][T20951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.262678][T20951] Cannot create hsr debugfs directory [ 486.637605][T20951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.668459][T21020] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.775047][T20951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.858509][T20951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.892312][ T5124] Bluetooth: hci6: command tx timeout [ 486.947380][T20951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.787309][ T2887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.795923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.001544][T21081] wg1 speed is unknown, defaulting to 1000 [ 488.126807][T21081] could not set up IPv6 listen sock [ 488.262930][T21087] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 488.278120][T21087] team0: Device ipvlan1 failed to register rx_handler [ 488.425101][T21099] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 488.713180][T21106] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 488.730665][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.742152][T21106] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 488.760677][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.970980][ T5124] Bluetooth: hci6: command tx timeout [ 489.810645][T20951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.833610][T20951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.854647][T20951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.874595][T20951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 490.147333][T20951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.198084][T20951] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.282332][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.289523][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.317391][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 490.342830][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.350013][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.563196][T21137] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 490.595700][T21138] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.972527][ T2829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.981118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.051622][ T5124] Bluetooth: hci6: command tx timeout [ 491.239920][T20951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.429176][T21174] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.499053][T20951] veth0_vlan: entered promiscuous mode [ 491.555798][T20951] veth1_vlan: entered promiscuous mode [ 491.664068][T20951] veth0_macvtap: entered promiscuous mode [ 491.665200][T21186] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 491.705032][T20951] veth1_macvtap: entered promiscuous mode [ 491.771793][T20951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.796542][T20951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.826654][T20951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.850490][T20951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.874097][T20951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.885817][T20951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.897860][T20951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.966997][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.990131][T21192] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 492.000916][T21192] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 492.023655][T20951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.037966][T21197] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 492.059562][T20951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.069784][T20951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.100809][T20951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.121293][T20951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.129617][T21203] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 492.147398][T20951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.175356][T20951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.236927][T20951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.276859][T20951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.310364][T20951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.331731][T20951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.551908][ T2829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.576114][ T2829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.686037][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.721323][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.895642][T21240] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 493.131575][ T5124] Bluetooth: hci6: command tx timeout [ 493.498906][T21273] netlink: set zone limit has 4 unknown bytes [ 493.542652][ T2887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.551258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.692942][T21276] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 494.249578][T21315] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.519434][T21329] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 494.663752][T21330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.775154][T21330] bond4: entered promiscuous mode [ 494.791721][T21341] bond0: (slave bond_slave_0): Releasing backup interface [ 494.804354][T21341] bond_slave_0: entered promiscuous mode [ 494.822518][T21341] bond4: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.865369][T21349] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 494.921442][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.983642][T21353] bond4 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.026594][T21353] bond_slave_0: left promiscuous mode [ 495.069510][T21353] bond4 (unregistering): Released all slaves [ 495.125200][T21343] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 495.145408][T21359] bridge0: port 1(geneve1) entered blocking state [ 495.210874][T21359] bridge0: port 1(geneve1) entered disabled state [ 495.258042][T21359] geneve1: entered allmulticast mode [ 495.271891][T21359] geneve1: entered promiscuous mode [ 495.332776][T21368] vlan0: entered promiscuous mode [ 495.337862][T21368] vlan0: entered allmulticast mode [ 495.832060][T21396] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 496.021902][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.079440][T21402] bond0: (slave bond_slave_0): Releasing backup interface [ 496.152183][T21404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.451613][T21415] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 496.562776][T21417] FAULT_INJECTION: forcing a failure. [ 496.562776][T21417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.602717][T21421] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.629627][T21417] CPU: 1 PID: 21417 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 496.640189][T21417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 496.650249][T21417] Call Trace: [ 496.653531][T21417] [ 496.656459][T21417] dump_stack_lvl+0x241/0x360 [ 496.661150][T21417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.666344][T21417] ? __pfx__printk+0x10/0x10 [ 496.670931][T21417] ? __pfx_lock_release+0x10/0x10 [ 496.675956][T21417] should_fail_ex+0x3b0/0x4e0 [ 496.680680][T21417] _copy_from_iter+0x1f6/0x1960 [ 496.685531][T21417] ? __virt_addr_valid+0x183/0x520 [ 496.690696][T21417] ? __pfx_lock_release+0x10/0x10 [ 496.695718][T21417] ? __alloc_skb+0x28f/0x440 [ 496.700312][T21417] ? __pfx__copy_from_iter+0x10/0x10 [ 496.705598][T21417] ? __virt_addr_valid+0x183/0x520 [ 496.710706][T21417] ? __virt_addr_valid+0x183/0x520 [ 496.715835][T21417] ? __virt_addr_valid+0x44e/0x520 [ 496.720967][T21417] ? __check_object_size+0x49c/0x900 [ 496.726267][T21417] netlink_sendmsg+0x743/0xcb0 [ 496.731052][T21417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.736352][T21417] ? __import_iovec+0x536/0x820 [ 496.741206][T21417] ? aa_sock_msg_perm+0x91/0x160 [ 496.746148][T21417] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 496.751520][T21417] ? security_socket_sendmsg+0x87/0xb0 [ 496.757007][T21417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.762286][T21417] __sock_sendmsg+0x221/0x270 [ 496.766961][T21417] ____sys_sendmsg+0x525/0x7d0 [ 496.771726][T21417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.777298][T21417] __sys_sendmsg+0x2b0/0x3a0 [ 496.781914][T21417] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.787041][T21417] ? vfs_write+0x7c4/0xc90 [ 496.791498][T21417] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 496.797846][T21417] ? do_syscall_64+0x100/0x230 [ 496.802620][T21417] ? do_syscall_64+0xb6/0x230 [ 496.807295][T21417] do_syscall_64+0xf3/0x230 [ 496.812063][T21417] ? clear_bhb_loop+0x35/0x90 [ 496.816745][T21417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.822640][T21417] RIP: 0033:0x7fe1f5c7cf29 [ 496.827051][T21417] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 496.846662][T21417] RSP: 002b:00007fe1f57ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.855073][T21417] RAX: ffffffffffffffda RBX: 00007fe1f5db3f80 RCX: 00007fe1f5c7cf29 [ 496.863039][T21417] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 496.871006][T21417] RBP: 00007fe1f57ff120 R08: 0000000000000000 R09: 0000000000000000 [ 496.878972][T21417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.886937][T21417] R13: 000000000000004d R14: 00007fe1f5db3f80 R15: 00007ffd9b971c08 [ 496.894920][T21417] [ 496.924631][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.933161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.102256][T21434] smc: net device vlan0 applied user defined pnetid SYZ1 [ 497.108386][T21437] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 497.112499][T21434] No such timeout policy "syz0" [ 498.161030][T21492] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.173096][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.210315][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.524129][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.557446][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.648067][T21512] bond2: entered promiscuous mode [ 498.720055][T21520] bond0: (slave bond_slave_0): Releasing backup interface [ 498.779835][T21520] bond_slave_0: left allmulticast mode [ 498.915720][T21520] bond_slave_0: entered promiscuous mode [ 498.945181][T21520] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.978683][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 499.104043][T21512] bond2 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.182522][T21512] bond_slave_0: left promiscuous mode [ 499.207456][T21512] bond2 (unregistering): Released all slaves [ 499.292681][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.301243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.652937][T21569] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 499.933997][T21584] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 500.246323][T21603] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 500.572348][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 500.940017][T21652] xt_socket: unknown flags 0x4 [ 501.093442][T21667] __nla_validate_parse: 7 callbacks suppressed [ 501.093456][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 501.309813][T21678] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.314622][T21677] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.3'. [ 501.335970][T21678] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 501.351115][T21678] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.609602][T21690] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.624916][T21690] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 501.637622][T21690] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.663425][T21690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.739610][T21696] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 501.800521][T21699] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.012577][T21713] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 502.033153][T21713] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 502.048062][T21713] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 502.059952][T21713] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 502.095152][T21713] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 502.125324][T21713] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 502.396971][T21730] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 502.503475][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.512136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.865727][T21758] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 502.877878][T21758] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 502.937143][T21760] (unnamed net_device) (uninitialized): option mode: invalid value (7) [ 502.991097][T21760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 503.016892][T21760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.185506][T21782] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 504.192332][T21830] netlink: zone id is out of range [ 504.346835][T21840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.678493][T21861] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 504.743123][T21873] netlink: zone id is out of range [ 505.063108][ T2887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.071981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.368683][T21912] netlink: zone id is out of range [ 505.507242][T21922] validate_nla: 6 callbacks suppressed [ 505.507263][T21922] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 505.581793][T21922] bridge_slave_0: entered allmulticast mode [ 506.254262][T21959] __nla_validate_parse: 15 callbacks suppressed [ 506.254284][T21959] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.319829][T21959] netlink: zone id is out of range [ 506.529347][T21975] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.880016][T21984] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 507.451549][T22000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.527774][T22000] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.539096][T22000] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.548537][T22000] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.557364][T22000] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.608144][T22000] vxlan0: entered promiscuous mode [ 507.619219][T22000] vxlan0: entered allmulticast mode [ 507.764593][T22005] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.785704][T22005] netlink: zone id is out of range [ 508.031285][T22009] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.3'. [ 508.254812][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 508.262559][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.272512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.301561][T22013] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 508.992694][T22035] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.3'. [ 509.019892][T22035] netlink: zone id is out of range [ 509.297883][T22042] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. [ 509.492847][T22050] syzkaller1: entered promiscuous mode [ 509.498382][T22050] syzkaller1: entered allmulticast mode [ 509.566684][T22060] batman_adv: batadv0: Adding interface: ipvlan2 [ 509.592961][T22060] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.639852][T22060] batman_adv: batadv0: Interface activated: ipvlan2 [ 509.876072][T22073] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147483648 (only 8 groups) [ 510.154888][T22078] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.187924][T22078] netlink: zone id is out of range [ 510.349813][T22095] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 510.382336][T22094] syzkaller1: entered promiscuous mode [ 510.400746][T22094] syzkaller1: entered allmulticast mode [ 510.420160][T22095] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 510.459493][T22082] No such timeout policy "syz0" [ 510.811747][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.820154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.827499][T22118] netlink: zone id is out of range [ 510.947645][T22124] wg1 speed is unknown, defaulting to 1000 [ 510.964580][T22126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 510.978983][T22126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.994717][T22126] batman_adv: batadv0: Adding interface: ipvlan4 [ 511.001747][T22126] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.072137][T22126] batman_adv: batadv0: Interface activated: ipvlan4 [ 511.596441][T22149] __nla_validate_parse: 3 callbacks suppressed [ 511.596462][T22149] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.1'. [ 511.629294][T22149] netlink: zone id is out of range [ 511.849267][T22157] syz-executor.1: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 511.915789][T22157] CPU: 1 PID: 22157 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 511.926352][T22157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 511.936436][T22157] Call Trace: [ 511.939731][T22157] [ 511.942691][T22157] dump_stack_lvl+0x241/0x360 [ 511.947397][T22157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.952625][T22157] ? __pfx__printk+0x10/0x10 [ 511.957243][T22157] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 511.963687][T22157] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 511.970215][T22157] warn_alloc+0x278/0x410 [ 511.974563][T22157] ? stack_depot_save_flags+0x29/0x830 [ 511.980039][T22157] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 511.986131][T22157] ? __pfx_warn_alloc+0x10/0x10 [ 511.991014][T22157] ? kasan_save_track+0x3f/0x80 [ 511.995877][T22157] ? __kasan_kmalloc+0x98/0xb0 [ 512.000666][T22157] ? xsk_setsockopt+0x598/0x950 [ 512.005612][T22157] ? do_sock_setsockopt+0x3af/0x720 [ 512.010806][T22157] ? __sys_setsockopt+0x1ae/0x250 [ 512.015824][T22157] ? __x64_sys_setsockopt+0xb5/0xd0 [ 512.021015][T22157] ? do_syscall_64+0xf3/0x230 [ 512.025686][T22157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.031755][T22157] __vmalloc_node_range_noprof+0x130/0x1460 [ 512.037676][T22157] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 512.044008][T22157] ? __kasan_kmalloc+0x98/0xb0 [ 512.048774][T22157] ? xskq_create+0x54/0x170 [ 512.053278][T22157] vmalloc_user_noprof+0x74/0x80 [ 512.058217][T22157] ? xskq_create+0xb6/0x170 [ 512.062726][T22157] xskq_create+0xb6/0x170 [ 512.067053][T22157] xsk_init_queue+0xa1/0x100 [ 512.071652][T22157] xsk_setsockopt+0x598/0x950 [ 512.076325][T22157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 512.081518][T22157] ? __pfx_lock_acquire+0x10/0x10 [ 512.086535][T22157] ? aa_sock_opt_perm+0x79/0x120 [ 512.091473][T22157] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 512.097016][T22157] ? security_socket_setsockopt+0x87/0xb0 [ 512.102735][T22157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 512.107924][T22157] do_sock_setsockopt+0x3af/0x720 [ 512.113035][T22157] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 512.118579][T22157] ? __fget_files+0x29/0x470 [ 512.123175][T22157] ? __fget_files+0x3f6/0x470 [ 512.127856][T22157] __sys_setsockopt+0x1ae/0x250 [ 512.132704][T22157] __x64_sys_setsockopt+0xb5/0xd0 [ 512.137724][T22157] do_syscall_64+0xf3/0x230 [ 512.142221][T22157] ? clear_bhb_loop+0x35/0x90 [ 512.146899][T22157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.152790][T22157] RIP: 0033:0x7f6eaf07cf29 [ 512.157208][T22157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 512.176820][T22157] RSP: 002b:00007f6eafe9f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 512.185233][T22157] RAX: ffffffffffffffda RBX: 00007f6eaf1b4050 RCX: 00007f6eaf07cf29 [ 512.193204][T22157] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 512.201167][T22157] RBP: 00007f6eaf0ec074 R08: 0000000000000004 R09: 0000000000000000 [ 512.209153][T22157] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.217143][T22157] R13: 000000000000006e R14: 00007f6eaf1b4050 R15: 00007ffe31dda818 [ 512.225131][T22157] [ 512.238300][T22160] batadv0: entered promiscuous mode [ 512.257124][T22160] batadv_slave_0: entered promiscuous mode [ 512.267175][T22157] Mem-Info: [ 512.286136][T22161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 512.298935][T22160] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 512.332312][T22160] Cannot create hsr debugfs directory [ 512.338986][T22157] active_anon:18586 inactive_anon:0 isolated_anon:0 [ 512.338986][T22157] active_file:0 inactive_file:46854 isolated_file:0 [ 512.338986][T22157] unevictable:768 dirty:75 writeback:0 [ 512.338986][T22157] slab_reclaimable:12405 slab_unreclaimable:121413 [ 512.338986][T22157] mapped:22688 shmem:1756 pagetables:672 [ 512.338986][T22157] sec_pagetables:0 bounce:0 [ 512.338986][T22157] kernel_misc_reclaimable:0 [ 512.338986][T22157] free:1329819 free_pcp:3765 free_cma:0 [ 512.436500][T22157] Node 0 active_anon:74244kB inactive_anon:0kB active_file:0kB inactive_file:187336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90752kB dirty:292kB writeback:0kB shmem:5488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11952kB pagetables:2588kB sec_pagetables:0kB all_unreclaimable? no [ 512.489268][T22157] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 512.561072][T22157] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.647641][T22157] lowmem_reserve[]: 0 2571 2571 0 0 [ 512.685923][T22157] Node 0 DMA32 free:1359188kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:74308kB inactive_anon:0kB active_file:0kB inactive_file:187024kB unevictable:1536kB writepending:288kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:1180kB local_pcp:504kB free_cma:0kB [ 512.775253][T22157] lowmem_reserve[]: 0 0 0 0 0 [ 512.780053][T22157] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 512.798529][T22183] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'. [ 512.827573][T22185] dummy0: Device is already in use. [ 512.838229][T22157] lowmem_reserve[]: 0 0 0 0 0 [ 512.842062][T22183] netlink: zone id is out of range [ 512.850619][T22157] Node 1 Normal free:3951304kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:8kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.904270][T22157] lowmem_reserve[]: 0 0 0 0 0 [ 512.909105][T22157] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 512.927050][T22157] Node 0 DMA32: 930*4kB (UME) 695*8kB (UME) 598*16kB (UME) 93*32kB (ME) 59*64kB (UME) 41*128kB (UME) 56*256kB (UME) 46*512kB (UM) 19*1024kB (UM) 8*2048kB (UME) 304*4096kB (UME) = 1349760kB [ 512.959153][T22157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 512.993870][T22157] Node 1 Normal: 2*4kB (U) 10*8kB (U) 9*16kB (U) 13*32kB (U) 11*64kB (UM) 5*128kB (U) 5*256kB (UM) 3*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 962*4096kB (M) = 3951304kB [ 513.031285][T22157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 513.041601][T22157] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 513.053644][ T29] audit: type=1804 audit(1718868579.812:60): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4159927979/syzkaller.Ynzs5G/462/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 513.088505][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 513.098528][T22157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 513.098830][T22195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 513.138481][T22157] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 513.159607][T22157] 48817 total pagecache pages [ 513.167991][T22157] 0 pages in swap cache [ 513.183660][T22157] Free swap = 124996kB [ 513.193879][T22157] Total swap = 124996kB [ 513.204678][T22157] 2097051 pages RAM [ 513.216985][T22157] 0 pages HighMem/MovableOnly [ 513.222059][T22157] 400871 pages reserved [ 513.230783][T22157] 0 pages cma reserved [ 513.438881][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.477985][T22208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.488120][T22208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.684402][T22223] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.713629][T22223] netlink: zone id is out of range [ 513.889421][T22234] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 514.012055][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.020489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.045524][T22240] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 514.205966][T22248] tipc: Failed to remove unknown binding: 66,1,1/4294967293:2554134393/2554134395 [ 514.227052][T22248] tipc: Failed to remove unknown binding: 66,1,1/4294967293:2554134393/2554134395 [ 514.236982][T22248] tipc: Failed to remove unknown binding: 66,1,1/4294967293:2554134393/2554134395 [ 514.267091][T22252] netlink: zone id is out of range [ 514.306600][T22257] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 514.569666][ T29] audit: type=1804 audit(1718868581.332:61): pid=22266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4174725586/syzkaller.lY9SAi/54/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 514.683112][ T29] audit: type=1800 audit(1718868581.452:62): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 514.734811][ T29] audit: type=1804 audit(1718868581.482:63): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3386274100/syzkaller.eiM0Qz/1227/memory.events" dev="sda1" ino=1971 res=1 errno=0 [ 514.779850][ T29] audit: type=1804 audit(1718868581.492:64): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3386274100/syzkaller.eiM0Qz/1227/memory.events" dev="sda1" ino=1971 res=1 errno=0 [ 515.142064][T22289] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 515.367982][T22295] netlink: zone id is out of range [ 515.936514][T22323] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 515.962266][T22324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 515.990594][T22324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.004144][T22324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 516.044202][T22324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.088967][T22324] batman_adv: batadv0: Adding interface: ipvlan3 [ 516.110811][T22324] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.161129][T22324] batman_adv: batadv0: Interface activated: ipvlan3 [ 516.211898][T22329] netlink: zone id is out of range [ 516.468852][ T29] audit: type=1804 audit(1718868583.232:65): pid=22335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4159927979/syzkaller.Ynzs5G/467/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 516.572096][ T2887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.580580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.832246][T22359] __nla_validate_parse: 15 callbacks suppressed [ 516.832267][T22359] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.1'. [ 516.883129][T22352] x_tables: duplicate underflow at hook 3 [ 516.899452][T22360] rdma_rxe: rxe_newlink: failed to add lo [ 516.910923][T22360] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.972948][T22363] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.083938][T22369] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 517.145998][T22371] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.174137][T22371] netlink: zone id is out of range [ 517.219376][T22373] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 517.462302][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 517.490326][T22387] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.520256][T22389] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.4'. [ 517.558521][T22390] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.597019][T22390] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.631908][T22395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.034362][T22411] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 519.059772][T22444] net_ratelimit: 1 callbacks suppressed [ 519.059794][T22444] netlink: zone id is out of range [ 519.133633][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.142216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.562815][T22493] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 520.603837][T22493] team0: left allmulticast mode [ 520.618813][T22493] team_slave_0: left allmulticast mode [ 520.633706][T22493] team_slave_1: left allmulticast mode [ 520.650488][T22493] dummy0: left allmulticast mode [ 520.655589][T22493] team0: left promiscuous mode [ 520.660366][T22493] team_slave_0: left promiscuous mode [ 520.671142][T22493] team_slave_1: left promiscuous mode [ 520.682131][T22493] dummy0: left promiscuous mode [ 520.694864][T22493] bridge0: port 3(team0) entered disabled state [ 520.728405][T22493] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.753005][T22493] bond0: (slave team0): Enslaving as an active interface with an up link [ 520.773679][T22497] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 520.835617][T22497] bond0: (slave team0): Releasing backup interface [ 520.881498][T22497] bridge0: port 3(team0) entered blocking state [ 520.887886][T22497] bridge0: port 3(team0) entered disabled state [ 520.920932][T22497] team0: entered allmulticast mode [ 520.926105][T22497] team_slave_0: entered allmulticast mode [ 520.951974][T22497] team_slave_1: entered allmulticast mode [ 520.957772][T22497] dummy0: entered allmulticast mode [ 520.982765][T22497] team0: entered promiscuous mode [ 520.998149][T22497] team_slave_0: entered promiscuous mode [ 521.008490][T22497] team_slave_1: entered promiscuous mode [ 521.020812][T22497] dummy0: entered promiscuous mode [ 521.055321][T22503] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 521.949420][T22539] __nla_validate_parse: 26 callbacks suppressed [ 521.949443][T22539] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.042934][T22539] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.061194][T22539] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.341097][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.349739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.512883][T22539] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.540840][T22539] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.575691][T22553] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 522.601306][T22553] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 522.647125][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 522.903081][T22569] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 523.307768][T22578] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 523.661405][T22586] macvlan0: entered promiscuous mode [ 523.673767][T22591] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 523.682657][T22586] ipvlan0: entered promiscuous mode [ 523.689130][T22586] ipvlan0: left promiscuous mode [ 523.704755][T22586] macvlan0: left promiscuous mode [ 523.876321][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 523.884127][T22606] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 523.978152][T22610] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 524.197114][ T5206] IPVS: starting estimator thread 0... [ 524.301391][T22629] IPVS: using max 18 ests per chain, 43200 per kthread [ 524.545063][T22651] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 524.896783][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.905839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.064707][T22713] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 526.301670][T22722] IPVS: Unknown mcast interface: vcan0 [ 526.421064][T22728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 526.445892][T22728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.460773][T22728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan4 [ 526.478632][T22728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.491586][T22728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan3 [ 526.505355][T22728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.516959][T22728] dummy0: entered promiscuous mode [ 526.522761][T22728] macsec1: entered promiscuous mode [ 526.535825][T22728] dummy0: left promiscuous mode [ 526.988845][T22763] __nla_validate_parse: 38 callbacks suppressed [ 526.988867][T22763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 527.027055][T22763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 527.203576][T22772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 527.279205][T22767] nlmon0: Master is either lo or non-ether device [ 527.406601][T20951] cgroup: fork rejected by pids controller in /syz1 [ 527.589069][T22786] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 527.600253][T22786] openvswitch: 庶: Dropping previously announced user features [ 527.605903][T22789] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 527.876306][ T2811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.912250][ T2811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.013607][T22794] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 528.092596][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.101148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.228095][ T2811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.249531][ T2811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.284674][T22813] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 528.362058][T22813] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 528.381001][T22813] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 528.420147][T22813] team0: Port device wlan1 added [ 528.490091][ T2811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.530808][ T2811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.669718][ T2811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.705601][ T2811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.787527][ T4492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 528.801580][ T4492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 528.812557][ T4492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 528.842322][ T4492] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 528.850258][ T4492] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 528.857928][ T4492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 528.900377][T22830] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 528.941732][T22836] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 528.956528][T22836] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.010532][T22836] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.024928][T22836] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.056654][T22834] wg1 speed is unknown, defaulting to 1000 [ 529.178308][ T2811] bridge_slave_1: left allmulticast mode [ 529.188304][ T2811] bridge_slave_1: left promiscuous mode [ 529.200947][ T2811] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.228853][ T2811] bridge_slave_0: left allmulticast mode [ 529.234972][ T2811] bridge_slave_0: left promiscuous mode [ 529.241336][ T2811] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.501389][T22860] sctp: [Deprecated]: syz-executor.2 (pid 22860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.501389][T22860] Use struct sctp_sack_info instead [ 530.207334][ T2811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.218768][ T2811] bond0 (unregistering): Released all slaves [ 530.575023][ T29] audit: type=1804 audit(1718868597.332:66): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 530.652665][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.661121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.675908][ T29] audit: type=1804 audit(1718868597.372:67): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 530.704716][ T29] audit: type=1804 audit(1718868597.372:68): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 530.731587][ T29] audit: type=1804 audit(1718868597.372:69): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 530.758988][ T29] audit: type=1804 audit(1718868597.372:70): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 530.786919][ T29] audit: type=1804 audit(1718868597.392:71): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 530.823896][ T29] audit: type=1804 audit(1718868597.392:72): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 530.868364][ T29] audit: type=1804 audit(1718868597.392:73): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 530.910727][ T5124] Bluetooth: hci6: command tx timeout [ 530.947010][ T29] audit: type=1804 audit(1718868597.402:74): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 531.010053][ T29] audit: type=1804 audit(1718868597.402:75): pid=22900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/488/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 531.174497][T22834] chnl_net:caif_netlink_parms(): no params data found [ 531.392595][ T2811] hsr_slave_0: left promiscuous mode [ 531.411815][ T2811] hsr_slave_1: left promiscuous mode [ 531.426099][ T2811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.433829][ T2811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.444474][ T2811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.452035][ T2811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.485316][ T2811] veth1_macvtap: left promiscuous mode [ 531.491008][ T2811] veth0_macvtap: left promiscuous mode [ 531.496581][ T2811] veth1_vlan: left promiscuous mode [ 531.502449][ T2811] veth0_vlan: left promiscuous mode [ 531.744595][ T2811] smc: removing net device vlan0 with user defined pnetid SYZ1 [ 532.041153][ T2811] team0 (unregistering): Port device team_slave_1 removed [ 532.100904][ T2811] team0 (unregistering): Port device team_slave_0 removed [ 532.786109][T22951] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 532.801180][T22951] __nla_validate_parse: 8 callbacks suppressed [ 532.801207][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 532.868676][T22930] wg1 speed is unknown, defaulting to 1000 [ 532.874748][T22834] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.874846][T22834] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.875080][T22834] bridge_slave_0: entered allmulticast mode [ 532.906311][T22834] bridge_slave_0: entered promiscuous mode [ 532.917690][T22834] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.925156][T22834] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.934372][T22834] bridge_slave_1: entered allmulticast mode [ 532.942462][T22834] bridge_slave_1: entered promiscuous mode [ 532.971477][ T5124] Bluetooth: hci6: command tx timeout [ 533.104661][T22834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.142252][ T2829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.150696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.163796][T22834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.235597][T22966] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 533.388645][T22834] team0: Port device team_slave_0 added [ 533.406558][T22966] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 533.418725][T22966] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 533.478126][T22834] team0: Port device team_slave_1 added [ 533.494866][T22966] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 533.506743][T22966] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 533.521811][T22976] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 533.592720][T22972] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 533.658827][T22834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.666364][T22834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.696922][T22834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.715388][T22834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.728659][T22834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.769361][T22834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.859717][ T2811] IPVS: stop unused estimator thread 0... [ 533.912825][T22834] hsr_slave_0: entered promiscuous mode [ 533.929144][T22834] hsr_slave_1: entered promiscuous mode [ 533.939127][T22834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.956876][T22834] Cannot create hsr debugfs directory [ 533.973505][T22984] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 534.006396][T22984] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 534.112932][T22991] netlink: 212404 bytes leftover after parsing attributes in process `syz-executor.3'. [ 534.243485][T23002] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.251975][T23002] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.260173][T23002] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.269513][T23002] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.286917][T23002] vxlan0: entered promiscuous mode [ 534.296504][T23002] vxlan0: entered allmulticast mode [ 534.309740][T23002] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.320025][T23002] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.328770][T23002] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.337315][T23002] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.499580][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 535.051246][ T5124] Bluetooth: hci6: command tx timeout [ 535.378592][T23024] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 535.397143][T23024] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 535.417956][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 535.634027][T23040] bridge0: port 5(geneve1) entered blocking state [ 535.667939][T23040] bridge0: port 5(geneve1) entered disabled state [ 535.682100][T23040] geneve1: entered allmulticast mode [ 535.713302][T23040] geneve1: entered promiscuous mode [ 535.817477][T23040] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 535.950195][T22834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 535.987030][T22834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 536.024377][T22834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 536.075223][T22834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 536.182840][T23062] sctp: [Deprecated]: syz-executor.3 (pid 23062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.182840][T23062] Use struct sctp_sack_info instead [ 536.386357][T22834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.412623][ T2811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.421150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.478753][T22834] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.531755][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.538904][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.571694][T23071] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 536.592846][T23071] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 536.606219][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.613425][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.858843][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 536.858862][ T29] audit: type=1804 audit(1718868603.622:82): pid=23088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/500/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 536.917647][ T29] audit: type=1804 audit(1718868603.682:83): pid=23088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4179745165/syzkaller.Yfxe8C/500/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 537.132253][ T5124] Bluetooth: hci6: command tx timeout [ 537.152699][T23103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 537.249263][T22834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.446160][T22834] veth0_vlan: entered promiscuous mode [ 537.488303][T22834] veth1_vlan: entered promiscuous mode [ 537.582663][T22834] veth0_macvtap: entered promiscuous mode [ 537.608044][T22834] veth1_macvtap: entered promiscuous mode [ 537.666224][T22834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.681634][T22834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.693556][T22834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.704538][T22834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.714411][T22834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.725007][T22834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.738263][T22834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.759881][T22834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.773924][T22834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.785709][T22834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.797720][T22834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.808099][T22834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.818792][T22834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.845629][T22834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.903357][T22834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.930805][T22834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.967982][T22834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.987199][T22834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.195030][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.222113][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.309327][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.334192][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.536103][T23178] __nla_validate_parse: 2 callbacks suppressed [ 538.536123][T23178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.609089][T23178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.805124][T23195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 538.816844][T23195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 538.831338][T23195] bridge0: port 4(veth0) entered blocking state [ 538.838614][T23195] bridge0: port 4(veth0) entered disabled state [ 538.845694][T23195] veth0: entered allmulticast mode [ 538.859548][T23195] veth0: entered promiscuous mode [ 538.983037][ T2811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.991801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.114734][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 539.566747][T23234] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.4'. [ 539.621924][T23234] netlink: zone id is out of range [ 539.665756][T23238] can: request_module (can-proto-0) failed. [ 540.208144][T23269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 540.333546][T23274] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.375718][T23274] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.435591][T23280] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.3'. [ 540.618360][T23288] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 541.107054][T23306] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 541.117504][T23306] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 541.407576][T23321] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 541.632183][T23332] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 541.704529][T23341] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 541.704908][T23338] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 541.735869][T23338] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 541.748155][T23338] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 542.150413][T23355] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 542.160706][T23355] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 542.173084][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.182191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.299997][T23355] team0: Port device wlan1 added [ 542.883893][ T29] audit: type=1804 audit(1718868609.652:84): pid=23385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4159927979/syzkaller.Ynzs5G/540/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 543.788887][T23425] __nla_validate_parse: 15 callbacks suppressed [ 543.788912][T23425] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'. [ 544.103192][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.111675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.185880][T23452] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'. [ 544.479561][T23472] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 544.632986][T23484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 544.663933][T23489] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 544.756597][T23485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.897029][ T4492] Bluetooth: hci5: command 0x0406 tx timeout [ 544.986592][T23501] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 545.008201][T23501] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 545.449456][T23509] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.1'. [ 546.201052][T23539] validate_nla: 4 callbacks suppressed [ 546.201072][T23539] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 546.239857][T23539] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 546.489629][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 546.871996][T23562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 547.941029][ T2811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.949487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.017172][T23585] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 548.061672][T23585] hsr0: entered promiscuous mode [ 548.091675][T23585] : (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 548.140526][T23585] : (slave hsr0): The slave device specified does not support setting the MAC address [ 548.184044][T23585] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 548.211928][T23585] : (slave hsr0): Error -22 calling dev_set_mtu [ 548.502216][ T29] audit: type=1804 audit(1718868615.272:85): pid=23611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir902818497/syzkaller.bnDXch/757/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 548.575483][T23615] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 549.215087][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.223600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.293177][T23633] bridge_slave_0 (unregistering): left allmulticast mode [ 549.320172][T23633] bridge_slave_0 (unregistering): left promiscuous mode [ 549.344678][T23633] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.334764][T23656] __nla_validate_parse: 6 callbacks suppressed [ 550.334783][T23656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.357311][T23642] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 550.369236][T23642] hsr0: entered promiscuous mode [ 550.374657][T23642] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 550.388735][T23642] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 550.411174][T23642] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 550.444021][T23642] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.613893][T23662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.651121][T23662] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 550.709227][T23661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.731028][T23661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.740051][T23661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.762828][T23661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.806131][T23668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 550.838592][T23668] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.848234][T23668] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.859733][T23668] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.868860][T23668] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.084146][T23682] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 551.108549][T23682] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 551.254136][T23692] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 551.322134][T23693] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 551.353019][T23693] : (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 551.396048][T23693] : (slave hsr0): The slave device specified does not support setting the MAC address [ 551.435380][T23693] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 551.496905][T23693] : (slave hsr0): Error -22 calling dev_set_mtu [ 552.088828][T23717] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 552.299753][T23717] team0: Device veth1_vlan failed to register rx_handler [ 552.418022][T23736] tipc: Started in network mode [ 552.448453][T23736] tipc: Node identity ac1414aa, cluster identity 4711 [ 552.484278][T23736] tipc: Enabled bearer , priority 0 [ 552.579451][T23742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.609860][T23742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.912137][T23762] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 552.920406][T23762] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 552.959077][T23763] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 552.971463][T23763] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 553.044280][T23770] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 553.053348][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.062300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.334892][T23777] tipc: Started in network mode [ 553.356154][T23777] tipc: Node identity ac1414aa, cluster identity 3 [ 553.375677][T23777] tipc: Enabling of bearer rejected, failed to enable media [ 553.413429][T23781] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 553.470083][T23783] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 553.491608][T23781] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 553.600925][ T9573] tipc: Node number set to 2886997162 [ 554.092631][T23813] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 554.355697][T23828] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 554.823876][T23846] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 555.089496][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.098072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.198568][T23850] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 555.485469][T23880] __nla_validate_parse: 2 callbacks suppressed [ 555.485489][T23880] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 555.526190][T23885] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 556.163736][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.189976][T23931] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 556.272351][T23936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 556.406361][T23945] netdevsim netdevsim4 : renamed from netdevsim0 [ 556.551448][T23945] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 556.659808][T23952] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'. [ 556.692646][T23952] netlink: zone id is out of range [ 556.973332][T23962] bridge0: port 1(vlan0) entered blocking state [ 557.005282][T23962] bridge0: port 1(vlan0) entered disabled state [ 557.021909][T23962] vlan0: entered allmulticast mode [ 557.033032][T23962] vlan0: left allmulticast mode [ 557.066434][T23976] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 557.089031][T23976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 557.194760][T23984] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.198670][T23985] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.3'. [ 557.232028][T23985] netlink: zone id is out of range [ 557.360906][T23992] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 557.439205][ T5206] IPVS: starting estimator thread 0... [ 557.540867][T23998] IPVS: using max 22 ests per chain, 52800 per kthread [ 557.722461][T24015] veth0_vlan: entered allmulticast mode [ 557.748725][T24015] veth0_vlan: entered promiscuous mode [ 557.861159][T24020] geneve1: left allmulticast mode [ 557.870694][T24020] geneve1: left promiscuous mode [ 557.875961][T24020] bridge0: port 1(geneve1) entered disabled state [ 558.230281][T24039] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 558.820963][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.829550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.831613][T24067] xt_TCPMSS: Only works on TCP SYN packets [ 558.902795][ T29] audit: type=1804 audit(1718868625.662:86): pid=24070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir902818497/syzkaller.bnDXch/790/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 558.994732][T24073] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 558.997276][ T29] audit: type=1804 audit(1718868625.662:87): pid=24070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir902818497/syzkaller.bnDXch/790/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 559.078352][T24080] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 559.092266][T24077] wg1 speed is unknown, defaulting to 1000 [ 559.098327][T24080] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 559.106848][ T29] audit: type=1804 audit(1718868625.672:88): pid=24070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir902818497/syzkaller.bnDXch/790/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 559.234809][ T5121] IPVS: starting estimator thread 0... [ 559.330686][T24088] IPVS: using max 24 ests per chain, 57600 per kthread [ 559.892285][T24102] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 560.324893][T24123] veth0_vlan: entered promiscuous mode [ 560.373399][T24126] wg2: entered promiscuous mode [ 560.396887][T24126] wg2: entered allmulticast mode [ 560.726514][T24147] nbd: must specify at least one socket [ 560.739028][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.747631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.074214][T24166] ipvlan2: entered promiscuous mode [ 561.105265][T24166] ipvlan2: entered allmulticast mode [ 561.135206][T24166] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 561.719079][T24198] __nla_validate_parse: 15 callbacks suppressed [ 561.719104][T24198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 561.780194][T24198] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 561.956730][T24207] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 562.268503][T24228] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 562.372116][T24236] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 562.576086][T24248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.598512][T24248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.612866][T24248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.625440][T24248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.650754][T24248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.671145][T24248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.695689][T24248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.726397][T24248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.739468][T24256] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 562.770611][T24256] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 562.788227][T24255] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 562.890210][T24261] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 562.966444][T24265] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 563.070093][T24269] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 563.189088][T24276] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 563.204236][T24276] netlink: 196608 bytes leftover after parsing attributes in process `syz-executor.3'. [ 563.227291][T24276] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 563.236909][T24276] netlink: 196608 bytes leftover after parsing attributes in process `syz-executor.3'. [ 563.262889][T24279] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 563.286592][T24280] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 563.712236][T24311] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 564.027234][T24340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.058956][T24340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.095615][T24340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.135953][T24340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.216724][T24340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.261398][T24340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.299911][T24340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.323866][T24340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.476824][T24359] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 564.581136][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.589398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.262927][ T29] audit: type=1800 audit(1718868633.022:89): pid=24436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 566.311474][ T29] audit: type=1804 audit(1718868633.032:90): pid=24436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4159927979/syzkaller.Ynzs5G/615/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 566.496318][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.505021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.274043][T24473] __nla_validate_parse: 6 callbacks suppressed [ 567.274064][T24473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 567.299090][T24473] macvtap1: entered promiscuous mode [ 567.306387][T24473] bond0: entered promiscuous mode [ 567.314532][T24473] bond_slave_1: entered promiscuous mode [ 567.325843][T24473] macvtap1: entered allmulticast mode [ 567.337523][T24473] bond0: entered allmulticast mode [ 567.351882][T24473] bond_slave_1: entered allmulticast mode [ 567.369470][T24473] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 567.382312][T24478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 567.405606][T24478] macvtap1: left promiscuous mode [ 567.411401][T24478] bond0: left promiscuous mode [ 567.416305][T24478] bond_slave_1: left promiscuous mode [ 567.422616][T24478] macvtap1: left allmulticast mode [ 567.427876][T24478] bond0: left allmulticast mode [ 567.433276][T24478] bond_slave_1: left allmulticast mode [ 567.514062][T24486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 567.661414][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 567.996208][T24515] IPVS: set_ctl: invalid protocol: 136 10.1.1.1:20003 [ 568.374580][T24532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 568.393356][T24532] vlan0: entered promiscuous mode [ 568.398819][T24532] bond0: entered promiscuous mode [ 568.404938][T24532] bond_slave_1: entered promiscuous mode [ 568.429205][T24532] bond0: left promiscuous mode [ 568.439672][T24532] bond_slave_1: left promiscuous mode [ 568.783015][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 568.952479][T24554] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 569.006507][T24554] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 569.037265][T24554] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 569.082880][T24554] team0: Port device netdevsim0 added [ 569.497575][T24590] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 569.501609][T24592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 569.530291][T24592] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 569.631255][T24594] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 569.665300][T24594] 0猉功D: renamed from gretap0 (while UP) [ 569.685709][T24594] 0猉功D: entered allmulticast mode [ 569.741931][T24594] A link change request failed with some changes committed already. Interface 60猉功D may have been left with an inconsistent configuration, please check. [ 569.841386][T24605] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 569.850205][T24605] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 569.904593][T24605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 569.932336][T24609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.331357][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.340210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.879162][T24662] gretap0: entered promiscuous mode [ 570.903058][T24662] 0猉功D: renamed from gretap0 [ 570.911663][T24662] 0猉功D: left promiscuous mode [ 570.916865][T24662] 0猉功D: entered allmulticast mode [ 570.928742][T24662] A link change request failed with some changes committed already. Interface 60猉功D may have been left with an inconsistent configuration, please check. [ 571.004979][T24664] netlink: zone id is out of range [ 571.351765][T24681] vcan1: entered promiscuous mode [ 571.602571][T24692] netlink: zone id is out of range [ 571.698358][T24695] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 571.809058][T24706] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 572.275164][ T2829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.283720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.506657][T24721] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 572.604775][T24724] FAULT_INJECTION: forcing a failure. [ 572.604775][T24724] name failslab, interval 1, probability 0, space 0, times 0 [ 572.618715][T24724] CPU: 0 PID: 24724 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 572.629306][T24724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 572.639389][T24724] Call Trace: [ 572.642684][T24724] [ 572.645625][T24724] dump_stack_lvl+0x241/0x360 [ 572.650368][T24724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.655602][T24724] ? __pfx__printk+0x10/0x10 [ 572.660231][T24724] should_fail_ex+0x3b0/0x4e0 [ 572.664934][T24724] ? radix_tree_node_alloc+0x8b/0x3c0 [ 572.670335][T24724] should_failslab+0x9/0x20 [ 572.674869][T24724] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 572.680307][T24724] radix_tree_node_alloc+0x8b/0x3c0 [ 572.685534][T24724] idr_get_free+0x296/0xab0 [ 572.690089][T24724] idr_alloc_u32+0x195/0x330 [ 572.690764][T24730] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 572.694686][T24724] ? __pfx_idr_alloc_u32+0x10/0x10 [ 572.708031][T24724] ? __pfx_lock_acquire+0x10/0x10 [ 572.713089][T24724] idr_alloc_cyclic+0x106/0x300 [ 572.717986][T24724] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 572.723380][T24724] ? __radix_tree_preload+0x80/0x860 [ 572.728697][T24724] ? __radix_tree_preload+0x80/0x860 [ 572.734011][T24724] ? bpf_link_prime+0x4c/0x1e0 [ 572.738808][T24724] bpf_link_prime+0x6b/0x1e0 [ 572.743431][T24724] bpf_raw_tp_link_attach+0x3c4/0x6e0 [ 572.748842][T24724] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 572.754978][T24724] bpf_raw_tracepoint_open+0x1c2/0x240 [ 572.760487][T24724] __sys_bpf+0x3c0/0x810 [ 572.764935][T24724] ? __pfx___sys_bpf+0x10/0x10 [ 572.769736][T24724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 572.775745][T24724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 572.782111][T24724] ? do_syscall_64+0x100/0x230 [ 572.786911][T24724] __x64_sys_bpf+0x7c/0x90 [ 572.791360][T24724] do_syscall_64+0xf3/0x230 [ 572.795891][T24724] ? clear_bhb_loop+0x35/0x90 [ 572.800597][T24724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.806520][T24724] RIP: 0033:0x7f8f46e7cf29 [ 572.811136][T24724] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 572.830854][T24724] RSP: 002b:00007f8f47be90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.837913][T24734] __nla_validate_parse: 14 callbacks suppressed [ 572.837932][T24734] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'. [ 572.839275][T24724] RAX: ffffffffffffffda RBX: 00007f8f46fb3f80 RCX: 00007f8f46e7cf29 [ 572.839294][T24724] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 572.839308][T24724] RBP: 00007f8f47be9120 R08: 0000000000000000 R09: 0000000000000000 [ 572.839320][T24724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.839331][T24724] R13: 000000000000004d R14: 00007f8f46fb3f80 R15: 00007ffe80fccd08 [ 572.846086][T24734] netlink: zone id is out of range [ 572.855266][T24724] [ 572.858848][T24726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 573.106367][T24746] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 573.119822][T24746] netlink: 130968 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.732744][T24764] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 573.758572][T24764] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 573.799055][T24766] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 573.817804][T24766] hsr0: entered promiscuous mode [ 573.828450][T24766] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 574.128681][T24778] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.4'. [ 574.146762][T24778] netlink: zone id is out of range [ 574.460397][ T29] audit: type=1804 audit(1718868641.222:91): pid=24790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3463680276/syzkaller.OCEEZG/115/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 574.795965][T24797] veth1: mtu less than device minimum [ 575.102670][T24821] tun0: tun_chr_ioctl cmd 1074025692 [ 575.128422][T24820] tun0: tun_chr_ioctl cmd 1074025673 [ 575.274637][T24829] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.2'. [ 575.331321][T24829] netlink: zone id is out of range [ 575.403308][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 575.588203][T24843] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2233883273/2233883275 [ 575.619717][T24846] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 575.623185][T24843] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2233883273/2233883275 [ 575.648072][T24846] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 575.792475][T24862] xt_bpf: check failed: parse error [ 575.818897][T24862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.962734][T24870] FAULT_INJECTION: forcing a failure. [ 575.962734][T24870] name failslab, interval 1, probability 0, space 0, times 0 [ 575.976689][T24870] CPU: 1 PID: 24870 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 575.987215][T24870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 575.997273][T24870] Call Trace: [ 576.000639][T24870] [ 576.003578][T24870] dump_stack_lvl+0x241/0x360 [ 576.008260][T24870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.013484][T24870] ? __pfx__printk+0x10/0x10 [ 576.018079][T24870] should_fail_ex+0x3b0/0x4e0 [ 576.022754][T24870] ? skb_clone+0x20c/0x390 [ 576.027164][T24870] should_failslab+0x9/0x20 [ 576.031663][T24870] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 576.037035][T24870] skb_clone+0x20c/0x390 [ 576.041270][T24870] ? dev_queue_xmit_nit+0x220/0xc10 [ 576.046475][T24870] dev_queue_xmit_nit+0x419/0xc10 [ 576.051503][T24870] ? dev_queue_xmit_nit+0x2b/0xc10 [ 576.056894][T24870] ? validate_xmit_skb+0xa04/0x1120 [ 576.062100][T24870] dev_hard_start_xmit+0x15f/0x7e0 [ 576.067211][T24870] ? __pfx_validate_xmit_skb+0x10/0x10 [ 576.073017][T24870] __dev_queue_xmit+0x1b0e/0x3d30 [ 576.078089][T24870] ? __dev_queue_xmit+0x2d2/0x3d30 [ 576.083295][T24870] ? __pfx___dev_queue_xmit+0x10/0x10 [ 576.088663][T24870] ? __copy_skb_header+0x437/0x5b0 [ 576.093778][T24870] ? __asan_memcpy+0x40/0x70 [ 576.098361][T24870] ? __copy_skb_header+0x437/0x5b0 [ 576.103473][T24870] ? __skb_clone+0x454/0x6c0 [ 576.108064][T24870] ? skb_clone+0x240/0x390 [ 576.112475][T24870] __netlink_deliver_tap+0x54d/0x7c0 [ 576.117852][T24870] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.123065][T24870] netlink_deliver_tap+0x19d/0x1b0 [ 576.128199][T24870] netlink_unicast+0x7b8/0x980 [ 576.132964][T24870] ? __pfx_netlink_unicast+0x10/0x10 [ 576.138239][T24870] ? __virt_addr_valid+0x183/0x520 [ 576.143449][T24870] ? __check_object_size+0x49c/0x900 [ 576.148738][T24870] ? bpf_lsm_netlink_send+0x9/0x10 [ 576.153854][T24870] netlink_sendmsg+0x8db/0xcb0 [ 576.158630][T24870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.163915][T24870] ? aa_sock_msg_perm+0x91/0x160 [ 576.168849][T24870] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 576.174141][T24870] ? security_socket_sendmsg+0x87/0xb0 [ 576.179599][T24870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.184881][T24870] __sock_sendmsg+0x221/0x270 [ 576.189584][T24870] __sys_sendto+0x3a4/0x4f0 [ 576.194111][T24870] ? __pfx___sys_sendto+0x10/0x10 [ 576.199166][T24870] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 576.205174][T24870] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 576.211502][T24870] __x64_sys_sendto+0xde/0x100 [ 576.216385][T24870] do_syscall_64+0xf3/0x230 [ 576.220901][T24870] ? clear_bhb_loop+0x35/0x90 [ 576.225589][T24870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.231496][T24870] RIP: 0033:0x7fe1f5c7cf29 [ 576.236004][T24870] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 576.255703][T24870] RSP: 002b:00007fe1f57ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 576.264119][T24870] RAX: ffffffffffffffda RBX: 00007fe1f5db3f80 RCX: 00007fe1f5c7cf29 [ 576.272086][T24870] RDX: 000000000000004c RSI: 0000000020000080 RDI: 0000000000000004 [ 576.280051][T24870] RBP: 00007fe1f57ff120 R08: 0000000000000000 R09: 0000000000000000 [ 576.288033][T24870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.295997][T24870] R13: 000000000000004d R14: 00007fe1f5db3f80 R15: 00007ffd9b971c08 [ 576.303974][T24870] [ 576.312602][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.321221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.427570][T24878] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.438675][T24878] netlink: zone id is out of range [ 576.564060][T24887] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 576.573394][T24887] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.745787][T24896] sctp: [Deprecated]: syz-executor.0 (pid 24896) Use of int in max_burst socket option deprecated. [ 576.745787][T24896] Use struct sctp_assoc_value instead [ 577.386263][ T2887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.394867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.617732][T24930] netlink: zone id is out of range [ 577.991575][T24951] __nla_validate_parse: 2 callbacks suppressed [ 577.991595][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 579.066794][T24964] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 581.021217][T24968] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 581.112106][T24977] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 581.129214][T24977] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 581.237981][T24986] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.270112][T24986] netlink: zone id is out of range [ 581.354449][T24989] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 581.455788][T24995] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 581.490934][T24995] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 581.499068][T24995] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 581.548125][T24995] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 581.568993][T24995] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 581.851235][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.859780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.996149][T25024] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.031097][T25024] netlink: zone id is out of range [ 582.301356][T25038] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 582.496918][T25056] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 582.544916][ T29] audit: type=1804 audit(1718868649.302:92): pid=25059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4159927979/syzkaller.Ynzs5G/649/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 582.631228][ T29] audit: type=1800 audit(1718868649.312:93): pid=25059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 582.911804][T25068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.076412][T25082] __nla_validate_parse: 4 callbacks suppressed [ 583.076432][T25082] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.4'. [ 583.130999][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.139427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.150138][T25082] netlink: zone id is out of range [ 583.228613][T25092] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 583.501975][T25101] sctp: [Deprecated]: syz-executor.2 (pid 25101) Use of int in maxseg socket option. [ 583.501975][T25101] Use struct sctp_assoc_value instead [ 583.947019][T25120] syz-executor.0: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 584.002313][T25120] CPU: 1 PID: 25120 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 584.013740][T25120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 584.023820][T25120] Call Trace: [ 584.027125][T25120] [ 584.030078][T25120] dump_stack_lvl+0x241/0x360 [ 584.034789][T25120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.040016][T25120] ? __pfx__printk+0x10/0x10 [ 584.044635][T25120] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 584.051083][T25120] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 584.057618][T25120] warn_alloc+0x278/0x410 [ 584.061986][T25120] ? __pfx_warn_alloc+0x10/0x10 [ 584.066875][T25120] ? xskq_create+0xb6/0x170 [ 584.071409][T25120] ? __get_vm_area_node+0x23d/0x270 [ 584.076629][T25120] __vmalloc_node_range_noprof+0x69f/0x1460 [ 584.082559][T25120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.089006][T25120] ? __kasan_kmalloc+0x98/0xb0 [ 584.093769][T25120] ? xskq_create+0x54/0x170 [ 584.098267][T25120] vmalloc_user_noprof+0x74/0x80 [ 584.103313][T25120] ? xskq_create+0xb6/0x170 [ 584.108435][T25120] xskq_create+0xb6/0x170 [ 584.112793][T25120] xsk_init_queue+0xa1/0x100 [ 584.117417][T25120] xsk_setsockopt+0x598/0x950 [ 584.122112][T25120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 584.127317][T25120] ? __pfx_lock_acquire+0x10/0x10 [ 584.132375][T25120] ? aa_sock_opt_perm+0x79/0x120 [ 584.137854][T25120] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 584.143423][T25120] ? security_socket_setsockopt+0x87/0xb0 [ 584.149168][T25120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 584.154465][T25120] do_sock_setsockopt+0x3af/0x720 [ 584.159527][T25120] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 584.165111][T25120] ? __fget_files+0x29/0x470 [ 584.169746][T25120] ? __fget_files+0x3f6/0x470 [ 584.174571][T25120] __sys_setsockopt+0x1ae/0x250 [ 584.179480][T25120] __x64_sys_setsockopt+0xb5/0xd0 [ 584.184620][T25120] do_syscall_64+0xf3/0x230 [ 584.189127][T25120] ? clear_bhb_loop+0x35/0x90 [ 584.193978][T25120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.199982][T25120] RIP: 0033:0x7fcace67cf29 [ 584.205040][T25120] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 584.224832][T25120] RSP: 002b:00007fcacf4b70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.233267][T25120] RAX: ffffffffffffffda RBX: 00007fcace7b4050 RCX: 00007fcace67cf29 [ 584.242134][T25120] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 584.250390][T25120] RBP: 00007fcace6ec074 R08: 0000000000000004 R09: 0000000000000000 [ 584.259061][T25120] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 584.267719][T25120] R13: 000000000000004d R14: 00007fcace7b4050 R15: 00007ffe653d91b8 [ 584.276561][T25120] [ 584.340675][T25120] Mem-Info: [ 584.344186][T25120] active_anon:18615 inactive_anon:0 isolated_anon:0 [ 584.344186][T25120] active_file:0 inactive_file:49867 isolated_file:0 [ 584.344186][T25120] unevictable:768 dirty:1893 writeback:626 [ 584.344186][T25120] slab_reclaimable:12295 slab_unreclaimable:124454 [ 584.344186][T25120] mapped:22689 shmem:1757 pagetables:677 [ 584.344186][T25120] sec_pagetables:0 bounce:0 [ 584.344186][T25120] kernel_misc_reclaimable:0 [ 584.344186][T25120] free:1326380 free_pcp:2360 free_cma:0 [ 584.428459][T25120] Node 0 active_anon:74360kB inactive_anon:0kB active_file:0kB inactive_file:198788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90756kB dirty:3164kB writeback:7604kB shmem:5492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12096kB pagetables:2708kB sec_pagetables:0kB all_unreclaimable? no [ 584.497384][T25120] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 584.612622][T25120] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.780849][T25120] lowmem_reserve[]: 0 2571 2571 0 0 [ 584.786153][T25120] Node 0 DMA32 free:1348384kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:74224kB inactive_anon:0kB active_file:0kB inactive_file:195076kB unevictable:1536kB writepending:868kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:4876kB local_pcp:248kB free_cma:0kB [ 584.858953][T25120] lowmem_reserve[]: 0 0 0 0 0 [ 584.865166][T25120] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 584.897304][T25131] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.4'. [ 584.919888][T25131] netlink: zone id is out of range [ 584.933455][T25120] lowmem_reserve[]: 0 0 0 0 0 [ 584.938256][T25120] Node 1 Normal free:3951304kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:8kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.021803][T25120] lowmem_reserve[]: 0 0 0 0 0 [ 585.030583][T25120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 585.061984][ T30] INFO: task syz-executor.1:18890 blocked for more than 143 seconds. 2024/06/20 07:30:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 585.070110][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 585.120288][T25120] Node 0 DMA32: 2*4kB (ME) 266*8kB (ME) 246*16kB (UME) 189*32kB (UME) [ 585.120907][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.121055][T25120] 164*64kB [ 585.151165][ T30] task:syz-executor.1 state:D stack:25592 pid:18890 tgid:18889 ppid:18099 flags:0x00004006 [ 585.190604][T25120] (UME) 74*128kB (UME) 42*256kB (UME) 51*512kB (UM) 21*1024kB (UME) 11*2048kB (UM) 303*4096kB (UM) = 1354072kB [ 585.193215][ T30] Call Trace: [ 585.208809][T25120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 585.227383][ T30] [ 585.236738][T25120] Node 1 Normal: 2*4kB (U) 10*8kB (U) 9*16kB (U) 13*32kB (U) 11*64kB (UM) 5*128kB (U) 5*256kB (UM) 3*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 962*4096kB (M) = 3951304kB [ 585.239642][ T30] __schedule+0x17e8/0x4a20 [ 585.254430][T25120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.278450][ T30] ? __pfx___schedule+0x10/0x10 [ 585.286146][T25120] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.290261][ T30] ? __pfx_lock_release+0x10/0x10 [ 585.312433][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 585.324637][ T30] ? schedule+0x90/0x320 [ 585.331841][T25120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.333421][ T30] schedule+0x14b/0x320 [ 585.358245][ T30] schedule_preempt_disabled+0x13/0x30 [ 585.361377][T25120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.372436][ T30] __mutex_lock+0x6a4/0xd70 [ 585.383685][ T30] ? __mutex_lock+0x527/0xd70 [ 585.394756][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 585.400483][T25120] 48821 total pagecache pages [ 585.405370][T25120] 0 pages in swap cache [ 585.407630][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 585.409511][T25120] Free swap = 124996kB [ 585.409522][T25120] Total swap = 124996kB [ 585.409533][T25120] 2097051 pages RAM [ 585.409542][T25120] 0 pages HighMem/MovableOnly [ 585.422913][ T30] ? net_generic+0x1f/0x240 [ 585.448653][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 585.460706][T25120] 400871 pages reserved [ 585.465938][T25120] 0 pages cma reserved [ 585.473600][ T30] genl_start+0x4d6/0x6d0 [ 585.486950][ T30] __netlink_dump_start+0x45c/0x780 [ 585.523543][ T30] genl_rcv_msg+0x88c/0xec0 [ 585.528128][ T30] ? mark_lock+0x9a/0x350 [ 585.551642][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.556811][ T30] ? __pfx_genl_start+0x10/0x10 [ 585.591044][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 585.596142][ T30] ? __pfx_genl_done+0x10/0x10 [ 585.621011][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 585.626110][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 585.640808][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 585.647476][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 585.657340][ T30] ? __pfx___might_resched+0x10/0x10 [ 585.669535][ T30] netlink_rcv_skb+0x1e3/0x430 [ 585.679005][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.689861][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.702381][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 585.714809][ T30] genl_rcv+0x28/0x40 [ 585.723413][ T30] netlink_unicast+0x7ea/0x980 [ 585.733918][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 585.760570][ T30] ? __virt_addr_valid+0x183/0x520 [ 585.765772][ T30] ? __check_object_size+0x49c/0x900 [ 585.801918][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 585.807129][ T30] netlink_sendmsg+0x8db/0xcb0 [ 585.820515][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.825884][ T30] ? __import_iovec+0x536/0x820 [ 585.840724][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 585.845744][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 585.870739][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 585.877128][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.890587][ T30] __sock_sendmsg+0x221/0x270 [ 585.895359][ T30] ____sys_sendmsg+0x525/0x7d0 [ 585.900176][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.930534][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 585.935209][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 585.940408][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 585.966913][ T30] ? do_syscall_64+0x100/0x230 [ 5