last executing test programs: 4m44.86096653s ago: executing program 4 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x201, 0x0, 0x1000000, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m44.857815112s ago: executing program 4 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000037c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003840)={0xc, 0x1c, &(0x7f0000003900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000003a00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f00000004c0)=""/54, 0x36}, {&(0x7f0000000500)=""/4093, 0xffd}, {&(0x7f0000001500)=""/152, 0x98}, {&(0x7f00000015c0)=""/109, 0x6d}, {&(0x7f0000001640)=""/127, 0x7f}, {&(0x7f00000016c0)=""/98, 0x62}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)=""/4110, 0x100e}, {&(0x7f00000027c0)=""/4093, 0xffd}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x40034) 4m44.822518858s ago: executing program 4 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000040000000000080c00060000000000002e5f00"], 0x0, 0x2b}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000026bd7000ffdbdf2507000000", @ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket(0x10, 0x80002, 0x2) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_subtree(r4, &(0x7f00000005c0)={[{0x2d, 'net'}, {0xdf140a17404393ba, 'net_prio'}]}, 0xf) close(0x4) sendmmsg(r3, &(0x7f00000001c0), 0x222874f4405e5c0, 0x40840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723020001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 4m44.651029776s ago: executing program 4 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="050000000000000000001200080003000000", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000001e001f"], 0x58}, 0x1, 0x0, 0x0, 0x24044001}, 0x24000804) 4m44.491181186s ago: executing program 4 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000001c0), 0x0, 0x24000045) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc0d4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) (rerun: 64) 4m43.607506493s ago: executing program 4 (id=545): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x24, 0x40400, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x366, 0x10, &(0x7f0000000480), 0x1dd}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x38, 0x1412, 0x1, 0x1000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x400}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r2, r0, 0x5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xc, &(0x7f0000000580)=@raw=[@exit, @generic={0x8, 0xe, 0x1, 0x7, 0xff}, @map_val={0x18, 0xa, 0x2, 0x0, r2}, @alu={0x7, 0x1, 0x2, 0x0, 0x8, 0x50, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x6, 0xa, 0x2, 0xfffffffffffffff8, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x24, 0x40400, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x366, 0x10, &(0x7f0000000480), 0x1dd}, 0x48) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x38, 0x1412, 0x1, 0x1000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x400}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r2, r0, 0x5}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xc, &(0x7f0000000580)=@raw=[@exit, @generic={0x8, 0xe, 0x1, 0x7, 0xff}, @map_val={0x18, 0xa, 0x2, 0x0, r2}, @alu={0x7, 0x1, 0x2, 0x0, 0x8, 0x50, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x6, 0xa, 0x2, 0xfffffffffffffff8, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) 4m28.577059868s ago: executing program 32 (id=545): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x24, 0x40400, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x366, 0x10, &(0x7f0000000480), 0x1dd}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x38, 0x1412, 0x1, 0x1000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x400}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r2, r0, 0x5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xc, &(0x7f0000000580)=@raw=[@exit, @generic={0x8, 0xe, 0x1, 0x7, 0xff}, @map_val={0x18, 0xa, 0x2, 0x0, r2}, @alu={0x7, 0x1, 0x2, 0x0, 0x8, 0x50, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x6, 0xa, 0x2, 0xfffffffffffffff8, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x24, 0x40400, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x366, 0x10, &(0x7f0000000480), 0x1dd}, 0x48) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x38, 0x1412, 0x1, 0x1000, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x400}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x38}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r2, r0, 0x5}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xc, &(0x7f0000000580)=@raw=[@exit, @generic={0x8, 0xe, 0x1, 0x7, 0xff}, @map_val={0x18, 0xa, 0x2, 0x0, r2}, @alu={0x7, 0x1, 0x2, 0x0, 0x8, 0x50, 0xfffffffffffffffc}, @ldst={0x2, 0x2, 0x6, 0xa, 0x2, 0xfffffffffffffff8, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) 44.299618521s ago: executing program 1 (id=3088): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x44, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 43.9717452s ago: executing program 1 (id=3091): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x44) sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newlink={0x70, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x70}}, 0x0) sendto$packet(r1, &(0x7f0000000800)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000840)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010400000000000000000a0000000900010073797a30000000004c000000030a010400000000000000000a0000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000000b00070066696c7465720000b4000000060a010400000000000000000a0000000900010073797a30000000000900020073797a300000000088000480380001800e000100696d6d656469617465"], 0x148}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2, 0x0, 0x1}}, 0x2e) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6}}}, &(0x7f0000000540)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 43.186254421s ago: executing program 1 (id=3095): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003380)={&(0x7f00000033c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x300000000000000, 0x0, 0x4008011}, 0x0) 42.870185292s ago: executing program 1 (id=3099): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, 0xffffffffffffffff, 0x245a0000) 42.751155337s ago: executing program 1 (id=3103): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000010c0)={r0, r0, 0xc24, 0x1000, &(0x7f00000000c0)="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", 0x3, 0x6, 0x8a54, 0x5, 0x0, 0x2, 0x2, 'syz0\x00'}) 7.789441474s ago: executing program 2 (id=3269): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0xff9a, 0x100, 0x6, 0x1}, {0x7, 0x0, 0xc, 0x0, 0x7ff, 0x8}, 0x5, 0x8, 0x12d8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x68320f62c310815e}, @TCA_TBF_PTAB={0x404, 0x3, [0x80, 0x6, 0x2, 0x7fffffff, 0x41d, 0x4, 0x10000, 0x7ff, 0x101, 0x8, 0x16, 0x7, 0x5, 0x5, 0x4, 0x7, 0x0, 0x2, 0xd7, 0x6, 0x6, 0xfff, 0xf44, 0x401, 0x3, 0x0, 0x5, 0x37, 0x7, 0x5, 0x80000000, 0x9, 0x5939, 0x0, 0x2, 0x9, 0x401, 0x3, 0x2551, 0x0, 0x756, 0x3, 0x0, 0x6, 0x2, 0x14, 0x5, 0xce9, 0x79cd, 0x800, 0x5, 0xffffffff, 0x5, 0x3, 0x7, 0x1, 0xa, 0x10001, 0x9, 0xfffffff8, 0x9, 0x6, 0xa, 0x8, 0x3, 0x1, 0xb, 0x1, 0x82d8, 0x1, 0x3, 0x3, 0x4, 0x10001, 0xfffffff9, 0x4, 0x0, 0x8, 0xf9d, 0x4, 0x800, 0x80000000, 0x80, 0x4, 0x5, 0x1c1, 0x7, 0x7, 0x6, 0x0, 0x8, 0x1ff, 0xb, 0x3, 0x6, 0x1, 0x7, 0x3, 0xffff, 0xfffffff3, 0x10000, 0x3, 0x101, 0x2, 0x215245f2, 0xd8, 0x8, 0xe0000000, 0x4000, 0x5, 0x10001, 0x9, 0x10, 0xc, 0x7, 0x0, 0x8000, 0x4, 0x3, 0x8000, 0x10000, 0xd, 0x8, 0xf205, 0xfffffffd, 0x7fffffff, 0x1, 0x45f, 0x6f, 0x6, 0xafc, 0x5, 0x1ff800, 0x1, 0x1e8b, 0x5d9, 0x6, 0xc2, 0x5, 0x7, 0x8, 0x2, 0x3ff, 0x4, 0x5, 0x7ff, 0x27, 0x7fff, 0x3daf, 0x7, 0x9, 0xc, 0x5, 0x5, 0x93, 0xc, 0x2, 0x99, 0x6, 0x6, 0x8, 0x7, 0x8, 0x1, 0x40, 0xfffffffb, 0xa, 0x1, 0x2, 0x9, 0x0, 0x4, 0x3, 0x200, 0xebc1, 0xe, 0x1537, 0x4eaa, 0x4, 0x8, 0x989, 0xaa, 0x1, 0x0, 0x4, 0x4, 0xe, 0x80000001, 0x5, 0x8, 0x7, 0x0, 0x7, 0x4, 0x81, 0x3, 0x603d, 0x0, 0x1, 0x8, 0x4, 0x18f, 0x9, 0x7, 0x200, 0x1, 0x2, 0x5f, 0x3, 0xfffffff8, 0x9, 0x0, 0x10, 0xfffffffa, 0x0, 0x0, 0x8, 0xb, 0xfffffffc, 0x3, 0x6, 0x7ff, 0xa, 0x5, 0x5, 0x2, 0x401, 0xff, 0x8, 0x5, 0x9, 0x5, 0x7fff, 0xe41, 0x7, 0x0, 0x200, 0xfffffe00, 0x8, 0x14000000, 0x5, 0x9, 0x6, 0x800, 0x8, 0x2, 0x7, 0x4, 0x10000, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x80, 0x6]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x8800}, 0x20044000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x1, 0x9}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010101, 0x4908, 0x0, 0x1}}, 0x44) r3 = socket$inet(0x2, 0x1, 0x6) connect(r3, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 6.355565835s ago: executing program 2 (id=3278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40600000000000071114f000000000b9110000002000000850000000700000095000000000000009500000000000000cd5b4aef8d1e24df3e663ef543d31e189d039fe4f16229d65301201bf17f1c940f59d197339d7848b9bcf5764aad50fc9c3420f6716194840d8533f34c717170cd2b1f351f18dc0fe4ddfd122a3535f7599b343aa6b0e125ddbd5303a69e0695e96795f78517c1015a8b50d87a19843ce761bebac472117ee2b9b3862d5ce30994a471b8beb4b5fb3fa62268ac72f4499bdb7d127ba1cd819cc71094cbf59bf462e9"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 5.848520719s ago: executing program 2 (id=3279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003380)={&(0x7f00000033c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x30) 5.631722607s ago: executing program 2 (id=3282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5f, 0x3}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000280)="a37081a3159c4ac40000000000000000f865d20c771e", 0x16}], 0x2) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x8e}}]}, 0x4c}}, 0x0) 4.769339699s ago: executing program 0 (id=3286): bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004a054) r0 = epoll_create(0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000440)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000001980)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000019c0)=[@sack_perm, @window={0x3, 0x0, 0x401}, @window], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001a00)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001a40), 0x4) sendto$inet(r1, &(0x7f0000001a80), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x4) epoll_wait(r0, 0x0, 0x0, 0x7ffffffd) 4.768945248s ago: executing program 5 (id=3287): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt(r0, 0x1, 0x3, &(0x7f0000000040)=""/66, &(0x7f00000000c0)=0x42) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbb080045000078000000000001907864010101ac1414aa0303907803000000470000000065000a002f0000ac141437ac1414bb4414b601ac1414bb0000008000000000000000004434f473e00000020000b61dac1414aa00000400e000000100000000ac1414bb00000007fffffffffffffc01e000000100000008"], 0x0) 4.549030632s ago: executing program 3 (id=3288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2d", @ANYRESHEX=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x6}, {0xac, 0x5}, {0x6}, {0x4, 0x1}, {0x8, 0x5}, {0x6}, {0x4f, 0x6}], "05bbdd6a5a4c2970"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xdf, 0x7}, {0x9}, {0x4, 0x5}, {0x0, 0x7}, {0x63, 0x1}, {0x0, 0x5}, {0xb5}, {0x80, 0x9}, {0x9, 0x4}], "d070d0c87c81a858"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x9, 0x6}, {0xe, 0x2}, {0x3}, {0xf8, 0x3}, {0x4, 0x1}, {0x10, 0x3}, {0x7b, 0x1}, {0x1, 0x2}, {0xe0, 0x3}, {0xf, 0x6}, {0x4, 0x2}, {0x6}, {0x80, 0x3}, {0x9, 0x2}, {0x40, 0x5}, {0x71, 0x4}], "f9f57d5e30a52933"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x844}, 0x20040010) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x104}}, 0xc008880) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000080)=0x80000000, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe0000010000000084001900"], 0xa0}}, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xd, &(0x7f0000000580), 0x4) setsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r9, &(0x7f00000004c0)={&(0x7f0000000400)=@generic, 0x80, &(0x7f0000000480)}, 0x23) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) listen(r1, 0xe) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f00000000c0)=0x80000000, 0x4) bind$l2tp(r9, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtaction={0x80, 0x30, 0x100, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbedit={0x68, 0x1, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x40b, 0xfffffff7, 0x1, 0x41, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x5}}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x80}}, 0x0) 4.428413439s ago: executing program 0 (id=3289): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000140)='@+\x00', 0x900, &(0x7f0000000180)={@_ha_fsid={[0xfffffff9, 0x15]}, {0x8}}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x3) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000880) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) getsockopt$bt_hci(r2, 0x11a, 0x5, 0x0, &(0x7f00000003c0)=0x7ccd4176) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x1f, r1}]}, 0x44}}, 0x4) 4.32246473s ago: executing program 5 (id=3290): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0x1, 0x4) vmsplice(r0, &(0x7f0000002100)=[{&(0x7f0000000bc0)="8bd0605cec104938d23cfdc5daeb05bd7f23c2e1e4307ace80d8ddfc443dc8450863de248c429e42b17f0cf754cf41fe31e27da27d53622ca18b697defc0640439a4fbbafa12c887f00b77763ad5aaf3111a3f9947997ab5f911c71b037b088952f12c5f5dc28935d2e00abd7334b8ceb7d7b8120ee45367902d69a80352836d584f2c75102f38acaa3731f6dc3d811f33da332e4b46ada689fb6ae3f04285", 0x9f}, {&(0x7f0000000c80)="77bc3128548881cd4ac84df2f2e196db30e79314b1080640ac33465ddd848fb236a67421ac53cadd5ca2b5bbffefeb78afe126f53e5dc77180574bc1e642", 0x3e}, {&(0x7f0000000cc0)="d3c081c3f17d611ced210e4b9d2af75a1fb7c2e8261e885a3d546d375215c1935a6252a11293f5163f4099ea0d95c095723b6c786d6895f028d58fe82e51eacf276837b423e2b5304f97fa2a5d0f770bfb1b206186ace58d985f64bc4ca370e1d3325fe80e8b107e6b1b0fbed6fc814fcaf0b74c05da87d40ca2dca5198699d15f93b3dcb4737afc9494931afec742ee54065dfb176ea8b0bf6786d57084913a52f3c62e2382c981779e1038c419cd08f9ca3c97868e3a40f4d0ff0f68d37e27fa33027f034f26fe582e4ab4dd01c793625eae448aa9d1a3", 0xd8}, {&(0x7f0000000dc0)="3a63a439ed5752c8096e1d98644478792cce474cfd0c7586029f6c1b3249ea7b1a4a0ad2a6b3b75874ee79a8b0808d6db5e35453ec6b2212011b66cacbc4a94295061f69448521b93404687ae39e02b19de0fe587c0a171a82cb2f142d029e7e4655897de2af0bdd85184bd5a0b3c7ebe2fd7d7a20316284ad19d177b81194bd4db24f2a5c3e03a6", 0x88}, {&(0x7f0000000e80)="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", 0xfd}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="5165c290226fe53d9c1927760392ee", 0xf}, {&(0x7f0000001fc0)="c88018302e7687ec8cbf9bd3e5a9ee67915811c8683b8612d3b7fb85805fd93179440d63a931ad491a0620797c443fc4869faf99ed2fa9f735bb9b2f00a28b6dcde5a2e43004f4e294d5c991591e205cdcbd3192c23ec179bf28", 0x5a}, {&(0x7f0000002040)="04ed5370197b238e0a30c6519953b06aee3935543b9146655c431a5736cd277e9b28217f40f03f58c67891a6d76e9fc69cae48045961c443aa8f22b8cb916eea8c92892605755b957018feb634804e1180a85194932c24cec9e23fa4d4d2c4e01058118d9686d6817748a1ae0e893e1ee147d90b5065b2cdde16a2a55714d4933f17dd43375798955d6b52c00081fdbf11ac13", 0x93}], 0x9, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x4010, r2, 0x165a7000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0xb, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="620ac4ff0000000071104e00040000009500000000000100"], &(0x7f00000022c0)='GPL\x00'}, 0x94) bind$can_j1939(r3, &(0x7f0000000800)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000900)=0x1, 0x4) sendmmsg(r3, &(0x7f0000000940)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000980)=[{&(0x7f00000009c0)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000a00)=[{0x0, 0x3, {0x0, 0x62da12a15307ded4, 0x2}, {0x3, 0xf0, 0x1}, 0xfe, 0xff}, {0x1, 0x3, {0x1, 0xf0}, {0x0, 0x1, 0x2}, 0x1}], 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)=@deltaction={0x64, 0x31, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc96}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x64}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454ca, &(0x7f0000002340)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000800)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x200000004bc0, 0x0, 0x0, 0x200000004dbe, 0x200000005172], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x24a) 3.782967004s ago: executing program 5 (id=3291): bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004a054) r0 = epoll_create(0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000440)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000001980)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000019c0)=[@sack_perm, @window={0x3, 0x0, 0x401}, @window], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001a00)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001a40), 0x4) sendto$inet(r1, &(0x7f0000001a80), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x4) epoll_wait(r0, 0x0, 0x0, 0x7ffffffd) 3.719456036s ago: executing program 3 (id=3292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0x366, 0x10, &(0x7f0000000840), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x8, 0x8b, 0x8, 0xfffffffffffffe5c, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c80)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0xb3, 0x6}, [@NDA_LLADDR={0xa, 0x2, @random="81e03eeb2f9f"}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x4040004) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="e5", 0x1}, {&(0x7f0000000180)="f4bc8ea969029753331c82c4a1bc6ef38f87a60f31fa22d677d3a565cdf83918bb81dc01f9be7d19c4311825e599f9479d44549b9de6d24715aaaab443a3b16df9460d130b4c68c11afe448c2c641eff7224ff09188fa0cf1d861d609b5f2fbe96fcbe8131a5d8724e2dc007fd81db38513541a2f2dd36de9b06842c304fa2efc9a1ab5f556dfbda30120de8ce8e5784596a479f1f1de055fb2c07b9272021d19d15385dfaad690ee8972f091937a26c8c137031c9d277edeba644b610bb50eeef", 0xc1}], 0x2}}], 0x2, 0x4040040) 3.459722737s ago: executing program 0 (id=3293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, 0x0}, &(0x7f0000001840)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001880)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000001980)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, 0x0}, &(0x7f0000001a00)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={0xffffffffffffffff}) shutdown(r5, 0x0) recvmsg$unix(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b00)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000001c00)=0xe8) r8 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001c40)=0x0) r10 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c80)={0x0}, &(0x7f0000001cc0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0}, &(0x7f0000001d40)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001dc0)={'veth0_vlan\x00', 0x0}) r15 = gettid() r16 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r16, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r14, @ANYBLOB="089805000750050008001300", @ANYRES32=r15, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0}, &(0x7f0000001f00)=0xc) r18 = openat$nci(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) r19 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r19, 0x29, 0x3a, &(0x7f0000001f80)=0x2, 0x4) sendto$inet6(r19, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000001fc0)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) sendmsg$netlink(r0, &(0x7f0000002140)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc, &(0x7f0000001100)=[{&(0x7f0000000740)={0x420, 0x2e, 0x400, 0x70bd26, 0x25dfdbfd, "", [@typed={0x4, 0xff}, @nested={0x8, 0xcd, 0x0, 0x1, [@nested={0x4, 0x24}]}, @generic="1c6cb818ed2a11c4364deba2d6b95378524cd1665e16578a6cec4b44a30d0e207d162d4bf4e4ae7a8ec1653eec28bfdbb5aae869010420b0ad41158c688ea82191077f564cf2346048949e47810b0fb0f7acfdd967903ef8e7d8bf7aef2b164a477feea5d9940869dcf0a305593faa51eb44a3f0576c7826de0d21c20f84ac12957bf159bd916673c80627", @generic="118b83beb722855d15bfa2d7db4c3f57b3d8c29a40e9e839384fa8123bb705fe4a3617c4a28d24ef583b095d30e086664378d330ee765fbf6b0ba5369863fc70b95ff22ed725a818f00d8818b93277c60f86307ea32ea4378f06a3577c6994f8747c8a4b36158b09db733d807666ed8cf7d7ea326af1ad54be02fabb9e1d21be7f6e", @generic="585ebdd1f51671440b02f5875dcd0794c4b7c27b49fbadf373f41a7a83479ddcafa9a1bada57aab6a10ed3b6c278d2378a8395a550dc5ecd2258fab75cc7b985a3383ac2b6a5f302d34bfdd1f0be4be2841762d01878ac0e2af221a5eea56f91c578f8991a3defe99a844619e8ee472669cd967954e2b9a7c8668f8358565e9be63b40", @nested={0x1b3, 0x7b, 0x0, 0x1, [@nested={0x4, 0x18}, @typed={0x14, 0x102, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}, @typed={0x8, 0x44, 0x0, 0x0, @pid}, @typed={0x8, 0x1c, 0x0, 0x0, @u32}, @generic="ae952a94a9a6c311fafefe97d9bc6566fc6810a51a4b78da233b4efc3169", @generic="761d82a46c99f769f1de51420b56a1fbd32ff5e2409083d790a48626c68fe0361024f713caf143b4552b595d3e58b7b8883d3ae96ff16ace280955e012f85a706acc5529052a3f81f27bdb4766293cc6f6b3ee2ff9ea85d4c97fd272ce4afef8049195d98d9e75233c8fb2419b6fed3d05c4f1b13701412305d3bb85a9277327dca32ed6c34421ce93d6b0276dee472796f84510560eb11460d5b5e8d870a08e87b0903859527a5d847f53bc67d9e871a2aa175b747cac4e10431dbfa39d3800802abe99", @generic="e5b6fec2fbde67246aba9f27570c1b287c00f78c1cca62c9a44b4aa1bca21997d9f73ae93e3cd765c1857177d3015a9bd3943fe78013f5b40e0ea4c8ab1996aef2e8dddc2020c12df222a7fe080baf12ca9adf54b001766147316b93f252faef760668ca2f3eb69d694eca566ed9da787432f959fe95ce5e5a1005a6cfe1e46df51a5f1ee1e9ee6c98f1e03342b5fd0229b45d6d889c252b378294d010ed7858ee354cd831"]}, @typed={0x8, 0x65, 0x0, 0x0, @fd=r1}, @typed={0xb6, 0x76, 0x0, 0x0, @binary="8588c0e18365276402cbd293443caa790699a0ca6134bd133f2485641a9d0a0e6b78cee579ee229b2646818a83dc352a4339a966036b1f37f2611eb0d40a7c196b52bea20896b83cb875f06ac443df8da3932ddd678f9257bb072362688de78f747edb9bdec75c1055dbec0198e48608f018524c10842fc5a1505ef0badd3508eaf04c7a4e7c4f37853bc84dd9d8ff130809c38c4eca1fad6fab586a2f6c1ef13419fdf8185007ddbb8550968b9afea83372"}]}, 0x420}, {&(0x7f0000000bc0)={0x118, 0x31, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@generic="87d2d2b2e3b573859fdcad66f308069f78df3d21fe67787711a07050e993bc739ec011d6503a605b678912c9516e852e92c2bacf412625e2a7d63780ad9116c1965e82d56d9727bc4a67e9fbf9157c11c85efada35d77493148790e234f8a058473821932ad71764117aab4d80c85ba79fdb0d74f7260f620c0cbd3c70267927b2be2c6494191f418787015c376ade04", @typed={0xc, 0x146, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xf7, 0x0, 0x0, @uid}, @nested={0x56, 0x35, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @uid}, @generic="7fc13b88466e34118914e3b2d18107d0f1532eb395812aac27fe84643b1ee9a40ab77457ccbf69b6594be60b170ad86c32613888f6adf0862037b04900c4d58ab37b914fef7800d25cb7"]}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x8}]}, 0x118}, {&(0x7f0000000d00)={0x1f8, 0x42, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@empty}, @nested={0x6c, 0x13e, 0x0, 0x1, [@nested={0x4, 0xa0}, @typed={0x61, 0x134, 0x0, 0x0, @binary="f52ebe9246fd52a9de4f16c0f736275e5bec018e9bfd01cb13c2e8bdfe04b61a077dcc081171bacd7fa5525e4321670e596f1b7a3a0fda9b1229af507955f4cf81c847c535149d3b00f32ed2fd29712acac6db3738269c6f151a84ed4a"}]}, @generic="cfef5171f407ac6e0968d6d936a4aed477bdac2d49068b7cda5ee8ed7d42bd0be304d69b1d9053d326450b604c91ff717cd4ea565eb8ab1c3fb9209a83840875f8ebadbe7fabc6d5ea", @typed={0xc, 0x43, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x115, 0x0, 0x0, @u32=0x7b}, @nested={0x112, 0x14f, 0x0, 0x1, [@nested={0x4, 0xa2}, @generic="fbe4eb0f8999d540b925f1ddca12d4f46f929abec8715ecfdb3945efc75dff80af876585d51b84d305cb663f3fd71314403dd1ec2e8f5ee3a8c2d5fd88b07a139471bcc3f2d5784a2e8f0daf3c0a121214b8c7e5891a39cc20d41a69fa036a813aed3624489f6457db8d8684355b8ec5edbe1f92671748b2b152c8386ea204a14493f4033f49a5fe71aa416ed119da53a6896e94e437ec43590ddb9c18467a81350a45814a86f3278c42cfd33df0751df6ef235697b85a0d939f05455006f605011c9976e2f69c01f4a8e0f1b81aff0dcf5f8f00b296c73d2449fff469ae4b141d4efd2da33418c003e5cddf7f30521203e9ffca0355", @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x1f8}, {&(0x7f0000000f00)={0x1c4, 0x10, 0x20, 0x70bd28, 0x25dfdbfb, "", [@generic="eb112582440fa87b641ce87997910f92d94c870bbfc407ecb37c5ac956f02be9addf337fc182fbee20bc7efdcabb708dc7bddbe39bfb30fee2fc8ee9ff464a09e24b1f2f2cf0812b8338fd5a869a1fcc8188056d14047f16c98e75a49eb3e16336706d17632d51f308f664ac7c3eb252df8be65af9f8e8b1b54c4646b2758715abf3e18daae45abed63f5574efd30704e8da2c751025c2217f08e324d46fd73d6bed750b1f8609e4b26ea8aaaabfa5a63a8809517ec3673b6fbcff9d175bedaec8e06bf741675588aa7d93", @generic="278bea633528ae217a529e2a9bbe57ebd9319e02477b3eac39765f4bf1a350e83e3f0da71a252c1795eb454cea28aa7c03b8fc49b55b82b47d8022ec70902e2534b5c3b22f036a043a91fbfa83a8b51626fc028aeabfd63cfbb5bbed51c411759e880564d62e63ac918587f5fc3723bb983aa09cb14b7636baf87040cc6a2344", @generic="e1cbceb692755747080b0226ecd95fa4949c45aae6f1aea628721d6774b06914b083028920f043c98040923b8aedee5cf19efa12c0de71ccef18661acdde811816751c7ae009a25d3b96310276573d60769f1a3430b82938c8bb94779da846df708eba9f1489"]}, 0x1c4}], 0x4, &(0x7f0000002000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17}}}, @rights={{0x1c, 0x1, 0x1, [r0, r18, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r19]}}], 0x138, 0x8010}, 0x4000c8c8) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x84, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x30}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x84}}, 0x2) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r20, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x33}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.329329855s ago: executing program 5 (id=3294): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000240)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000600)={'raw\x00', 0xab, "8577ebb057c0b8cd28b7a5e10627425043e8a6e86b91a757ac1ed9491bf72940273ac46010a091ccd4a63bf9e964c71c0843f7b3a3abc91a84cfbebd681592232d344abba42970eade76c7ee1d5fb6a2266807ca251f3061691641459d11321b6102958149139d9a3872af6b352f4bf21ad2706b4d61ddd7994f63f9fff0a844f2dcd81481ef4283beb3ee02983e08225f5d369d023a5396a20ad571fef283ed18b53e8465230c2de5fa35"}, &(0x7f0000000700)=0xcf) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0xa, 0x400) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x76118c67}], 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x1f4, 0xe, 0x0, &(0x7f0000000200)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x84, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 3.279883133s ago: executing program 3 (id=3295): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b769661186c33d22e4c662bfd2d1bb64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738f07000000000000003cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9c8488144f9b34ddcacf7bb8133baa1e4695a7e03135ae47d2ae4bcaa7bafa84dd0e6ce276bc581013bc67fdaea138ae6f2ae438a28a07e4bd353b9a258924b1d620d8d44"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001480)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f000000000000000000001c471ac7fb91"], 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 2.582392129s ago: executing program 3 (id=3296): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 2.270546728s ago: executing program 0 (id=3297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe880000000000000000000000000001ff01000000000000600000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff050000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a00000008000000000000001c0017000000000000000000ffffffff0000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) 1.809112272s ago: executing program 5 (id=3298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x8003a) r2 = socket$inet6(0xa, 0x2, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x40004}, 0xfffffffffffffe64) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r3) socket$kcm(0x29, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0xfff2}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) bind$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ef}, 0x10) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x400001}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3, 0x800, 0x81, 0x800}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000000) 1.727979761s ago: executing program 0 (id=3299): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x48d, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3505, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000780)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="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", 0x48e}], 0x1}}], 0x1, 0x34001401) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x48d, 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) socket$inet6(0xa, 0x3, 0x2f) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3505, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) (async) connect$inet6(r2, &(0x7f0000000780)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000140)) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="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", 0x48e}], 0x1}}], 0x1, 0x34001401) (async) 1.693549086s ago: executing program 3 (id=3300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x4, 0x4, 0x4, 0xdfdd, 0x14, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001440)={r0, 0x0, 0x0}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001540)={'ip6gre0\x00', &(0x7f00000014c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x8, 0x7fffffff, 0x37, @mcast1, @mcast2, 0x700, 0x10, 0x8, 0x4000000}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001580)={'hsr0\x00', 0x0}) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000015c0)={'syzkaller0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x0, 0xc, &(0x7f0000001f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0xa, 0x4, &(0x7f0000002080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000020c0)={0x18, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0xe, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x6, 0xc, &(0x7f0000002380)=ANY=[], &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x375c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000002480)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000017c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xffe0}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x7, 0x0, 0x800, 0x3, 0x6, 0x5, 0x5}}]}}]}, 0x44}}, 0x404c0d4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a00), &(0x7f0000001a40)=[0x0, 0x0], 0x0, 0x9a, &(0x7f0000001a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0x34, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001cc0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001e00)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.416514363s ago: executing program 2 (id=3301): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="2600000007000000e6000000c319f541ca5bf6a8b71da907b41703a8148c28e2d99c71065bfc6635e16bfe35135afb62dc3805230f2c4f5422393e44770e3eb87ff07c4e0000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 678.829982ms ago: executing program 0 (id=3302): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 678.007069ms ago: executing program 2 (id=3303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x10}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 532.221683ms ago: executing program 5 (id=3304): openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x101043, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) getsockopt(r0, 0x2, 0x7fffffff, &(0x7f00000000c0)=""/150, &(0x7f0000000180)=0x96) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2}, {0xb}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x101, @loopback}}, 0x1, 0x9}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r3, 0x84, 0x7d, &(0x7f0000000380)={r4, 0xcaf5}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) 238.633718ms ago: executing program 3 (id=3305): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async) listen(r0, 0x7f) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000001010400000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000aa140004002001000000010c000280050001000000000008000740000000000400068000"/92], 0x5c}}, 0x0) 0s ago: executing program 1 (id=3106): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x14}}], 0x18}, 0x922bac8556bda5ce) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a00280004"], 0xf4}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x100) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) accept(r2, &(0x7f00000002c0)=@sco={0x1f, @fixed}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'nicvf0\x00', 0x8000}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0xc845}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x18000000000002a0, 0x33, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e72e9eb17e12ce4f2ffc3d4b8743c2873208a9eca5493c9b6f0ac22c61df8ad86c7577c702f", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): 11655] ? security_socket_recvmsg+0x7e/0x2c0 [ 316.436444][T11655] ? __pfx_netlink_recvmsg+0x10/0x10 [ 316.436473][T11655] sock_recvmsg+0x196/0x1e0 [ 316.436508][T11655] __sys_recvfrom+0x231/0x3a0 [ 316.436538][T11655] ? __pfx___sys_recvfrom+0x10/0x10 [ 316.436594][T11655] ? do_user_addr_fault+0xc4c/0x1340 [ 316.436622][T11655] __x64_sys_recvfrom+0xde/0x100 [ 316.436649][T11655] do_syscall_64+0x166/0x520 [ 316.436673][T11655] ? trace_irq_disable+0x3b/0x140 [ 316.436697][T11655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.436720][T11655] ? clear_bhb_loop+0x70/0xc0 [ 316.436748][T11655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.436770][T11655] RIP: 0033:0x7f6cfd35ed8e [ 316.436791][T11655] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.436810][T11655] RSP: 002b:00007f6cfb5f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 316.436834][T11655] RAX: ffffffffffffffda RBX: 00007f6cfb5f66c0 RCX: 00007f6cfd35ed8e [ 316.436851][T11655] RDX: 0000000000001000 RSI: 00007f6cfb5f5000 RDI: 0000000000000003 [ 316.436865][T11655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.436876][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 316.436889][T11655] R13: 00007f6cfb5f4f58 R14: 00007f6cfb5f5000 R15: 0000000000000000 [ 316.436925][T11655] [ 317.092133][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.145811][T11684] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1820'. [ 317.692693][T11716] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1831'. [ 317.928633][T11723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1832'. [ 317.928681][T11723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1832'. [ 318.006444][T11721] bond5 (unregistering): Released all slaves [ 318.094967][T11723] gretap1: entered promiscuous mode [ 318.094994][T11723] gretap1: entered allmulticast mode [ 318.289180][T11730] syzkaller0: entered promiscuous mode [ 318.289206][T11730] syzkaller0: entered allmulticast mode [ 318.512645][T11716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.868107][T11758] FAULT_INJECTION: forcing a failure. [ 318.868107][T11758] name failslab, interval 1, probability 0, space 0, times 0 [ 318.868145][T11758] CPU: 0 UID: 0 PID: 11758 Comm: syz.5.1839 Not tainted syzkaller #0 PREEMPT(full) [ 318.868170][T11758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 318.868184][T11758] Call Trace: [ 318.868193][T11758] [ 318.868203][T11758] dump_stack_lvl+0xe8/0x150 [ 318.868243][T11758] should_fail_ex+0x410/0x560 [ 318.868283][T11758] should_failslab+0xa8/0x100 [ 318.868317][T11758] ? skb_clone+0x212/0x3a0 [ 318.868343][T11758] kmem_cache_alloc_noprof+0xa1/0x600 [ 318.868372][T11758] ? skb_clone+0x212/0x3a0 [ 318.868406][T11758] skb_clone+0x212/0x3a0 [ 318.868437][T11758] __netlink_deliver_tap+0x413/0x860 [ 318.868479][T11758] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.868511][T11758] netlink_deliver_tap+0x19c/0x1b0 [ 318.868542][T11758] netlink_sendskb+0x68/0x140 [ 318.868570][T11758] netlink_rcv_skb+0x2a4/0x4a0 [ 318.868599][T11758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.868641][T11758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.868689][T11758] ? down_read+0x2be/0x330 [ 318.868723][T11758] genl_rcv+0x28/0x40 [ 318.868756][T11758] netlink_unicast+0x8ef/0xa80 [ 318.868802][T11758] netlink_sendmsg+0x813/0xb40 [ 318.868843][T11758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.868882][T11758] ? apparmor_socket_sendmsg+0x98/0x360 [ 318.868918][T11758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.868954][T11758] sock_sendmsg_nosec+0x13a/0x180 [ 318.868989][T11758] __sys_sendto+0x408/0x5a0 [ 318.869017][T11758] ? __pfx___sys_sendto+0x10/0x10 [ 318.869088][T11758] ? do_user_addr_fault+0xc4c/0x1340 [ 318.869119][T11758] __x64_sys_sendto+0xde/0x100 [ 318.869145][T11758] do_syscall_64+0x166/0x520 [ 318.869171][T11758] ? trace_irq_disable+0x3b/0x140 [ 318.869197][T11758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.869222][T11758] ? clear_bhb_loop+0x70/0xc0 [ 318.869250][T11758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.869274][T11758] RIP: 0033:0x7f335575ed8e [ 318.869295][T11758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.869315][T11758] RSP: 002b:00007f33565cfe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 318.869339][T11758] RAX: ffffffffffffffda RBX: 00007f33565d16c0 RCX: 00007f335575ed8e [ 318.869356][T11758] RDX: 0000000000000020 RSI: 00007f33565d0000 RDI: 0000000000000003 [ 318.869371][T11758] RBP: 0000000000000000 R08: 00007f33565cff04 R09: 000000000000000c [ 318.869385][T11758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 318.869399][T11758] R13: 00007f33565cff58 R14: 00007f33565d0000 R15: 0000000000000000 [ 318.869436][T11758] [ 319.342806][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1843'. [ 319.342845][T11764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1843'. [ 319.369494][T11764] erspan0: entered promiscuous mode [ 319.370571][T11764] gretap0: entered promiscuous mode [ 319.371531][T11764] hsr2: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 319.371553][T11764] hsr2: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 319.430844][T11765] netlink: 'syz.2.1840': attribute type 1 has an invalid length. [ 319.430871][T11765] netlink: 'syz.2.1840': attribute type 1 has an invalid length. [ 319.549630][T11772] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1842'. [ 319.567235][T11772] gretap0: entered promiscuous mode [ 319.612877][T11772] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1842'. [ 319.613021][T11772] 0ªî{X¹¦: renamed from gretap0 [ 319.624649][T11772] 0ªî{X¹¦: left promiscuous mode [ 319.624721][T11772] 0ªî{X¹¦: entered allmulticast mode [ 319.649918][T11772] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 320.028149][T11796] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1848'. [ 320.474291][T11820] FAULT_INJECTION: forcing a failure. [ 320.474291][T11820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.474330][T11820] CPU: 0 UID: 0 PID: 11820 Comm: syz.0.1853 Not tainted syzkaller #0 PREEMPT(full) [ 320.474356][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 320.474370][T11820] Call Trace: [ 320.474378][T11820] [ 320.474388][T11820] dump_stack_lvl+0xe8/0x150 [ 320.474428][T11820] should_fail_ex+0x410/0x560 [ 320.474466][T11820] prepare_alloc_pages+0x223/0x600 [ 320.474503][T11820] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 320.474537][T11820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 320.474572][T11820] ? __pfx_policy_nodemask+0x10/0x10 [ 320.474607][T11820] ? __lock_acquire+0x747/0x2de0 [ 320.474643][T11820] alloc_pages_mpol+0x21e/0x390 [ 320.474683][T11820] folio_alloc_mpol_noprof+0x39/0x160 [ 320.474720][T11820] vma_alloc_folio_noprof+0xe1/0x1e0 [ 320.474757][T11820] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 320.474803][T11820] do_wp_page+0x117d/0x4b80 [ 320.474858][T11820] ? __pfx_do_wp_page+0x10/0x10 [ 320.474898][T11820] ? do_raw_spin_lock+0x12b/0x2f0 [ 320.474935][T11820] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.474981][T11820] handle_mm_fault+0x15d7/0x3750 [ 320.475028][T11820] ? handle_mm_fault+0xf1/0x3750 [ 320.475077][T11820] ? __pfx_handle_mm_fault+0x10/0x10 [ 320.475108][T11820] ? lock_vma_under_rcu+0x45a/0x500 [ 320.475161][T11820] do_user_addr_fault+0xa4f/0x1340 [ 320.475197][T11820] ? trace_page_fault_user+0x84/0x1e0 [ 320.475225][T11820] exc_page_fault+0x6a/0xc0 [ 320.475254][T11820] asm_exc_page_fault+0x26/0x30 [ 320.475276][T11820] RIP: 0033:0x7f6cfd35e345 [ 320.475298][T11820] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 320.475318][T11820] RSP: 002b:00007f6cfb5f4de0 EFLAGS: 00010293 [ 320.475339][T11820] RAX: 0000000000000008 RBX: 00007f6cfe157e20 RCX: 0000000000000000 [ 320.475354][T11820] RDX: 0000000000000000 RSI: 00007f6cfd453228 RDI: 00007f6cfe157e20 [ 320.475369][T11820] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 320.475384][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6cfd452f40 [ 320.475398][T11820] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f6cfd453228 [ 320.475435][T11820] [ 320.599511][T11820] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 321.699452][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 321.833690][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 321.833757][T11869] bridge_slave_1: left allmulticast mode [ 321.833774][T11869] bridge_slave_1: left promiscuous mode [ 321.834052][T11869] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.875406][T11869] bridge_slave_0: left allmulticast mode [ 321.875436][T11869] bridge_slave_0: left promiscuous mode [ 321.875678][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.924699][T11867] netlink: 'syz.5.1865': attribute type 83 has an invalid length. [ 322.392155][T11899] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1874'. [ 322.556357][T11909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1878'. [ 323.163409][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 323.327066][ T5625] Bluetooth: hci5: command 0x0c3a tx timeout [ 325.406828][ T5625] Bluetooth: hci5: command 0x0c3a tx timeout [ 325.738703][T11916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.227286][T11970] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 326.227340][T11970] nbd: nbd296 already in use [ 326.643969][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1899'. [ 326.643996][T11991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1899'. [ 326.969372][T12005] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1900'. [ 326.979962][T12005] netlink: 'syz.2.1900': attribute type 21 has an invalid length. [ 326.980034][T12005] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.041486][T12005] netlink: 'syz.2.1900': attribute type 4 has an invalid length. [ 327.041513][T12005] netlink: 'syz.2.1900': attribute type 5 has an invalid length. [ 327.041529][T12005] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.138292][T12007] sctp: [Deprecated]: syz.3.1904 (pid 12007) Use of int in maxseg socket option. [ 327.138292][T12007] Use struct sctp_assoc_value instead [ 327.373765][T12028] tipc: Enabling of bearer rejected, failed to enable media [ 327.418093][T12017] sctp: [Deprecated]: syz.0.1905 (pid 12017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.418093][T12017] Use struct sctp_sack_info instead [ 327.441678][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1905'. [ 327.767627][T12042] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1913'. [ 327.815916][T12041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1911'. [ 328.023741][T12046] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 328.023774][T12046] nbd: nbd296 already in use [ 328.431873][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1921'. [ 328.483841][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1921'. [ 328.580477][T12065] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1923'. [ 328.580599][T12065] 0·: renamed from hsr0 (while UP) [ 328.602147][T12065] 0·: entered allmulticast mode [ 328.602232][T12065] hsr_slave_0: entered allmulticast mode [ 328.602286][T12065] hsr_slave_1: entered allmulticast mode [ 328.608179][T12065] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 328.632298][T12065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1923'. [ 328.962447][T12082] xt_ecn: cannot match TCP bits for non-tcp packets [ 329.137838][T12088] bond5: Unable to set up delay as MII monitoring is disabled [ 329.144240][T12088] bond5 (unregistering): Released all slaves [ 329.629672][T12120] syzkaller0: entered promiscuous mode [ 329.629698][T12120] syzkaller0: entered allmulticast mode [ 329.703706][T12128] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 329.851372][T12130] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 330.136859][ T31] audit: type=1800 audit(1792149626.868:4): pid=12144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1949" name=400B dev="tmpfs" ino=2133 res=0 errno=0 [ 330.416544][T12157] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 330.423849][T12157] bond7 (unregistering): Released all slaves [ 330.574401][T12157] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 330.576138][T12157] bond7 (unregistering): Released all slaves [ 330.772639][T12157] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 330.793159][T12157] bond7 (unregistering): Released all slaves [ 330.990042][T12157] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 330.991583][T12157] bond7 (unregistering): Released all slaves [ 331.197173][T12157] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 331.202323][T12157] bond7 (unregistering): Released all slaves [ 331.481453][T12207] netlink: 'syz.1.1970': attribute type 23 has an invalid length. [ 331.575414][T12205] syzkaller0: entered promiscuous mode [ 331.575439][T12205] syzkaller0: entered allmulticast mode [ 331.604971][T12205] tipc: Enabled bearer , priority 0 [ 331.737275][T12220] tipc: Resetting bearer [ 331.966533][T12238] netlink: 'syz.0.1976': attribute type 12 has an invalid length. [ 331.972326][T12238] netlink: 'syz.0.1976': attribute type 29 has an invalid length. [ 331.975500][T12203] tipc: Resetting bearer [ 332.035124][T12203] tipc: Disabling bearer [ 332.065820][T12241] netlink: 'syz.5.1978': attribute type 1 has an invalid length. [ 332.211748][T12244] tipc: Enabled bearer , priority 0 [ 332.274779][T12241] __nla_validate_parse: 13 callbacks suppressed [ 332.274807][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1978'. [ 332.351927][T12241] bond5: (slave bridge3): making interface the new active one [ 332.353324][T12241] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 332.460900][T12257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1983'. [ 332.469526][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 332.469709][T12257] netlink: 392 bytes leftover after parsing attributes in process `syz.1.1983'. [ 332.516188][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 332.533219][T12257] block nbd0: Unsupported socket: should be TCP or UNIX. [ 332.549906][T12267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1985'. [ 332.599430][T12268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1983'. [ 332.606266][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 332.606323][T12270] netlink: 392 bytes leftover after parsing attributes in process `syz.1.1983'. [ 332.622548][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 332.622632][T12259] block nbd0: Unsupported socket: should be TCP or UNIX. [ 332.815116][T12277] netlink: 'syz.3.1987': attribute type 1 has an invalid length. [ 332.869839][T12277] bond4: entered promiscuous mode [ 332.870294][T12277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.871878][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.983009][T12280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.108613][T12277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.109151][T12277] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 333.109172][T12277] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 333.146772][T12277] bond4: (slave xfrm1): making interface the new active one [ 333.146800][T12277] xfrm1: entered promiscuous mode [ 333.151771][T12277] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 333.379344][ T31] audit: type=1804 audit(1792149630.118:5): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1994" name="/newroot/423/cgroup.controllers" dev="tmpfs" ino=2171 res=1 errno=0 [ 333.379654][ T31] audit: type=1800 audit(1792149630.118:6): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1994" name="cgroup.controllers" dev="tmpfs" ino=2171 res=0 errno=0 [ 333.585292][T12302] netlink: 'syz.1.1995': attribute type 13 has an invalid length. [ 333.730987][T12304] netlink: 'syz.5.1997': attribute type 6 has an invalid length. [ 333.815822][T12311] ip_tables: iptables: counters copy to user failed while replacing table [ 334.528857][ T5625] Bluetooth: hci5: command 0x0c3a tx timeout [ 334.720213][T12346] ip_tables: iptables: counters copy to user failed while replacing table [ 334.848280][T12351] FAULT_INJECTION: forcing a failure. [ 334.848280][T12351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.848321][T12351] CPU: 0 UID: 0 PID: 12351 Comm: syz.1.2012 Not tainted syzkaller #0 PREEMPT(full) [ 334.848364][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 334.848385][T12351] Call Trace: [ 334.848394][T12351] [ 334.848404][T12351] dump_stack_lvl+0xe8/0x150 [ 334.848444][T12351] should_fail_ex+0x410/0x560 [ 334.848483][T12351] prepare_alloc_pages+0x223/0x600 [ 334.848519][T12351] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 334.848555][T12351] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.848589][T12351] ? __pfx_policy_nodemask+0x10/0x10 [ 334.848630][T12351] ? __pfx_change_protection+0x10/0x10 [ 334.848663][T12351] alloc_pages_mpol+0x21e/0x390 [ 334.848702][T12351] alloc_pages_noprof+0xb1/0x2b0 [ 334.848743][T12351] pte_alloc_one+0x22/0x370 [ 334.848775][T12351] __pte_alloc+0x25/0x1a0 [ 334.848806][T12351] do_pte_missing+0x2db7/0x34b0 [ 334.848831][T12351] ? __lock_acquire+0x747/0x2de0 [ 334.848875][T12351] handle_mm_fault+0x1a53/0x3750 [ 334.848922][T12351] ? handle_mm_fault+0xf1/0x3750 [ 334.848969][T12351] ? __pfx_handle_mm_fault+0x10/0x10 [ 334.849001][T12351] ? lock_vma_under_rcu+0x45a/0x500 [ 334.849055][T12351] do_user_addr_fault+0xa4f/0x1340 [ 334.849090][T12351] ? trace_page_fault_user+0x84/0x1e0 [ 334.849117][T12351] exc_page_fault+0x6a/0xc0 [ 334.849146][T12351] asm_exc_page_fault+0x26/0x30 [ 334.849168][T12351] RIP: 0033:0x7f412b760482 [ 334.849193][T12351] Code: 8d 15 12 20 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 59 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 334.849213][T12351] RSP: 002b:00007f412c750d20 EFLAGS: 00010286 [ 334.849234][T12351] RAX: ffffffffffffffff RBX: 00007f4124000000 RCX: 00007f412b79e357 [ 334.849258][T12351] RDX: 00007f412b852470 RSI: 0000000000021000 RDI: 00007f4124000000 [ 334.849273][T12351] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 334.849287][T12351] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 334.849301][T12351] R13: 0000000000001000 R14: 00007f4128000000 R15: 0000000002800000 [ 334.849336][T12351] [ 334.850967][T12351] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 335.388010][ T6522] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.388091][ T6522] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.388129][ T6522] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.388247][ T6522] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.779360][T12385] FAULT_INJECTION: forcing a failure. [ 335.779360][T12385] name failslab, interval 1, probability 0, space 0, times 0 [ 335.779398][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.1.2024 Not tainted syzkaller #0 PREEMPT(full) [ 335.779423][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 335.779438][T12385] Call Trace: [ 335.779446][T12385] [ 335.779456][T12385] dump_stack_lvl+0xe8/0x150 [ 335.779495][T12385] should_fail_ex+0x410/0x560 [ 335.779533][T12385] should_failslab+0xa8/0x100 [ 335.779564][T12385] ? __anon_vma_prepare+0xc3/0x4d0 [ 335.779588][T12385] kmem_cache_alloc_noprof+0xa1/0x600 [ 335.779616][T12385] ? __anon_vma_prepare+0xc3/0x4d0 [ 335.779648][T12385] __anon_vma_prepare+0xc3/0x4d0 [ 335.779678][T12385] do_pte_missing+0x2f18/0x34b0 [ 335.779703][T12385] ? __lock_acquire+0x747/0x2de0 [ 335.779762][T12385] handle_mm_fault+0x1a53/0x3750 [ 335.779809][T12385] ? handle_mm_fault+0xf1/0x3750 [ 335.779857][T12385] ? __pfx_handle_mm_fault+0x10/0x10 [ 335.779889][T12385] ? lock_vma_under_rcu+0x45a/0x500 [ 335.779941][T12385] do_user_addr_fault+0xa4f/0x1340 [ 335.779977][T12385] ? trace_page_fault_user+0x84/0x1e0 [ 335.780004][T12385] exc_page_fault+0x6a/0xc0 [ 335.780033][T12385] asm_exc_page_fault+0x26/0x30 [ 335.780055][T12385] RIP: 0033:0x7f412b760482 [ 335.780076][T12385] Code: 8d 15 12 20 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 59 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 335.780095][T12385] RSP: 002b:00007f412c750d20 EFLAGS: 00010286 [ 335.780115][T12385] RAX: ffffffffffffffff RBX: 00007f4124000000 RCX: 00007f412b79e357 [ 335.780131][T12385] RDX: 00007f412b852470 RSI: 0000000000021000 RDI: 00007f4124000000 [ 335.780147][T12385] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 335.780160][T12385] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 335.780174][T12385] R13: 0000000000001000 R14: 00007f4128000000 R15: 0000000002800000 [ 335.780209][T12385] [ 335.783007][T12385] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 336.341392][T12401] netlink: 'syz.2.2032': attribute type 1 has an invalid length. [ 336.369958][T12402] netlink: Conntrack attr has 8 unknown bytes [ 336.369996][T12402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.632842][T12401] veth5: entered allmulticast mode [ 336.676078][T12401] bond4: (slave veth5): Enslaving as an active interface with a down link [ 336.758494][T12416] bond4: (slave veth0_to_bond): making interface the new active one [ 336.759611][T12416] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 336.849171][T12423] FAULT_INJECTION: forcing a failure. [ 336.849171][T12423] name failslab, interval 1, probability 0, space 0, times 0 [ 336.849215][T12423] CPU: 0 UID: 0 PID: 12423 Comm: syz.0.2036 Not tainted syzkaller #0 PREEMPT(full) [ 336.849247][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 336.849261][T12423] Call Trace: [ 336.849273][T12423] [ 336.849283][T12423] dump_stack_lvl+0xe8/0x150 [ 336.849321][T12423] should_fail_ex+0x410/0x560 [ 336.849360][T12423] should_failslab+0xa8/0x100 [ 336.849393][T12423] ? vm_area_dup+0x28/0x760 [ 336.849418][T12423] kmem_cache_alloc_noprof+0xa1/0x600 [ 336.849447][T12423] ? vm_area_dup+0x28/0x760 [ 336.849480][T12423] vm_area_dup+0x28/0x760 [ 336.849502][T12423] ? __split_vma+0x1b7/0xa60 [ 336.849535][T12423] __split_vma+0x1d7/0xa60 [ 336.849567][T12423] ? validate_mm+0x42e/0x4f0 [ 336.849599][T12423] ? __pfx___split_vma+0x10/0x10 [ 336.849625][T12423] ? rcu_is_watching+0x16/0xb0 [ 336.849665][T12423] ? __pfx___up_read+0x10/0x10 [ 336.849706][T12423] vms_gather_munmap_vmas+0x322/0x1370 [ 336.849747][T12423] ? vms_complete_munmap_vmas+0x980/0xbe0 [ 336.849793][T12423] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 336.849847][T12423] do_vmi_align_munmap+0x2b4/0x4b0 [ 336.849899][T12423] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 336.849954][T12423] ? mas_walk+0x37e/0x490 [ 336.849981][T12423] ? mas_find+0x642/0xcb0 [ 336.850011][T12423] do_vmi_munmap+0x252/0x2d0 [ 336.850050][T12423] __vm_munmap+0x241/0x3e0 [ 336.850086][T12423] ? __pfx___vm_munmap+0x10/0x10 [ 336.850116][T12423] ? vm_mmap_pgoff+0x35a/0x4e0 [ 336.850159][T12423] ? rcu_is_watching+0x16/0xb0 [ 336.850200][T12423] __x64_sys_munmap+0x60/0x70 [ 336.850224][T12423] do_syscall_64+0x166/0x520 [ 336.850250][T12423] ? trace_irq_disable+0x3b/0x140 [ 336.850275][T12423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.850298][T12423] ? clear_bhb_loop+0x70/0xc0 [ 336.850327][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.850350][T12423] RIP: 0033:0x7f6cfd39e387 [ 336.850371][T12423] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.850391][T12423] RSP: 002b:00007f6cfb5f4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 336.850415][T12423] RAX: ffffffffffffffda RBX: 00007f6cf4000000 RCX: 00007f6cfd39e387 [ 336.850432][T12423] RDX: 0000000000000000 RSI: 0000000003400000 RDI: 00007f6cf8000000 [ 336.850447][T12423] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 336.850462][T12423] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 336.850477][T12423] R13: 0000000000001000 R14: 00007f6cf8000000 R15: 0000000000c00000 [ 336.850513][T12423] [ 337.417088][ T5625] Bluetooth: hci5: command 0x0c3a tx timeout [ 337.479802][T12447] __nla_validate_parse: 10 callbacks suppressed [ 337.479827][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 337.484816][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2044'. [ 337.546446][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2044'. [ 337.634522][T12445] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 337.676533][T12452] sch_fq: defrate 0 ignored. [ 337.678887][T12456] xt_NETMAP: bad rangesize 37. [ 337.719421][T12452] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2046'. [ 337.722999][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'. [ 338.057442][T12475] netlink: 'syz.0.2054': attribute type 1 has an invalid length. [ 338.057868][T12474] netlink: 'syz.0.2054': attribute type 1 has an invalid length. [ 338.058535][T12474] netlink: 'syz.0.2054': attribute type 17 has an invalid length. [ 338.058554][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 338.058581][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2054'. [ 338.060083][T12475] netlink: 'syz.0.2054': attribute type 17 has an invalid length. [ 338.060102][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 338.060125][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2054'. [ 338.104647][T12474] 0ªî{X¹¦: entered promiscuous mode [ 338.165323][T12474] 0ªî{X¹¦: left promiscuous mode [ 338.241030][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2056'. [ 338.241136][T12481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.272035][T12475] 0ªî{X¹¦: entered promiscuous mode [ 338.284779][T12475] 0ªî{X¹¦: left promiscuous mode [ 338.393365][T12488] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 339.423735][T12547] syzkaller1: entered promiscuous mode [ 339.423776][T12547] syzkaller1: entered allmulticast mode [ 339.815435][T12564] syzkaller0: entered promiscuous mode [ 339.815460][T12564] syzkaller0: entered allmulticast mode [ 340.107607][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.107786][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.107915][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.109252][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.109401][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.109530][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.109658][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.109789][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.109920][T12583] xt_limit: Overflow, try lower: 536871034/0 [ 340.211871][ T5625] Bluetooth: hci1: unexpected event for opcode 0x203d [ 340.250192][T12591] netlink: 'syz.1.2084': attribute type 13 has an invalid length. [ 341.328359][T12632] block nbd0: Unsupported socket: should be TCP or UNIX. [ 341.353966][T12640] x_tables: duplicate underflow at hook 4 [ 341.415938][T12640] batman_adv: batadv0: Adding interface: gretap0 [ 341.415959][T12640] batman_adv: batadv0: The MTU of interface gretap0 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.415991][T12640] batman_adv: batadv0: Interface activated: gretap0 [ 341.688243][ T31] audit: type=1107 audit(1792149638.418:7): pid=12649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊk2¡ ë0ä™l…t¿Ý•/Öÿ Ž6öI¨Šç›' [ 342.377950][T12681] tipc: Started in network mode [ 342.377976][T12681] tipc: Node identity 83, cluster identity 6 [ 342.377991][T12681] tipc: Node number set to 131 [ 342.378257][T12681] tipc: Cannot configure node identity twice [ 342.474671][T12683] geneve0: entered allmulticast mode [ 342.649015][T12694] __nla_validate_parse: 8 callbacks suppressed [ 342.649038][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2111'. [ 342.920765][T12706] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2115'. [ 343.341051][T12725] : renamed from bond_slave_0 (while UP) [ 343.565352][T12732] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2120'. [ 343.816152][T12748] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2125'. [ 344.714706][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'. [ 344.835655][T12776] bond5 (unregistering): Released all slaves [ 344.888286][T12781] netlink: 'syz.0.2129': attribute type 12 has an invalid length. [ 344.888313][T12781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2129'. [ 344.927132][T12784] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2133'. [ 345.028460][T12789] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.091878][T12776] bond5 (unregistering): Released all slaves [ 345.221552][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2137'. [ 345.226069][T12803] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2137'. [ 345.286156][T12776] bond5 (unregistering): Released all slaves [ 345.460155][T12797] 8021q: VLANs not supported on ip_vti0 [ 345.460736][T12803] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2137'. [ 345.692865][T12776] bond5 (unregistering): Released all slaves [ 345.988551][T12825] ip6gre2: entered promiscuous mode [ 345.988575][T12825] ip6gre2: entered allmulticast mode [ 348.091422][T12922] __nla_validate_parse: 34 callbacks suppressed [ 348.091447][T12922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2164'. [ 348.343120][T12929] bond7: entered allmulticast mode [ 348.343614][T12929] 8021q: adding VLAN 0 to HW filter on device bond7 [ 348.497106][T12932] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.502574][T12938] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2169'. [ 348.526218][T12932] macvlan2: entered allmulticast mode [ 348.526244][T12932] bond0: entered allmulticast mode [ 348.526259][T12932] : entered allmulticast mode [ 348.526278][T12932] bond_slave_1: entered allmulticast mode [ 348.526348][T12932] : entered promiscuous mode [ 348.526387][T12932] bond_slave_1: entered promiscuous mode [ 348.563680][T12932] bond7: (slave macvlan2): Enslaving as a backup interface with an up link [ 348.621216][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2170'. [ 348.655224][T12929] ip6gretap1: entered allmulticast mode [ 348.655896][T12929] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 348.672804][T12932] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2167'. [ 348.704352][T12932] : left promiscuous mode [ 348.704387][T12932] bond_slave_1: left promiscuous mode [ 348.750396][T12932] bond0 (unregistering): left allmulticast mode [ 348.750423][T12932] : left allmulticast mode [ 348.750442][T12932] bond_slave_1: left allmulticast mode [ 348.778295][T12932] bond7: (slave macvlan2): Removing an active aggregator [ 348.778339][T12932] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 348.780389][T12932] bond7: (slave macvlan2): Releasing backup interface [ 348.780411][T12932] bond7: (slave macvlan2): the permanent HWaddr of slave - 22:a5:40:be:86:70 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 348.856748][ T6520] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 348.873949][T12932] macvlan2 (unregistering): left allmulticast mode [ 349.004646][T12932] bond0 (unregistering): (slave 30): Releasing backup interface [ 349.051849][T12932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.076417][T12932] bond0 (unregistering): Released all slaves [ 349.109940][T12957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.191820][T12961] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.429583][T12974] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2179'. [ 349.430569][T12974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2179'. [ 349.484520][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2178'. [ 349.687428][T12985] veth0: entered promiscuous mode [ 349.733154][T12984] veth0: left promiscuous mode [ 349.859490][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 349.859520][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 349.941788][T13004] netlink: 'syz.1.2189': attribute type 12 has an invalid length. [ 350.051284][T13006] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000003ÿÿÿ [ 350.259145][T13012] tc_dump_action: action bad kind [ 350.376543][T13026] gtp0: entered promiscuous mode [ 350.388896][T13026] gtp0: entered allmulticast mode [ 350.622198][T13034] netlink: 'syz.5.2199': attribute type 1 has an invalid length. [ 350.723076][T13034] bond0: entered promiscuous mode [ 350.723591][T13034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.742340][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2199'. [ 350.742375][T13047] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 350.776124][T13037] veth0_macvtap: left promiscuous mode [ 350.926001][T13055] netlink: 'syz.3.2202': attribute type 11 has an invalid length. [ 350.980398][T13057] Cannot find set identified by id 0 to match [ 351.120181][T13063] only policy match revision 0 supported [ 351.120196][T13063] unable to load match [ 351.244678][T13069] netlink: 'syz.5.2210': attribute type 4 has an invalid length. [ 351.320726][T13072] netlink: 'syz.2.2209': attribute type 5 has an invalid length. [ 351.620439][T13097] Cannot find set identified by id 0 to match [ 351.695411][T13088] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 351.712803][T13088] bond2 (unregistering): Released all slaves [ 351.987661][T13111] syzkaller0: Caught tx_queue_len zero misconfig [ 352.199509][T13121] openvswitch: netlink: Message has 512 unknown bytes. [ 352.202420][T13121] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.501137][T13130] syz.1.2227: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 352.501289][T13130] CPU: 1 UID: 0 PID: 13130 Comm: syz.1.2227 Not tainted syzkaller #0 PREEMPT(full) [ 352.501316][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 352.501331][T13130] Call Trace: [ 352.501340][T13130] [ 352.501350][T13130] dump_stack_lvl+0xe8/0x150 [ 352.501391][T13130] warn_alloc+0x24d/0x270 [ 352.501419][T13130] ? kasan_save_track+0x4f/0x80 [ 352.501448][T13130] ? kasan_save_track+0x3e/0x80 [ 352.501478][T13130] ? __pfx_warn_alloc+0x10/0x10 [ 352.501502][T13130] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 352.501527][T13130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.501572][T13130] __vmalloc_node_range_noprof+0x127/0x1540 [ 352.501622][T13130] ? rcu_is_watching+0x16/0xb0 [ 352.501659][T13130] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 352.501685][T13130] ? __kmalloc_cache_noprof+0x321/0x600 [ 352.501713][T13130] ? __kmalloc_cache_noprof+0x14d/0x600 [ 352.501739][T13130] ? xskq_create+0x56/0x220 [ 352.501774][T13130] xskq_create+0x148/0x220 [ 352.501798][T13130] ? xsk_init_queue+0x8a/0xe0 [ 352.501823][T13130] xsk_init_queue+0x8a/0xe0 [ 352.501853][T13130] xsk_setsockopt+0x52a/0x960 [ 352.501892][T13130] ? __pfx_xsk_setsockopt+0x10/0x10 [ 352.501929][T13130] ? __pfx_aa_sk_perm+0x10/0x10 [ 352.501974][T13130] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 352.502009][T13130] ? __pfx_xsk_setsockopt+0x10/0x10 [ 352.502086][T13130] do_sock_setsockopt+0x17c/0x1b0 [ 352.502115][T13130] __x64_sys_setsockopt+0x13d/0x1b0 [ 352.502145][T13130] do_syscall_64+0x166/0x520 [ 352.502172][T13130] ? trace_irq_disable+0x3b/0x140 [ 352.502198][T13130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.502223][T13130] ? clear_bhb_loop+0x70/0xc0 [ 352.502252][T13130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.502275][T13130] RIP: 0033:0x7f412b79e559 [ 352.502297][T13130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.502317][T13130] RSP: 002b:00007f412c752028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 352.502341][T13130] RAX: ffffffffffffffda RBX: 00007f412ba25fa0 RCX: 00007f412b79e559 [ 352.502359][T13130] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 352.502374][T13130] RBP: 00007f412b8358b0 R08: 0000000000000004 R09: 0000000000000000 [ 352.502388][T13130] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 352.502403][T13130] R13: 00007f412ba26038 R14: 00007f412ba25fa0 R15: 00007ffc9fcdaec8 [ 352.502440][T13130] [ 352.647313][T13130] Mem-Info: [ 352.647358][T13130] active_anon:6351 inactive_anon:0 isolated_anon:0 [ 352.647358][T13130] active_file:0 inactive_file:43529 isolated_file:0 [ 352.647358][T13130] unevictable:4 dirty:100 writeback:0 [ 352.647358][T13130] slab_reclaimable:11396 slab_unreclaimable:103056 [ 352.647358][T13130] mapped:29658 shmem:526 pagetables:5944 [ 352.647358][T13130] sec_pagetables:0 bounce:0 [ 352.647358][T13130] kernel_misc_reclaimable:0 [ 352.647358][T13130] free:1313207 free_pcp:8514 free_cma:0 [ 352.647518][T13130] Node 0 active_anon:25404kB inactive_anon:0kB active_file:0kB inactive_file:173912kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:118632kB dirty:396kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14656kB pagetables:23660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 352.647687][T13130] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 352.647858][T13130] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.648031][T13130] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 352.674599][T13130] Node 0 DMA32 free:1297548kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25404kB inactive_anon:0kB active_file:0kB inactive_file:173912kB unevictable:16kB writepending:396kB zspages:0kB present:3129332kB managed:2527504kB mlocked:16kB bounce:0kB free_pcp:34116kB local_pcp:13856kB free_cma:0kB [ 352.674776][T13130] lowmem_reserve[]: 0 0 0 0 0 [ 352.674893][T13130] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.675055][T13130] lowmem_reserve[]: 0 0 0 0 0 [ 352.675164][T13130] Node 1 Normal free:3939920kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.675333][T13130] lowmem_reserve[]: 0 0 0 0 0 [ 352.675515][T13130] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 352.751461][T13130] Node 0 DMA32: 2751*4kB (UME) 2864*8kB (UM) 1861*16kB (UME) 1956*32kB (UME) 1604*64kB (UME) 1225*128kB (UM) 866*256kB (UME) 480*512kB (UME) 200*1024kB (UME) 7*2048kB (UM) 55*4096kB (UM) = 1297612kB [ 352.751741][T13130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 352.751856][T13130] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 4*16kB (UM) 5*32kB (UM) 5*64kB (UM) 6*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3939920kB [ 352.758829][T13130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.758884][T13130] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.758935][T13130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.758985][T13130] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.759040][T13130] 44051 total pagecache pages [ 352.759071][T13130] 0 pages in swap cache [ 352.759094][T13130] Free swap = 124996kB [ 352.842767][T13130] Total swap = 124996kB [ 352.842818][T13130] 2097051 pages RAM [ 352.842840][T13130] 0 pages HighMem/MovableOnly [ 352.842862][T13130] 433559 pages reserved [ 352.842892][T13130] 0 pages cma reserved [ 353.223345][T13137] FAULT_INJECTION: forcing a failure. [ 353.223345][T13137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.223382][T13137] CPU: 0 UID: 0 PID: 13137 Comm: syz.2.2230 Not tainted syzkaller #0 PREEMPT(full) [ 353.223408][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 353.223422][T13137] Call Trace: [ 353.223431][T13137] [ 353.223441][T13137] dump_stack_lvl+0xe8/0x150 [ 353.223479][T13137] should_fail_ex+0x410/0x560 [ 353.223522][T13137] _copy_from_user+0x2d/0xb0 [ 353.223558][T13137] sctp_setsockopt+0x1c4/0x12c0 [ 353.223581][T13137] ? sock_common_setsockopt+0x36/0xc0 [ 353.223614][T13137] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 353.223650][T13137] do_sock_setsockopt+0x17c/0x1b0 [ 353.223678][T13137] __x64_sys_setsockopt+0x13d/0x1b0 [ 353.223709][T13137] do_syscall_64+0x166/0x520 [ 353.223735][T13137] ? trace_irq_disable+0x3b/0x140 [ 353.223760][T13137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.223784][T13137] ? clear_bhb_loop+0x70/0xc0 [ 353.223812][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.223835][T13137] RIP: 0033:0x7fe78779e559 [ 353.223856][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.223875][T13137] RSP: 002b:00007fe78867e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 353.223900][T13137] RAX: ffffffffffffffda RBX: 00007fe787a26090 RCX: 00007fe78779e559 [ 353.223918][T13137] RDX: 0000000000000080 RSI: 0000000000000084 RDI: 0000000000000003 [ 353.223931][T13137] RBP: 00007fe78867e090 R08: 0000000000000008 R09: 0000000000000000 [ 353.223946][T13137] R10: 0000200000000cc0 R11: 0000000000000246 R12: 0000000000000001 [ 353.223960][T13137] R13: 00007fe787a26128 R14: 00007fe787a26090 R15: 00007ffe639f1cc8 [ 353.223996][T13137] [ 353.472309][T13128] netlink: Failed to add lo helper -22 [ 353.472373][T13128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.787039][T13149] __nla_validate_parse: 8 callbacks suppressed [ 353.787061][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2234'. [ 353.917068][T13157] bond0: entered promiscuous mode [ 354.039359][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2237'. [ 354.093659][ T31] audit: type=1800 audit(1792149650.828:8): pid=13164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2239" name="8" dev="tmpfs" ino=2411 res=0 errno=0 [ 354.157760][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2240'. [ 354.203081][T13167] C: renamed from lo [ 354.216461][T13167] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 354.524508][T13186] FAULT_INJECTION: forcing a failure. [ 354.524508][T13186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.524545][T13186] CPU: 0 UID: 0 PID: 13186 Comm: syz.2.2244 Not tainted syzkaller #0 PREEMPT(full) [ 354.524570][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.524584][T13186] Call Trace: [ 354.524592][T13186] [ 354.524602][T13186] dump_stack_lvl+0xe8/0x150 [ 354.524639][T13186] should_fail_ex+0x410/0x560 [ 354.524677][T13186] _copy_to_user+0x31/0xb0 [ 354.524702][T13186] simple_read_from_buffer+0xe1/0x170 [ 354.524745][T13186] proc_fail_nth_read+0x1bb/0x230 [ 354.524771][T13186] ? common_file_perm+0x20e/0x2b0 [ 354.524812][T13186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.524843][T13186] ? rw_verify_area+0x24a/0x4c0 [ 354.524868][T13186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.524893][T13186] vfs_read+0x213/0xa80 [ 354.524921][T13186] ? __pfx___mutex_lock+0x10/0x10 [ 354.524950][T13186] ? __pfx_vfs_read+0x10/0x10 [ 354.524975][T13186] ? __fget_files+0x2a/0x420 [ 354.525002][T13186] ? __fget_files+0x3a2/0x420 [ 354.525021][T13186] ? __fget_files+0x2a/0x420 [ 354.525051][T13186] ksys_read+0x150/0x270 [ 354.525076][T13186] ? __pfx_ksys_read+0x10/0x10 [ 354.525113][T13186] do_syscall_64+0x166/0x520 [ 354.525139][T13186] ? trace_irq_disable+0x3b/0x140 [ 354.525164][T13186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.525188][T13186] ? clear_bhb_loop+0x70/0xc0 [ 354.525216][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.525238][T13186] RIP: 0033:0x7fe78775ed8e [ 354.525259][T13186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.525278][T13186] RSP: 002b:00007fe78869efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.525303][T13186] RAX: ffffffffffffffda RBX: 00007fe78869f6c0 RCX: 00007fe78775ed8e [ 354.525319][T13186] RDX: 000000000000000f RSI: 00007fe78869f0a0 RDI: 0000000000000004 [ 354.525334][T13186] RBP: 00007fe78869f090 R08: 0000000000000000 R09: 0000000000000000 [ 354.525348][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.525361][T13186] R13: 00007fe787a26038 R14: 00007fe787a25fa0 R15: 00007ffe639f1cc8 [ 354.525397][T13186] [ 354.821139][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2245'. [ 354.949055][T13192] netlink: 'syz.5.2248': attribute type 1 has an invalid length. [ 355.003273][T13192] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.066936][T13194] bond8: (slave veth5): Enslaving as an active interface with a down link [ 355.358326][T13215] veth0: entered promiscuous mode [ 355.389135][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2250'. [ 355.475838][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2250'. [ 355.503287][T13213] veth0: left promiscuous mode [ 355.574942][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 355.574978][T13225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'. [ 355.808009][T13229] bond2: option resend_igmp: invalid value (32767) [ 355.808036][T13229] bond2: option resend_igmp: allowed values 0 - 255 [ 355.812183][T13229] bond2 (unregistering): Released all slaves [ 355.860984][T13235] tipc: Enabling of bearer rejected, failed to enable media [ 356.034927][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 356.054066][T13247] netlink: 'syz.2.2257': attribute type 1 has an invalid length. [ 356.164206][T13256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2259'. [ 356.194700][T13251] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 356.228522][T13250] netlink: 'syz.1.2259': attribute type 10 has an invalid length. [ 356.264487][T13250] team0: Port device dummy0 added [ 356.534714][T13274] netlink: 'syz.5.2262': attribute type 1 has an invalid length. [ 356.534765][T13274] netlink: 'syz.5.2262': attribute type 268 has an invalid length. [ 357.053932][T13309] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 358.137026][T13373] netlink: 'syz.0.2291': attribute type 1 has an invalid length. [ 358.213896][T13378] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 358.279912][T13378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.859878][T13407] tap0: tun_chr_ioctl cmd 1074025672 [ 358.859903][T13407] tap0: ignored: set checksum disabled [ 358.865347][T13406] __nla_validate_parse: 80 callbacks suppressed [ 358.865368][T13406] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2300'. [ 358.865416][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'. [ 358.926449][T13406] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2300'. [ 358.926512][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'. [ 359.147762][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2304'. [ 359.250408][T13427] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2305'. [ 359.250433][T13427] openvswitch: netlink: Flow key attr not present in new flow. [ 359.515282][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 359.536020][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 359.751827][T13455] netlink: 'syz.3.2311': attribute type 30 has an invalid length. [ 359.751856][T13455] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2311'. [ 359.881404][T13457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2312'. [ 359.913310][T13463] ip_tables: iptables: counters copy to user failed while replacing table [ 360.095806][T13476] veth0: entered promiscuous mode [ 360.193755][T13475] veth0: left promiscuous mode [ 360.214967][T13486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 361.035145][T13532] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 361.035235][T13532] syzkaller1: linktype set to 823 [ 361.061039][T13529] bond4: (slave veth0_to_bond): Releasing active interface [ 361.081259][T13529] bond0: (slave bond_slave_0): Releasing backup interface [ 361.112533][T13529] bond_slave_0: left allmulticast mode [ 361.192257][T13529] team0: Port device team_slave_0 removed [ 361.213334][T13529] team0: Port device team_slave_1 removed [ 361.215140][T13529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.510525][T13529] tipc: Enabled bearer , priority 0 [ 361.987215][T13560] netlink: 'syz.1.2341': attribute type 1 has an invalid length. [ 362.006204][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.055266][T13556] bridge_slave_0 (unregistering): left allmulticast mode [ 362.055299][T13556] bridge_slave_0 (unregistering): left promiscuous mode [ 362.055395][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.548284][T13581] ovs-dp0: entered promiscuous mode [ 363.592976][T13635] vlan1: entered promiscuous mode [ 363.593018][T13635] bridge0: entered promiscuous mode [ 363.593304][T13635] vlan1: entered allmulticast mode [ 363.593335][T13635] bridge0: entered allmulticast mode [ 363.743140][T13637] vlan1: entered promiscuous mode [ 363.744742][T13637] vlan1: entered allmulticast mode [ 363.974453][T13654] __nla_validate_parse: 17 callbacks suppressed [ 363.974476][T13654] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2371'. [ 364.404480][T13676] can: request_module (can-proto-3) failed. [ 364.555361][T13700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2385'. [ 364.620617][T13689] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.829733][T13708] 8021q: adding VLAN 0 to HW filter on device bond7 [ 365.078888][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 365.215880][T13734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'. [ 365.383074][T13747] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2402'. [ 365.454049][T13747] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 365.472946][T13747] bond10 (unregistering): Released all slaves [ 365.518954][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 365.536438][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 365.915312][T13774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.962026][T13774] netlink: 'syz.0.2409': attribute type 10 has an invalid length. [ 365.982028][T13774] team0: Device wg2 is of different type [ 366.023299][T13779] Cannot find set identified by id 0 to match [ 366.090289][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 366.373784][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 366.697119][T13813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2421'. [ 366.804969][T13807] tap0: tun_chr_ioctl cmd 2148553947 [ 367.103569][T13819] bond5: Removing last arp target with arp_interval on [ 367.521196][T13849] netlink: 'syz.5.2427': attribute type 15 has an invalid length. [ 367.581716][T13849] netlink: 'syz.5.2427': attribute type 15 has an invalid length. [ 367.612361][ T6521] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 367.667686][ T6544] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 367.667932][ T59] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 367.667973][ T59] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 367.801972][T13861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.044412][T13866] syzkaller0: entered promiscuous mode [ 368.044436][T13866] syzkaller0: entered allmulticast mode [ 368.044526][T13870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.285728][T13882] openvswitch: netlink: ct_state flags ffffffff unsupported [ 368.529337][T13901] ip6erspan0: entered promiscuous mode [ 368.554651][T13902] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 368.572348][T13902] batman_adv: batadv0: Adding interface: gretap2 [ 368.572366][T13902] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.572400][T13902] batman_adv: batadv0: Interface activated: gretap2 [ 368.841555][T13907] syzkaller1: entered promiscuous mode [ 368.841614][T13907] syzkaller1: entered allmulticast mode [ 369.496001][T13949] __nla_validate_parse: 11 callbacks suppressed [ 369.496025][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2458'. [ 369.672413][ T1269] IPVS: starting estimator thread 0... [ 369.688035][T13958] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2462'. [ 369.757300][T13959] IPVS: using max 28 ests per chain, 67200 per kthread [ 369.855113][T13960] syzkaller1: entered promiscuous mode [ 369.855140][T13960] syzkaller1: entered allmulticast mode [ 369.892315][T13954] infiniband syz0: set active [ 369.892395][T13954] infiniband syz0: added bond_slave_1 [ 369.919598][T13954] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 369.919644][T13954] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 369.919689][T13954] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 370.066053][T13954] RDS/IB: syz0: added [ 370.066113][T13954] smc: adding ib device syz0 with port count 1 [ 370.066135][T13954] smc: ib device syz0 port 1 has no pnetid [ 370.570884][T13973] bond10 (unregistering): Released all slaves [ 370.584730][T13984] netlink: 'syz.3.2467': attribute type 3 has an invalid length. [ 370.584754][T13984] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2467'. [ 370.585385][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2467'. [ 371.086037][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2472'. [ 371.086320][T13998] netlink: 'syz.5.2474': attribute type 1 has an invalid length. [ 371.086340][T13998] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2474'. [ 371.503847][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'. [ 371.625468][T14029] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2484'. [ 371.647406][T14029] netlink: 'syz.2.2484': attribute type 3 has an invalid length. [ 371.675813][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 371.675939][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 371.785832][T14038] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 371.870993][T14044] netlink: Conntrack attr has 1 unknown bytes [ 371.871030][T14044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.012400][T14051] netlink: 'syz.5.2491': attribute type 10 has an invalid length. [ 372.043572][T14051] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 372.621746][T14073] veth7: entered promiscuous mode [ 372.742166][T14077] 8021q: adding VLAN 0 to HW filter on device bond8 [ 373.371253][T14105] sctp: [Deprecated]: syz.5.2507 (pid 14105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.371253][T14105] Use struct sctp_sack_info instead [ 373.421686][T14105] ip_tables: iptables: counters copy to user failed while replacing table [ 373.546516][T14108] syzkaller0: left promiscuous mode [ 373.547975][T14108] syzkaller0: left allmulticast mode [ 373.702054][T14118] ip6gre1: entered allmulticast mode [ 373.714108][ T6516] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.146305][T14150] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 374.275812][T14150] bond5: option mode: invalid value (7) [ 374.314653][T14150] bond5 (unregistering): Released all slaves [ 374.578461][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 374.885228][T14171] __nla_validate_parse: 43 callbacks suppressed [ 374.885252][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'. [ 374.988501][T14176] xt_hl: Unknown TTL match mode: 255 [ 375.101046][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2531'. [ 375.128235][ T5625] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 375.151834][T14183] bond9: entered promiscuous mode [ 375.152770][T14181] syzkaller0: entered promiscuous mode [ 375.152791][T14181] syzkaller0: entered allmulticast mode [ 375.336395][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 375.336425][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 375.422215][T14199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2535'. [ 375.482997][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2533'. [ 375.677573][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'. [ 375.679731][ T6544] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 375.679958][ T6544] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 375.717031][ T5733] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 375.732871][ T5733] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 375.859638][T14212] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2539'. [ 376.011646][T14225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.259217][T14232] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2543'. [ 376.259246][T14232] openvswitch: netlink: Message has 512 unknown bytes. [ 376.293298][T14236] bond10: Unable to set up delay as MII monitoring is disabled [ 376.309809][T14236] bond10 (unregistering): Released all slaves [ 376.346849][ T5733] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 376.436426][T14240] bond10: Unable to set up delay as MII monitoring is disabled [ 376.446518][T14240] bond10 (unregistering): Released all slaves [ 376.467566][T14248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2545'. [ 376.693337][T14252] netlink: 'syz.0.2546': attribute type 2 has an invalid length. [ 376.740872][T14256] netlink: 'syz.2.2548': attribute type 21 has an invalid length. [ 376.912987][T14272] xt_limit: Overflow, try lower: 536871034/127 [ 377.018431][T14275] x_tables: duplicate underflow at hook 3 [ 377.022998][T14275] netlink: 'syz.0.2556': attribute type 11 has an invalid length. [ 377.665342][T14308] tc_dump_action: action bad kind [ 377.714735][T14310] netlink: 'syz.0.2566': attribute type 4 has an invalid length. [ 377.858427][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.858560][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.858635][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.858787][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.858802][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.858813][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.858940][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.858953][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.858965][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.859088][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.859101][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.859112][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.860279][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.860312][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.861060][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.861204][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.861218][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.861230][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.861685][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.861700][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.861711][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.861840][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.861854][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.861866][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.861994][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.862006][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.862018][T14318] xt_hashlimit: overflow, rate too high: 0 [ 377.862142][T14318] xt_hashlimit: size too large, truncated to 1048576 [ 377.862155][T14318] xt_hashlimit: max too large, truncated to 1048576 [ 377.862167][T14318] xt_hashlimit: overflow, rate too high: 0 [ 378.057701][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.533152][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.556460][T14340] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 378.682122][T14346] netlink: 'syz.0.2577': attribute type 12 has an invalid length. [ 378.841843][T14347] netlink: 'syz.0.2577': attribute type 12 has an invalid length. [ 379.034586][T14357] ip6erspan0: entered allmulticast mode [ 379.406840][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 380.130305][T14396] __nla_validate_parse: 9 callbacks suppressed [ 380.130330][T14396] netlink: 17732 bytes leftover after parsing attributes in process `syz.5.2592'. [ 380.130366][T14396] openvswitch: netlink: Flow key attr not present in new flow. [ 380.232400][T14398] ip_tables: iptables: counters copy to user failed while replacing table [ 380.359009][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 380.416721][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'. [ 380.465213][T14374] ªªªªªª: renamed from ip6_vti0 (while UP) [ 380.588812][T14415] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.665504][T14417] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 380.735074][T14415] ovs-dp0: entered promiscuous mode [ 380.792802][T14417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.851030][T14425] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 380.939163][T14421] bond5: (slave geneve3): making interface the new active one [ 380.942827][T14421] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 381.142906][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2603'. [ 381.225931][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2603'. [ 381.253423][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'. [ 381.254260][T14438] netlink: 'syz.5.2603': attribute type 4 has an invalid length. [ 381.282274][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2607'. [ 381.282303][T14444] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2607'. [ 381.282350][T14444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2607'. [ 381.319150][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'. [ 381.339693][T14449] netlink: 'syz.5.2603': attribute type 4 has an invalid length. [ 381.418234][T14453] netlink: 'syz.1.2604': attribute type 7 has an invalid length. [ 381.443874][T14451] netlink: 'syz.0.2609': attribute type 1 has an invalid length. [ 381.715577][T14469] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 381.715639][T14469] gretap2: entered promiscuous mode [ 381.715651][T14469] gretap2: entered allmulticast mode [ 382.060059][T14487] sctp: [Deprecated]: syz.0.2618 (pid 14487) Use of int in max_burst socket option. [ 382.060059][T14487] Use struct sctp_assoc_value instead [ 382.060153][T14481] sctp: [Deprecated]: syz.0.2618 (pid 14481) Use of int in max_burst socket option. [ 382.060153][T14481] Use struct sctp_assoc_value instead [ 382.258094][T14496] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 382.328331][T14496] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.331374][T14502] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 382.365509][T14502] bond6: entered allmulticast mode [ 382.386694][T14500] openvswitch: netlink: Flow key attr not present in new flow. [ 382.392879][T14500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.463490][T14502] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 382.516515][T14496] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 383.151956][T14531] hsr0: entered allmulticast mode [ 383.151983][T14531] hsr_slave_0: entered allmulticast mode [ 383.152003][T14531] hsr_slave_1: entered allmulticast mode [ 383.189429][T14535] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 383.195697][T14526] hsr0: entered promiscuous mode [ 383.265621][T14528] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 383.271279][T14535] bond7: entered promiscuous mode [ 383.273735][T14535] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.288533][T14526] hsr_slave_0: left promiscuous mode [ 383.289566][T14526] hsr_slave_1: left promiscuous mode [ 383.295536][T14526] hsr0 (unregistering): left allmulticast mode [ 383.295579][T14526] hsr0 (unregistering): left promiscuous mode [ 383.394718][T14541] bond7: (slave bridge2): making interface the new active one [ 383.394744][T14541] bridge2: entered promiscuous mode [ 383.404272][T14541] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 383.592108][T14554] Cannot find set identified by id 0 to match [ 383.735985][T14558] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 383.901812][T14569] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 383.982747][T14558] veth7: entered promiscuous mode [ 384.005179][T14558] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 384.174403][T14584] openvswitch: netlink: Multiple metadata blocks provided [ 384.329862][T14591] netlink: 'syz.3.2647': attribute type 30 has an invalid length. [ 384.656333][T14602] openvswitch: netlink: IP tunnel dst address not specified [ 385.185663][T14624] siw: device registration error -23 [ 385.404714][T14638] __nla_validate_parse: 17 callbacks suppressed [ 385.404736][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 385.971982][T14670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2666'. [ 386.073712][T14678] validate_nla: 3 callbacks suppressed [ 386.073735][T14678] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 386.159573][T14678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.734870][T14711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2678'. [ 386.803771][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2678'. [ 386.823872][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 386.856793][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.863399][T14716] pim6reg: entered allmulticast mode [ 386.899503][T14716] veth1_to_hsr: entered allmulticast mode [ 386.905745][T14716] pim6reg: left allmulticast mode [ 386.905828][T14716] veth1_to_hsr: left allmulticast mode [ 387.244004][T14734] can: request_module (can-proto-0) failed. [ 387.256055][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2686'. [ 387.285513][T14734] netlink: 'syz.1.2686': attribute type 16 has an invalid length. [ 387.331760][T14729] nbd0: detected capacity change from 0 to 63 [ 387.343926][ T5627] block nbd0: Receive control failed (result -32) [ 387.345143][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2687'. [ 387.374148][ T2048] block nbd0: Dead connection, failed to find a fallback [ 387.374187][ T2048] block nbd0: shutting down sockets [ 387.374289][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.374381][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.382100][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.382135][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.383192][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.383992][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.384895][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.384926][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.385103][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.385131][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.385280][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.385306][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.385659][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.385688][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.390220][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.390296][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.390427][T14741] ldm_validate_partition_table(): Disk read failed. [ 387.390700][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.390759][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.391129][ T2048] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.391211][ T2048] Buffer I/O error on dev nbd0, logical block 0, async page read [ 387.401774][T14741] Dev nbd0: unable to read RDB block 0 [ 387.403330][T14741] nbd0: unable to read partition table [ 387.490350][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 387.707799][T14743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.709495][T14741] ldm_validate_partition_table(): Disk read failed. [ 387.710332][T14741] Dev nbd0: unable to read RDB block 0 [ 387.714259][T14741] nbd0: unable to read partition table [ 387.793550][T14741] ldm_validate_partition_table(): Disk read failed. [ 387.794960][T14741] Dev nbd0: unable to read RDB block 0 [ 387.796485][T14741] nbd0: unable to read partition table [ 387.925158][T14752] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2691'. [ 388.175466][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2696'. [ 388.518039][T14782] geneve3: entered promiscuous mode [ 388.518067][T14782] geneve3: entered allmulticast mode [ 388.538638][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 388.540192][ T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 388.540235][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 388.540270][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 389.122321][T14807] netlink: 'syz.5.2707': attribute type 12 has an invalid length. [ 389.433680][T14810] netlink: 'syz.2.2709': attribute type 7 has an invalid length. [ 389.433709][T14810] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2709'. [ 390.127002][T14835] vlan3: entered promiscuous mode [ 390.127027][T14835] hsr0: entered promiscuous mode [ 390.127255][T14835] vlan3: entered allmulticast mode [ 390.382573][T14854] FAULT_INJECTION: forcing a failure. [ 390.382573][T14854] name failslab, interval 1, probability 0, space 0, times 0 [ 390.382609][T14854] CPU: 0 UID: 0 PID: 14854 Comm: syz.3.2724 Not tainted syzkaller #0 PREEMPT(full) [ 390.382634][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 390.382648][T14854] Call Trace: [ 390.382657][T14854] [ 390.382667][T14854] dump_stack_lvl+0xe8/0x150 [ 390.382706][T14854] should_fail_ex+0x410/0x560 [ 390.382743][T14854] ? __alloc_skb+0x1db/0x7a0 [ 390.382777][T14854] should_failslab+0xa8/0x100 [ 390.382812][T14854] ? __alloc_skb+0x1db/0x7a0 [ 390.382844][T14854] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 390.382871][T14854] ? __alloc_skb+0x18d/0x7a0 [ 390.382919][T14854] ? __alloc_skb+0x1db/0x7a0 [ 390.382962][T14854] __alloc_skb+0x1db/0x7a0 [ 390.383001][T14854] netlink_ack+0x136/0xb30 [ 390.383028][T14854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.383070][T14854] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 390.383127][T14854] netlink_rcv_skb+0x2a4/0x4a0 [ 390.383156][T14854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.383199][T14854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.383243][T14854] ? down_read+0x2be/0x330 [ 390.383274][T14854] genl_rcv+0x28/0x40 [ 390.383304][T14854] netlink_unicast+0x8ef/0xa80 [ 390.383346][T14854] netlink_sendmsg+0x813/0xb40 [ 390.383385][T14854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.383423][T14854] ? apparmor_socket_sendmsg+0x98/0x360 [ 390.383458][T14854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.383485][T14854] sock_sendmsg_nosec+0x13a/0x180 [ 390.383519][T14854] ____sys_sendmsg+0x54e/0x850 [ 390.383550][T14854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.383585][T14854] ? import_iovec+0x73/0xa0 [ 390.383624][T14854] ___sys_sendmsg+0x2a5/0x360 [ 390.383648][T14854] ? __lock_acquire+0x747/0x2de0 [ 390.383678][T14854] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.383742][T14854] ? __fget_files+0x2a/0x420 [ 390.383762][T14854] ? __fget_files+0x3a2/0x420 [ 390.383795][T14854] __x64_sys_sendmsg+0x1b1/0x290 [ 390.383824][T14854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.383873][T14854] do_syscall_64+0x166/0x520 [ 390.383900][T14854] ? trace_irq_disable+0x3b/0x140 [ 390.383925][T14854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.383948][T14854] ? clear_bhb_loop+0x70/0xc0 [ 390.383977][T14854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.384000][T14854] RIP: 0033:0x7f5d76b9e559 [ 390.384020][T14854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.384037][T14854] RSP: 002b:00007f5d77a65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.384071][T14854] RAX: ffffffffffffffda RBX: 00007f5d76e25fa0 RCX: 00007f5d76b9e559 [ 390.384088][T14854] RDX: 0000000000000000 RSI: 0000200000002040 RDI: 0000000000000007 [ 390.384102][T14854] RBP: 00007f5d77a65090 R08: 0000000000000000 R09: 0000000000000000 [ 390.384116][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.384130][T14854] R13: 00007f5d76e26038 R14: 00007f5d76e25fa0 R15: 00007fff1c428998 [ 390.384170][T14854] [ 391.142555][T14879] ip_tables: iptables: counters copy to user failed while replacing table [ 391.254083][T14883] ip_tables: iptables: counters copy to user failed while replacing table [ 391.289984][T14883] nbd: must specify at least one socket [ 391.375536][T14883] ip_tables: iptables: counters copy to user failed while replacing table [ 391.412781][T14891] nbd: must specify at least one socket [ 391.678274][T14910] netlink: 'syz.5.2740': attribute type 12 has an invalid length. [ 392.092542][T14929] netlink: NAT attribute has 8 unknown bytes [ 392.092577][T14929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.504652][T14950] siw: device registration error -23 [ 392.683541][T14957] __nla_validate_parse: 2 callbacks suppressed [ 392.683564][T14957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2752'. [ 392.685527][T14957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2752'. [ 392.701181][T14957] netlink: 'syz.1.2752': attribute type 1 has an invalid length. [ 392.765285][T14961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2752'. [ 392.792192][T14957] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.128779][T14974] x_tables: duplicate underflow at hook 4 [ 393.159340][T14974] ovs-dp0: entered promiscuous mode [ 393.193901][T14972] xt_NFQUEUE: number of total queues is 0 [ 393.414871][T14985] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2763'. [ 393.508642][T14988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.574299][T14991] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:19999 [ 393.787974][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 393.820547][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 393.874872][ T5627] block nbd1: Receive control failed (result -32) [ 394.238752][T15021] netlink: 'syz.1.2773': attribute type 5 has an invalid length. [ 394.434528][ T5627] Bluetooth: hci1: connection err: -111 [ 394.448250][T15029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2776'. [ 394.719905][T15042] xt_IDLETIMER: label is empty or not nul-terminated [ 394.819713][T15046] netlink: 'syz.5.2783': attribute type 6 has an invalid length. [ 394.968417][T15049] bond11: Removing last arp target with arp_interval on [ 394.971649][T15051] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2782'. [ 395.052109][T15060] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2785'. [ 395.052139][T15060] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2785'. [ 395.184640][T15065] netlink: 'syz.2.2789': attribute type 4 has an invalid length. [ 396.505786][T15122] sctp: [Deprecated]: syz.0.2805 (pid 15122) Use of int in maxseg socket option. [ 396.505786][T15122] Use struct sctp_assoc_value instead [ 397.298527][T15151] xfrm1: entered allmulticast mode [ 397.573645][T15163] ip_tables: iptables: counters copy to user failed while replacing table [ 398.510771][T15214] __nla_validate_parse: 6 callbacks suppressed [ 398.510792][T15214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2833'. [ 399.102416][T15235] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2842'. [ 399.311779][T15248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2846'. [ 399.321325][T15249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2847'. [ 399.325193][T15248] xt_TCPMSS: Only works on TCP SYN packets [ 399.359812][T15249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2847'. [ 399.365845][T15249] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2847'. [ 399.549766][T15259] lo: left promiscuous mode [ 399.599583][T15259] sit0: left promiscuous mode [ 399.695882][T15259] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.696097][T15259] bridge0: port 2(bridge_slave_1) entered listening state [ 399.696370][T15259] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.696598][T15259] bridge0: port 1(bridge_slave_0) entered listening state [ 399.755956][T15259] v: left promiscuous mode [ 399.765004][T15259] v: entered promiscuous mode [ 399.870533][T15259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.888128][T15259] syzkaller0: left promiscuous mode [ 399.891486][T15259] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.894253][T15259] gretap1: left promiscuous mode [ 399.894781][T15259] bond4: left promiscuous mode [ 399.894799][T15259] xfrm1: left promiscuous mode [ 399.982509][T15270] netlink: Invalid conntrack helper [ 399.982543][T15270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.209621][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'. [ 400.615914][T15302] netlink: 'syz.5.2865': attribute type 1 has an invalid length. [ 400.671632][T15302] 8021q: adding VLAN 0 to HW filter on device bond10 [ 400.709017][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2865'. [ 400.742400][T15302] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2865'. [ 400.824393][T15311] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 400.863292][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2869'. [ 401.127497][T15314] 8021q: adding VLAN 0 to HW filter on device bond12 [ 401.784104][T15363] xt_cgroup: path and classid specified [ 402.251500][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.269425][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.272471][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.301739][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.305912][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.660226][T15391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.846804][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 403.452432][T15419] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode [ 403.452463][T15419] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode [ 403.631882][T15430] openvswitch: netlink: IP tunnel dst address not specified [ 403.633453][T15427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.636797][T15424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.690136][T15424] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 403.691223][T15434] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 403.699481][T15433] openvswitch: netlink: IP tunnel dst address not specified [ 404.166069][T15454] xt_TCPMSS: Only works on TCP SYN packets [ 404.353885][T15461] __nla_validate_parse: 5 callbacks suppressed [ 404.353906][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.354095][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.354278][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.354459][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.354650][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.354833][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.355021][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.355201][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.377317][ T5627] Bluetooth: hci2: command tx timeout [ 404.383842][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.384464][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2906'. [ 404.766768][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.868808][ T6325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.173188][ T6325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.267723][T15375] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.268628][T15375] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.268754][T15375] bridge_slave_0: entered allmulticast mode [ 405.274831][T15375] bridge_slave_0: entered promiscuous mode [ 405.289648][T15375] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.290360][T15375] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.290809][T15375] bridge_slave_1: entered allmulticast mode [ 405.328070][T15375] bridge_slave_1: entered promiscuous mode [ 405.462154][ T6325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.672205][ T6325] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.716034][T15375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.734384][T15375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.837307][T15375] team0: Port device team_slave_0 added [ 405.847781][T15375] team0: Port device team_slave_1 added [ 405.982156][T15375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.982175][T15375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.982198][T15375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.004439][T15375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.004486][T15375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.004562][T15375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.447722][ T5627] Bluetooth: hci2: command tx timeout [ 406.609787][T15375] hsr_slave_0: entered promiscuous mode [ 406.613743][T15375] hsr_slave_1: entered promiscuous mode [ 406.629351][T15375] debugfs: 'hsr0' already exists in 'hsr' [ 406.629376][T15375] Cannot create hsr debugfs directory [ 407.554286][ T6325] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 407.554314][ T6325] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ca:e9:a3:d0:d6:0f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 408.144121][ T6325] bond0 (unregistering): Released all slaves [ 408.159443][ T6325] bond1 (unregistering): Released all slaves [ 408.176120][ T6325] bond2 (unregistering): Released all slaves [ 408.200391][ T6325] bond3 (unregistering): (slave veth3): Releasing active interface [ 408.203148][ T6325] bond3 (unregistering): Released all slaves [ 408.240807][ T6325] bond4 (unregistering): (slave veth5): Releasing active interface [ 408.244057][ T6325] bond4 (unregistering): Released all slaves [ 408.281089][ T6325] bond5 (unregistering): Released all slaves [ 408.319107][ T6325] bond6 (unregistering): (slave veth7): Releasing backup interface [ 408.321168][ T6325] bond6 (unregistering): Released all slaves [ 408.356593][T15552] netlink: 'syz.3.2929': attribute type 3 has an invalid length. [ 408.356795][T15552] netlink: 'syz.3.2929': attribute type 3 has an invalid length. [ 408.391058][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 408.527416][ T5627] Bluetooth: hci2: command tx timeout [ 408.645155][T15581] syzkaller0: entered promiscuous mode [ 408.655809][ T6325] ovs-dp0: left promiscuous mode [ 408.694041][T15589] xt_cgroup: no path or classid specified [ 408.965894][ T6325] tipc: Disabling bearer [ 408.974021][ T6325] tipc: Left network mode [ 409.301089][T15599] bond11: entered promiscuous mode [ 409.301115][T15599] bond11: entered allmulticast mode [ 409.428350][T15609] netlink: 'syz.3.2939': attribute type 1 has an invalid length. [ 409.622337][T15609] 8021q: adding VLAN 0 to HW filter on device bond6 [ 409.803115][T15616] bond6: (slave geneve2): making interface the new active one [ 409.821964][T15616] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 409.912720][T15637] __nla_validate_parse: 31 callbacks suppressed [ 409.912754][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 409.913608][T15637] openvswitch: netlink: Missing key (keys=40, expected=100) [ 409.938007][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2942'. [ 410.017579][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 410.068439][T15640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2946'. [ 410.103515][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2945'. [ 410.104359][T15642] netlink: zone id is out of range [ 410.104372][T15642] netlink: zone id is out of range [ 410.104381][T15642] netlink: zone id is out of range [ 410.104390][T15642] netlink: zone id is out of range [ 410.104399][T15642] netlink: zone id is out of range [ 410.104408][T15642] netlink: zone id is out of range [ 410.104637][T15642] netlink: zone id is out of range [ 410.104647][T15642] netlink: zone id is out of range [ 410.104742][T15642] netlink: zone id is out of range [ 410.294776][T15640] bridge21: entered promiscuous mode [ 410.294803][T15640] bridge21: entered allmulticast mode [ 410.318754][T15640] team0: Port device bridge21 added [ 410.330171][T15643] bridge0: port 1(team0) entered blocking state [ 410.330416][T15643] bridge0: port 1(team0) entered disabled state [ 410.330830][T15643] team0: entered allmulticast mode [ 410.354428][T15643] dummy0: entered allmulticast mode [ 410.367103][T15643] team0: entered promiscuous mode [ 410.367136][T15643] dummy0: entered promiscuous mode [ 410.598056][T15661] netlink: 'syz.0.2952': attribute type 1 has an invalid length. [ 410.616930][ T5627] Bluetooth: hci2: command tx timeout [ 410.798021][T15659] veth5: entered allmulticast mode [ 410.801623][T15659] bond9: (slave veth5): Enslaving as an active interface with a down link [ 410.830885][ T6325] batman_adv: batadv0: Removing interface: macvtap1 [ 410.914666][T15662] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 410.976934][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2953'. [ 411.670884][T15375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.730707][T15375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.732107][T15375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.833120][T15375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.850299][T15375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.906848][T15375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.908039][T15375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.971000][T15375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.176075][T15724] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2962'. [ 413.061439][T15754] netlink: 'syz.3.2969': attribute type 2 has an invalid length. [ 413.061477][T15754] netlink: 'syz.3.2969': attribute type 2 has an invalid length. [ 413.593132][T15742] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode [ 413.593162][T15742] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode [ 413.595598][T15747] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2968'. [ 413.784685][T15375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.850578][T15375] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.857731][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.857870][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.945687][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.945800][ T6543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.083965][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2972'. [ 414.084113][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2972'. [ 414.196165][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 414.448383][T15782] 8021q: adding VLAN 0 to HW filter on device bond13 [ 414.501301][T15783] macvlan3: entered promiscuous mode [ 414.501334][T15783] macvlan3: entered allmulticast mode [ 414.504237][T15783] bond13: entered promiscuous mode [ 414.505402][T15783] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 414.570993][T15783] bond13: left promiscuous mode [ 414.699856][ T6325] IPVS: stop unused estimator thread 0... [ 414.848039][T15799] netlink: 'syz.5.2977': attribute type 2 has an invalid length. [ 414.892017][T15799] : entered promiscuous mode [ 415.249532][T15828] sock: sock_timestamping_bind_phc: sock not bind to device [ 415.249833][T15820] __nla_validate_parse: 3 callbacks suppressed [ 415.249849][T15820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2982'. [ 415.450927][T15832] net_ratelimit: 1 callbacks suppressed [ 415.450949][T15832] ip_tables: iptables: counters copy to user failed while replacing table [ 415.598655][T15375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.763103][T15375] veth0_vlan: entered promiscuous mode [ 415.806133][T15375] veth1_vlan: entered promiscuous mode [ 415.884741][T15375] veth0_macvtap: entered promiscuous mode [ 415.932465][T15375] veth1_macvtap: entered promiscuous mode [ 415.958994][T15375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.992047][T15375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.008294][T15848] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2988'. [ 416.030704][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.048461][ T6516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.048507][ T6516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.048543][ T6516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.263678][ T6514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.263703][ T6514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.339805][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.339826][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.481597][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2991'. [ 417.319786][T15892] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20004 [ 417.374597][T15888] bond2: invalid ARP target 0.0.0.0 specified for addition [ 417.374633][T15888] bond2: option arp_ip_target: invalid value (0) [ 417.394420][T15893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.409592][T15888] bond2 (unregistering): Released all slaves [ 417.445362][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.455122][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.466876][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.473239][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.473890][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.794167][T15906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2999'. [ 418.160479][ T5619] tipc: Resetting bearer [ 418.229183][ T5619] bond1: (slave syz_tun): Removing an active aggregator [ 418.232861][ T5619] bond1: (slave syz_tun): Releasing backup interface [ 418.259755][ T5619] tipc: Resetting bearer [ 418.264228][ T5619] tipc: Disabling bearer [ 418.578116][T15914] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3000'. [ 418.911132][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 418.988834][T15936] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3008'. [ 419.199102][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'. [ 419.267338][T15947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3010'. [ 419.567278][ T5627] Bluetooth: hci0: command tx timeout [ 419.700042][T15964] Cannot find set identified by id 0 to match [ 419.815629][ T1269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.815671][ T1269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.868051][T15898] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.868223][T15898] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.868391][T15898] bridge_slave_0: entered allmulticast mode [ 419.872716][T15898] bridge_slave_0: entered promiscuous mode [ 419.893084][T15898] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.893495][T15898] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.893965][T15898] bridge_slave_1: entered allmulticast mode [ 419.925090][T15898] bridge_slave_1: entered promiscuous mode [ 420.142349][T15898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.332525][ T1269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.332566][ T1269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.430640][T15898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.436263][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 420.456780][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 420.534889][T15898] team0: Port device team_slave_0 added [ 420.545431][T15898] team0: Port device team_slave_1 added [ 420.608492][ T1269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.608532][ T1269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.641148][T15983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3017'. [ 420.641208][T15983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3017'. [ 420.731921][T15979] netlink: 'syz.2.3018': attribute type 11 has an invalid length. [ 420.731947][T15979] netlink: 'syz.2.3018': attribute type 11 has an invalid length. [ 420.731962][T15979] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3018'. [ 420.792572][T15898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.792592][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.792621][T15898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.864263][ T1269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.864304][ T1269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.900326][T15986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3019'. [ 420.900920][T15981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3019'. [ 420.905776][T15898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.905794][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.905824][T15898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.218230][T15898] hsr_slave_0: entered promiscuous mode [ 421.222599][T15898] hsr_slave_1: entered promiscuous mode [ 421.224265][T15898] debugfs: 'hsr0' already exists in 'hsr' [ 421.224287][T15898] Cannot create hsr debugfs directory [ 421.647269][ T5627] Bluetooth: hci0: command tx timeout [ 421.662859][T16006] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3025'. [ 421.879076][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3023'. [ 421.959863][ T1269] bridge_slave_1: left allmulticast mode [ 421.959893][ T1269] bridge_slave_1: left promiscuous mode [ 421.960106][ T1269] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.002419][ T1269] bridge_slave_0: left allmulticast mode [ 422.002447][ T1269] bridge_slave_0: left promiscuous mode [ 422.004098][ T1269] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.069151][ T1269] tipc: Resetting bearer [ 422.520531][ T1269] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 422.656396][ T1269] bond3 (unregistering): (slave gretap0): Releasing backup interface [ 422.732435][ T1269] bond6 (unregistering): (slave geneve2): Releasing active interface [ 422.801403][ T1269] tipc: Disabling bearer [ 422.874501][ T1269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.887073][ T1269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.889100][ T1269] bond0 (unregistering): Released all slaves [ 422.901516][ T1269] bond1 (unregistering): Released all slaves [ 422.935982][ T1269] bond2 (unregistering): Released all slaves [ 422.959649][ T1269] bond3 (unregistering): Released all slaves [ 423.001200][ T1269] bond4 (unregistering): Released all slaves [ 423.069351][ T1269] bond5 (unregistering): Released all slaves [ 423.123228][ T1269] bond6 (unregistering): Released all slaves [ 423.443955][ T1269] : left promiscuous mode [ 423.694199][ T1269] tipc: Left network mode [ 423.737957][ T5627] Bluetooth: hci0: command tx timeout [ 424.799630][T16077] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3041'. [ 425.423361][T16100] Bluetooth: MGMT ver 1.23 [ 425.507172][T16097] bond12: option fail_over_mac: invalid value (16) [ 425.536028][T16097] bond12 (unregistering): Released all slaves [ 425.807028][ T5627] Bluetooth: hci0: command tx timeout [ 425.987403][T16121] Cannot find set identified by id 0 to match [ 426.663115][T15898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 426.702015][T15898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.810516][T15898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 426.845999][T15898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.890093][T16148] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3059'. [ 426.918474][ T1269] hsr_slave_0: left promiscuous mode [ 426.920842][ T1269] hsr_slave_1: left promiscuous mode [ 426.961635][ T1269] veth1_macvtap: left promiscuous mode [ 426.961672][ T1269] veth0_macvtap: left promiscuous mode [ 426.978772][ T1269] veth1_vlan: left promiscuous mode [ 426.978813][ T1269] v: left promiscuous mode [ 427.233717][T16160] netlink: 'syz.2.3061': attribute type 16 has an invalid length. [ 427.233741][T16160] netlink: 'syz.2.3061': attribute type 3 has an invalid length. [ 427.233754][T16160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3061'. [ 427.887036][ T5627] Bluetooth: hci0: command tx timeout [ 428.257315][T15898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.261039][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'. [ 428.261073][T16169] netlink: 'syz.1.3062': attribute type 5 has an invalid length. [ 428.261088][T16169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3062'. [ 428.263184][T15898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.422667][T16169] geneve2: entered promiscuous mode [ 428.422693][T16169] geneve2: entered allmulticast mode [ 428.435732][T15898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.511526][T15898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.580408][ T6325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 428.584255][ T6516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 428.632467][ T6516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 428.632516][ T6516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 428.914894][T16186] netlink: 'syz.1.3066': attribute type 4 has an invalid length. [ 429.034244][ T1269] IPVS: stop unused estimator thread 0... [ 429.155154][T15898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.246107][T15898] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.274333][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.274446][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.363668][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.363781][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.491947][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 429.646226][T16205] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3073'. [ 429.713530][T16209] openvswitch: netlink: Flow key attribute not present in set flow. [ 430.036693][T16218] netlink: 'syz.1.3075': attribute type 3 has an invalid length. [ 430.073472][T16221] netlink: 'syz.1.3075': attribute type 3 has an invalid length. [ 430.293730][T16224] netlink: 'syz.1.3076': attribute type 4 has an invalid length. [ 430.293758][T16224] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3076'. [ 430.584020][T16230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3078'. [ 430.584084][T16230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3078'. [ 431.084472][T16252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.436153][T15898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.692763][T15898] veth0_vlan: entered promiscuous mode [ 431.730085][T15898] veth1_vlan: entered promiscuous mode [ 431.742876][T16273] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3089'. [ 431.883585][T15898] veth0_macvtap: entered promiscuous mode [ 431.912089][T15898] veth1_macvtap: entered promiscuous mode [ 432.016507][T16281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3091'. [ 432.020661][T16281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3091'. [ 432.040593][T15898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.113808][T15898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.132542][ T6543] IPVS: starting estimator thread 0... [ 432.227265][T16285] IPVS: using max 26 ests per chain, 62400 per kthread [ 432.321092][T16288] ip_tables: iptables: counters copy to user failed while replacing table [ 432.321507][T16287] ip_tables: iptables: counters copy to user failed while replacing table [ 432.437858][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.438758][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.438804][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.516946][ T6544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.792925][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.793040][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.915775][ T6514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.915798][ T6514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.983282][T16310] ksmbd: Unknown IPC event: 1, ignore. [ 433.162500][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3105'. [ 433.210155][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3104'. [ 433.210218][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3104'. [ 433.440494][T16328] ipt_ah: unknown flags FF [ 433.779966][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.786280][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.787732][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.804275][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.819757][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.850461][T16338] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3111'. [ 433.895820][T16347] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 433.959968][T16347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3114'. [ 433.959991][T16347] bridge: RTM_NEWNEIGH with invalid ether address [ 434.154059][T16358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3119'. [ 434.154123][T16358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3119'. [ 434.520619][T16371] bond0: entered promiscuous mode [ 434.533176][T16371] batadv0: entered promiscuous mode [ 434.534018][T16371] debugfs: 'hsr1' already exists in 'hsr' [ 434.534040][T16371] Cannot create hsr debugfs directory [ 434.534257][T16371] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 434.564018][T16371] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 434.576472][T16371] bond0: left promiscuous mode [ 434.584768][T16371] batadv0: left promiscuous mode [ 434.804610][T16382] ip_tables: iptables: counters copy to user failed while replacing table [ 434.903248][T16385] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3127'. [ 434.906406][T16387] openvswitch: netlink: Missing key (keys=40, expected=100) [ 435.586920][T16415] netlink: 'syz.5.3137': attribute type 5 has an invalid length. [ 435.605852][T16415] geneve4: entered promiscuous mode [ 435.605902][T16415] geneve4: entered allmulticast mode [ 435.886796][ T5627] Bluetooth: hci1: command tx timeout [ 437.643336][T16339] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.643669][T16339] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.643844][T16339] bridge_slave_0: entered allmulticast mode [ 437.646144][T16339] bridge_slave_0: entered promiscuous mode [ 437.780750][T16339] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.783211][T16339] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.784739][T16339] bridge_slave_1: entered allmulticast mode [ 437.811481][T16339] bridge_slave_1: entered promiscuous mode [ 437.992694][ T5627] Bluetooth: hci1: command tx timeout [ 438.028809][T16339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.035950][T16339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.077066][T16476] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 438.199003][T16339] team0: Port device team_slave_0 added [ 438.245779][T16339] team0: Port device team_slave_1 added [ 438.581357][T16339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.581377][T16339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.581406][T16339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.610963][T16339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.610981][T16339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.611010][T16339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.706039][T16486] __nla_validate_parse: 8 callbacks suppressed [ 438.706060][T16486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'. [ 439.207747][T16339] hsr_slave_0: entered promiscuous mode [ 439.210947][T16339] hsr_slave_1: entered promiscuous mode [ 439.214054][T16339] debugfs: 'hsr0' already exists in 'hsr' [ 439.214077][T16339] Cannot create hsr debugfs directory [ 439.482359][T16490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.018370][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.078121][ T5627] Bluetooth: hci1: command tx timeout [ 440.421381][T16339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.421421][T16339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 440.609052][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.369029][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 441.880626][T16534] IPv6: sit1: Disabled Multicast RS [ 442.004016][T16534] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3172'. [ 442.031638][T16534] netlink: Conntrack attr has 8 unknown bytes [ 442.031676][T16534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.189551][ T5627] Bluetooth: hci1: command tx timeout [ 442.190106][T16541] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 442.253119][T16541] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:20000 [ 442.603507][T16553] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3179'. [ 443.081952][T16564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 443.410558][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 443.414603][T16571] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 443.448629][T16571] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3186'. [ 443.910233][T16339] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 443.910763][T16339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.910796][T16339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 444.124326][T16587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3189'. [ 444.503610][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3191'. [ 445.614431][T16617] netlink: Failed to add à helper -22 [ 445.614491][T16617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.172592][T16632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3202'. [ 446.815202][T16649] x_tables: duplicate underflow at hook 2 [ 446.816321][T16649] netlink: 'syz.5.3205': attribute type 83 has an invalid length. [ 447.049402][T16632] bond0: (slave bond_slave_0): Releasing backup interface [ 449.471749][T16632] bond_slave_0: entered promiscuous mode [ 449.471772][T16632] bond_slave_0: entered allmulticast mode [ 449.599217][T16644] syzkaller0: entered promiscuous mode [ 449.599243][T16644] syzkaller0: entered allmulticast mode [ 450.673132][T16682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3212'. [ 456.349119][T16339] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 456.470067][T16339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.470108][T16339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 456.681977][T16686] netlink: 'syz.0.3213': attribute type 1 has an invalid length. [ 458.057030][T16712] xt_ipvs: protocol family 7 not supported [ 458.948854][T16729] syzkaller0: entered promiscuous mode [ 458.948879][T16729] syzkaller0: entered allmulticast mode [ 459.276941][T16734] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.3224'. [ 460.638324][T16749] pim6reg: entered allmulticast mode [ 460.823531][T16749] pim6reg527: entered allmulticast mode [ 460.946106][T16760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3229'. [ 461.154273][T16339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.154310][T16339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 461.378766][T16764] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 463.401581][T16790] netlink: 'syz.0.3241': attribute type 10 has an invalid length. [ 463.438320][T16790] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.457036][T16790] .`: (slave team0): Enslaving as an active interface with an up link [ 463.658410][T16792] ip6t_hbh: unknown flags 38 [ 466.012772][T16833] netlink: 'syz.2.3253': attribute type 12 has an invalid length. [ 466.228552][T16339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.261245][T16339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.262884][T16339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.420583][T16339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.421516][T16339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.631936][T16339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.633407][T16339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.688529][T16339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.790231][T16849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3261'. [ 466.790267][T16849] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 466.947462][T16855] dvmrp1: entered allmulticast mode [ 466.969104][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 467.167562][T16863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3263'. [ 467.205072][T16862] veth0_virt_wifi: entered promiscuous mode [ 467.929115][T16339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.962620][T16339] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.044515][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.044618][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.070390][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.070524][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.444755][T16881] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 469.354115][T16901] netlink: 'syz.0.3276': attribute type 10 has an invalid length. [ 469.436435][T16901] bond9: (slave veth0_to_bond): Releasing active interface [ 469.502511][T16901] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 469.614437][T16908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 469.634644][T16908] batman_adv: batadv0: Adding interface: gretap1 [ 469.634663][T16908] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.634696][T16908] batman_adv: batadv0: Interface activated: gretap1 [ 469.709807][T16905] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.3277'. [ 469.709935][T16905] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 469.768685][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3277'. [ 469.770912][T16909] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3277'. [ 469.955821][T16905] 0ªX¹¦Dö»: entered allmulticast mode [ 470.442984][T16927] syzkaller1: entered promiscuous mode [ 470.443041][T16927] syzkaller1: entered allmulticast mode [ 470.526446][T16924] netlink: 'syz.2.3282': attribute type 142 has an invalid length. [ 472.239685][T16971] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 472.284331][T16339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.639485][T16339] veth0_vlan: entered promiscuous mode [ 472.752741][T16339] veth1_vlan: entered promiscuous mode [ 473.030660][T16339] veth0_macvtap: entered promiscuous mode [ 473.082002][T16339] veth1_macvtap: entered promiscuous mode [ 473.195270][T16339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.319063][T16339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.428789][ T6543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.429010][ T6543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.429346][ T6543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.734049][ T6514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.603542][ T6531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.603567][ T6531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.205083][ T6537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.205106][ T6537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.601910][T17034] syzkaller0: entered promiscuous mode [ 475.601935][T17034] syzkaller0: entered allmulticast mode [ 475.759695][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 475.759730][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 479.294376][ C1] sched: DL replenish lagged too much [ 502.125994][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.773832][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.562384][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 545.520813][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 563.467262][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.310635][ T33] INFO: task kworker/u8:2:32 blocked for more than 140 seconds. [ 628.310666][ T33] Not tainted syzkaller #0 [ 628.310679][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.310691][ T33] task:kworker/u8:2 state:D stack:23360 pid:32 tgid:32 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 628.310768][ T33] Workqueue: ipv6_addrconf addrconf_dad_work [ 628.310825][ T33] Call Trace: [ 628.310839][ T33] [ 628.310856][ T33] __schedule+0x17db/0x58f0 [ 628.310914][ T33] ? __pfx___schedule+0x10/0x10 [ 628.310950][ T33] ? schedule+0x90/0x2b0 [ 628.310978][ T33] schedule+0x164/0x2b0 [ 628.311005][ T33] schedule_preempt_disabled+0x13/0x30 [ 628.311030][ T33] __mutex_lock+0x7c1/0x1550 [ 628.311064][ T33] ? __mutex_lock+0x5d4/0x1550 [ 628.311096][ T33] ? addrconf_dad_work+0x116/0x15c0 [ 628.311134][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 628.311185][ T33] addrconf_dad_work+0x116/0x15c0 [ 628.311231][ T33] ? __pfx_addrconf_dad_work+0x10/0x10 [ 628.311276][ T33] ? rcu_is_watching+0x16/0xb0 [ 628.311310][ T33] ? process_scheduled_works+0x97a/0x1630 [ 628.311343][ T33] process_scheduled_works+0xc3d/0x1630 [ 628.311411][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 628.311451][ T33] ? assign_work+0x3cf/0x5d0 [ 628.311488][ T33] worker_thread+0xa47/0xfb0 [ 628.311537][ T33] ? __kthread_parkme+0x71/0x1f0 [ 628.311584][ T33] kthread+0x38b/0x480 [ 628.311608][ T33] ? __pfx_worker_thread+0x10/0x10 [ 628.311639][ T33] ? __pfx_kthread+0x10/0x10 [ 628.311665][ T33] ret_from_fork+0x514/0xb70 [ 628.311693][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 628.311716][ T33] ? __switch_to+0xc89/0x1420 [ 628.311759][ T33] ? __pfx_kthread+0x10/0x10 [ 628.311784][ T33] ret_from_fork_asm+0x1a/0x30 [ 628.311826][ T33] [ 628.312041][ T33] [ 628.312041][ T33] Showing all locks held in the system: [ 628.312053][ T33] locks held by kthreadd/2: 2, last CPU#0: [ 628.312069][ T33] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 628.312132][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 628.312194][ T33] locks held by kworker/u8:0/12: 4, last CPU#0: [ 628.312210][ T33] #0: ffff88802cade140 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.312273][ T33] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.312334][ T33] #2: ffff8880574db980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 628.312396][ T33] #3: ffff8880518c8fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 628.312458][ T33] locks held by kworker/u8:1/13: 3, last CPU#0: [ 628.312473][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.312536][ T33] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.312601][ T33] #2: ffff88807fac0258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 628.312669][ T33] locks held by kworker/u8:2/32: 3, on CPU#1: [ 628.312685][ T33] #0: ffff888033c86940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.312755][ T33] #1: ffffc90000a87c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.312818][ T33] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 628.312882][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 628.312898][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 628.312956][ T33] locks held by kworker/u8:4/59: 3, last CPU#0: [ 628.312973][ T33] #0: ffff88807ac12940 ((wq_completion)krds_cp_wq#2/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.313036][ T33] #1: ffffc9000200fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.313101][ T33] #2: ffff8880574daa80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 628.313163][ T33] locks held by kswapd0/87: 2, last CPU#1: [ 628.313179][ T33] #0: ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0 [ 628.313242][ T33] #1: ffff888034d580e8 (&type->s_umount_key#56){.+.+}-{4:4}, at: super_cache_scan+0x94/0x4a0 [ 628.313312][ T33] locks held by kworker/u8:7/1036: 4, last CPU#0: [ 628.313328][ T33] #0: ffff88807ac11940 ((wq_completion)krds_cp_wq#2/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.313391][ T33] #1: ffffc9000519fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.313453][ T33] #2: ffff8880574da480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 628.313515][ T33] #3: ffff88807ba91d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 628.313577][ T33] locks held by kworker/u8:8/1167: 4, last CPU#0: [ 628.313593][ T33] #0: ffff88807ac11140 ((wq_completion)krds_cp_wq#2/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.313656][ T33] #1: ffffc900056dfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.313718][ T33] #2: ffff8880574da780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 628.313787][ T33] #3: ffff88802c16d360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 628.313848][ T33] locks held by kworker/u8:9/1269: 4, last CPU#0: [ 628.313864][ T33] #0: ffff88802c379940 ((wq_completion)krds_cp_wq#2/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.313928][ T33] #1: ffffc90005b0fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.313991][ T33] #2: ffff8880574db380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 628.314051][ T33] #3: ffff8880788860e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 628.314126][ T33] locks held by kworker/u8:11/3353: 3, last CPU#0: [ 628.314143][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.314207][ T33] #1: ffffc9000f51fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.314270][ T33] #2: ffff8880343a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 628.314337][ T33] locks held by klogd/4973: 1, last CPU#0: [ 628.314353][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 628.314417][ T33] locks held by crond/5355: 1, last CPU#0: [ 628.314433][ T33] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 628.314491][ T33] locks held by getty/5373: 2, on CPU#1: [ 628.314507][ T33] #0: ffff888034f830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 628.314567][ T33] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 628.314634][ T33] locks held by syz-executor/5602: 1, last CPU#0: [ 628.314651][ T33] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 628.314709][ T33] locks held by syz-executor/5618: 1, last CPU#0: [ 628.314725][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 628.314793][ T33] locks held by kworker/u9:3/5625: 7, on CPU#1: [ 628.314810][ T33] #0: ffff88802a6e2140 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.314873][ T33] #1: ffffc90003c87c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.314936][ T33] #2: ffff8880845acea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 628.315001][ T33] #3: ffff8880845ac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 628.315061][ T33] #4: ffffffff913dcc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 628.315119][ T33] #5: ffff88805676e2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 628.315184][ T33] #6: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 628.315250][ T33] locks held by kworker/u9:5/5627: 4, on CPU#1: [ 628.315266][ T33] #0: ffff8880564e3940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.315329][ T33] #1: ffffc90003ca7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.315393][ T33] #2: ffff888033b4cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 628.315458][ T33] #3: ffff888033b4c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 628.315521][ T33] locks held by kworker/1:6/5763: 5, last CPU#1: [ 628.315536][ T33] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.315600][ T33] #1: ffffc900045c7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.315663][ T33] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 628.315729][ T33] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 628.315794][ T33] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 628.315853][ T33] locks held by kworker/1:7/5764: 1, last CPU#1: [ 628.315869][ T33] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 628.315928][ T33] locks held by kworker/0:6/5821: 4, last CPU#0: [ 628.315944][ T33] #0: ffff88802c85a140 ((wq_completion)wg-kex-wg1#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.316014][ T33] #1: ffffc90004bf7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.316099][ T33] #2: ffff888053ea5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 628.316162][ T33] #3: ffff88801c174888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 628.316225][ T33] locks held by kworker/u8:12/6325: 3, last CPU#0: [ 628.316241][ T33] #0: ffff88807ac13140 ((wq_completion)krds_cp_wq#2/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.316303][ T33] #1: ffffc9000797fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.316367][ T33] #2: ffff8880574db080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 628.334851][ T33] locks held by kworker/u8:13/6326: 2, on CPU#0: [ 628.334879][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.334952][ T33] #1: ffffc900078ffc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335018][ T33] locks held by kworker/u8:14/6513: 4, last CPU#0: [ 628.335035][ T33] #0: ffff8880567ff940 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335104][ T33] #1: ffffc9000e27fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335169][ T33] #2: ffff888020ab9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 628.335233][ T33] #3: ffff8880269a9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 628.335295][ T33] locks held by kworker/u8:15/6514: 3, last CPU#0: [ 628.335311][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335374][ T33] #1: ffffc9000dfd7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335438][ T33] #2: ffff8880562b0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 628.335504][ T33] locks held by kworker/u8:16/6515: 4, on CPU#1: [ 628.335520][ T33] #0: ffff8880567fd140 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335589][ T33] #1: ffffc9000e1f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335653][ T33] #2: ffff888053ea5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 628.335732][ T33] #3: ffff88801c174888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 628.335804][ T33] locks held by kworker/u8:17/6516: 3, last CPU#0: [ 628.335821][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335900][ T33] #1: ffffc9000e30fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.335964][ T33] #2: ffff888026a10800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 628.336030][ T33] locks held by kworker/u8:18/6517: 4, last CPU#0: [ 628.336047][ T33] #0: ffff88802a544140 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.336116][ T33] #1: ffffc9000e32fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.336182][ T33] #2: ffff8880377e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 628.336244][ T33] #3: ffff88801c170d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 628.336307][ T33] locks held by kworker/u8:19/6518: 3, last CPU#0: [ 628.336323][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.336387][ T33] #1: ffffc9000e34fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.354450][ T33] #2: ffff888055020800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 628.354535][ T33] locks held by kworker/u8:20/6519: 4, last CPU#0: [ 628.354553][ T33] #0: ffff8880567fd140 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.354626][ T33] #1: ffffc9000e1e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.354689][ T33] #2: ffff888053ea5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 628.354760][ T33] #3: ffff88801c173ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 628.354823][ T33] locks held by kworker/u8:21/6520: 2, on CPU#1: [ 628.354838][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.354902][ T33] #1: ffffc9000e35fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.354965][ T33] locks held by kworker/u8:22/6521: 3, last CPU#0: [ 628.354981][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355044][ T33] #1: ffffc9000e137c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355109][ T33] #2: ffff88807e7bf258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 628.355174][ T33] locks held by kworker/u8:23/6522: 4, last CPU#0: [ 628.355191][ T33] #0: ffff88807a7e6140 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355256][ T33] #1: ffffc9000e29fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355321][ T33] #2: ffff888068445440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 628.355382][ T33] #3: ffff8880269a8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 628.355443][ T33] locks held by kworker/u8:25/6531: 3, last CPU#0: [ 628.355460][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355524][ T33] #1: ffffc9000e23fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355589][ T33] #2: ffff88804bb80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 628.355655][ T33] locks held by kworker/u8:26/6532: 3, last CPU#0: [ 628.355672][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355736][ T33] #1: ffffc9000e3b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355808][ T33] #2: ffff88801c168258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 628.355874][ T33] locks held by kworker/u8:27/6533: 4, last CPU#0: [ 628.355890][ T33] #0: ffff88802a544940 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.355959][ T33] #1: ffffc9000dbafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.356024][ T33] #2: ffff888079d09440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 628.356087][ T33] #3: ffff88801c1720e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 628.356149][ T33] locks held by kworker/u8:29/6537: 3, on CPU#1: [ 628.356166][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.356230][ T33] #1: ffffc9000e3f7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.356292][ T33] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 628.356354][ T33] locks held by kworker/u8:30/6538: 3, last CPU#0: [ 628.356371][ T33] #0: ffff88807ac12140 ((wq_completion)krds_cp_wq#2/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 628.495831][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.312858][ T33] #1: ffffc9000e36fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.312944][ T33] #2: ffff8880574dad80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 630.313022][ T33] locks held by kworker/u8:31/6540: 4, last CPU#1: [ 630.313039][ T33] #0: ffff888077fda940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.313104][ T33] #1: ffffc9000e42fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.313169][ T33] #2: ffff888034b65440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 630.313232][ T33] #3: ffff88807a274888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 630.313294][ T33] locks held by kworker/u8:32/6541: 4, last CPU#1: [ 630.313311][ T33] #0: ffff888077fda140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.313373][ T33] #1: ffffc9000e43fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.313437][ T33] #2: ffff888034b61440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 630.313499][ T33] #3: ffff88807a2734b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 630.313561][ T33] locks held by kworker/u8:33/6542: 3, last CPU#1: [ 630.313577][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.313639][ T33] #1: ffffc9000e4afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.313704][ T33] #2: ffff88807b72f258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 630.313770][ T33] locks held by kworker/u8:34/6543: 3, last CPU#0: [ 630.313787][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.313849][ T33] #1: ffffc9000e4dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.313912][ T33] #2: ffff88804ded0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 630.313979][ T33] locks held by kworker/u8:35/6544: 4, last CPU#0: [ 630.313995][ T33] #0: ffff88802c379140 ((wq_completion)krds_cp_wq#2/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.314067][ T33] #1: ffffc9000e50fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.314132][ T33] #2: ffff8880574db680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 630.314193][ T33] #3: ffff888078885360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 630.314277][ T33] locks held by syz-executor/7926: 5, last CPU#0: [ 630.314292][ T33] #0: ffff88807f662460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 630.314357][ T33] #1: ffff88802dd256f8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 630.314432][ T33] #2: ffffffff904f2b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 630.314496][ T33] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 630.314554][ T33] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 630.314617][ T33] locks held by kworker/1:9/10061: 3, on CPU#1: [ 630.314634][ T33] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.314694][ T33] #1: ffffc900049f7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.314758][ T33] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 630.314820][ T33] locks held by kworker/1:10/10062: 4, last CPU#1: [ 630.314836][ T33] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.314898][ T33] #1: ffffc900034b7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.314964][ T33] #2: ffffffff915c6460 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 630.315024][ T33] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 630.315082][ T33] locks held by kworker/0:8/10082: 3, last CPU#0: [ 630.315099][ T33] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.315163][ T33] #1: ffffc90002f67c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.315225][ T33] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 630.315286][ T33] locks held by kworker/0:13/10087: 4, on CPU#0: [ 630.315302][ T33] #0: ffff888069c99940 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.315371][ T33] #1: ffffc90002f47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 630.315457][ T33] #2: ffff888020ab9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 630.315520][ T33] #3: ffff8880269a9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 630.315587][ T33] locks held by syz-executor/15375: 1, last CPU#0: [ 630.315604][ T33] #0: ffff8880422d0948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 630.315664][ T33] locks held by syz-executor/15898: 3, last CPU#1: [ 630.315680][ T33] #0: ffffffff904f2b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 630.315744][ T33] #1: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 630.315802][ T33] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 630.315864][ T33] locks held by syz.2.3303/17029: 2, on CPU#0: [ 630.315881][ T33] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 630.315943][ T33] #1: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 630.316018][ T33] locks held by sed/17043: 2, last CPU#0: [ 630.316033][ T33] #0: ffff8880347d4080 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 630.316094][ T33] #1: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 630.316153][ T33] locks held by syz-executor/17045: 1, last CPU#1: [ 630.316169][ T33] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 630.316230][ T33] [ 630.316236][ T33] ============================================= [ 630.316236][ T33] [ 630.316261][ T33] NMI backtrace for cpu 0 [ 630.316287][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 630.316311][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 630.316325][ T33] Call Trace: [ 630.316334][ T33] [ 630.316346][ T33] dump_stack_lvl+0xe8/0x150 [ 630.316382][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 630.316418][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 630.316457][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 630.316493][ T33] sys_info+0x135/0x170 [ 630.316524][ T33] watchdog+0xfd7/0x1030 [ 630.316556][ T33] ? watchdog+0x1c7/0x1030 [ 630.316589][ T33] kthread+0x38b/0x480 [ 630.316613][ T33] ? __pfx_watchdog+0x10/0x10 [ 630.316636][ T33] ? __pfx_kthread+0x10/0x10 [ 630.316660][ T33] ret_from_fork+0x514/0xb70 [ 630.316686][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 630.316708][ T33] ? __switch_to+0xc89/0x1420 [ 630.316744][ T33] ? __pfx_kthread+0x10/0x10 [ 630.316768][ T33] ret_from_fork_asm+0x1a/0x30 [ 630.316806][ T33] [ 630.335329][ T33] Sending NMI from CPU 0 to CPUs 1: [ 630.335508][ C1] NMI backtrace for cpu 1 [ 630.335525][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 630.335547][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 630.335560][ C1] Workqueue: krds_cp_wq#2/0 rds_connect_worker [ 630.335586][ C1] RIP: 0010:__lock_acquire+0x4d4/0x2de0 [ 630.335610][ C1] Code: 84 db 0f 84 cf 01 00 00 48 8b 45 20 66 85 c0 0f 88 c2 01 00 00 0f b6 89 c5 00 00 00 84 c9 0f b6 d3 0f b6 c9 0f 44 ca 89 0c 24 <45> 8b a6 a0 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 [ 630.335627][ C1] RSP: 0018:ffffc90000a18358 EFLAGS: 00000002 [ 630.335642][ C1] RAX: 1000000000022007 RBX: 0000000000000003 RCX: 0000000000000001 [ 630.335655][ C1] RDX: 0000000000000003 RSI: 0000000000022000 RDI: 1000000000000000 [ 630.335668][ C1] RBP: ffff88801eef0ca0 R08: ffffffff817811df R09: 0000000000000000 [ 630.335681][ C1] R10: ffffc90000a18638 R11: ffffffff81b2c5e0 R12: 0000000000000007 [ 630.335695][ C1] R13: ffff88801eef0bb0 R14: ffff88801eef0000 R15: ffff88801eef0000 [ 630.335710][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 630.335725][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.335738][ C1] CR2: 00007fffc2c705ac CR3: 000000000fb48000 CR4: 00000000003526f0 [ 630.335756][ C1] Call Trace: [ 630.335763][ C1] [ 630.335777][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 630.335801][ C1] ? lock_acquire+0x115/0x350 [ 630.335824][ C1] lock_acquire+0x115/0x350 [ 630.335843][ C1] ? unwind_next_frame+0x8f/0x2550 [ 630.335870][ C1] ? unwind_next_frame+0x8f/0x2550 [ 630.335891][ C1] ? mac80211_hwsim_tx_frame+0x199/0x1f0 [ 630.335918][ C1] ? unwind_next_frame+0x8f/0x2550 [ 630.335940][ C1] unwind_next_frame+0xac/0x2550 [ 630.335961][ C1] ? unwind_next_frame+0x8f/0x2550 [ 630.335985][ C1] ? mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 630.336012][ C1] ? unwind_next_frame+0x8f/0x2550 [ 630.336035][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.336056][ C1] arch_stack_walk+0x11b/0x150 [ 630.336080][ C1] ? mac80211_hwsim_tx_frame+0x199/0x1f0 [ 630.336108][ C1] stack_trace_save+0xa9/0x100 [ 630.336126][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 630.336147][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 630.336174][ C1] ? arch_stack_walk+0x11b/0x150 [ 630.336196][ C1] kasan_save_track+0x3e/0x80 [ 630.336219][ C1] ? kasan_save_track+0x3e/0x80 [ 630.336239][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 630.336262][ C1] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 630.336283][ C1] ? __alloc_skb+0x27a/0x7a0 [ 630.336311][ C1] ? skb_copy+0x19d/0x870 [ 630.336330][ C1] ? mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 630.336357][ C1] ? mac80211_hwsim_tx_frame+0x199/0x1f0 [ 630.336405][ C1] __kasan_slab_alloc+0x6c/0x80 [ 630.336434][ C1] kmem_cache_alloc_node_noprof+0x354/0x610 [ 630.336457][ C1] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 630.336478][ C1] ? __alloc_skb+0x27a/0x7a0 [ 630.336516][ C1] ? __alloc_skb+0x27a/0x7a0 [ 630.336550][ C1] __alloc_skb+0x27a/0x7a0 [ 630.336584][ C1] skb_copy+0x19d/0x870 [ 630.336608][ C1] ? ktime_get_with_offset+0x93/0x2d0 [ 630.336631][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 630.336661][ C1] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 630.336706][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 630.336743][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 630.336773][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 630.336807][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 630.336837][ C1] __iterate_interfaces+0x2af/0x5a0 [ 630.336874][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 630.336899][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 630.336937][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 630.336963][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 630.337000][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 630.337036][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 630.337070][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 630.337105][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 630.337149][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 630.337173][ C1] handle_softirqs+0x226/0x860 [ 630.337206][ C1] ? do_softirq+0x77/0xd0 [ 630.337238][ C1] ? __inet6_bind+0x301/0xf30 [ 630.337285][ C1] do_softirq+0x77/0xd0 [ 630.337314][ C1] [ 630.337321][ C1] [ 630.337330][ C1] __local_bh_enable_ip+0x100/0x140 [ 630.337361][ C1] __inet6_bind+0x301/0xf30 [ 630.337396][ C1] kernel_bind+0x13e/0x1c0 [ 630.337425][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 630.337460][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 630.337493][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 630.337536][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 630.337568][ C1] ? lock_acquire+0x115/0x350 [ 630.337598][ C1] rds_connect_worker+0x1d8/0x290 [ 630.337620][ C1] ? process_scheduled_works+0x97a/0x1630 [ 630.337652][ C1] process_scheduled_works+0xc3d/0x1630 [ 630.337701][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 630.337735][ C1] ? assign_work+0x3cf/0x5d0 [ 630.337767][ C1] worker_thread+0xa47/0xfb0 [ 630.337814][ C1] kthread+0x38b/0x480 [ 630.337837][ C1] ? __pfx_worker_thread+0x10/0x10 [ 630.337867][ C1] ? __pfx_kthread+0x10/0x10 [ 630.337888][ C1] ret_from_fork+0x514/0xb70 [ 630.337912][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 630.337934][ C1] ? __switch_to+0xc89/0x1420 [ 630.337967][ C1] ? __pfx_kthread+0x10/0x10 [ 630.337990][ C1] ret_from_fork_asm+0x1a/0x30 [ 630.338020][ C1] [ 630.355655][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 633.435842][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 633.445017][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 633.455130][ T33] Call Trace: [ 633.458470][ T33] [ 633.461467][ T33] vpanic+0x56d/0xa60 [ 633.465528][ T33] ? __pfx_vpanic+0x10/0x10 [ 633.470096][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 633.475740][ T33] panic+0xc5/0xd0 [ 633.479536][ T33] ? __pfx_panic+0x10/0x10 [ 633.484023][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 633.489114][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 633.495345][ T33] watchdog+0x1030/0x1030 [ 633.499751][ T33] ? watchdog+0x1c7/0x1030 [ 633.504353][ T33] kthread+0x38b/0x480 [ 633.509001][ T33] ? __pfx_watchdog+0x10/0x10 [ 633.513731][ T33] ? __pfx_kthread+0x10/0x10 [ 633.518386][ T33] ret_from_fork+0x514/0xb70 [ 633.523028][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 633.528189][ T33] ? __switch_to+0xc89/0x1420 [ 633.532981][ T33] ? __pfx_kthread+0x10/0x10 [ 633.537629][ T33] ret_from_fork_asm+0x1a/0x30 [ 633.542460][ T33] [ 633.546142][ T33] Kernel Offset: disabled [ 633.550503][ T33] Rebooting in 86400 seconds..