last executing test programs: 7m31.022710472s ago: executing program 0 (id=716): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffffffffffc1, 0x8c, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x5}, {0xb}]}, @const={0x9, 0x0, 0x0, 0xa, 0x2}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @restrict={0xb, 0x0, 0x0, 0xb, 0x4}, @enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0x7, 0x3}, {0xd, 0x546d}, {0x4, 0x1}, {0xe}, {0xe, 0x500}]}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x61, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/244, 0xaa, 0xf4, 0x0, 0x1, 0x10000}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000140)="8cd4f992", 0x4) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000100)=""/17, &(0x7f00000000c0)=0x11) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r3, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x4b, 0x3, 0x3a1}]}]}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000006800010002000000fcffff7f000000000000000014000200010000000400000000009f21fdc9000004000b00c73d1e069cfd945fb60727166b91b6b6648d569c01c3ab20df19f6680e05036727dc9419ac862ec13c5e11271809c37356b193a9b8180eb2140275f7a2c9b6089e0002487f270ede1841c725e29540a8d51cc0c0c0a727cad8ccd94617b3699d14406897fbd71b7b18bf46ecb5ffccea1eab3d53caa4f3820d5559f9a69bfb11a075cdad3811aa8ffa4c7ca9df38e3a4a214713db6b4262817a8819aba218464"], 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, r1, 0x2, 0x1, 0x5}, 0x50) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r7}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x10) 7m30.756562466s ago: executing program 0 (id=718): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) getuid() close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x17, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x9d}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xbb, &(0x7f00000008c0)=""/187, 0x41100, 0x6, '\x00', 0x0, @fallback=0x38, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x1, 0xfffffff7, 0xb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x6}, 0x94) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa402000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)={0x274, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x79ba}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7f5ed4c892d9a78cd98eefce63678d3f66f12ddac2b6"}}, @TIPC_NLA_NODE_ID={0x76, 0x3, "527edeafde52820722a7818624f4fed6b94a694eab71b905dba2a366bfe8ffc46a7d9891b4e1efaf3876c15ce0f8cbd0de131a73feeb3da2b15636cf67975093df58d2ed08f652811cb4b75e1be912d580966c3a1a41a98c47d73c13d51d33f8b82a1971625ebe7b0cb2c6a3e47fa5a9218d"}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6832863d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2305}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6355d5a1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x8000}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f}}, 0x18}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c0002800800014000000011080002400000000a0500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket(0x848000000015, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28) socket$netlink(0x10, 0x3, 0x8) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r8, 0x10e, 0xc, 0x0, &(0x7f0000002180)) 7m30.470746195s ago: executing program 0 (id=722): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x5, 0x5}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYRES16=r5], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2a}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x2c}}, 0x4044041) socket$inet6(0xa, 0xa, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000000)={@remote, @remote, @void, {@x25={0x805, {0x0, 0x8, 0xf7}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40006009078000f0a0000000cd588048b9100000000"], 0x4e) 7m29.571423099s ago: executing program 0 (id=729): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1, 0x0, 0x0, 0x84}, 0x300) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x6, 0x8) splice(r5, 0x0, r7, 0x0, 0x80000025a5, 0x0) 7m28.577062393s ago: executing program 0 (id=736): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000008400000005000000090000"], 0x18}, 0x280400d5) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x61]}}, 0x0, 0x1c}, 0x28) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000080), 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03060045115509e1c34caab9", "ffffffff", "5e33931677e0f2d7"}, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100"/20], 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x3) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000001780)={0x10000008}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r10, 0x1, {0x0, 0x0, 0x5}, 0x2}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x8, 0x3, 0x3) 7m28.184124775s ago: executing program 0 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB="14000300762574"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x50}}, 0x0) 7m27.767267325s ago: executing program 32 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB="14000300762574"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x50}}, 0x0) 8.235570793s ago: executing program 5 (id=2958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x1, 0x4, 0x2, 0x40, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r9 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) recvmmsg$unix(r9, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000024c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002100)={0x77359400}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r11, &(0x7f0000002180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002140)={&(0x7f0000002580)={0x238, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x400}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xfffffffd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4ef9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x5db}, {0x5}, {0x6, 0x11, 0xc204}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2800}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0xfffd}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8}}]}, 0x238}}, 0x20000800) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, 0x0, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000020c0)={'pim6reg0\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 7.904101261s ago: executing program 5 (id=2962): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17a431076b876c1d0000007ea60864160af3653c000cc00400020208002b000000000000000000eab556a705251e61b6a6ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) 7.564817229s ago: executing program 5 (id=2968): socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0xfffffffffffffffe}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004801) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000004c0), &(0x7f0000000500)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r9 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 7.560899321s ago: executing program 4 (id=2969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x101}, 0x8) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000000000086dd6d0000000008110000000000000000000000800100000000ffea"], 0x42) 7.307561599s ago: executing program 5 (id=2972): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x1000000, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmmsg$inet6(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe4}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}}], 0x1, 0x2400c014) 7.245907675s ago: executing program 4 (id=2973): r0 = socket(0x10, 0x803, 0x2) write$nbd(r0, &(0x7f0000000440)={0x67446698, 0x0, 0x2, 0x1, 0x1, "9e4e290dcef83e3e151de3fbe143d0d830dc7d78a75d3becf5839bca9dd0b4d2df7b962c343dced20e5b2f3d950e8801cf824fa4b3d576e2ab8cfe396a3c376de4120fe82950ec9fc8a29ffc0f36b4f10041c5d62233c249c1be3a12f06bf550152a99e27e3f7be10f8bc42c0a49d2ada88138c0f32b508a"}, 0x88) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000740)={r5, 0x10, "7ed88ba116ef41dc237063d02c6a144b"}, &(0x7f0000000100)=0x18) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="140002000000000000000000b3"], 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r11 = socket$isdn(0x22, 0x2, 0x22) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f00000002c0)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r10, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) 7.11155301s ago: executing program 4 (id=2976): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4620, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000082e011010200000200020000000000002c6b2ca3948cdc0b09646dded161b9bd3096655f9df7c5a8599bd272670935dc90e5a9361b00"/68], 0x50) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001640)={0x0, 0x0}, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0xb3dd, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001500)}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1b00000000000000000000000500008875000000", @ANYRES16=r3, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200"/28], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2717, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x28011, r8, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000006f5c000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/44}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001900)={0x0, 0x10001}, 0xc) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001d00)={0x2, 0x1000, "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"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r2}, 0x20) sendmsg$L2TP_CMD_NOOP(r8, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250000000008001700", @ANYRES32=r8, @ANYBLOB="14002000ffbfc8f8e00e4587d611c2fd7b8a5154af01000000000000000000000000000114002000fc00000000000000000000000000000014001f00200100000000000000000000000000010500140000000000080019000a0101010c00e843435a001301f991021bce0529131600"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x1c, &(0x7f0000001d00)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9df, 0xa7, &(0x7f0000001540)=""/167, 0x41100, 0x39, '\x00', r3, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x3, 0x1, 0x80000001, 0x7}, 0x10, r4, r2, 0x1, &(0x7f0000001a00)=[r5, r6, r7, r8, r8, r10, r11, r12], &(0x7f0000001a40)=[{0x2, 0x4, 0x1, 0xc}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0xfffffd58, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 6.398717936s ago: executing program 5 (id=2986): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet(0xa, 0x806, 0x84) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x0, 0x48b0, 0x3, 0x945b, 0x7]}, &(0x7f0000000400)=0x78) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) listen(r1, 0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3261e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x7}, 0xc) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, 0x0, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69000000001406fffe800080000000000000000000000039fe8000000000000000000000000000aa4e204e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Q'], 0x0) 6.178897601s ago: executing program 4 (id=2988): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0x1130, 0xffffffff, 0xffffffff, 0x1130, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x2b}, [0x0, 0x0, 0x0, 0xff000000], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1100, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup/syz1\x00', 0x58, {0x8}}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x4}, {0x4, 0x4, 0x1}, 0xf2, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0xca2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000004c0)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000380)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0x4, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x0) (async) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000200)='veth1_to_batadv\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) 5.887512757s ago: executing program 4 (id=2993): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r2 = accept$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) (async) close(0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8b6a6c044b2499c477b78e12530f7a997f120de227c04caadad596db2883b4119852b857f003ef7bf52cf4812baa688b7b9a080ae8e10d769fb946198d705cd6d0bada6ccc540793dfcd2ed91018", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250c00000008003a00b4090000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x84) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') mmap(&(0x7f0000a0d000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0xea2ce000) unshare(0x400) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="110000001d00070f000000000000000007"], 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fe", 0x50) socket$rds(0x15, 0x5, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x0, 0x1, 0xfffffffe, 0x8fc3, 0x7, 0x20000, 0x0, 0xf}}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESDEC, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r8, @ANYRES64=r3], 0x38}}, 0x40000) r11 = socket(0x14, 0x6, 0x4) ioctl$SIOCX25GDTEFACILITIES(r11, 0x61e1, 0x0) write(r4, &(0x7f00000000c0)="ab1ae393207716fa49cd1c342bdddc675b507187cc0a613c19d20c38e95f1b44b901e2b37054f91bea0abbd1b06d5aac6e0765e4715e", 0x36) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5.741894402s ago: executing program 4 (id=2995): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @empty}, 0x1c) (async) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getchain={0x44, 0x66, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0xffe0}, {0x1, 0x1}, {0xd, 0xfff2}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}]}, 0x44}}, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) 3.583797692s ago: executing program 2 (id=3018): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x7) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000a00)={0x88, r4, 0x105, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r8}, &(0x7f0000002480), &(0x7f00000024c0)=r7}, 0x20) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000080), &(0x7f0000000040)=@udp=r9, 0x1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xd, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x40, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r12}], 0x1, 0x0, 0x0, 0x0) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x3c}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r0, 0x4, 0x4, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x1c, &(0x7f0000000140)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf02c}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x0, 0x1, 0x3, 0x5, 0x8, 0x1}, @generic={0x96, 0x7, 0x0, 0xfff, 0x36cb}, @alu={0x7, 0x1, 0x9, 0x8, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x6, 0x9, 0x9, 0xfffffffffffffffa, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], &(0x7f00000000c0)='syzkaller\x00', 0x500000, 0x0, 0x0, 0x40f00, 0x5091b573585a4751, '\x00', r10, @fallback=0x12, r11, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x3, 0x7, 0x6}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f00000006c0)=[r12, 0x1, r13, r14], &(0x7f0000000700)=[{0x2, 0x2, 0x1, 0x6}, {0x0, 0x5, 0x8, 0xb}, {0x0, 0x2, 0x8, 0x4}, {0x1, 0x2, 0x2, 0x3}, {0x1, 0x3, 0x1, 0x9}, {0x4, 0x2, 0x8000009}, {0x3, 0x3, 0xb, 0x3}, {0x5, 0x5, 0x2, 0x8}, {0x2, 0x5, 0x3, 0x2}], 0x10, 0x5}, 0x94) 2.598736214s ago: executing program 2 (id=3025): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002400010329bd7000f7dbe4250500000004001a"], 0x18}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001940)=0x0) sendmmsg(r4, &(0x7f0000005680)=[{{&(0x7f0000000000)=@isdn={0x22, 0x80, 0x0, 0xb5, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="5be73f583395e3241f80fce123b084f5e4f3fa08e27162f5168272b3fd4d6ebff0dd1f5ca850727b63d53d058d8d65b2ad64e7d0405fc6acca36fee0398b459b0dbfb2d5ef470b413b04e7a9e7da475b5ca6e7d51507c3bb", 0x58}, {&(0x7f00000001c0)="90547e84530ed57cdd4d31225ce8880cea122a0652df5afbbf439e57ed5569a38ad1d818c3f1e8c26953f597f33ed792193fe8797d7a215c40ad884aa052b6b4bcfd432022367ab65885f9694df7ba36fac5cca23a1b90fcd2b15c5e8b07afaa4835f9259a005620d3e6c2ca2f6a18e9a88396a33dda2e7c6b03bc48dc528c2d9daf9cb0cd925e15d5a4233b1077531e7b90990907a45fbbb419d8b2e51366dbf902d6c093933150b289b2ebae9e347bcdb33112752992fe9b7f24f71c7038e997e76e5dab6c11bda482ee9a5df85763808817c7b3a9f4142f145f64cbe9a777f4cacc281d26b7b81c", 0xe9}, {&(0x7f0000000100)="9ad7c74e097370abf9384cf58d6740fd", 0x10}, {&(0x7f00000002c0)="a9eaf3902d7161beb9c651e0155e45d4c9127006603c4de0d22bcb7967a345f830cb1f305b651b779650bb54b48a1cfdbf1600b609aea9c07ffd4fa0484c1a18b57c12a87e179a0c601246316650bc1358d022aa83c71c19d14fae4b463e86e03280c0b986302d6ab0a5de0abf100a0138e0ab72596b20c3071ef93fa7a01cc24a8143f6f0de3433c53c779b88aa45a49601a7f970f3c9fbdbb3d6eec296f90b39550f2af5af74cac54c64009d85ec828fb575bae91e9ff31605eeb1c94a360492a3c585e066a7c439fe2b20d561b4dbd45d9a966b263a9790a330df12c516405e44", 0xe2}, {&(0x7f0000000400)}], 0x5, &(0x7f00000004c0)=[{0x1010, 0x107, 0xf, "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"}, {0xf8, 0x112, 0x7, "8b9d3cbdd3bc5386820c3b05b46c179a96946b33df9a7cc406db266a5f76ae9f98be8902da4a22836edf2b5b78916140e45263b4e6f576c3f0ceadc55b1a6855ae814fcd7f4435da97ad617fafeffe4f8baebc85adf1dfd107fee0c48ef867cc04d85ca5df1bbaf992eec84f920af42c1586aca3c08541ab69ce37a4bbd2cbf75d1272672e661d15f184281d6b59c137a26821d24418744e29b036bdbe2244ceca36bff9dd4444aedcd9c5bdc165815cdd172a77d9d7fe9af32450e5d8487b15afd81b612a41a909c7649ae50dc089b8a8882c4c65f29e9c81de4199c33d1fae06ba1fc3f391"}, {0x68, 0x10c, 0x5, "3046a1a76162354ba20e76781cac9b8d017f2bdd1b2d9763213cd3cdce7dfce39511b9c83ccae19ba287b7be8853db92e0a986f9fa6c827a63afdb41277a6dd8acd18885eec533506068cd2904c35f71b7e92a2b3b"}, {0x70, 0x0, 0xc, "8e35c4b56e06061ef807e56735720f7896209ab07392a9f03918d22a4ce0744cb12758071cbb725e7e34dfa584ef82f984a175b1932a8f5e7acdb30dbd2ce6644426e5dd2894fd9b8c3f88da9fc6d437b918746a6b518107fffd76532d"}, {0x110, 0x101, 0xa, "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"}, {0x10, 0x10e, 0xffff2895}, {0xa0, 0xff, 0xb5b, "03dab06c8bbba52bb95a5e51740024e5b8ec98643b8d4857a846d349b4b3cb035ff59f4d78502f301895f09c18d58a4eac7d827fb28d7de29861478f9e17de34667148b291b174b2e6683f48028a7063fb3110bead96ce4cdf5d3cf97d153a34318fd06c3a555a2c52cb0ade26a503e9fd084490b2d8c5ce73abc873292074ff5ea758e890e613ae08"}, {0x78, 0x11, 0x7fff, "21f37a37829d61a4895ed4ff6288d461a39611ca19870e2c11b0b22addc46cb7a79b486058cbf2b5b1994abb5ba2c7d67a019220b4de70d0797dbdff89735fd3e43bc961592e0c041d70699e78c614301a2224b2e27323eae867e7a38eef39f7f32d9298baee"}, {0x68, 0x88, 0x9, "31b5d6f0ddb90443282a798b43971b1a1ff86c671c7e5b65680c9dcac1f83829d5963120720f89eb841cd35f0a9ef9582e2d8fe81d9212e6d4fa8c9d82a044bb78a858ee651da16f15244dbb57eeed322a556611490fd5d0"}], 0x1480}}, {{&(0x7f0000001980)=@nfc={0x27, r5, 0x1, 0x6}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a00)="119e3e92878d38772332bcab69549cc88375465c6e6d39396f681f7d9515084bcb741cb62a806c2c990f4e676ba97076faf3508ea14079fe42adafb4c7586b207d0b5beff50329949fe606efc94f109796376e6e984241b63e38760d4dcc26ab26caea3cc8aedb5831311148f0984401d4d5c7630ab5a8f9cf08b92d7c226d34f2f3f48d4bb1a4c31b71907844351102c7c4c8611c5ffb682149e09ee30b6247", 0xa0}, {&(0x7f0000001ac0)="daa161b2e3b399b2792660213add2f59c3197ab2c6dec424e327e184aafa61600cdfc3e339a946f77940f2b9fea3188ce553c38689767c53c4b2c2002370afc12b73f0d4ba47129418ec84b4b8854933bb88e3665d89175ed7bf3d8619056cee1db3522eb20b23a2ea50c74f68b9e6288c3e050fb729b1af9e44ca9c2c679a537bc3dfb5ecca20ddd263fe5551", 0x8d}, {&(0x7f0000001b80)="7fb15c902bda2fdd9a47c8e669f40f2e84c03110e6389807dc0793624947220e45ecfe48b94777acd463741784c0b7ac6dcc3f9a2947244b25151223d93dfd25842bf1bae3bf53248c7f7336a5a65e349c626d3e7c5a729ecbf795aa7c6104a3a6b72976107ac30cd8d89c0104b8785d131d7801c23f9b4a72be97e9d21770204bda2ad512b798d47bda808e2e3ffaa0c3629240c6f7f8e649950a54a894e3c948b06db21c309d738a12fae1904dd25f37de19ba2f40c3d4847989b3dedc75f3ea55ec7c1851622db31158ebd036e1af9cc826ad2755c241346df15ef9298e58733986b138", 0xe5}], 0x3, &(0x7f0000001cc0)=[{0xd0, 0x306, 0x4, "024a0909699f119b0ddbb8530728c90f9e602327db4daaaa1a405a46d54e17199f8c0d628b1326c4e358f2d0393bd43373e785b495d325756beb03221529ff3d9af906141adb0679099267a2e13b1e5eef4e5ab35004971e53f30dba8f36efea3099f7edd6dddb6b80290a27662363b62787bcf399aae0bd15f780b3d527e934983b26e6f5555e2f40fab5a8983fe542109c02ade9f9b5820644c9e0c5141f826204075eaa790a8b0fceb025636c033e469c897015fa5430ce"}, {0x1010, 0x113, 0x3, "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"}, {0xf0, 0x10a, 0x8001, "7266b05d5a5525da6c22dc654cefd7af7c66edf10010157d74e572f911f352b8bc5118dc8a8bda8a7132aef4851a20dc33c7b14e07460e4cf8d68d083d166165df5a93095f94c2922055e91f98d14dbfbc2081c2d3b03856e66adffb9ace2b7ee9477733b585f065d0440f3eb2a2c74b06a3806840137ec8774581d2b7aae51c639169e4d2db0e356ef46e20c370434993812e584502f7b1ff7fe8fc85539afa01ee1b732c8f60b3d7e5da30978eea15441cbbedfd9fde48bbd90cf47488b377f505f4adf70195837c5d57998ae9391784fb62f1f35e2856d3575c"}, {0x38, 0x84, 0xf, "83f46402d4103b09d80637d47038dc4edbf3cde8503b8bc43b153ef5a9847d382e"}, {0x98, 0x88, 0x7, "844ea15d51a41c44a4afad35b143b0a0a738a6bef1e123b4c558a027919e1178be3b2490410856af102d78d412f779ea6da115a5d1b8eb9b5508ac58a9bbac88bcbd83f775f814d833afa698961bae81617d0e842983d86fc8f66d6e3cbb9b69063ef38f84486fbd349be63a4b9497d3b159c73adb8fa108074a73e38e674a5ba5501ee72a9e32"}, {0x108, 0x11, 0x4, "6006ef0fe0ae0082238d895eec2a4df2abe3153ad05629cb10b50a91a9f0f3226f91d74d128f577599a875c290eba5458488f99559b1e4caf9ad72dd23e518a0e40925dbaa58ba6d48cf71a6a972d39221720b8dd52570fd2979096247a4beccfa77b3ca9855828fae7513a3f578a6415df8b58fcb3fa95fd487109e55f3ec0fa909227ff38826db95205bc1721802b2c43c4eeadfbfa5325b286ac1fbd978353cd4c921cb96da8b723da8aa55617a6ab1ad701b9cca583fde7f20331b225de51612a9d1e21bf03d809f7e4813819c72618d23019e694a69dae9c027f90cb34590c9ce1af57b1db2b9b607177f5c4822b8a0d587d3662e11"}], 0x13a8}}, {{&(0x7f0000003080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x3, {0xa, 0x4e24, 0x95, @private0, 0x6}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003100)="438d912522548a1860972f044d20058e69f1bb70a51370e5e600d7da2a41b7f39b6a6ba7978e46beb0d3be65", 0x2c}, {&(0x7f0000003140)="95b7631ea6645facca9956fb867161770437298a98fb6c54395f8d390b299743e9bec028225056de03083279524ae55acd569f75f4039d72fb925ed1df43c27942973142c832ade96e1923a415987e2ac6fd02e4c0945624ee2fe59e3572593ef6686cf269a2a7ab8773644ded27bf9febb551c1f8b329d419207e0524532fa309017b5e3871cbef69210bd670a58b4b2a8dc8fe906ac9e9385e728d726ebc37", 0xa0}, {&(0x7f0000003200)="91f4f67e9be9fc5ad98e", 0xa}], 0x3, &(0x7f0000003280)=[{0xd8, 0xb245b7297e53b5b2, 0x429, "1d651484698c2e73a4b13be17437b41cebc848014fb9fe11ed6bfeca229d5e9f42ce5f5b9e10d2f5db81c7a4a8008b36628a46f65dd2421d4ecb9d7476d4f5e185dbad64447cfa5696f58a3a2ad4eaa3158f8610569f490d0f9987cf3da2e7698bdee6fb2079f9b9763d41f1dc32f4e6ebf0f390f05c9ce30d3bf03ae729e3ddd20db82d2a3efc48e8c796bee4072034f64f40ebf24cf979e686ffa76121e3bbfa98282da0d9a0f85c66d5b41ca4beb1deded12ec50706c2e556b250b5aaf358d614"}, {0x78, 0x10b, 0x81, "0b5dc4c9858acb74c37637b1a708c33343d66d4a30fd89d3381e5f0bd47b97a87a0e58cbae9bb7ded126b352dc94ad92cd3df47e61a86ccb7151414d890f1f4f51da2c68ceee6d29b3278057f7ccaa4251aa98087a02b756d07e6d368eb76af724320671dfa4bd"}], 0x150}}, {{&(0x7f0000003400)=@generic={0x2d, "19eb2d13d7ca56fd85418b3876326afe4ff5b87bf804c3d2f5e15a7ff5ea524d42adc19c08133eae0a1fdccac85a517462f8340bf681f9e2170c8821abd621e700be0713c4abc994aaa4e0760e556eb7c685eff6f0d6a3566a9fde4632c941b71d6a2c5c0f2c64c96438f3c8bb0f13a9ddcada7521bbed852f29123b34b6"}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003480)="bb6ed1ab5fbc6bc7776d61806f38eaa08643c821fcb78ba8e59a1521e6d8586feb74f7fb8bb7f9b2b62fc2aa7c47af80b209a40423d03ac95afe630812e0ba65b41e4d5dbd8d6a056b22a3309e55762d5b0bd8f0e888eb994c4760eeb619c1502454a58f7f5460e83620c616dc8597a0c3a89d41c7044d373654cfc8e56308f9534c7c00ddc187f017f414bac178365041974156857129f3c619ea691f1b3abd017d", 0xa2}, {&(0x7f0000003540)="e3e24d594a1787b0ed847c21f8a62310a3e6a0a36f705adcabc4827a0153533cff66d8269522aa16c88599b4780928c3eb40996ab03829595bdb1575074675ec637a396516706b2921a948125730a55e83da7634ba97420790c9bbcd06121789693d6403761cdf3cc4f5535be99810a8a8a4335d355268a1a32f39e17236141a769e12a88dfb3705a1d2f0971815d19b841360886a4b67692e268d52e0cfac0be5b6917cabb30dfc6ab7ce6909df94d58168656b59330b3cfb1940b3e5d74cb45fbf", 0xc2}, {&(0x7f0000003640)="0a94318c860c8122de78c89eb46cbdb2b76f90ebdd624e5e5f7b13eeb89f13cb0262952257875afcb848722f03d57a2714640c9ca49f1f30056b09adf281ea93c42cbacab4433803349d8d405019dc10b40eace2f3", 0x55}], 0x3, &(0x7f0000003700)=[{0x10, 0x117, 0x80000001}, {0x18, 0x84, 0xf37, "ae057679109c"}, {0xd0, 0x10b, 0xffff8001, "fa2e5068beaed6e345502695deb07d5fa53e8e0b0ca400c5d4b24ffff42f96f15e10da9704dffacc091707b22cba4d881b41b2a4092f2792262ab7158c7fba54e54571ceb35570ce2f00c47dde36d377dc1b977df54434089bae0ece55dc34f8f2c633039b31420c733d3ab53f504048dfd2ccdaa343269ca0837c07d4044008a5375676f06c89fb7181781d692fc1506a9b7f5d34b73f6b8f6cf362824c4db8139d76d4144250880ca6a75a76d6dc346ef71d58b2b982caffabf721ee"}, {0xe8, 0x10d, 0x10000, "98dd92b4f1ee298739a32791944483b69ef9077d1ec98892f45638de5dddac2a902f527c17b00681bed64bde50fa523830b2d55577d7f83d92fa063a53b40c14d454378dfc4d1c174445d719ab3253043df749a682971d0214aee9e8b7698340d606a23cf3966f18f43284aecd6594818220307518fbe7f3cc7adbfd650b3c082d702d02f0faf3b9fbb6ddf7d4feb8e1863069dc611049ac97b2da85850eefd6a1c12658be1999fc68e2133f602695685cd54a5de7f573a61524357b4773607e13b991214aa252b032328e7c923f79938a9649b8ee4321d9"}, {0x50, 0x10f, 0x0, "a06d6803df35be5184d07efa1ef115853b2ff73e419fc82b2894add3c27ee58244d64db3928894d2dfb207cc899bfa76565b52a55ae63af112b77c71"}, {0xb0, 0x107, 0x5, "5ef6b9cd01b56406264878c4ac1a8580a8d23a587af49a7168361ddf036a58e2d05727c00507f7441809f1c5ce4d66f828f85484fc9f28afcaf311c5f7de37a4720ea9be9a8eae3592765bcb525c6030a8100a48b0c3fe05005127de7a8e74f790e8b1554b79624982f88997d1adf4220963748bceb84309071c0f1a59c0b6873ba2bf7e864be2a225a1b555efb077a9d600e7f23a2c30ad6f0e02"}, {0xb8, 0x115, 0x6, "da9a8a35294611dc9e87982200e5e3ec606e7a5708747f8c65203c7052db2cfa6a797ccc3e917ca260f5a568c2ecb5128b6d5c2ccbc58c6f401e136ca3ce6cba4a7446faec5648165558c9de0bc34b3c023d0a1417e0851ca310f5669725c9f7e80013c67880c16824ea0712320afc1d89c20bae80be4ea0e0897c9d0085f3db44f445698a2410d44aa9202e52d16d3d1fdf9022aabee3b4f8d5a09b4f89e8c88055c6"}, {0xc0, 0x113, 0x6, "ec079b46b83e65e4f3737b58de1e06f4ee5a4302fb2eb8d6a79fb573cc07f296230409578e379dba8686e5edc53867e17c1fbe22bc810050c291b177c2cb36248a76e8098bb9a8c7dea8ec5ec86cdb5baeb458cfaeb2ce9f841a009264dd2f34b79370dfe2c8fa622c360bcf58824efff8bae1a541f5aac1e4d590d511b7ef4ad7613aea411b3df29750953c5d5e887b024ddca7f3c9317729ac82e3e63438a21f15e01bc887008c0ea1"}, {0xc8, 0x101, 0x1, "96c8a05dd0cec93d7ce4dc4d5d87a7c4a6705067e6e8c44859a958960289f63c7bd890eaafb68ce28052a8c69533c79ec3dac8ad6071c366d23df30d04d83ac6bbda06780610890ede0f91ad06065a6f526bc41eeddc07f91bcf22b477eebd004dde87dda99f8d01d886f1414c694fde736464d5b6aa090e569d5e1a56280c019ca6408f7f54d34ce5ed31bc6678bee7d287741116ba70e81c34d9e0e22504963f1e2f039331054c8e717de5a45e7756d4af04f57dfe"}], 0x520}}, {{&(0x7f0000003c40)=@nl=@unspec, 0x80, &(0x7f0000004d00)=[{&(0x7f0000003cc0)="d32865c084fafde4fff162e5c38ac77225ae4811badb3d96475d4d5aaec95eac1d8c66bcf24886000de5335e6f6e3d7a0c5463d8347cd41d93983fee6607c2ef7aa5feb0469dea407201278be15074b6f930eed015dd5c33ea7aed37b77958f2204073afe1e38848baedc26b454c14156398a8a355761ff6abf6edf676324f7d3be4bdc71ff677c61b2fb148b75941db77d0cff2e6fe22b4990445a6b677feee5b8319e344e05601f2002d022db195777f0bfb5f462b497f177e7687763528ae4423dcee89e68af4b22e84ef30889448eb91be51fe72334ca8ec803cbba52ff814ad7b5ae542a53ae21417dfc6e77d6cbdd5a40222760f89e46b95666c40e86072858d86ab943371767c7c8ae8e5935b9b0ac620470ae0eba938594362e348e92fa6ae99d44c8db558129471e525b26738d6342d9b9b34e4c97ac18e0c23c60c28be23025d4f7d668270c773a5fa78a2d242a061dd7ca9ba98f55027839c311af8eedbafb4eb6e3245a169380f19b443333b7e65463279c4a518763d6d9228bc082dca20cc02f802dddf2e8f158c136a46c3e44ad6c0e1e0cca62b1ed00ce4f77240712dc2b5c860317ee093043e1fc295ccd380c92ca59e5b9b59c404b6a7d2f3579be60ffcb82c006a263c1caafcc6711feb8a4ffaaaf1c7f02291f409c25a03c59837570ffc422bb87e2e43c1009f4b7f729a47c2499e55b136cc56b4a47dba9b5c82acc20410626a5cd6b3d58fc6d4d7ea623c559e41c713da96e111f194f7424b569f9bdd2cd1966916aadba22fbbb71bc0af8ebc75d18deb74540a2a49a6560538c1cca181723af7a6326a9b1de1d8c218805bf8f2ef7636a8fda8084bca3803245bdb61a8acfadb13b14b0f57c840ff958bf281b59092fc18026dc5d1d09af870adcc3287aad976e6acaa0d35116c06ff9da0208c9b1ccd9497d87c8d1044742be7c10054e1f4310d6f45c3dd276010870b1fe9b2db1eb5980d5d313f03087bb56452755f8c1d079e1019cb0b6b9cfaf15d2ef36322ed609c6f6c2737aa2fe60a80c6c1c6217838d9eb35e53a2bd3b87f357ac49547715e35a641af5b226563b67b9dc33b9f83b4637dec2c2388b6fba2aef6421c8ed9f2d30bdb83d4e9b1c67349c74950704c030a1e7559dd25b69349c9d3e8861952d224bcd9d4b6dd3711010255c89e8ae96cb15bd177e71e4b5928afd05685ec08a063e71bcb0ea26e5e6eadb3cd6e6e6b001f8d9003a35691584a2f3cc60ae0063e3df6fa343efe77d9d4e118a8dac72404e13db4d4fda705c8930be2b1fb016b68830973b635f4346e634e1a06a2fc628f728f0f7a4ed0b0a551a8907c9949321bb5aaa15fbbcc0210c5727a512e534457c4b1c1a1657b816dc2e7dd171b77025b743139d5d43835bcc7f45631d043507d762983d76efa8f79bdcb62a68d6c4d9709e6cf2d577a9c017a34fddbf51427046373c6034527f6e62de3203c1fd7f848b81a25be1f7a249c0a9e66224287b4160f7d08a1f5f3d53c156df3b8104092ddf814e1cf5da3beedeb59c516143e978115e5bc7820364fd259c34cf31e50c0b6c366004f31827ace05ebb4e0b9f049de533976e1a0e58dd19ac34bf495824902e2307f24fbe5a1e7f8e60d6897a04a1de8199829f0f6193889629e8e7968b39958ec67fe7b53ad3e8960ad642436f9129beda590980db74defbf470cf619330a8d1a975b4586d3d5012c093928932446cc00b9f828fccc989cb8f32fe2c1505c5932779272ff73f21b8f1a64c2f4eee8081f3e6ee6403e35596714e2cced10e5144ea510e7b26fba617ecbb688819d5a064ea9ad54b88b240c991dafb613c9c012c1a505074da3ac4a7f587fc83dde9759d1e63029bc7516f93892ca4430e751857ca5404b24d9e0bcdc2fb9d989796bc92df91bfb305b3d23651d5b5d869dcc275695179b8599064df6878892a1042433b09223d8e87e1c7cfb2dd06f92e21dea2ebd4acb51ab001a610d9c64e285532057895d4ab179ebb1cbcf9382e9736ed9c2ed4f0728071b3bde2b3c1963d565f42a634e1cc7add5ed59b632502cd65cf9b6b9b333066b25faa28db67b621a52981d1e3bb1d7de1e043df3131a2fd2623cc635f8f69fd6a079b561cef706c6319a0e07753977c807fefe4015662d5c71f27bd674621aafa183736eb7df2f7c827424c9f3e19858c062f1fa6500bb9d5305a7ae657957c8519687eb4c03fb6a8e72d3620b8089bb6594279773f7cb9953c992a6ba685f783c0a4f6a620d94ad5e7a0953133bdb9d96ab1f82bc2526208351985a50969732d6712140126f858a0140ee5ada3f916bc7e96d33a6608be9bd3f596eb29efd8488bbe31d6f5724a8f29af2d0b23ea18dc16e0d191eddf7c07d680227e600089f644576e2e3d2196b8953963a0d8657fa60de87d2498dd91998cbf47a95d19696b2c0a13a6f229a0a2a9670975999c0d706e846972238c464fc821842192152bfd60411a68bb4644cbb7bd5f026ee0fd75f021743db36ab9f1e1d010c83c9e6b55167ab62644b5f40f75f980b6e8219679e60ca8064d112390a9d0c7f0e7ab46d59ed6c2b23f824016953be9fd66145ef640a8ab6cd0e5358c4c1e965d40af47cd6f4ae8c5968e6b4a17308018dfba794d1a41f31364f1e79c1ac20193bc6aa96fe1577d50b3ec38126d1fb45af0922bb3f6f8fd0f72639459dc2e6f36227e23eb54642edfbe43e22438e2589986e13137ec14eae619f3f752e6e40321bd717814a9d9dc7f3a7576289ab611d22175c45c2c962d13f6970e693e0e9aed593205e4757661065ea92fe4d485d18527d4fb312adee72a90205b7f55953bb63ab44c1f168f5e3fc05be1885540c758ccb9a3e70a2d3a5287527d2257d6925f84ef62b123d2d545d3e0b1094488150284b76bca3aa1edeb39022bc39ae194b3e75ee3e6241ed80fcc7eb64d227bc4831e559d27297e07f4552cb863d3089b7957637e669196b58aed4d485f2d2c85e9f4cd2fb7ad535c4f387c557a71c497c63a8ab49184512d71065cca0eee67614fbd41e6af8f010dcd5c6db1686ce8060bf07d17352c65bdbd4f291c7b87025f174ebe247d2dddeb6e4c67d92ebd535e0f2f7e6501ecd2bb0bbf64d9df037c2536df774ae2d6a205aec19c8dab42106b2b3ba4a32b7e30a7540c5f47126813ac3ed67fee747b58a0c70f0d44f3da6b710b65002d76ff5cb5dcacdaaf751e72905f904390530ff8213c1f4c53b80877bf376956afe83e685b77742e0b026bbb777ab4f4856099a1076e23758a4dc89c21621bfe1287d45e58e004d9b4d52aa4572e5ff4cf427a9d910b9c02be7e7ea69d56984a530d7833e6b33a99e86021321afa6a54d96e8815d468f5974f2a2f4df4b27860224622637991052c7bcb73f28b8fe7d0f4aa9e2c677a8239fd63efb66858eaf427857641b33d5fac7456a456d57c205f7367edc7c29ea284a5689a1d6fafc6968b93c816a381eca7a1e05f3d6c3dc998cb8f43eff6100d9700e4a1151fe1a178d73c4a4402b99b09befacb067b6bbd57689a246b4019c790b91340c759debcfa5b42e8aa286f1ae1317de6330507eca648098bda32dfd0a43d866921a45dd108584a3cec675bb18564ee7e2a59d0ad3db2cc8e6b8c421e82873900f698d0acbad90ae6faa75617435a5ed39a215947173f3d66bb88e90050491a6a665a81d2ac13e5c1c8dd61577d9b13bf360f6a003c215d3ab2866e05b7cc3046b3819fe9cd060d416d6ba859a69093b234407969e42a5cf8104eb2a320f016bd08b672decbc728b9763c23e938771fefb43976ae882b41037e46185a0810576f4fc03cdf9eb6150e9352bfdbead3d2951007546cf64e28f71455dbfe322223b4e703a6b87e3a4fe061510c7cd7a5ff5c1254cd238828664d48116f274c621bd2c1126bd8d49c84ffe2289f32d41c30259fde989ce1778920c40864c6e41ffed14432248651b824ec36e5f234aa8341029e6883c52bfb2eec328b38f83f20b6fee94595755059310d25bf98a16594ef4cbd356f409b2f545387c1a6536c4734ca44a59659648e3e9a2c9835b3afd5679cfac5eac572ff13ede304ecadbb35939b7e7d78c0b0245fc5862a0a8c00ca27fbce3e46947f3dafae48db8f2dd3e4592fd3a66c777c7c0eab40f0538c68062abb04370667ae1e31c65a81d83697b6f5c68d1ac1b0f185a374ea3180b2327831997a4a2a81a90d4e2ae30c48472b15031089d28fb49f3c709c60b55b087a0da6163076fb87bd18c87c47dbe3467a4b95a5b46b3fc14b1d9eb80075610baba31672a83d32bb4c3c7a5cc270cb13e84ca65d854fa53f18853f9fd445e51c78c46f2c4d71fbcd41d0fc14e256f399359f345612700a0c9c584572eefc1632a729fbcd7a4502fcedea8d9c5d4f77295a88e5b6968bf269abee07fe7bf6dc9784da2d67cf5c823c917e1a18dcfc78d9f1364e89314896f32dbd3bf0554eb6621299b3bde55f2aa6738cb2bb41d8489d1339db2e849edb017d7a14aa559ef2d27822c7f3413cfd73b6b9d2ca3429f0b3c5726081059619a27b93effa93cbe945c1bb763bc5e71b0dd25eb0560b5837387e72cef52b1a23f797b65ebb869b65fee7bec73761033c63eeec2480db13688c0890babedca355c74ee5d24ea87bb52bcd8a2b49df2b09b7fc9c111cfe18df791c03025642d50cd161514b1daf725cb5f7bad1c654e9bc9b7d317c53e5b044274e9c79563fe42a79f791c16d65eed3cb4f24eb46aadfa38224f2a58d844e1362a4c30cccefd62dd78962ea6fc4ec825b458aae85953f18e3d1250edbf6e0bdc0a773bb7199f3d2e3f4c65a50fedf31136d3238dce1b51db2fe5c996e8b9e36f592d9989d037ad47b0fa489e87ada79be31f2868863f3ef7620c1ddac6bfbf25f19aced1c98d7865201e5540f5269ed90892d0f6b46f06b8ca19f81c30f8069948b6546f4a94ea7db323214368015e447f2a66e8d2361ae93253764978715b939e330deaaedcd7ab8dffd9775712eafc082235bcee5d31af3d570ac2cc080b25ce2b350a854a0ec0b4d90010b5e7ecb11f15d9c8c907d66b5eeaf8c2e29f7c977dafadb5b98e4ae4bc7fdcded1940b8ce24e4b2b9cd2b7be782c00e094959254e16d4daafa1ea90fe9fc3aaa602f559cf15cb45a4fa12817a1403cface09ff06a97fbd833c53a6e216910b4e321ec0d368506aff8e395c124c4e0db3cb7f26876b291884b5cebc1aa1b33cf785aa1c0ee2f9e9702d20667b2559d40d727f203c43717b91d14566d8b5438c05993488387394704bc692b1427c02bfe20fbcb43eed6d7b640b3dde38939dd8fd711b5f27c2e3f232c43c3e52b57e4fd560ed8a2f781cdc4f32c0e632c1d49d1ba3689e8216cab342fd7db413172b2b7cbaf71e26542f2a45154ff858697b57b4fe8a9c6740858ef269f7faebe69fde61c5395b73984b052c7a6c464fe7c3d5b12b98ff6a12692323c5ed5588d27fc8ea90081ccc16eefa38f5d12e2bacd550eb6850e74e2d8322eb9cabb928d8ab0e0a8bed27e75c21821888a06f3f2cb5f216f2f4d55e81569b22d1d71c5eb62e574aa9376034bd30e6cefed1e0fb8b6865e412b8bbdb7abadd8232af07de6acb0b153c67e1475b12c5b76e90fedf1153ffd15b3aa4d494ee59d5e4c3d3a4eb06304b74a51093b0ae4b8aea03c0f08fe2a7cfcf03ceea1110fa497f5c180d1d5c34c1b6558ab8555c6cc26a7183ee4dfd1cd68308886d4fa085628f70b8493edfae64da638e901de59b7dd076e3d431", 0x1000}, {&(0x7f0000004cc0)="a359d027b92425dfb51c07c272619887ac0523e41e95f5d9865374ae0f07e347", 0x20}], 0x2, &(0x7f0000004d40)=[{0xb8, 0x10a, 0x0, "5d0c4e23872c9d9e2054d1ff9d98e387acf620fd7a0525ee4baae89626816c83b6981df37376b57a628ea835ab6b6e02d9bbc3f1789e46fc35ea4c1f5f0ccd2a2578d4b66e8b520e2f0c54b11bbcd9dd930c29deb4c34283095b82a0b59059288b48fa79a50d9d48c764d7a0dcbff1daa5756b449104d2a40f6d155997a79f204d4eceda5b404e54517196288ba6ea36f754626a347979e41baddac446150c3f9d9573"}, {0x50, 0x10d, 0x6, "77b9c05a54ba6bd3636db23fcc9ae3d1eca947220b8e55a344cbdfca3156a8f6496e8ccae44898639b02248e30610f81b960d7f14e7bdd5797be9434"}, {0x70, 0xc36c9e313aca6599, 0x7, "0aa30b2de6c810c7b916c4a6292c5edd4434ee52f5f77a4f669849c7184d4078b0b7c20942675263514fb4b0b00fb229b1171ba159551991c0378e7feae8db6a97a790dbb73b0955f7a03096520de03b80fc4dec3791026264b866aef490"}, {0x18, 0x119, 0xfffffc01, "a48f59a67e9c"}, {0x40, 0x112, 0x730, "7977b14a60f43a206bb201825a04979ce9af01596b7960f42627f6b5c9d6d355126440c2afbac2a5ef74436e45e9"}], 0x1d0}}, {{&(0x7f0000004f40)=@pppoe={0x18, 0x0, {0x3, @remote, 'wg2\x00'}}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004fc0)="74a582a72c0bd104f4f0acc75f201ae284cc7091224d1bbf7f77f63b2ae1b1fefd47f366c9fa78d8b9399f161a7c9a3574bd1659eda9f64bb070181b65d07249427fc11e7fac41a8ce8e7e088d35a172f7950c155f2ec3824235d2322a99b3f3274834604cbc5ca2957ddddfd6509305f7fba453134552272802cf33c83288e21c7bd3cc0ae8435a7e7af946dd3f51f14b8162169ccb75f94c30e2db4b14dea659", 0xa1}, {&(0x7f0000005080)="a47a288a36c5dac5f90fdf51519d4efa2b9a5277bf0f02526fdbea2c3b50c67b1736207025dc66d877d63c64f3c7966b24c1166e9daf13e8aceec8067158aca179f8b27696de724755c29701f9cee71baf4e02c8f1b144255f2a1fc7f024b71fb25d0ded3f064d8a613cfd6b2dbd9ffb4c39a81acc58c74da31e11f587fa38b423261fbfceed8c50d2d281d14b4b16cec20a48cc2a2bd0c8a2c066d12cc9", 0x9e}, {&(0x7f0000005140)="6622da675e4add617bddb1e6d7f2101509e655d2633e964405ef61cd4c4f78e8c39b76c10fd0b6041743fb1532d78a0391883b6dc7d485d520be20d0dc433db7af4777b55864dfb581925fd46af6b124a1a6d78e06ac15d932d9b23caa8b0621cab23d0914e9f8a0f13e0b0437365c8cf76f2004852b730ec0272c92ca4e06bc35dcbac9226152061f8bf9de65", 0x8d}], 0x3, &(0x7f0000005240)=[{0xd8, 0x1, 0x6, "253f5d5e3efbff785177f2a6b4194340d6e7acd9a9ee652f4478f8422bad03b72801d07355d189edbdfa4483872c03b9786e6ec1e91a34373e6b8157a15942782ce4a46fea5c4073c8857f5a49a7a8b6aede36fb91209c8613e6f6e3421aa8a5d7e4b08cd97e7ccceebc9e6e3e0d8b1d7e5f6dc7ba4bf79dcda4500af681a41c5157687f1e1be70eda457f2a9db75fe7742e3ddd71c503821bedb84afb97b51540430999a0847c6941750cddee016f5533dee73531e6adfbf8e7ce73c9af27cad5"}, {0x50, 0x0, 0x101, "4b7aa5d14748bfeb34e54cf572dc46149254e5665338978319e999059de16402c4a2c61f27361e614b0e5c04bd99562a848e02a774b2320bc6da"}], 0x128}}, {{&(0x7f0000005380)=@rc={0x1f, @any, 0x3}, 0x80, &(0x7f0000005640)=[{&(0x7f0000005400)="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", 0xfb}, {&(0x7f0000005500)="6356ad6db1a1159c98d6abb76a24b732a896c5bdad02d96b536ee40703edd1fe6dd8759337f4eb35c6ccfc61b8e7d3145686d4ccdecacf2f4f9c12ed100e5bca138191b0b12e13b770c0c639bbe5c952ba0a9324c326031e4d814a784796d3df35c6dbb9178a153484eb3c", 0x6b}, {&(0x7f0000005580)="6f19219cc5143e3f022387f1d023a6c17c6400a7af4f97505e2a9335aeacacf3ee7ee1c10ccb8c875a8d577476717733a46af8139d1ef7a948ecbc23c573f16b11183256d877bb0432db83e30bcce6a0efc5b8b3ba34d62db361282d7961de301a2bf0c2868e1e019d03415bb326af0bb0fa0885ab30eb49c7503d2a004116920531cb47177ee39a13aa5f68aa78b7a17e319c5b830b8b6de0d1eb283376eccd6d9ce1c1bdf8e218af24", 0xaa}], 0x3}}], 0x7, 0x10) 2.205797427s ago: executing program 3 (id=3029): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x0, 0xfffffffa, 0x9, @mcast1, @loopback, 0x700, 0x8, 0x1cbe, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', r1, 0x20, 0x7800, 0x1, 0x1, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @broadcast}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4004090) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = socket(0x8000000010, 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000000600), 0x0, 0x10000, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) write(r5, &(0x7f00000002c0)="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", 0xfc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000480)={0x6, 0x20000000000005e6, 0xa, 0x6, 0xa88, 0x74f, 0xffffffffffffffff, 0x8000000000000001}, &(0x7f0000000280)={0x5, 0x3, 0xffff, 0xffffffff, 0x139, 0x2937, 0x3, 0x401}, &(0x7f0000000400)={0x2, 0x2, 0x2, 0x1, 0x3, 0x7, 0xfd, 0x1}, &(0x7f0000000440), 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) socket$kcm(0x21, 0x2, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r9 = socket$inet(0x2, 0x2, 0x1) connect$inet(r9, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 1.742181884s ago: executing program 3 (id=3032): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfffffffd}, {0xa, 0x4e23, 0xaf, @dev={0xfe, 0x80, '\x00', 0x19}, 0x6}, 0xffffffffffffffff, {[0x12000, 0x3, 0x80000001, 0x9905, 0x3, 0x6, 0x8, 0x4]}}, 0x5c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1f8, r5, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x5, 0x9, 0x322}, {0x7, 0x65, 0xf9, 0x6}, {0xf80, 0x5, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3}, {0x5b65, 0x7f, 0x3, 0x3}, {0x101, 0x4, 0x2, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x203e}}, {0x8}}}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0xb65af3c304382ac2) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6_vti0\x00', r6, 0x2f, 0x8, 0x5, 0xb2ef, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8000, 0x8, 0x6b0, 0x2}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r9, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20014005) r11 = accept4$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @broadcast}, &(0x7f0000000800)=0x10, 0x0) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000000840), 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) r14 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000940)='ns/cgroup\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r12, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4e}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x4f}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r14}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r15, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'veth1_macvtap\x00'}) r16 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$AUTOFS_IOC_CATATONIC(r16, 0x9362, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000c00)={0x0, 0x574, "0c935e", 0xd, 0x40}) 1.636054615s ago: executing program 1 (id=3033): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001200)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) 1.600253069s ago: executing program 2 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600007009921daa2f63432e75d5ef55491761788e72f44e5eb4436492ccfba6e40beb7de8b3b55c6cfe2341cad63aa2dde9afac21d97933933bec9e3d705e7ccdfbc837088ae74718cd247644c9f8b4f62914f19a0ea1f462550a98c583e33b14c368cc66fe9f6cf4ddfd1d46fc25b29467db82c46059238067bdc94688c6201b98b11917d4944647fea3740d82ecfd382344ddd6e703732936504183994afdfbab2b424dd51b726ca55ec229066", @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async, rerun: 64) unshare(0x68040200) (async, rerun: 64) socket$inet(0x2, 0x3, 0x7) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xc, 0x624b, 0x100, 0xffff, 0x7cf0, 0xfffffffe, 0x4, 0x9, 0x2, 0x8, 0x7fffffff, 0xfffffff9, 0xe, 0x6, 0x8, 0x7, 0x2, 0x2, 0x74, 0x59bd, 0x8, 0x0, 0x10, 0x62e, 0x8000, 0x5, 0xd3, 0x7, 0xec11, 0xe, 0x2, 0x1, 0x4, 0xe, 0x4, 0x9, 0x1, 0x7, 0x3000, 0x43b2, 0x0, 0x9, 0x4b8ed944, 0x9, 0xa, 0x3, 0x7f, 0xfffffffb, 0x6, 0x2, 0xb, 0x81, 0x0, 0x7fff, 0x5, 0x17b2083b, 0x7, 0x3, 0x8a, 0x3, 0x8, 0x2, 0x0, 0xe, 0x7, 0x9, 0x80000001, 0x1, 0x4, 0x9, 0x3, 0x101, 0x4, 0xe, 0x5, 0x0, 0x6, 0xffff, 0x4, 0xf, 0x1, 0x7, 0x10001, 0x7, 0x9, 0x9, 0x0, 0x3e3, 0x2, 0x6c, 0xffff8001, 0x6, 0xf16, 0x6f41, 0xf, 0x5542ebd1, 0x3, 0x81, 0x0, 0x5, 0xfff, 0x7, 0x2, 0xfffffffd, 0x3, 0x1, 0x6b3, 0xffff, 0x0, 0x8, 0x7, 0x2, 0x80000000, 0x2d0, 0x5, 0x9, 0xdf, 0x0, 0x8, 0x9a8, 0x1, 0x6, 0x5000000, 0xf1e, 0x4, 0x5, 0x5, 0x1000, 0x1, 0xe5, 0x8000, 0xee33, 0x5, 0x8, 0x7fff, 0x9, 0x60, 0x7f, 0x10001, 0x5b3d, 0x8, 0xfffffff9, 0xb14, 0x9, 0x5, 0x0, 0x5, 0xa15c, 0x8, 0x91f, 0xc1, 0x5, 0x3ff, 0x4, 0x14d, 0x6, 0x7ff, 0x5, 0x3, 0x7, 0xfffffff9, 0x8, 0x6, 0x80000001, 0xd, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x3, 0xff, 0x64, 0x401, 0x2, 0x7f8e8029, 0x5, 0x6, 0x1ff, 0x1, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0xa, 0xf, 0xa, 0xfffffffc, 0x6c, 0x102, 0x2, 0x872, 0x78, 0x81, 0x20000, 0x1, 0x1, 0x9, 0x101, 0x81, 0x2, 0x8, 0x8001, 0xa, 0x7, 0x40, 0x5, 0x1, 0x5, 0x80, 0xfffffffb, 0x7, 0x4, 0x1ff, 0xce0, 0x99fa, 0x6, 0x4, 0xa, 0x9, 0x4, 0xfffffffc, 0x8, 0xd, 0xc5, 0x1000, 0x7, 0x4, 0x2, 0x101, 0x1, 0x6, 0x4, 0x2, 0xffff2001, 0x8, 0x7d96, 0xfe000000, 0x175, 0x5, 0x400, 0x40000000, 0x2300000, 0x4, 0x2, 0x5, 0x3, 0x1, 0x101, 0x4, 0x0, 0x2, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8c1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x5, 0x5, 0xfffffaf1, 0x9, 0x84, 0x4, 0x2b, 0x3, 0x10, 0x5, 0x10000, 0x1a, 0x6, 0x8, 0x7f0, 0x2, 0x40, 0x7, 0x1f, 0x8000, 0x80000000, 0x6, 0x2, 0x7fffffff, 0x4, 0x38d, 0x4e, 0x401, 0x7, 0x8, 0xfffffff9, 0x6, 0xf76, 0xfff, 0x2, 0x5, 0x5, 0x5, 0x7800000, 0x8, 0x0, 0x8, 0x3, 0x3, 0x5, 0x9, 0x8000, 0x1, 0xcb3, 0x5, 0xe7, 0x786, 0x3, 0x7, 0x3, 0x3, 0x6, 0x8120, 0xfffffff1, 0x6, 0x4, 0x0, 0x1, 0xcdc1, 0x7, 0x1ff, 0x7, 0x0, 0x8, 0x1, 0x1, 0x81, 0x1, 0x8000, 0x3ff, 0x9, 0x7, 0x6, 0x2, 0x56b8, 0x7, 0x7, 0x7, 0xfff, 0xc, 0x40, 0x6, 0x2, 0xe5, 0x7, 0xa, 0x72, 0x9, 0x1, 0x3, 0x2, 0xffffffff, 0xfffffffa, 0x1000, 0x5ead, 0x5, 0x100, 0x200, 0x6, 0x8b12, 0x7, 0x81, 0x5, 0x0, 0x7, 0x401, 0x3f, 0x7f, 0x7ffc, 0x7, 0x9, 0x80000000, 0x15ae, 0x1, 0x0, 0x31, 0x2, 0x3, 0x2, 0x5, 0x4, 0xcf11, 0x278e, 0x7fffffff, 0xd7c8, 0x1, 0x8, 0x1, 0xee, 0x3, 0xff, 0x8, 0x1, 0x7f, 0x2, 0x5f6d, 0x0, 0x2, 0x400, 0x6, 0x9, 0xfffffe01, 0x3, 0xbde, 0x9, 0x2, 0x0, 0xd, 0x1, 0x400002, 0x2, 0x5, 0x6, 0x3, 0x0, 0x6, 0xafd, 0x2, 0x5, 0xe4, 0x7fd, 0x9, 0x200, 0xfffffc00, 0xc, 0x9, 0x0, 0x5, 0x6, 0x1, 0x4, 0x1, 0x2, 0x8, 0x4, 0x1c, 0x7, 0x7, 0x96, 0x7, 0x3, 0x80, 0x1, 0x8, 0xfffd, 0x0, 0x2, 0x10000, 0x80, 0x1000, 0x1, 0x401, 0x3082, 0x7, 0x4d51, 0x200, 0x2, 0x2, 0x1, 0xfffffffa, 0xea97, 0x6, 0x90b, 0x7fffffff, 0x1, 0x10, 0x6, 0x7, 0x0, 0x2, 0x6, 0x2c48d9e9, 0x9, 0x3, 0x0, 0x1, 0x7, 0x6, 0x2, 0xffffffff, 0xc, 0xeb82, 0x8, 0xfff, 0x6, 0x1c00, 0x1, 0x1, 0x1, 0xfffffc01, 0x4a0, 0x80000001, 0x8, 0x4, 0x800000, 0x2, 0x3ff, 0xa735, 0x3, 0x80000001, 0x6, 0x4a, 0x58, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x9, 0x5, 0x6, {0x6, 0x1, 0x200, 0x7, 0x2, 0x2}, {0xe, 0x0, 0x1ff, 0x2, 0x7fff, 0x3}, 0x7, 0x400, 0xd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac1414"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, 0x0, 0x0, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.454969218s ago: executing program 1 (id=3035): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000014cdd667527f1000", @ANYRES32=0x0, @ANYBLOB="0002000000800100"], 0x20}}, 0x4048181) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@private=0xa010102, 0x4e20ffff}]}, @timestamp_addr={0x44, 0x3c, 0xed, 0x1, 0x0, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x800}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 1.180037923s ago: executing program 1 (id=3036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000010073797a30000000000900030073797a310000000014000480080002400000000008000140000000004c000000061bc47652d64acefad2eb0a010400000000000000000100000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028006000140d4dd00000900010073797a3000000000140000001100010000000000000000000000000a000000000000000000"], 0xd4}}, 0x0) 1.178670916s ago: executing program 3 (id=3037): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08", 0x13}], 0x1}, 0x0) (rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x70}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.09339061s ago: executing program 1 (id=3038): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x5) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000508000700"], 0xf0}}, 0x0) 1.052809833s ago: executing program 3 (id=3039): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02574fa4b2abaeaad6000100000000d170466b1a664dc98cb4d93de48cf0af2c38554acfc944358da8f2a07f03ef304ab0b5e718ef513830a13151e11e1971965467d418c9775d", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02574fa4b2abaeaad6000100000000d170466b1a664dc98cb4d93de48cf0af2c38554acfc944358da8f2a07f03ef304ab0b5e718ef513830a13151e11e1971965467d418c9775d", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) r5 = openat$cgroup(r4, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="5f28b4b2c7ea2fd424f75b7a7cf79852f4113c40061f0a9699c3b2c6144aa49c4379a118590651e150c2cadc", 0x2c}, {&(0x7f0000000540)="e057c2ee4dd03c1144464ac623def31c4ea63f362f22644eff0e3dadcf44eb7f806944c9bb1adec2dcd63ce7563503c63fbb32950b01c5aec737f949485d201e756b9b62c62cda4e94f1daa0efa4c720165051c2cec876836e0abab761f7f3e7156506deb7bcf4165975594ddc0d07be05f468482842b8bfa9853bfb980db2ed03e604b9877586f4fb49c76a914c7441ea65bd18fb314da782f44a8631dbf450a3a0dd31a7fce06dce006545cc0875042066eebe8426b4a1e32d5f19a15e485f2d09af301e45a73af983bb32c4b1fa0cefe7b61536fc", 0xd6}, {&(0x7f00000003c0)="e2f9f22bb9390213323c00ae5ae12785d58288c4a5d035a238a8bb507f5b5b46c29c03a37281de7e091be82f80f8575c471acbe426e4d3e141a9ed592eaa3cec301db5371a1f67efbd6b0aead732e362e78a3a99b303b3d2442afb647ed4f6b44ac251caf4667a6134a1dba9a03487ae106386badacf26b5735e232d218d", 0x7e}, {&(0x7f0000000640)="f68759ad3e0d9906b4698b602c2a189c008558b60d3eadd6c3e8116e6eda7800c1ba4d72f1e6ffbcd61d53c3cf1c6e8ad06b573f66252a2b3dd08480f42c81146c98a4181b4e61cde07136538c805f4f81d6e0547abf0ea795252aaceb13ac9780cbc6075f55880edbb6782bb8802ce4c38929bb7234ddc4711ffdc74f34aed02f4a06027ff0eb00df7bc7cfa2df549dd2a5f24a178b205a160214a442a192e89d0be6dc", 0xa4}], 0x4, &(0x7f0000000700)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x43, [@empty, @private=0xa010101]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x38}, 0x80) (async) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="5f28b4b2c7ea2fd424f75b7a7cf79852f4113c40061f0a9699c3b2c6144aa49c4379a118590651e150c2cadc", 0x2c}, {&(0x7f0000000540)="e057c2ee4dd03c1144464ac623def31c4ea63f362f22644eff0e3dadcf44eb7f806944c9bb1adec2dcd63ce7563503c63fbb32950b01c5aec737f949485d201e756b9b62c62cda4e94f1daa0efa4c720165051c2cec876836e0abab761f7f3e7156506deb7bcf4165975594ddc0d07be05f468482842b8bfa9853bfb980db2ed03e604b9877586f4fb49c76a914c7441ea65bd18fb314da782f44a8631dbf450a3a0dd31a7fce06dce006545cc0875042066eebe8426b4a1e32d5f19a15e485f2d09af301e45a73af983bb32c4b1fa0cefe7b61536fc", 0xd6}, {&(0x7f00000003c0)="e2f9f22bb9390213323c00ae5ae12785d58288c4a5d035a238a8bb507f5b5b46c29c03a37281de7e091be82f80f8575c471acbe426e4d3e141a9ed592eaa3cec301db5371a1f67efbd6b0aead732e362e78a3a99b303b3d2442afb647ed4f6b44ac251caf4667a6134a1dba9a03487ae106386badacf26b5735e232d218d", 0x7e}, {&(0x7f0000000640)="f68759ad3e0d9906b4698b602c2a189c008558b60d3eadd6c3e8116e6eda7800c1ba4d72f1e6ffbcd61d53c3cf1c6e8ad06b573f66252a2b3dd08480f42c81146c98a4181b4e61cde07136538c805f4f81d6e0547abf0ea795252aaceb13ac9780cbc6075f55880edbb6782bb8802ce4c38929bb7234ddc4711ffdc74f34aed02f4a06027ff0eb00df7bc7cfa2df549dd2a5f24a178b205a160214a442a192e89d0be6dc", 0xa4}], 0x4, &(0x7f0000000700)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x43, [@empty, @private=0xa010101]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x38}, 0x80) 863.759624ms ago: executing program 1 (id=3040): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, r1, 0x4, 0x3}, 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x8, 0x3, 0x3, 0xfd}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000007500f4fff0ffffffbf91000000000000b70200000300000085000000ae000000b70000000000000095000000000000003604c9c0d734a6721cf547a7b1fd13fba7eb6545f66be890d72fed25a134361411863a8ff74f08a482ef0da055e930161e3437d6f4f8fe"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000340)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f00000000c0)={{0x6, @loopback, 0x4e23, 0x1, 'sh\x00', 0x2f, 0x5, 0x15}, {@empty, 0x4e21, 0x3, 0xffff, 0x7, 0x7}}, 0x44) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250600000008000d00080000000800010030"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0xd8, 0xd8, 0xffffffff, 0x0, 0xd8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e23, 0x4e20], [0x4e21, 0x4e20], 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @broadcast, @local, @icmp_id=0x66, @port=0x4e23}}}}, {{@ip={@multicast2, @loopback, 0xffffff00, 0x0, 'netpci0\x00', 'ip6gre0\x00', {}, {}, 0x88, 0x0, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x15, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @gre_key=0xd1e, @icmp_id=0x66}}}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0xff, 0x0, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', {}, {}, 0x8, 0x0, 0x26}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @gre_key=0xd4e3, @gre_key=0x4}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x5c, 0x0, 0xb36a, 0x3, 0x0, 0x2}}, @common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xa, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @icmp_id=0x67, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e22, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x0, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 556.770869ms ago: executing program 2 (id=3041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 419.530303ms ago: executing program 2 (id=3042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}}, 0xd, 0x0, 0x45, 0xc0000002, 0x50, 0x401, 0x8}, &(0x7f0000000500)=0x9c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x4000b}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'wg2\x00'}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0x12, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 307.661763ms ago: executing program 5 (id=3043): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="087e19", 0x3}], 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040480}, 0x20000000) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000701fefffffffeffffff017c000000000000000d838006000600800a0000140002d48bae516d751983c48f80100014800c00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) 307.17325ms ago: executing program 3 (id=3044): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000340)="1b0000001a005f0400f9f4070009040180002000e98c0000000000", 0x1b) unshare(0x60480) (async) unshare(0x60480) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv4_getaddr={0x34, 0x16, 0x100, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x87, 0x2, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x1, 0xffff16c7, 0x1}}, @IFA_TARGET_NETNSID={0x8}]}, 0x34}}, 0x0) 171.536107ms ago: executing program 3 (id=3045): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 81.324343ms ago: executing program 2 (id=3046): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) (async) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) (async) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x8000}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES8=r1], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) (async, rerun: 64) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@generic={0x3, 0x7, 0x5}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6f}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x16}]}}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}}, 0x0) (async, rerun: 32) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f0000001080)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) 0s ago: executing program 1 (id=3047): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0xa, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x80800) accept$alg(r4, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x11, 0xa, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) unshare(0x22020400) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.5.1650'. [ 391.106525][T12478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.115596][T12455] lo speed is unknown, defaulting to 1000 [ 391.116449][T12480] Bluetooth: hci0: unsupported parameter 512 [ 391.127111][T12482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.137066][T12482] bond3: (slave bond0): Enslaving as an active interface with an up link [ 391.153624][T12480] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 391.296839][T12478] bond3 (unregistering): (slave bond0): Releasing backup interface [ 391.307298][T12478] bond3 (unregistering): Released all slaves [ 391.346410][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 391.377460][T12492] tipc: Enabling of bearer rejected, failed to enable media [ 391.405161][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 391.789320][T12508] netlink: 'syz.5.1656': attribute type 4 has an invalid length. [ 391.807210][T12502] vxcan1 speed is unknown, defaulting to 1000 [ 392.121455][T12521] sctp: [Deprecated]: syz.3.1659 (pid 12521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.121455][T12521] Use struct sctp_sack_info instead [ 392.224010][T12524] tipc: Enabled bearer , priority 0 [ 392.238656][T12524] syzkaller0: entered allmulticast mode [ 392.248546][T12524] tipc: Resetting bearer [ 392.265732][T12522] tipc: Disabling bearer [ 392.311754][T12501] vxcan1 speed is unknown, defaulting to 1000 [ 392.456659][T12528] netlink: 880 bytes leftover after parsing attributes in process `syz.5.1661'. [ 392.586340][T12531] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1662'. [ 392.603802][T12531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.632294][T12502] lo speed is unknown, defaulting to 1000 [ 392.691085][T12501] lo speed is unknown, defaulting to 1000 [ 392.761517][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1665'. [ 392.789492][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 393.335082][T12564] syz.5.1673: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 393.366120][T12564] CPU: 1 UID: 0 PID: 12564 Comm: syz.5.1673 Not tainted syzkaller #0 PREEMPT(full) [ 393.366148][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.366167][T12564] Call Trace: [ 393.366175][T12564] [ 393.366184][T12564] dump_stack_lvl+0x189/0x250 [ 393.366211][T12564] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.366232][T12564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.366271][T12564] warn_alloc+0x214/0x310 [ 393.366292][T12564] ? stack_depot_save_flags+0x40/0x860 [ 393.366317][T12564] ? __pfx_warn_alloc+0x10/0x10 [ 393.366340][T12564] ? kasan_save_track+0x3e/0x80 [ 393.366358][T12564] ? __kasan_kmalloc+0x93/0xb0 [ 393.366379][T12564] ? xsk_setsockopt+0x4dc/0x8d0 [ 393.366401][T12564] ? do_sock_setsockopt+0x17c/0x1b0 [ 393.366427][T12564] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 393.366450][T12564] ? do_syscall_64+0xfa/0xfa0 [ 393.366466][T12564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.366495][T12564] __vmalloc_node_range_noprof+0x125/0x12d0 [ 393.366556][T12564] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 393.366582][T12564] ? __kasan_kmalloc+0x93/0xb0 [ 393.366610][T12564] vmalloc_user_noprof+0xad/0xf0 [ 393.366630][T12564] ? xskq_create+0xbf/0x170 [ 393.366658][T12564] xskq_create+0xbf/0x170 [ 393.366686][T12564] xsk_init_queue+0xb0/0x110 [ 393.366714][T12564] xsk_setsockopt+0x4dc/0x8d0 [ 393.366739][T12564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 393.366764][T12564] ? __pfx_aa_sk_perm+0x10/0x10 [ 393.366785][T12564] ? aa_sock_opt_perm+0xff/0x1b0 [ 393.366809][T12564] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 393.366834][T12564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 393.366859][T12564] do_sock_setsockopt+0x17c/0x1b0 [ 393.366889][T12564] __x64_sys_setsockopt+0x13f/0x1b0 [ 393.366920][T12564] do_syscall_64+0xfa/0xfa0 [ 393.366936][T12564] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.366951][T12564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.366967][T12564] ? clear_bhb_loop+0x60/0xb0 [ 393.366986][T12564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.367008][T12564] RIP: 0033:0x7f4580b8efc9 [ 393.367026][T12564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.367042][T12564] RSP: 002b:00007f4581a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.367062][T12564] RAX: ffffffffffffffda RBX: 00007f4580de5fa0 RCX: 00007f4580b8efc9 [ 393.367076][T12564] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 393.367086][T12564] RBP: 00007f4580c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 393.367097][T12564] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.367108][T12564] R13: 00007f4580de6038 R14: 00007f4580de5fa0 R15: 00007ffe3685ea88 [ 393.367138][T12564] [ 393.367897][T12564] Mem-Info: [ 393.487894][T12568] netlink: 'syz.4.1671': attribute type 4 has an invalid length. [ 393.521472][T12564] active_anon:8202 inactive_anon:0 isolated_anon:0 [ 393.521472][T12564] active_file:3562 inactive_file:39992 isolated_file:0 [ 393.521472][T12564] unevictable:768 dirty:63 writeback:0 [ 393.521472][T12564] slab_reclaimable:11794 slab_unreclaimable:175882 [ 393.521472][T12564] mapped:32447 shmem:4363 pagetables:1157 [ 393.521472][T12564] sec_pagetables:0 bounce:0 [ 393.521472][T12564] kernel_misc_reclaimable:0 [ 393.521472][T12564] free:1240913 free_pcp:17005 free_cma:0 [ 393.661159][T12573] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1671'. [ 393.700536][T12564] Node 0 active_anon:32908kB inactive_anon:0kB active_file:14248kB inactive_file:159760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137988kB dirty:252kB writeback:0kB shmem:15916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12120kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.724476][T12573] team0: No ports can be present during mode change [ 393.741849][T12564] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.792800][T12564] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.838393][T12564] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 393.863906][T12564] Node 0 DMA32 free:1062444kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32908kB inactive_anon:0kB active_file:14248kB inactive_file:159760kB unevictable:1536kB writepending:252kB zspages:0kB present:3129332kB managed:2561632kB mlocked:0kB bounce:0kB free_pcp:44368kB local_pcp:24644kB free_cma:0kB [ 393.902560][T12564] lowmem_reserve[]: 0 0 1 1 1 [ 393.907316][T12564] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.947392][T12564] lowmem_reserve[]: 0 0 0 0 0 [ 393.953188][T12564] Node 1 Normal free:3885976kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23464kB local_pcp:11540kB free_cma:0kB [ 394.000717][T12569] team0: Port device team_slave_0 removed [ 394.001786][T12564] lowmem_reserve[]: 0 0 0 0 0 [ 394.012098][T12564] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 394.014957][T12569] team0: Failed to send options change via netlink (err -105) [ 394.058268][T12564] Node 0 DMA32: 3596*4kB (UM) 931*8kB (UE) 371*16kB (UME) 175*32kB (UME) 289*64kB (UME) 242*128kB (UME) 192*256kB (UME) 105*512kB (UM) 59*1024kB (UME) 3*2048kB (UME) 198*4096kB (UM) = 1063320kB [ 394.090794][T12569] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 394.098887][T12564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 394.130365][T12569] team0: Port device team_slave_1 removed [ 394.143970][T12569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.163591][T12564] Node 1 Normal: 232*4kB (UE) 67*8kB (UME) 50*16kB (UME) 62*32kB (UME) 34*64kB (UME) 3*128kB (UME) 7*256kB (UM) 5*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3885976kB [ 394.184176][T12569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 394.204396][T12564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.216548][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 394.228974][T12564] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 394.239557][T12564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.249666][T12564] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 394.259465][T12564] 47914 total pagecache pages [ 394.264318][T12564] 0 pages in swap cache [ 394.268953][T12564] Free swap = 124996kB [ 394.273131][T12564] Total swap = 124996kB [ 394.277430][T12564] 2097051 pages RAM [ 394.281591][T12564] 0 pages HighMem/MovableOnly [ 394.287580][T12564] 424553 pages reserved [ 394.291837][T12564] 0 pages cma reserved [ 394.496172][T12596] netlink: 'syz.3.1679': attribute type 10 has an invalid length. [ 394.538515][T12596] bond0: (slave wlan1): Opening slave failed [ 395.173967][T12634] syz_tun: entered allmulticast mode [ 395.275532][T12642] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 395.300619][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'. [ 395.847248][T12662] __nla_validate_parse: 1 callbacks suppressed [ 395.847266][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1696'. [ 395.980070][T12633] syz_tun: left allmulticast mode [ 397.036367][T12706] syz_tun: entered allmulticast mode [ 397.219303][T12709] vxcan1 speed is unknown, defaulting to 1000 [ 397.339476][T12721] netlink: 'syz.5.1711': attribute type 13 has an invalid length. [ 397.364468][T12723] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 397.378464][T12721] netlink: 'syz.5.1711': attribute type 17 has an invalid length. [ 397.468745][T12721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.518992][T12721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.709286][T12717] vxcan1 speed is unknown, defaulting to 1000 [ 397.716005][T12709] lo speed is unknown, defaulting to 1000 [ 397.848357][T12705] syz_tun: left allmulticast mode [ 398.227016][T12749] tipc: Enabling of bearer rejected, already enabled [ 398.257165][T12724] vxcan1 speed is unknown, defaulting to 1000 [ 398.507619][T12724] lo speed is unknown, defaulting to 1000 [ 398.577264][T12717] lo speed is unknown, defaulting to 1000 [ 398.974388][T12771] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1722'. [ 399.043229][T12767] !: renamed from dummy0 (while UP) [ 399.084848][T12769] team_slave_0: entered promiscuous mode [ 399.090797][T12769] team_slave_1: entered promiscuous mode [ 399.101502][T12769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.287456][T12767] vxcan1 speed is unknown, defaulting to 1000 [ 399.808886][T12803] netlink: 'syz.2.1729': attribute type 13 has an invalid length. [ 399.857485][T12803] netlink: 'syz.2.1729': attribute type 17 has an invalid length. [ 399.914426][T12803] dummy0: left promiscuous mode [ 399.971883][T12803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.007790][T12767] lo speed is unknown, defaulting to 1000 [ 400.132685][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1728'. [ 400.375558][T12827] !: renamed from dummy0 (while UP) [ 400.389129][T12828] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1735'. [ 400.410018][T12830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1735'. [ 400.445757][T12832] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1736'. [ 400.916047][T12850] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 401.166389][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1740'. [ 401.346957][T12865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1741'. [ 401.486080][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 401.900500][T12888] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1750'. [ 401.914518][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1751'. [ 401.920495][T12886] dvmrp0: entered allmulticast mode [ 401.993493][T12894] netlink: 'syz.5.1749': attribute type 6 has an invalid length. [ 402.449860][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 402.500980][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 402.584018][T12916] syz_tun: entered promiscuous mode [ 402.603509][T12916] macvtap1: entered promiscuous mode [ 402.620890][T12916] macvtap1: entered allmulticast mode [ 402.634082][T12916] syz_tun: entered allmulticast mode [ 402.666198][T12909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.689002][T12909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.720994][T12909] batman_adv: batadv0: Interface deactivated: 0! [ 402.739914][T12925] xt_limit: Overflow, try lower: 167772/2147483648 [ 402.753722][T12909] batman_adv: batadv0: Removing interface: 0! [ 403.248038][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1767'. [ 403.367087][T12958] netlink: 'syz.5.1770': attribute type 1 has an invalid length. [ 403.373349][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 403.385284][T12955] tipc: Enabled bearer , priority 0 [ 403.442973][T12955] syzkaller0: entered promiscuous mode [ 403.450667][T12955] syzkaller0: entered allmulticast mode [ 403.456902][T12955] tipc: Resetting bearer [ 403.573383][T12958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.607509][T12961] bond3: entered allmulticast mode [ 403.674249][T12966] bond3: (slave ip6gretap1): making interface the new active one [ 403.682747][T12966] ip6gretap1: entered allmulticast mode [ 403.692649][T12966] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 403.766880][ T50] tipc: Resetting bearer [ 403.776259][T12954] tipc: Resetting bearer [ 404.481382][ T5869] tipc: Node number set to 3653967904 [ 405.096308][T12954] tipc: Disabling bearer [ 405.117281][T12993] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1776'. [ 405.749991][T13037] netlink: 'syz.4.1788': attribute type 1 has an invalid length. [ 405.790220][T13031] vxcan1 speed is unknown, defaulting to 1000 [ 406.068649][T13053] netlink: 'syz.5.1795': attribute type 21 has an invalid length. [ 406.098650][T13053] netlink: 'syz.5.1795': attribute type 4 has an invalid length. [ 406.185594][T13058] __nla_validate_parse: 5 callbacks suppressed [ 406.185614][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 406.767035][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 406.776729][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 408.945612][T13031] lo speed is unknown, defaulting to 1000 [ 409.491095][T13117] netlink: 'syz.2.1809': attribute type 16 has an invalid length. [ 409.513653][T13117] netlink: 'syz.2.1809': attribute type 17 has an invalid length. [ 409.608423][T13117] team_slave_0: left promiscuous mode [ 409.614312][T13117] team_slave_1: left promiscuous mode [ 409.881906][T13117] tipc: Resetting bearer [ 409.900823][T13117] syz_tun: left allmulticast mode [ 409.997291][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1812'. [ 410.032511][ T3615] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.042846][ T3615] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 410.068599][ T3615] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 410.086168][ T3615] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.111490][ T3615] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 410.121135][ T3615] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 410.135348][ T3615] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.144847][ T3615] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 410.154885][ T3615] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 410.178362][ T3615] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.193415][ T3615] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 410.208503][ T3615] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 410.316403][T13141] netlink: 'syz.4.1815': attribute type 5 has an invalid length. [ 410.557838][T13161] siw: device registration error -23 [ 410.578841][T13146] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 410.622710][T13146] netlink: 'syz.3.1817': attribute type 3 has an invalid length. [ 410.642785][T13162] vxcan1 speed is unknown, defaulting to 1000 [ 410.658025][T13146] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1817'. [ 410.813243][T13182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1825'. [ 410.842071][T13182] IPv6: Can't replace route, no match found [ 410.990337][T13188] block nbd3: server does not support multiple connections per device. [ 411.004892][T13188] block nbd3: shutting down sockets [ 411.052844][T13175] vxcan1 speed is unknown, defaulting to 1000 [ 411.060919][T13162] lo speed is unknown, defaulting to 1000 [ 411.268549][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bfd3000: rx timeout, send abort [ 411.381510][T13175] lo speed is unknown, defaulting to 1000 [ 411.523300][T13206] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 411.752628][T13215] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1831'. [ 411.774716][T13215] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1831'. [ 411.776840][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bfd3000: abort rx timeout. Force session deactivation [ 412.082427][T13228] vxcan1 speed is unknown, defaulting to 1000 [ 412.293523][T13228] lo speed is unknown, defaulting to 1000 [ 412.327673][T13236] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20004 [ 412.560045][ T5199] udevd[5199]: worker [12696] terminated by signal 33 (Unknown signal 33) [ 412.968886][T13265] syzkaller0: entered promiscuous mode [ 412.976894][T13265] syzkaller0: entered allmulticast mode [ 412.994253][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1845'. [ 413.161897][T13266] netlink: 'syz.5.1846': attribute type 10 has an invalid length. [ 413.207128][T13272] gretap1: entered promiscuous mode [ 413.229020][T13266] veth1_vlan: entered allmulticast mode [ 413.244989][T13266] veth1_vlan: left promiscuous mode [ 413.267273][T13266] team0: Device veth1_vlan failed to register rx_handler [ 413.356813][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 413.407486][T13290] vxcan1 speed is unknown, defaulting to 1000 [ 413.458493][T13304] netlink: 'syz.3.1854': attribute type 3 has an invalid length. [ 413.466258][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1854'. [ 413.508037][T13304] netlink: 'syz.3.1854': attribute type 3 has an invalid length. [ 413.525263][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1854'. [ 413.537701][T13307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1855'. [ 413.750520][ T30] audit: type=1804 audit(1760896065.487:5): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1855" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1942 res=1 errno=0 [ 413.851426][ T30] audit: type=1800 audit(1760896065.487:6): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1855" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1942 res=0 errno=0 [ 414.075326][T13347] netlink: 'syz.3.1862': attribute type 2 has an invalid length. [ 414.089446][T13290] lo speed is unknown, defaulting to 1000 [ 414.182822][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1863'. [ 414.460167][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 60 seconds [ 414.471459][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 60 seconds [ 414.482868][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 60 seconds [ 414.495249][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 60 seconds [ 414.716143][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1869'. [ 414.751841][T13394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1869'. [ 414.996385][T13401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.284973][T13447] netlink: 'syz.2.1883': attribute type 32 has an invalid length. [ 416.357670][T13447] bond2: option coupled_control: invalid value (12) [ 416.411155][T13447] bond2 (unregistering): Released all slaves [ 416.742055][T13459] vxcan1 speed is unknown, defaulting to 1000 [ 417.117681][T13469] ip6gretap2: entered promiscuous mode [ 417.294999][T13459] lo speed is unknown, defaulting to 1000 [ 417.501766][T13485] __nla_validate_parse: 3 callbacks suppressed [ 417.501786][T13485] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1891'. [ 417.681423][T13492] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1895'. [ 418.089547][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'. [ 418.283706][T13510] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1900'. [ 418.702789][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1900'. [ 419.067135][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1903'. [ 419.086705][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 419.120451][T13525] bond5: entered promiscuous mode [ 419.126010][T13525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 419.324286][T13525] bond5 (unregistering): Released all slaves [ 419.328927][T13538] x_tables: duplicate underflow at hook 3 [ 419.396650][T13527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 419.404571][T13530] netlink: 'syz.2.1904': attribute type 12 has an invalid length. [ 419.426592][T13531] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 419.435472][T13531] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 419.577684][T13530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.637914][T13552] siw: device registration error -23 [ 419.760009][T13530] bond2 (unregistering): Released all slaves [ 419.784060][T13558] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 419.807601][T13546] vxcan1 speed is unknown, defaulting to 1000 [ 419.863035][T13558] xt_TCPMSS: Only works on TCP SYN packets [ 420.149444][T13563] team0 (unregistering): Port device team_slave_0 removed [ 420.158992][T13563] team0 (unregistering): Port device team_slave_1 removed [ 420.186765][T13546] lo speed is unknown, defaulting to 1000 [ 420.322705][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 420.445631][T13569] netlink: 'syz.1.1912': attribute type 13 has an invalid length. [ 420.454062][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 420.593874][T13574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1915'. [ 420.726840][T13573] vxcan1 speed is unknown, defaulting to 1000 [ 421.108691][T13573] lo speed is unknown, defaulting to 1000 [ 421.182593][T13599] tipc: Enabled bearer , priority 0 [ 421.834116][T13620] vxcan1 speed is unknown, defaulting to 1000 [ 422.275307][T13638] 8021q: adding VLAN 0 to HW filter on device bond6 [ 422.402235][T13645] bond6: option resend_igmp: invalid value (2878) [ 422.409495][T13645] bond6: option resend_igmp: allowed values 0 - 255 [ 422.455785][T13645] bond6 (unregistering): Released all slaves [ 422.576676][T13648] IPVS: Unknown mcast interface: batadv0 [ 422.762043][T13651] vxcan1 speed is unknown, defaulting to 1000 [ 422.770488][T13620] lo speed is unknown, defaulting to 1000 [ 423.051978][T13651] lo speed is unknown, defaulting to 1000 [ 423.060529][T13661] vxcan1 speed is unknown, defaulting to 1000 [ 423.079119][T13657] siw: device registration error -23 [ 423.455341][T13683] __nla_validate_parse: 12 callbacks suppressed [ 423.455359][T13683] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1940'. [ 423.533692][T13661] lo speed is unknown, defaulting to 1000 [ 424.744667][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 424.779473][T13711] netlink: 20824 bytes leftover after parsing attributes in process `syz.5.1947'. [ 425.390019][T13730] vlan5: entered promiscuous mode [ 425.397220][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 425.617734][T13752] netlink: 'syz.3.1954': attribute type 4 has an invalid length. [ 426.391488][T13792] vxcan1 speed is unknown, defaulting to 1000 [ 426.810951][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1966'. [ 426.869259][T13818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1966'. [ 426.957281][T13820] veth1: entered promiscuous mode [ 426.964263][T13792] lo speed is unknown, defaulting to 1000 [ 426.983753][T13815] lo speed is unknown, defaulting to 1000 [ 426.990231][T13815] lo speed is unknown, defaulting to 1000 [ 426.996825][T13815] lo speed is unknown, defaulting to 1000 [ 427.040342][T13815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 427.230929][T13815] lo speed is unknown, defaulting to 1000 [ 427.259162][T13815] lo speed is unknown, defaulting to 1000 [ 427.333376][T13815] lo speed is unknown, defaulting to 1000 [ 427.353677][T13815] lo speed is unknown, defaulting to 1000 [ 427.396947][T13815] lo speed is unknown, defaulting to 1000 [ 427.407556][T13815] lo speed is unknown, defaulting to 1000 [ 427.486807][T13852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1973'. [ 427.710017][T13855] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 427.721885][T13855] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 427.762722][T13359] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 427.774044][T13860] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 427.774408][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 427.790750][T13860] netlink: 'syz.3.1978': attribute type 10 has an invalid length. [ 427.795820][T13359] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 427.800761][ T5869] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 427.870809][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 427.880178][T13866] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 427.880201][T13866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1980'. [ 428.068942][ T5869] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 428.158892][ T5900] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 428.520014][T13893] syzkaller1: entered promiscuous mode [ 428.525607][T13893] syzkaller1: entered allmulticast mode [ 428.538252][T13893] __nla_validate_parse: 1 callbacks suppressed [ 428.538270][T13893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1986'. [ 428.969124][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1991'. [ 428.993147][T13909] netlink: 'syz.5.1991': attribute type 15 has an invalid length. [ 429.160667][T13912] tap0: tun_chr_ioctl cmd 1074025678 [ 429.166067][T13912] tap0: group set to 0 [ 429.760114][T13935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1996'. [ 430.163727][T13951] sctp: [Deprecated]: syz.3.1998 (pid 13951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.163727][T13951] Use struct sctp_sack_info instead [ 430.721815][T13960] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2001'. [ 431.128442][T13976] netlink: 'syz.2.2006': attribute type 10 has an invalid length. [ 431.137847][T13974] netlink: 'syz.3.2005': attribute type 4 has an invalid length. [ 431.191392][T13976] veth1_vlan: entered allmulticast mode [ 431.343839][T13981] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 431.441837][T13984] vxcan1 speed is unknown, defaulting to 1000 [ 431.467364][T13986] veth0: entered promiscuous mode [ 431.738651][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 431.830633][T13984] lo speed is unknown, defaulting to 1000 [ 431.838981][T13984] lo speed is unknown, defaulting to 1000 [ 432.094930][T13986] veth0: left promiscuous mode [ 433.228333][T14022] netlink: 'syz.4.2020': attribute type 9 has an invalid length. [ 433.236524][T14022] netlink: 448 bytes leftover after parsing attributes in process `syz.4.2020'. [ 433.295108][T14027] geneve5: entered promiscuous mode [ 433.337560][T14028] tipc: Enabling of bearer rejected, failed to enable media [ 433.923603][T13913] Set syz1 is full, maxelem 65536 reached [ 434.179049][T14055] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 434.210089][T14055] bond4: entered promiscuous mode [ 434.215644][T14055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.230539][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2028'. [ 434.359112][T14064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2030'. [ 434.483093][T14071] netlink: 'syz.3.2033': attribute type 12 has an invalid length. [ 434.514458][T14071] bond0: option primary_reselect: invalid value (5) [ 434.580689][T14071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2033'. [ 434.614047][T14073] syzkaller0: entered promiscuous mode [ 434.621580][T14073] syzkaller0: entered allmulticast mode [ 434.821559][T14085] xt_l2tp: unknown flags: 51 [ 435.496749][T14090] netlink: 'syz.2.2038': attribute type 83 has an invalid length. [ 436.379417][T14092] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2039'. [ 436.389582][T14092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2039'. [ 436.494859][T14094] netlink: 'syz.2.2039': attribute type 13 has an invalid length. [ 436.503489][T14094] netlink: 'syz.2.2039': attribute type 17 has an invalid length. [ 436.929899][T14094] syz_tun: left promiscuous mode [ 436.962331][T14094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.994077][ T5900] lo speed is unknown, defaulting to 1000 [ 437.008784][ T5900] syz1: Port: 1 Link ACTIVE [ 437.054281][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 437.113954][T14104] syz.3.2042: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 437.140556][T14104] CPU: 1 UID: 0 PID: 14104 Comm: syz.3.2042 Not tainted syzkaller #0 PREEMPT(full) [ 437.140582][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.140593][T14104] Call Trace: [ 437.140601][T14104] [ 437.140608][T14104] dump_stack_lvl+0x189/0x250 [ 437.140634][T14104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.140652][T14104] ? __pfx__printk+0x10/0x10 [ 437.140669][T14104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 437.140688][T14104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 437.140707][T14104] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 437.140728][T14104] warn_alloc+0x214/0x310 [ 437.140748][T14104] ? stack_depot_save_flags+0x40/0x860 [ 437.140770][T14104] ? __pfx_warn_alloc+0x10/0x10 [ 437.140790][T14104] ? kasan_save_track+0x3e/0x80 [ 437.140807][T14104] ? __kasan_kmalloc+0x93/0xb0 [ 437.140827][T14104] ? xsk_setsockopt+0x4dc/0x8d0 [ 437.140848][T14104] ? do_sock_setsockopt+0x17c/0x1b0 [ 437.140871][T14104] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 437.140893][T14104] ? do_syscall_64+0xfa/0xfa0 [ 437.140909][T14104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.140935][T14104] __vmalloc_node_range_noprof+0x125/0x12d0 [ 437.140985][T14104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 437.141009][T14104] ? __kasan_kmalloc+0x93/0xb0 [ 437.141031][T14104] vmalloc_user_noprof+0xad/0xf0 [ 437.141050][T14104] ? xskq_create+0xbf/0x170 [ 437.141075][T14104] xskq_create+0xbf/0x170 [ 437.141102][T14104] xsk_init_queue+0xb0/0x110 [ 437.141128][T14104] xsk_setsockopt+0x4dc/0x8d0 [ 437.141155][T14104] ? __pfx_xsk_setsockopt+0x10/0x10 [ 437.141181][T14104] ? __pfx_aa_sk_perm+0x10/0x10 [ 437.141202][T14104] ? aa_sock_opt_perm+0xff/0x1b0 [ 437.141225][T14104] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 437.141247][T14104] ? __pfx_xsk_setsockopt+0x10/0x10 [ 437.141270][T14104] do_sock_setsockopt+0x17c/0x1b0 [ 437.141298][T14104] __x64_sys_setsockopt+0x13f/0x1b0 [ 437.141325][T14104] do_syscall_64+0xfa/0xfa0 [ 437.141341][T14104] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.141357][T14104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.141374][T14104] ? clear_bhb_loop+0x60/0xb0 [ 437.141397][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.141413][T14104] RIP: 0033:0x7fcd72f8efc9 [ 437.141438][T14104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.141453][T14104] RSP: 002b:00007fcd73ef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 437.141473][T14104] RAX: ffffffffffffffda RBX: 00007fcd731e6090 RCX: 00007fcd72f8efc9 [ 437.141485][T14104] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000010 [ 437.141496][T14104] RBP: 00007fcd73011f91 R08: 0000000000000004 R09: 0000000000000000 [ 437.141508][T14104] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.141519][T14104] R13: 00007fcd731e6128 R14: 00007fcd731e6090 R15: 00007ffd6f6195d8 [ 437.141550][T14104] [ 437.141557][T14104] Mem-Info: [ 437.384329][T14118] netlink: 'syz.4.2044': attribute type 10 has an invalid length. [ 437.392246][T14104] active_anon:7017 inactive_anon:0 isolated_anon:0 [ 437.392246][T14104] active_file:3562 inactive_file:40010 isolated_file:0 [ 437.392246][T14104] unevictable:768 dirty:134 writeback:0 [ 437.392246][T14104] slab_reclaimable:12085 slab_unreclaimable:180879 [ 437.392246][T14104] mapped:31663 shmem:1497 pagetables:1183 [ 437.392246][T14104] sec_pagetables:0 bounce:0 [ 437.392246][T14104] kernel_misc_reclaimable:0 [ 437.392246][T14104] free:1215631 free_pcp:35041 free_cma:0 [ 437.493359][T14104] Node 0 active_anon:28168kB inactive_anon:0kB active_file:14248kB inactive_file:159832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130752kB dirty:536kB writeback:0kB shmem:4452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13580kB pagetables:4720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.525960][T14104] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.557210][T14104] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.588246][T14104] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 437.594225][T14104] Node 0 DMA32 free:960988kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28168kB inactive_anon:0kB active_file:14248kB inactive_file:159832kB unevictable:1536kB writepending:536kB zspages:0kB present:3129332kB managed:2561632kB mlocked:0kB bounce:0kB free_pcp:116924kB local_pcp:88236kB free_cma:0kB [ 437.628337][T14104] lowmem_reserve[]: 0 0 1 1 1 [ 437.633224][T14104] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.663386][T14104] lowmem_reserve[]: 0 0 0 0 0 [ 437.668202][T14104] Node 1 Normal free:3885976kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23500kB local_pcp:11956kB free_cma:0kB [ 437.701090][T14104] lowmem_reserve[]: 0 0 0 0 0 [ 437.705828][T14104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.719172][T14104] Node 0 DMA32: 1564*4kB (UM) 808*8kB (UME) 357*16kB (UME) 770*32kB (UME) 91*64kB (UM) 5*128kB (UME) 64*256kB (UME) 118*512kB (UME) 67*1024kB (U) 6*2048kB (UE) 184*4096kB (UM) = 960896kB [ 437.738580][T14104] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 437.750678][T14104] Node 1 Normal: 232*4kB (UE) 67*8kB (UME) 50*16kB (UME) 62*32kB (UME) 34*64kB (UME) 3*128kB (UME) 7*256kB (UM) 5*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3885976kB [ 437.769201][T14104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.779147][T14104] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 437.788659][T14104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.798723][T14104] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 437.808440][T14104] 45066 total pagecache pages [ 437.813127][T14104] 0 pages in swap cache [ 437.817265][T14104] Free swap = 124996kB [ 437.821741][T14104] Total swap = 124996kB [ 437.825898][T14104] 2097051 pages RAM [ 437.829836][T14104] 0 pages HighMem/MovableOnly [ 437.834616][T14104] 424553 pages reserved [ 437.839108][T14104] 0 pages cma reserved [ 438.151880][T14137] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001 [ 438.182828][T14138] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.2051'. [ 438.195367][T14133] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 438.239924][T14133] NCSI netlink: No device for ifindex 0 [ 438.267428][T14138] syzkaller1: entered promiscuous mode [ 438.311150][T14138] syzkaller1: entered allmulticast mode [ 438.525491][T14149] netlink: 'syz.2.2054': attribute type 13 has an invalid length. [ 438.533615][T14149] netlink: 'syz.2.2054': attribute type 17 has an invalid length. [ 438.561592][T14149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.770483][T14178] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 438.797531][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 438.809456][T14178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.891268][T14179] bridge_slave_1: left allmulticast mode [ 438.897320][T14179] bridge_slave_1: left promiscuous mode [ 438.907968][T14179] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.918591][T14179] bridge_slave_0: left promiscuous mode [ 438.924321][T14179] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.013622][T14188] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2062'. [ 439.023404][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2062'. [ 439.123759][T14193] netlink: 'syz.1.2063': attribute type 1 has an invalid length. [ 439.285277][T14204] vxcan1 speed is unknown, defaulting to 1000 [ 439.433493][T14210] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.2067'. [ 439.620466][T14219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2070'. [ 439.688281][T14218] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2070'. [ 439.734725][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'. [ 439.778423][T14227] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2069'. [ 440.063180][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 440.139609][T14204] lo speed is unknown, defaulting to 1000 [ 440.149188][T14204] lo speed is unknown, defaulting to 1000 [ 440.500231][T14245] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 440.529324][T14243] vxcan1 speed is unknown, defaulting to 1000 [ 440.922700][T14257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2078'. [ 440.943282][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'. [ 440.992437][T14243] lo speed is unknown, defaulting to 1000 [ 441.016203][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2080'. [ 441.031866][T14260] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 441.137824][T14260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.152265][T14243] lo speed is unknown, defaulting to 1000 [ 441.255170][T14266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.265412][T14266] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 441.279550][T14266] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 441.308038][T14273] sctp: [Deprecated]: syz.1.2082 (pid 14273) Use of int in maxseg socket option. [ 441.308038][T14273] Use struct sctp_assoc_value instead [ 441.592139][T14280] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2084'. [ 441.871768][T14286] vxcan1 speed is unknown, defaulting to 1000 [ 442.049040][T14293] tipc: Enabling of bearer rejected, failed to enable media [ 442.081224][ T30] audit: type=1800 audit(1760896093.817:7): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2086" name="memory.events" dev="tmpfs" ino=2139 res=0 errno=0 [ 442.154033][ T30] audit: type=1804 audit(1760896093.817:8): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2086" name="memory.events" dev="tmpfs" ino=2139 res=1 errno=0 [ 442.256949][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'. [ 442.336942][T14299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.350424][T14299] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 442.414630][T14286] lo speed is unknown, defaulting to 1000 [ 442.422358][T14286] lo speed is unknown, defaulting to 1000 [ 442.503800][T14303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.534152][T14303] bond6: (slave bond0): Enslaving as an active interface with an up link [ 442.747751][T14299] bond6 (unregistering): (slave bond0): Releasing backup interface [ 442.758369][T14299] bond6 (unregistering): Released all slaves [ 442.971562][T14338] vxcan1 speed is unknown, defaulting to 1000 [ 443.014744][T14341] xt_bpf: check failed: parse error [ 443.064228][T14346] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 443.078361][T14336] netlink: 'syz.3.2099': attribute type 10 has an invalid length. [ 443.087347][T14336] batadv0: entered promiscuous mode [ 443.092922][T14336] batadv0: entered allmulticast mode [ 443.101923][T14346] netlink: 'syz.5.2102': attribute type 21 has an invalid length. [ 443.110892][T14336] bridge0: port 3(batadv0) entered blocking state [ 443.117585][T14336] bridge0: port 3(batadv0) entered disabled state [ 443.124882][T14346] netlink: 'syz.5.2102': attribute type 22 has an invalid length. [ 443.132951][T14346] netlink: 'syz.5.2102': attribute type 23 has an invalid length. [ 443.143098][T14346] netlink: 'syz.5.2102': attribute type 25 has an invalid length. [ 443.154159][T14336] bridge0: port 3(batadv0) entered blocking state [ 443.160731][T14336] bridge0: port 3(batadv0) entered forwarding state [ 443.168188][T14346] netlink: 'syz.5.2102': attribute type 26 has an invalid length. [ 443.283356][T14348] syzkaller0: entered promiscuous mode [ 443.307275][T14348] syzkaller0: entered allmulticast mode [ 443.308628][T13355] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 443.322610][T13355] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 443.446470][T14338] lo speed is unknown, defaulting to 1000 [ 443.479712][T14357] netlink: 'syz.5.2105': attribute type 1 has an invalid length. [ 443.523792][T14357] bond6: entered promiscuous mode [ 443.531171][T14357] 8021q: adding VLAN 0 to HW filter on device bond6 [ 443.559469][T14338] lo speed is unknown, defaulting to 1000 [ 443.711086][T14362] 8021q: adding VLAN 0 to HW filter on device bond7 [ 443.744071][T14362] bond6: (slave bond7): making interface the new active one [ 443.754605][T14362] bond7: entered promiscuous mode [ 443.765617][T14362] bond6: (slave bond7): Enslaving as an active interface with an up link [ 443.929872][T14375] netlink: 'syz.5.2109': attribute type 8 has an invalid length. [ 443.995828][T14368] vxcan1 speed is unknown, defaulting to 1000 [ 444.215547][T14381] pim6reg1: entered allmulticast mode [ 444.385772][T14368] lo speed is unknown, defaulting to 1000 [ 444.430460][T14368] lo speed is unknown, defaulting to 1000 [ 444.539255][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 90 seconds [ 444.550144][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 90 seconds [ 444.562028][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 90 seconds [ 444.574609][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 90 seconds [ 444.904369][T14419] pim6reg99999999: entered allmulticast mode [ 444.989263][T14426] __nla_validate_parse: 12 callbacks suppressed [ 444.989281][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 445.152564][T14437] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2124'. [ 445.296448][T14437] vxcan1 speed is unknown, defaulting to 1000 [ 446.194995][T14437] lo speed is unknown, defaulting to 1000 [ 446.207462][T14437] lo speed is unknown, defaulting to 1000 [ 446.517850][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 446.944291][T14497] netlink: 'syz.2.2134': attribute type 2 has an invalid length. [ 446.952837][T14497] netlink: 'syz.2.2134': attribute type 4 has an invalid length. [ 446.962074][T14497] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2134'. [ 447.151723][T14502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.173654][T14505] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 447.774309][T14517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 447.839108][T14519] 8021q: adding VLAN 0 to HW filter on device bond6 [ 447.852204][T14519] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 447.870641][T14519] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 447.916657][T14521] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 447.932942][T14521] macsec0: entered promiscuous mode [ 447.955664][T14521] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 447.972214][T14521] macsec0: entered allmulticast mode [ 447.988190][T14521] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 448.200899][T14530] sctp: [Deprecated]: syz.4.2143 (pid 14530) Use of int in max_burst socket option deprecated. [ 448.200899][T14530] Use struct sctp_assoc_value instead [ 448.469114][T14539] vxcan1 speed is unknown, defaulting to 1000 [ 448.536699][T14550] SET target dimension over the limit! [ 449.009111][T14577] validate_nla: 4 callbacks suppressed [ 449.009130][T14577] netlink: 'syz.3.2153': attribute type 1 has an invalid length. [ 449.039552][T14577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.049486][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'. [ 449.070621][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'. [ 449.087215][T14582] erspan0: entered promiscuous mode [ 449.104237][T14582] gretap0: entered promiscuous mode [ 449.120171][T14582] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 449.140004][T14582] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 449.323241][T14539] lo speed is unknown, defaulting to 1000 [ 449.331997][T14539] lo speed is unknown, defaulting to 1000 [ 449.369459][T14602] netlink: 'syz.5.2160': attribute type 1 has an invalid length. [ 449.517510][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2164'. [ 450.113324][T14627] netlink: 'syz.5.2167': attribute type 1 has an invalid length. [ 450.163423][T14627] 8021q: adding VLAN 0 to HW filter on device bond8 [ 450.187669][T14626] bond8: (slave geneve2): making interface the new active one [ 450.249616][T14626] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 450.262562][T13358] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.289390][T13355] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.316182][T13355] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.357502][T13355] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.559880][T14642] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 450.588539][T14642] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 450.713306][T14647] vxcan1 speed is unknown, defaulting to 1000 [ 450.779667][T14651] !: renamed from dummy0 (while UP) [ 451.575088][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 451.628156][T14660] netlink: 'syz.2.2174': attribute type 5 has an invalid length. [ 451.672372][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 451.758494][T14660] netlink: 'syz.2.2174': attribute type 8 has an invalid length. [ 451.776785][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 451.915760][T14647] lo speed is unknown, defaulting to 1000 [ 451.960231][T14647] lo speed is unknown, defaulting to 1000 [ 452.241428][T14665] vxcan1 speed is unknown, defaulting to 1000 [ 453.203026][T14665] lo speed is unknown, defaulting to 1000 [ 453.243948][T14665] lo speed is unknown, defaulting to 1000 [ 453.636140][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2187'. [ 453.889949][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'. [ 454.446518][T14729] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 454.834936][T14740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2198'. [ 454.847729][T14740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2198'. [ 454.863227][T14740] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2198'. [ 455.151271][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 455.183350][T14751] tipc: Enabled bearer , priority 0 [ 455.203039][T14756] vxcan1 speed is unknown, defaulting to 1000 [ 455.237685][T14764] x_tables: duplicate entry at hook 2 [ 455.428421][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 455.558988][T14756] lo speed is unknown, defaulting to 1000 [ 455.567699][T14756] lo speed is unknown, defaulting to 1000 [ 455.569262][T14757] vxcan1 speed is unknown, defaulting to 1000 [ 455.894144][T14760] vxcan1 speed is unknown, defaulting to 1000 [ 455.894377][T14757] lo speed is unknown, defaulting to 1000 [ 455.929660][T14757] lo speed is unknown, defaulting to 1000 [ 456.232323][T14780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2208'. [ 456.261116][T14780] sctp: [Deprecated]: syz.1.2208 (pid 14780) Use of int in maxseg socket option. [ 456.261116][T14780] Use struct sctp_assoc_value instead [ 456.299568][ T7481] tipc: Node number set to 2435420356 [ 456.433860][T14768] vxcan1 speed is unknown, defaulting to 1000 [ 456.439305][T14760] lo speed is unknown, defaulting to 1000 [ 456.785291][T14787] dvmrp0: entered allmulticast mode [ 456.803226][T14775] vxcan1 speed is unknown, defaulting to 1000 [ 456.803282][T14760] lo speed is unknown, defaulting to 1000 [ 456.809472][T14768] lo speed is unknown, defaulting to 1000 [ 456.856108][T14768] lo speed is unknown, defaulting to 1000 [ 457.266209][T14793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2210'. [ 457.549102][T14775] lo speed is unknown, defaulting to 1000 [ 457.584935][T14797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2212'. [ 457.603483][T14775] lo speed is unknown, defaulting to 1000 [ 458.645402][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 458.687492][T14821] netlink: 'syz.3.2219': attribute type 11 has an invalid length. [ 458.701690][T14817] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 458.709073][T14821] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2219'. [ 459.714491][T14872] syzkaller1: entered promiscuous mode [ 459.741637][T14872] syzkaller1: entered allmulticast mode [ 459.772086][T14873] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2234'. [ 460.038241][T14886] tc_dump_action: action bad kind [ 460.480239][T14913] netlink: 'syz.5.2245': attribute type 6 has an invalid length. [ 460.499411][T14913] netlink: 'syz.5.2245': attribute type 12 has an invalid length. [ 460.518039][T14913] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2245'. [ 460.617929][T14919] netlink: 'syz.2.2247': attribute type 2 has an invalid length. [ 460.644495][T14919] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.2247'. [ 460.833383][T14929] x_tables: duplicate underflow at hook 2 [ 460.995342][T14937] netlink: 'syz.4.2251': attribute type 1 has an invalid length. [ 461.003392][T14937] netlink: 'syz.4.2251': attribute type 1 has an invalid length. [ 461.141191][T14952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2255'. [ 461.150532][T14952] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2255'. [ 461.336888][T14967] netlink: 'syz.2.2259': attribute type 10 has an invalid length. [ 461.345266][T14967] !: entered promiscuous mode [ 461.469695][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 461.591888][T14982] vxcan1 speed is unknown, defaulting to 1000 [ 461.657315][T14985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.721088][T14990] tipc: Enabling of bearer rejected, already enabled [ 461.732312][T14990] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 461.755120][T14990] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 461.801552][T14990] tipc: Resetting bearer [ 461.822693][T14995] tipc: Enabling of bearer rejected, already enabled [ 461.885186][T14982] lo speed is unknown, defaulting to 1000 [ 461.897572][T14982] lo speed is unknown, defaulting to 1000 [ 462.192515][T15003] pim6reg1: entered promiscuous mode [ 462.197850][T15003] pim6reg1: entered allmulticast mode [ 462.272134][T15022] __nla_validate_parse: 1 callbacks suppressed [ 462.272151][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2275'. [ 462.664062][T15036] vlan8: entered promiscuous mode [ 462.730474][T15045] Cannot find set identified by id 0 to match [ 462.826565][T15059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2286'. [ 462.973285][T15070] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2290'. [ 462.990293][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'. [ 463.092103][T15072] vxcan1 speed is unknown, defaulting to 1000 [ 463.152806][T15077] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2291'. [ 463.419685][T15072] lo speed is unknown, defaulting to 1000 [ 463.427425][T15072] lo speed is unknown, defaulting to 1000 [ 463.470390][T15095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2296'. [ 463.768513][T15114] delete_channel: no stack [ 463.773197][T15114] delete_channel: no stack [ 464.127660][T15135] sctp: [Deprecated]: syz.2.2309 (pid 15135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.127660][T15135] Use struct sctp_sack_info instead [ 464.146255][T15135] sctp: [Deprecated]: syz.2.2309 (pid 15135) Use of int in maxseg socket option. [ 464.146255][T15135] Use struct sctp_assoc_value instead [ 464.330021][T15139] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2310'. [ 464.495711][T15155] nbd: must specify a size in bytes for the device [ 464.584764][T15161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2316'. [ 464.643795][T15165] tipc: Failed to remove unknown binding: 66,1,1/2435420356:1478667539/1478667541 [ 464.669660][T15165] tipc: Failed to remove unknown binding: 66,1,1/2435420356:1478667539/1478667541 [ 464.694428][T15165] tipc: Failed to remove unknown binding: 66,1,1/2435420356:1478667539/1478667541 [ 464.966983][T15177] vxcan1 speed is unknown, defaulting to 1000 [ 465.113461][T15172] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 465.165303][T15185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2321'. [ 465.318201][T15192] set match dimension is over the limit! [ 465.534405][T15177] lo speed is unknown, defaulting to 1000 [ 465.542392][T15177] lo speed is unknown, defaulting to 1000 [ 465.648986][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 465.880494][T15208] netlink: 'syz.1.2329': attribute type 58 has an invalid length. [ 466.181398][T15217] vxcan1 speed is unknown, defaulting to 1000 [ 466.245572][T15220] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 466.316913][T15220] syzkaller0: entered promiscuous mode [ 466.339087][T15220] syzkaller0: entered allmulticast mode [ 466.549910][T15217] lo speed is unknown, defaulting to 1000 [ 466.583329][T15217] lo speed is unknown, defaulting to 1000 [ 467.457281][T15266] netlink: 'syz.1.2346': attribute type 1 has an invalid length. [ 467.648842][T15276] can: request_module (can-proto-0) failed. [ 467.815641][T12691] udevd[12691]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 468.073041][T15294] __nla_validate_parse: 4 callbacks suppressed [ 468.073059][T15294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2353'. [ 470.539172][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 471.218357][ T5199] udevd[5199]: worker [11242] /devices/virtual/block/nbd1 is taking a long time [ 472.628248][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 474.618499][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 120 seconds [ 474.629312][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 120 seconds [ 474.640488][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 120 seconds [ 474.651562][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 120 seconds [ 487.418315][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 504.700763][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 150 seconds [ 504.711635][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 150 seconds [ 504.722948][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 150 seconds [ 504.734245][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 150 seconds [ 534.778801][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 180 seconds [ 534.789682][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 180 seconds [ 534.800896][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 180 seconds [ 534.812076][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 180 seconds [ 537.302141][ T5199] udevd[5199]: worker [11242] /devices/virtual/block/nbd1 timeout; kill it [ 537.311373][ T5199] udevd[5199]: seq 20360 '/devices/virtual/block/nbd1' killed [ 552.698326][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 564.868256][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 210 seconds [ 564.879167][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 210 seconds [ 564.890257][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 210 seconds [ 564.901416][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 210 seconds [ 594.938694][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 240 seconds [ 594.949567][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 240 seconds [ 594.960760][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 240 seconds [ 594.971985][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 240 seconds [ 602.516039][T15330] netlink: 'syz.1.2361': attribute type 13 has an invalid length. [ 602.530285][T15330] netlink: 'syz.1.2361': attribute type 17 has an invalid length. [ 602.625518][T15330] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.654323][T15330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.671362][ T7486] lo speed is unknown, defaulting to 1000 [ 602.680194][T15332] tipc: Enabled bearer , priority 0 [ 602.688626][ T7486] syz0: Port: 1 Link ACTIVE [ 602.707928][T15332] syzkaller0: entered promiscuous mode [ 602.714048][T15332] syzkaller0: entered allmulticast mode [ 602.749107][T15332] tipc: Resetting bearer [ 602.757736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.766138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.782318][T15328] tipc: Resetting bearer [ 602.798764][T15328] tipc: Disabling bearer [ 602.836971][T15351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2365'. [ 602.867110][T15351] unsupported nlmsg_type 40 [ 602.954702][T15358] tipc: Enabled bearer , priority 0 [ 602.970785][T15358] syzkaller0: entered promiscuous mode [ 602.982115][T15358] syzkaller0: entered allmulticast mode [ 603.004622][T15358] tipc: Resetting bearer [ 603.033983][T15357] tipc: Resetting bearer [ 603.084486][T15357] tipc: Disabling bearer [ 603.103870][T15364] tipc: Invalid UDP bearer configuration [ 603.103918][T15364] tipc: Enabling of bearer rejected, failed to enable media [ 603.172900][T15366] vxcan1 speed is unknown, defaulting to 1000 [ 603.499621][T15383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2374'. [ 603.693710][T15393] sctp: [Deprecated]: syz.2.2377 (pid 15393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 603.693710][T15393] Use struct sctp_sack_info instead [ 603.721606][T15392] sctp: [Deprecated]: syz.2.2377 (pid 15392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 603.721606][T15392] Use struct sctp_sack_info instead [ 603.796619][T15366] lo speed is unknown, defaulting to 1000 [ 603.834937][T15366] lo speed is unknown, defaulting to 1000 [ 603.851531][T15396] vxcan1 speed is unknown, defaulting to 1000 [ 603.900318][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2380'. [ 604.056202][T15404] syzkaller1: entered promiscuous mode [ 604.072293][T15404] syzkaller1: entered allmulticast mode [ 604.180321][T15396] lo speed is unknown, defaulting to 1000 [ 604.220696][T15396] lo speed is unknown, defaulting to 1000 [ 604.343570][T15415] netlink: 'syz.2.2383': attribute type 39 has an invalid length. [ 604.435043][T15415] ip6tnl4: entered promiscuous mode [ 604.445876][T15415] ip6tnl4: entered allmulticast mode [ 604.744084][T15433] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 604.831516][T15436] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2389'. [ 605.256650][T15454] team0: Device vlan0 is already an upper device of the team interface [ 605.334892][T15460] netlink: 'syz.5.2395': attribute type 4 has an invalid length. [ 605.365135][T15457] team0: Device vlan0 is already an upper device of the team interface [ 605.856138][T15470] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.2397'. [ 605.881750][T15470] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 605.914392][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 605.924401][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 605.950784][T15477] bond7: option arp_all_targets: invalid value (3) [ 605.966625][T15477] bond7 (unregistering): Released all slaves [ 605.985620][T15488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2399'. [ 606.140181][T15493] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2403'. [ 606.240994][T15496] tipc: Enabling of bearer rejected, already enabled [ 606.292804][T15493] vxcan1 speed is unknown, defaulting to 1000 [ 606.309093][T15496] netlink: 'syz.2.2404': attribute type 21 has an invalid length. [ 606.359428][T15496] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2404'. [ 606.436806][T15506] bond7: option lacp_active: invalid value (7) [ 606.481349][T15506] bond7 (unregistering): Released all slaves [ 606.954631][T15530] netlink: 'syz.1.2413': attribute type 29 has an invalid length. [ 606.989289][T15493] lo speed is unknown, defaulting to 1000 [ 607.007210][T15493] lo speed is unknown, defaulting to 1000 [ 607.405048][T15556] tipc: Enabling of bearer rejected, already enabled [ 607.438011][T15559] tipc: Resetting bearer [ 607.538722][T15558] Bluetooth: MGMT ver 1.23 [ 607.562482][T15558] Bluetooth: hci0: unsupported parameter 512 [ 607.589051][T15558] Bluetooth: hci0: invalid length 11, exp 2 for type 19 [ 607.663732][T15566] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 607.702044][T15569] netlink: 'syz.4.2424': attribute type 11 has an invalid length. [ 607.942208][T15583] vxcan1 speed is unknown, defaulting to 1000 [ 608.187767][T15595] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 608.479522][T15594] vxcan1 speed is unknown, defaulting to 1000 [ 608.486632][T15583] lo speed is unknown, defaulting to 1000 [ 608.527588][T15583] lo speed is unknown, defaulting to 1000 [ 608.808946][T15625] syzkaller0: entered promiscuous mode [ 608.814466][T15625] syzkaller0: entered allmulticast mode [ 608.977965][T15629] tipc: Enabled bearer , priority 0 [ 608.995696][T15629] syzkaller0: entered promiscuous mode [ 609.011685][T15629] syzkaller0: entered allmulticast mode [ 609.028972][T15594] lo speed is unknown, defaulting to 1000 [ 609.036403][T15594] lo speed is unknown, defaulting to 1000 [ 609.686543][T15626] tipc: Resetting bearer [ 609.704705][T15626] tipc: Disabling bearer [ 609.824367][T15660] netlink: 'syz.1.2446': attribute type 39 has an invalid length. [ 610.458642][T15321] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 610.616134][T15667] netlink: 'syz.3.2447': attribute type 1 has an invalid length. [ 610.624734][T15667] __nla_validate_parse: 5 callbacks suppressed [ 610.624750][T15667] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2447'. [ 611.271364][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'. [ 611.283220][T15675] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2449'. [ 611.587922][T15697] vxcan1 speed is unknown, defaulting to 1000 [ 611.607193][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 611.644420][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2456'. [ 611.676563][T15699] netlink: 'syz.3.2456': attribute type 13 has an invalid length. [ 611.701956][T15699] netlink: 'syz.3.2456': attribute type 11 has an invalid length. [ 611.730208][T15707] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2456'. [ 612.010343][T15697] lo speed is unknown, defaulting to 1000 [ 612.018833][T15697] lo speed is unknown, defaulting to 1000 [ 612.040985][T15722] batadv_slave_0: entered promiscuous mode [ 612.062626][T15722] batadv_slave_0: left promiscuous mode [ 612.583336][T15761] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2468'. [ 612.833880][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 612.843149][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 613.058258][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'. [ 613.073183][T15749] netlink: 'syz.5.2466': attribute type 1 has an invalid length. [ 613.254373][T15770] veth1_macvtap: left promiscuous mode [ 613.564034][T15808] ªªªªªªZ7nz>RAÌ: renamed from lo [ 613.583091][T15805] netlink: 'syz.5.2479': attribute type 29 has an invalid length. [ 613.700446][T15815] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 613.708773][T15815] netlink: 'syz.3.2482': attribute type 2 has an invalid length. [ 614.003935][T15832] netlink: 'syz.1.2486': attribute type 13 has an invalid length. [ 614.018434][T15832] netlink: 'syz.1.2486': attribute type 17 has an invalid length. [ 614.087786][T15832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.114588][T15833] netlink: 'syz.5.2485': attribute type 12 has an invalid length. [ 614.253892][T15845] vxcan1 speed is unknown, defaulting to 1000 [ 614.420227][T15856] netlink: 'syz.2.2493': attribute type 30 has an invalid length. [ 614.580381][T15856] bond5: option arp_missed_max: invalid value (0) [ 614.610621][T15856] bond5: option arp_missed_max: allowed values 1 - 255 [ 614.670416][T15856] bond5 (unregistering): Released all slaves [ 614.773517][T15845] lo speed is unknown, defaulting to 1000 [ 614.774058][T15864] netlink: 'syz.1.2491': attribute type 12 has an invalid length. [ 614.795673][T15845] lo speed is unknown, defaulting to 1000 [ 614.996479][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 615.231132][T15887] netlink: 'syz.5.2498': attribute type 13 has an invalid length. [ 615.374702][T15887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.433543][ T30] audit: type=1800 audit(1760896267.157:9): pid=15881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2497" name="memory.events" dev="tmpfs" ino=2650 res=0 errno=0 [ 615.551352][T15890] vxcan1 speed is unknown, defaulting to 1000 [ 615.670147][T15895] dvmrp8: entered allmulticast mode [ 615.731759][T15902] tipc: Enabling of bearer rejected, already enabled [ 615.881333][T15904] syzkaller0: entered promiscuous mode [ 615.894772][T15904] syzkaller0: entered allmulticast mode [ 617.502091][T15890] lo speed is unknown, defaulting to 1000 [ 617.503105][T15898] vxcan1 speed is unknown, defaulting to 1000 [ 617.610080][T15890] lo speed is unknown, defaulting to 1000 [ 617.688903][T15935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.057231][T15898] lo speed is unknown, defaulting to 1000 [ 618.087828][T15898] lo speed is unknown, defaulting to 1000 [ 618.262123][T15963] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 618.269484][T15963] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 618.824655][T15993] Bluetooth: MGMT ver 1.23 [ 618.843212][T15993] __nla_validate_parse: 8 callbacks suppressed [ 618.843230][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'. [ 618.921038][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2525'. [ 619.105124][T16008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2527'. [ 619.119264][T15898] dvmrp8: left allmulticast mode [ 619.209298][T16008] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2527'. [ 619.333231][T16015] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2530'. [ 619.655506][T16042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2537'. [ 619.684879][T16045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 620.027540][T16068] IPv6: NLM_F_REPLACE set, but no existing node found! [ 620.155819][T16075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2547'. [ 620.498796][T16080] vxcan1 speed is unknown, defaulting to 1000 [ 621.019762][T16099] validate_nla: 2 callbacks suppressed [ 621.019781][T16099] netlink: 'syz.5.2550': attribute type 1 has an invalid length. [ 621.045520][T16099] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2550'. [ 621.081648][T16110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2554'. [ 621.223809][T16089] vxcan1 speed is unknown, defaulting to 1000 [ 621.251865][T16080] lo speed is unknown, defaulting to 1000 [ 621.279678][T16080] lo speed is unknown, defaulting to 1000 [ 621.307179][T16120] tipc: Enabling of bearer rejected, already enabled [ 621.641273][T16089] lo speed is unknown, defaulting to 1000 [ 621.650885][T16095] vxcan1 speed is unknown, defaulting to 1000 [ 621.661718][T16089] lo speed is unknown, defaulting to 1000 [ 622.160069][T16106] vxcan1 speed is unknown, defaulting to 1000 [ 622.315391][T16106] lo speed is unknown, defaulting to 1000 [ 622.323614][T16106] lo speed is unknown, defaulting to 1000 [ 622.324087][T16095] lo speed is unknown, defaulting to 1000 [ 622.337777][T16128] vxcan1 speed is unknown, defaulting to 1000 [ 622.560235][T16128] lo speed is unknown, defaulting to 1000 [ 622.585635][T16095] lo speed is unknown, defaulting to 1000 [ 622.737321][T16128] lo speed is unknown, defaulting to 1000 [ 623.550397][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 623.586789][T16155] tipc: Enabled bearer , priority 0 [ 623.632806][T16152] syzkaller0: entered promiscuous mode [ 623.649361][T16152] syzkaller0: entered allmulticast mode [ 623.717483][T16152] tipc: Resetting bearer [ 623.737686][T16152] tipc: Disabling bearer [ 625.023059][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 270 seconds [ 625.034343][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 270 seconds [ 625.046627][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 270 seconds [ 625.058648][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 270 seconds [ 625.232328][T16165] vxcan1 speed is unknown, defaulting to 1000 [ 625.667294][T16197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2578'. [ 625.706734][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 625.806395][T16199] vxcan1 speed is unknown, defaulting to 1000 [ 625.815378][T16165] lo speed is unknown, defaulting to 1000 [ 625.823650][T16165] lo speed is unknown, defaulting to 1000 [ 625.950117][T16208] syzkaller1: entered promiscuous mode [ 625.956056][T16208] syzkaller1: entered allmulticast mode [ 626.120055][T16199] lo speed is unknown, defaulting to 1000 [ 626.129344][T16199] lo speed is unknown, defaulting to 1000 [ 626.407165][T16222] tipc: Enabling of bearer rejected, already enabled [ 626.821904][T16238] vxcan1 speed is unknown, defaulting to 1000 [ 627.066315][T16257] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2591'. [ 627.128288][T16260] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2591'. [ 627.322078][T16269] tipc: Enabled bearer , priority 0 [ 627.347627][T16269] syzkaller0: entered promiscuous mode [ 627.378191][T16269] syzkaller0: entered allmulticast mode [ 627.470797][T16238] lo speed is unknown, defaulting to 1000 [ 627.504825][T16277] tipc: Resetting bearer [ 627.510960][T16276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2596'. [ 627.527248][T16238] lo speed is unknown, defaulting to 1000 [ 627.672743][T16268] tipc: Resetting bearer [ 627.736369][T16268] tipc: Disabling bearer [ 627.790735][T16291] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 628.324155][T16313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2603'. [ 628.562936][T16332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2607'. [ 628.617601][T16332] vlan3: entered promiscuous mode [ 628.623921][T16332] vlan3: entered allmulticast mode [ 628.634901][T16332] hsr_slave_1: entered allmulticast mode [ 628.682942][T16335] block nbd3: Unsupported socket: should be TCP or UNIX. [ 628.699190][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 628.710510][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2607'. [ 628.759162][T16339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2610'. [ 629.188996][T16375] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 629.215900][T16361] syzkaller1: entered promiscuous mode [ 629.235583][T16361] syzkaller1: entered allmulticast mode [ 629.456463][T16388] netlink: 'syz.1.2618': attribute type 6 has an invalid length. [ 629.537588][T16390] veth0: entered promiscuous mode [ 629.627110][T16390] netlink: 'syz.4.2619': attribute type 16 has an invalid length. [ 629.635495][T16390] netlink: 'syz.4.2619': attribute type 17 has an invalid length. [ 631.072161][T16409] openvswitch: netlink: Flow key attribute not present in set flow. [ 631.089978][T16390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.115972][T16405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.141087][T16390] veth0: left promiscuous mode [ 631.227308][T16414] __nla_validate_parse: 4 callbacks suppressed [ 631.227332][T16414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2623'. [ 631.354350][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 631.807554][T16449] tipc: Enabling of bearer rejected, already enabled [ 631.816630][T16449] tipc: Resetting bearer [ 631.841070][T16449] syzkaller0: left promiscuous mode [ 632.114276][T16462] bond8: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 632.128929][T16462] bond8 (unregistering): Released all slaves [ 632.245460][T16463] vxcan1 speed is unknown, defaulting to 1000 [ 632.514619][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 632.863450][T16488] ip6tnl4: entered promiscuous mode [ 632.869421][T16488] ip6tnl4: entered allmulticast mode [ 632.876743][T16488] team0: Device ip6tnl4 is up. Set it down before adding it as a team port [ 632.989423][T16463] lo speed is unknown, defaulting to 1000 [ 632.996925][T16463] lo speed is unknown, defaulting to 1000 [ 633.003178][T16472] vxcan1 speed is unknown, defaulting to 1000 [ 633.037047][T16498] vlan3: entered allmulticast mode [ 633.732096][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'. [ 633.783613][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'. [ 633.838406][T16516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.849554][T16516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.952334][T16472] lo speed is unknown, defaulting to 1000 [ 634.038814][T16472] lo speed is unknown, defaulting to 1000 [ 634.168524][T16528] tipc: Enabling of bearer rejected, already enabled [ 634.375455][T16535] ip6tnl5: entered promiscuous mode [ 634.521245][T16545] openvswitch: netlink: Geneve option length err (len 9744, max 255). [ 634.923864][T16559] tipc: Enabling of bearer rejected, already enabled [ 634.955105][T16560] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 634.986556][T16560] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 635.320761][T13354] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.348225][T13354] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.399176][T13354] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.407575][T16573] bond4: option mode: unable to set because the bond device has slaves [ 635.431055][T16573] bond4: (slave macvlan3): Enslaving as a backup interface with an up link [ 635.462896][T16573] vlan8: entered allmulticast mode [ 635.468384][T16573] bond4: entered allmulticast mode [ 635.473634][T16573] macvlan2: entered allmulticast mode [ 635.479258][T16573] bond0: entered allmulticast mode [ 635.484875][T16573] bond_slave_0: entered allmulticast mode [ 635.491427][T16573] bond_slave_1: entered allmulticast mode [ 635.497330][T16573] !: entered allmulticast mode [ 635.503033][T16573] macvlan3: entered allmulticast mode [ 635.508983][T16573] veth0_macvtap: entered allmulticast mode [ 635.722470][T16582] netlink: 'syz.4.2668': attribute type 4 has an invalid length. [ 635.749534][T16577] svc: failed to register nfsdv3 RPC service (errno 111). [ 635.759738][T16577] svc: failed to register nfsaclv3 RPC service (errno 111). [ 636.256296][T16591] : entered promiscuous mode [ 636.271587][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 636.353891][T16593] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 636.373889][T16593] smc: net device ip6erspan0 applied user defined pnetid SYZ2 [ 636.668955][T16611] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 636.973268][T16616] vxcan1 speed is unknown, defaulting to 1000 [ 637.265289][T16568] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 637.296905][T16616] lo speed is unknown, defaulting to 1000 [ 637.304738][T16616] lo speed is unknown, defaulting to 1000 [ 637.353301][T16568] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 637.490411][T16568] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 637.527318][T16646] erspan0: entered promiscuous mode [ 637.695005][T13330] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 637.723104][T13358] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 637.771347][T13355] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 637.895074][T13353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 638.142411][T16675] bond7: Unable to set down delay as MII monitoring is disabled [ 638.157767][T16675] bond7 (unregistering): Released all slaves [ 638.214938][T16683] vxcan1 speed is unknown, defaulting to 1000 [ 638.472419][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'. [ 638.713009][T16681] vxcan1 speed is unknown, defaulting to 1000 [ 638.719719][T16683] lo speed is unknown, defaulting to 1000 [ 638.728940][T16683] lo speed is unknown, defaulting to 1000 [ 638.767359][T16708] tipc: Enabling of bearer rejected, failed to enable media [ 638.782544][T16705] sctp: [Deprecated]: syz.3.2700 (pid 16705) Use of int in maxseg socket option. [ 638.782544][T16705] Use struct sctp_assoc_value instead [ 638.811092][T16705] netlink: 4616 bytes leftover after parsing attributes in process `syz.3.2700'. [ 638.835480][T16705] openvswitch: netlink: Message has 5 unknown bytes. [ 639.007023][T16681] lo speed is unknown, defaulting to 1000 [ 639.014864][T16681] lo speed is unknown, defaulting to 1000 [ 639.124126][T16716] netlink: 'syz.2.2705': attribute type 15 has an invalid length. [ 639.233055][T16721] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 639.291547][T16723] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 639.511529][T16723] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 639.722751][T16738] syzkaller0: entered promiscuous mode [ 639.733544][T16738] syzkaller0: entered allmulticast mode [ 639.760850][T16734] syzkaller1: entered promiscuous mode [ 639.766372][T16734] syzkaller1: entered allmulticast mode [ 639.946410][T16741] bond7: option arp_validate: invalid value (18446744073491447809) [ 639.956186][T16741] bond7 (unregistering): Released all slaves [ 640.026188][T16749] netlink: 'syz.5.2712': attribute type 1 has an invalid length. [ 640.248026][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2715'. [ 640.294267][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 640.295481][T16768] netlink: 'syz.3.2718': attribute type 33 has an invalid length. [ 640.314702][T16768] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2718'. [ 640.465046][T16781] syz_tun: entered promiscuous mode [ 640.477912][T16781] macsec0: entered allmulticast mode [ 640.508415][T16781] syz_tun: entered allmulticast mode [ 640.532647][T16781] syz_tun: left allmulticast mode [ 640.538169][T16781] syz_tun: left promiscuous mode [ 640.598664][T16788] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2724'. [ 640.613605][T16792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2725'. [ 640.631388][T16797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2727'. [ 640.773598][T16809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2731'. [ 641.065784][T16823] netlink: 'syz.1.2736': attribute type 6 has an invalid length. [ 641.088128][T16823] netlink: 'syz.1.2736': attribute type 5 has an invalid length. [ 641.119846][T16823] netlink: 'syz.1.2736': attribute type 4 has an invalid length. [ 641.132109][ T7481] lo speed is unknown, defaulting to 1000 [ 641.137861][ T7481] syz0: Port: 1 Link DOWN [ 641.143658][T16823] netlink: 'syz.1.2736': attribute type 4 has an invalid length. [ 641.152220][T16825] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.175723][ T7481] lo speed is unknown, defaulting to 1000 [ 641.176835][T16830] syzkaller0: entered promiscuous mode [ 641.188149][ T7481] syz0: Port: 1 Link ACTIVE [ 641.397075][T16844] syzkaller1: entered promiscuous mode [ 641.428319][T16844] syzkaller1: entered allmulticast mode [ 641.528854][T16849] __nla_validate_parse: 6 callbacks suppressed [ 641.528873][T16849] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2742'. [ 641.565729][T16848] : entered promiscuous mode [ 641.610918][T16841] vxcan1 speed is unknown, defaulting to 1000 [ 641.627832][T16853] tipc: Enabled bearer , priority 0 [ 641.645334][T16853] syzkaller0: entered promiscuous mode [ 641.659059][T16853] syzkaller0: entered allmulticast mode [ 641.769717][T16853] tipc: Resetting bearer [ 641.842515][T16851] tipc: Resetting bearer [ 641.958863][T16851] tipc: Disabling bearer [ 642.221701][T16841] lo speed is unknown, defaulting to 1000 [ 642.229569][T16841] lo speed is unknown, defaulting to 1000 [ 642.484681][T16875] netlink: 508 bytes leftover after parsing attributes in process `syz.5.2749'. [ 642.516163][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 642.544991][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 642.822217][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2752'. [ 642.884223][T16888] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 643.112207][T16894] tipc: Trying to set illegal importance in message [ 643.232190][T16894] netlink: 'syz.4.2754': attribute type 2 has an invalid length. [ 643.453914][T16907] macvtap1: entered promiscuous mode [ 643.462744][T16907] veth1_to_hsr: entered promiscuous mode [ 643.470453][T16907] macvtap1: entered allmulticast mode [ 643.475917][T16907] veth1_to_hsr: entered allmulticast mode [ 643.543220][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2765'. [ 643.563055][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2765'. [ 643.565447][T16917] vxcan1 speed is unknown, defaulting to 1000 [ 643.583882][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2765'. [ 643.933832][T16917] lo speed is unknown, defaulting to 1000 [ 643.942242][T16917] lo speed is unknown, defaulting to 1000 [ 644.165648][T16955] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2771'. [ 644.434595][T16966] ip6t_srh: unknown srh invflags 4000 [ 644.504475][T16960] vxcan1 speed is unknown, defaulting to 1000 [ 644.695650][T16973] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2777'. [ 644.714531][T16973] nbd: illegal input index 65508 [ 644.733085][T16974] nbd: illegal input index 65508 [ 644.907482][T16960] lo speed is unknown, defaulting to 1000 [ 644.914747][T16960] lo speed is unknown, defaulting to 1000 [ 645.268631][T16994] vxcan1 speed is unknown, defaulting to 1000 [ 645.405700][T17000] ipt_ECN: cannot use operation on non-tcp rule [ 645.622827][T16994] lo speed is unknown, defaulting to 1000 [ 645.644739][T16994] lo speed is unknown, defaulting to 1000 [ 646.054075][T17028] vxcan1 speed is unknown, defaulting to 1000 [ 646.521653][T17028] lo speed is unknown, defaulting to 1000 [ 646.531928][T17028] lo speed is unknown, defaulting to 1000 [ 646.836309][T17064] __nla_validate_parse: 5 callbacks suppressed [ 646.836328][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'. [ 646.914089][T17069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2801'. [ 646.944677][T17070] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2800'. [ 647.065889][T17070] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2800'. [ 647.207841][T17076] 8021q: adding VLAN 0 to HW filter on device bond9 [ 647.220881][T17076] team0: Port device bond9 added [ 647.295274][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2806'. [ 647.382385][T17089] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 647.545614][T17089] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 647.596162][T17091] netlink: 'syz.5.2808': attribute type 12 has an invalid length. [ 647.607728][T17095] svc: failed to register nfsdv3 RPC service (errno 111). [ 647.608055][T17103] tipc: Enabling of bearer rejected, already enabled [ 647.631061][T13330] tipc: Resetting bearer [ 647.632672][T17095] svc: failed to register nfsaclv3 RPC service (errno 111). [ 647.778425][T17111] netlink: 'syz.5.2812': attribute type 1 has an invalid length. [ 647.800452][T17111] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2812'. [ 647.913987][T17119] netlink: 'syz.3.2814': attribute type 9 has an invalid length. [ 647.926565][T17119] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2814'. [ 648.112596][T17123] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 648.150761][T17130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2815'. [ 648.251010][T17136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2820'. [ 648.261723][T17138] syzkaller1: entered promiscuous mode [ 648.267210][T17138] syzkaller1: entered allmulticast mode [ 648.424297][T17154] tipc: Enabling of bearer rejected, failed to enable media [ 648.468504][T17161] xt_cgroup: xt_cgroup: no path or classid specified [ 648.489406][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2827'. [ 648.659778][T17175] only policy match revision 0 supported [ 648.659800][T17175] unable to load match [ 648.683539][T17154] vxcan1 speed is unknown, defaulting to 1000 [ 649.084140][T17154] lo speed is unknown, defaulting to 1000 [ 649.085191][T17197] vxcan1 speed is unknown, defaulting to 1000 [ 649.105037][T17154] lo speed is unknown, defaulting to 1000 [ 649.162892][T17198] geneve2: entered promiscuous mode [ 649.168874][T17198] geneve2: entered allmulticast mode [ 649.269512][T17200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.281262][T17200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 649.490902][T17200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.512471][T17200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 649.721821][T17230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.842440][T17197] lo speed is unknown, defaulting to 1000 [ 649.850963][T17197] lo speed is unknown, defaulting to 1000 [ 649.942933][T17200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.953719][T17200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.046106][T17236] IPv6: Can't replace route, no match found [ 650.378338][T13330] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.389459][T13330] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.408023][T13330] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.418691][T13330] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.477107][T13358] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.497236][T13358] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.525906][T13355] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.544905][T13355] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 650.738137][T17267] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 651.277733][T17284] svc: failed to register nfsdv3 RPC service (errno 111). [ 651.341847][T17284] svc: failed to register nfsaclv3 RPC service (errno 111). [ 652.017912][T13358] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.045074][T13358] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.070271][T13358] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.114502][T13358] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.114760][T17318] __nla_validate_parse: 6 callbacks suppressed [ 652.114778][T17318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2866'. [ 652.586989][T17346] vxcan1 speed is unknown, defaulting to 1000 [ 652.701320][T17358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2876'. [ 652.731519][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2877'. [ 652.768972][T17360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2877'. [ 653.250721][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 653.275211][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 653.299473][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 653.307726][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 653.316394][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 653.360454][T17364] team0 (unregistering): Port device C removed [ 653.368761][T17364] team0 (unregistering): Port device team_slave_1 removed [ 653.377988][T17364] team0 (unregistering): Port device veth0_to_hsr removed [ 653.405385][T17346] lo speed is unknown, defaulting to 1000 [ 653.496229][T17373] team0: Device vlan4 is already an upper device of the team interface [ 653.520784][T17346] lo speed is unknown, defaulting to 1000 [ 653.523587][T17377] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2882'. [ 653.641893][T17382] siw: device registration error -23 [ 653.649296][T17370] vxcan1 speed is unknown, defaulting to 1000 [ 653.687305][T17386] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2886'. [ 653.705723][T13355] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.721727][T13355] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58381 - 0 [ 653.732310][T13355] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 653.907526][T17394] tipc: Enabling of bearer rejected, already enabled [ 653.920679][T17393] netlink: 'syz.1.2887': attribute type 1 has an invalid length. [ 653.928701][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'. [ 653.940705][T17393] netlink: 'syz.1.2887': attribute type 1 has an invalid length. [ 653.993401][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2887'. [ 654.009363][T17393] bond7: entered promiscuous mode [ 654.014777][T17393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 654.022350][T17370] lo speed is unknown, defaulting to 1000 [ 654.030272][T17370] lo speed is unknown, defaulting to 1000 [ 654.033252][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'. [ 654.102124][T13355] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.112542][T13355] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58381 - 0 [ 654.122689][T13355] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 654.221905][T17403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 654.308054][T13355] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.328358][T13355] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58381 - 0 [ 654.354527][T13355] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 654.494070][T13355] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.515308][T13355] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58381 - 0 [ 654.525967][T13355] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 654.537421][T17417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2893'. [ 654.620921][T17412] vxcan1 speed is unknown, defaulting to 1000 [ 654.849978][T17412] lo speed is unknown, defaulting to 1000 [ 654.857620][T17412] lo speed is unknown, defaulting to 1000 [ 654.924390][T17370] chnl_net:caif_netlink_parms(): no params data found [ 655.099812][ T56] block nbd1: Possible stuck request ffff88807eb00000: control (read@0,1024B). Runtime 300 seconds [ 655.110700][ T56] block nbd1: Possible stuck request ffff88807eb001c0: control (read@1024,1024B). Runtime 300 seconds [ 655.123438][ T56] block nbd1: Possible stuck request ffff88807eb00380: control (read@2048,1024B). Runtime 300 seconds [ 655.135764][ T56] block nbd1: Possible stuck request ffff88807eb00540: control (read@3072,1024B). Runtime 300 seconds [ 655.254673][T17370] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.263646][T17370] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.271685][T17370] bridge_slave_0: entered allmulticast mode [ 655.280606][T17370] bridge_slave_0: entered promiscuous mode [ 655.293143][ T3615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.305947][ T3615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.383653][T17370] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.402756][T17370] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.417794][T17370] bridge_slave_1: entered allmulticast mode [ 655.424831][T15321] Bluetooth: hci5: command tx timeout [ 655.433580][T17370] bridge_slave_1: entered promiscuous mode [ 655.472378][T13355] bridge0: port 3(batadv0) entered disabled state [ 655.499429][T13355] bridge_slave_1: left allmulticast mode [ 655.515422][T13355] bridge_slave_1: left promiscuous mode [ 655.530666][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.550594][T13355] bridge_slave_0: left allmulticast mode [ 655.556276][T13355] bridge_slave_0: left promiscuous mode [ 655.569066][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.225446][T13355] bond1 (unregistering): (slave gretap1): Releasing active interface [ 656.415672][T13355] team0: Port device geneve0 removed [ 656.449227][T13355] bridge0 (unregistering): left allmulticast mode [ 656.850491][T13355] bond0 (unregistering): left allmulticast mode [ 656.856761][T13355] bond_slave_0: left allmulticast mode [ 656.862655][T13355] bond_slave_1: left allmulticast mode [ 656.868258][T13355] !: left allmulticast mode [ 656.884626][T13355] bond4 (unregistering): (slave macvlan2): Removing an active aggregator [ 656.894429][T13355] bond4 (unregistering): (slave macvlan2): Releasing backup interface [ 656.902842][T13355] bond4 (unregistering): (slave macvlan2): the permanent HWaddr of slave - da:4b:74:5b:50:ab - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 656.921888][T13355] macvlan2 (unregistering): left allmulticast mode [ 656.992827][T13355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.002474][T13355] bond_slave_0: left promiscuous mode [ 657.009884][T13355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.022283][T13355] bond_slave_1: left promiscuous mode [ 657.030734][T13355] bond0 (unregistering): (slave 0!): Releasing backup interface [ 657.039406][T13355] !: left promiscuous mode [ 657.046081][T13355] bond0 (unregistering): Released all slaves [ 657.059605][T13355] bond1 (unregistering): Released all slaves [ 657.163404][T13355] bond2 (unregistering): Released all slaves [ 657.183677][T13355] bond3 (unregistering): Released all slaves [ 657.286405][T13355] bond4 (unregistering): (slave macvlan3): Removing an active aggregator [ 657.295624][T13355] bond4 (unregistering): (slave macvlan3): Releasing backup interface [ 657.304554][T13355] macvlan3: left allmulticast mode [ 657.309839][T13355] veth0_macvtap: left allmulticast mode [ 657.317045][T13355] bond4 (unregistering): Released all slaves [ 657.330736][T13355] bond5 (unregistering): Released all slaves [ 657.343289][T13355] bond6 (unregistering): Released all slaves [ 657.371726][T17370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.389653][T17370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.498716][T15321] Bluetooth: hci5: command tx timeout [ 657.543920][T17370] team0: Port device team_slave_0 added [ 657.553355][T17370] team0: Port device team_slave_1 added [ 657.610618][T17370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.625496][T17482] __nla_validate_parse: 4 callbacks suppressed [ 657.625514][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 657.642183][T17370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.669890][T17370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.688425][T17370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.696619][T17370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.728314][T17370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.728495][T17482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2907'. [ 657.764944][T17484] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2908'. [ 657.781015][T17484] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2908'. [ 657.799693][T17484] block nbd0: reconnected socket [ 657.814847][T17370] hsr_slave_0: entered promiscuous mode [ 657.830442][T17370] hsr_slave_1: entered promiscuous mode [ 657.837094][T17370] debugfs: 'hsr0' already exists in 'hsr' [ 657.843027][T17370] Cannot create hsr debugfs directory [ 657.889380][T15321] block nbd0: Receive control failed (result -32) [ 657.905995][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'. [ 657.915959][T17489] netlink: 'syz.4.2909': attribute type 5 has an invalid length. [ 657.924983][T17489] netlink: 'syz.4.2909': attribute type 8 has an invalid length. [ 657.935279][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'. [ 657.944939][T17490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2910'. [ 657.973237][T17489] geneve5: entered promiscuous mode [ 657.979413][T17489] geneve5: entered allmulticast mode [ 657.986513][T13330] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 657.986950][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2910'. [ 657.995358][T13330] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 657.995399][T13330] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 657.995442][T13330] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 658.079378][T17494] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2911'. [ 658.095859][T17489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 658.189347][ T30] audit: type=1804 audit(1760896309.867:10): pid=17496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2912" name="/newroot/571/cgroup.controllers" dev="tmpfs" ino=2944 res=1 errno=0 [ 658.212516][ T30] audit: type=1800 audit(1760896309.867:11): pid=17496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2912" name="cgroup.controllers" dev="tmpfs" ino=2944 res=0 errno=0 [ 658.242963][ T30] audit: type=1800 audit(1760896309.867:12): pid=17496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2912" name="cgroup.controllers" dev="tmpfs" ino=2944 res=0 errno=0 [ 658.404285][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 658.586941][T17516] netlink: 'syz.1.2918': attribute type 178 has an invalid length. [ 658.755651][T17524] bond10: entered promiscuous mode [ 658.901083][T17532] tipc: Enabled bearer , priority 0 [ 658.912405][T17532] syzkaller0: entered promiscuous mode [ 658.917900][T17532] syzkaller0: entered allmulticast mode [ 658.961585][T17532] tipc: Resetting bearer [ 658.999872][T17543] netlink: 'syz.2.2924': attribute type 1 has an invalid length. [ 659.009693][T17525] tipc: Resetting bearer [ 659.082393][T17525] tipc: Disabling bearer [ 659.132020][T13355] tipc: Disabling bearer [ 659.183888][T13355] tipc: Left network mode [ 659.289232][T13355] IPVS: stopping backup sync thread 6885 ... [ 659.347595][T17553] netlink: 'syz.1.2928': attribute type 1 has an invalid length. [ 659.446444][T17558] x_tables: ip_tables: osf match: only valid for protocol 6 [ 659.458303][T17553] 8021q: adding VLAN 0 to HW filter on device bond8 [ 659.539307][T17559] veth7: entered promiscuous mode [ 659.581828][T15321] Bluetooth: hci5: command tx timeout [ 659.616883][T17555] bond8: (slave ip6gretap2): making interface the new active one [ 659.702196][T17555] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 659.728386][T17553] erspan0: entered allmulticast mode [ 659.803912][T17370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 659.866083][T17370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 659.908030][T17370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 659.920711][T17370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 660.225632][T17370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.281145][T17370] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.304803][T13330] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.312022][T13330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.388601][T13330] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.395791][T13330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.499111][T17587] vxcan1 speed is unknown, defaulting to 1000 [ 660.655018][T17595] tipc: Enabled bearer , priority 0 [ 660.665364][T17595] tipc: Resetting bearer [ 660.693867][T17594] tipc: Disabling bearer [ 661.493442][T17587] lo speed is unknown, defaulting to 1000 [ 661.659299][T15321] Bluetooth: hci5: command tx timeout [ 662.009753][T13355] hsr_slave_0: left promiscuous mode [ 662.023647][T13355] hsr_slave_1: left promiscuous mode [ 662.036094][T13355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.048532][T13355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.056706][T13355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.070907][T13355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.109035][T13355] veth0_macvtap: left promiscuous mode [ 662.129854][T13355] veth1_vlan: left promiscuous mode [ 662.141638][T13355] veth0_vlan: left promiscuous mode [ 662.358933][T13355] pim6reg (unregistering): left allmulticast mode [ 662.585815][T13355] ªªªªª (unregistering): left allmulticast mode [ 662.735107][T13355] team0 (unregistering): Port device team_slave_1 removed [ 662.781736][T13355] team0 (unregistering): Port device team_slave_0 removed [ 662.995509][T13359] smc: removing ib device syz2 [ 663.401437][T17628] bridge7: entered allmulticast mode [ 663.415206][ T5900] vxcan1 speed is unknown, defaulting to 1000 [ 663.425933][ T5900] syz2: Port: 1 Link DOWN [ 663.461443][T17370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.649023][T17641] tipc: Enabling of bearer rejected, already enabled [ 663.760288][T17370] veth0_vlan: entered promiscuous mode [ 663.799926][T17370] veth1_vlan: entered promiscuous mode [ 663.979861][T17370] veth0_macvtap: entered promiscuous mode [ 664.042874][T17370] veth1_macvtap: entered promiscuous mode [ 664.076941][T17659] __nla_validate_parse: 3 callbacks suppressed [ 664.076960][T17659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2949'. [ 664.440348][T17370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.473649][T17370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.515986][T17661] lo speed is unknown, defaulting to 1000 [ 664.551622][T13358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.561561][T13358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.668881][T13358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.715090][T13358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.185850][T17682] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2954'. [ 665.360569][T13330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.380313][T13330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.451690][T17682] lo speed is unknown, defaulting to 1000 [ 665.470639][T13354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.503135][T13354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.017055][T13355] IPVS: stop unused estimator thread 0... [ 666.252297][T17705] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.2960'. [ 666.483659][T17707] vlan3: entered promiscuous mode [ 666.497106][T17707] bond0: entered promiscuous mode [ 666.521510][T17709] netlink: 'syz.5.2962': attribute type 43 has an invalid length. [ 666.877417][T17737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2970'. [ 666.889580][T17737] netlink: 'syz.2.2970': attribute type 13 has an invalid length. [ 666.897451][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2970'. [ 666.942235][T17740] netlink: 'syz.3.2971': attribute type 2 has an invalid length. [ 666.953525][T17740] netlink: 'syz.3.2971': attribute type 11 has an invalid length. [ 666.962898][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 666.975691][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 666.998576][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 667.046555][T17742] delete_channel: no stack [ 667.355505][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'. [ 667.365281][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'. [ 667.539464][T17770] nbd3: detected capacity change from 0 to 127 [ 667.546328][T17771] block nbd0: reconnected socket [ 667.552056][T17771] nbd: socks must be embedded in a SOCK_ITEM attr [ 667.561886][ T5834] block nbd3: Receive control failed (result -104) [ 667.572645][ T5844] block nbd0: Receive control failed (result -32) [ 667.785678][T17783] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 668.140964][T17801] xt_cgroup: xt_cgroup: no path or classid specified [ 668.183094][T17809] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 668.357566][T17813] netlink: 'syz.2.2992': attribute type 83 has an invalid length. [ 668.615361][T17825] tipc: Enabled bearer , priority 0 [ 668.632929][T17825] syzkaller0: entered promiscuous mode [ 668.646807][T17825] syzkaller0: entered allmulticast mode [ 668.778842][ T5844] Bluetooth: hci5: command 0x0405 tx timeout [ 668.793096][T17826] tipc: Resetting bearer [ 668.805051][T17847] netlink: 'syz.2.2999': attribute type 3 has an invalid length. [ 668.856217][T17826] tipc: Disabling bearer [ 668.898743][T17845] lo speed is unknown, defaulting to 1000 [ 669.355634][T17867] openvswitch: netlink: Tunnel attr 246 out of range max 16 [ 669.982320][T17887] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 670.087013][T17889] __nla_validate_parse: 2 callbacks suppressed [ 670.087030][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'. [ 670.277810][T17902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3014'. [ 670.336911][T17902] netlink: 'syz.1.3014': attribute type 12 has an invalid length. [ 670.382147][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3015'. [ 670.399489][T17905] tipc: Started in network mode [ 670.415268][T17905] tipc: Node identity 9ec771b17dea, cluster identity 4711 [ 670.428435][T17907] netlink: 74 bytes leftover after parsing attributes in process `syz.3.3015'. [ 670.447883][T17905] tipc: Enabled bearer , priority 0 [ 670.454754][T17907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3015'. [ 670.473324][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 670.484438][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 670.499322][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 670.531215][T17906] lo speed is unknown, defaulting to 1000 [ 670.668668][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 670.676388][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.755213][T17905] tipc: Disabling bearer [ 670.874357][ T96] block nbd3: Connection timed out, retrying (0/1 alive) [ 670.882556][ T96] block nbd3: Connection timed out, retrying (0/1 alive) [ 670.890404][ T96] block nbd3: Connection timed out, retrying (0/1 alive) [ 670.897496][ T96] block nbd3: Connection timed out, retrying (0/1 alive) [ 670.904958][T17909] lo speed is unknown, defaulting to 1000 [ 670.912420][ T96] block nbd3: Dead connection, failed to find a fallback [ 670.921116][ T96] block nbd3: shutting down sockets [ 670.928619][ T96] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 670.938425][ T96] Buffer I/O error on dev nbd3, logical block 3, async page read [ 670.947282][ T96] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 670.957301][ T96] Buffer I/O error on dev nbd3, logical block 2, async page read [ 670.965568][ T96] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 670.975041][ T96] Buffer I/O error on dev nbd3, logical block 1, async page read [ 670.983434][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 670.992617][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 671.002048][T12691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.013705][T12691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 671.016611][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 671.022967][T12691] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.040656][T12691] Buffer I/O error on dev nbd3, logical block 1, async page read [ 671.049177][T12691] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.058329][T12691] Buffer I/O error on dev nbd3, logical block 2, async page read [ 671.066238][T12691] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.066991][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'. [ 671.075383][T12691] Buffer I/O error on dev nbd3, logical block 3, async page read [ 671.075586][T12691] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.102248][T12691] Buffer I/O error on dev nbd3, logical block 0, async page read [ 671.110735][T12691] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.120790][T12691] Buffer I/O error on dev nbd3, logical block 1, async page read [ 671.125581][T17928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3020'. [ 671.132568][T12691] ldm_validate_partition_table(): Disk read failed. [ 671.147944][T12691] Dev nbd3: unable to read RDB block 0 [ 671.155592][T12691] nbd3: unable to read partition table [ 671.162200][T17928] sch_fq: defrate 0 ignored. [ 671.175644][T12691] ldm_validate_partition_table(): Disk read failed. [ 671.202048][T12691] Dev nbd3: unable to read RDB block 0 [ 671.209849][T12691] nbd3: unable to read partition table [ 671.381689][T17936] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 671.395019][T17936] bond1 (unregistering): Released all slaves [ 671.609001][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 671.672950][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 671.704447][T17909] chnl_net:caif_netlink_parms(): no params data found [ 671.930536][T17948] lo speed is unknown, defaulting to 1000 [ 672.120574][T17909] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.147049][T17909] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.162662][T17909] bridge_slave_0: entered allmulticast mode [ 672.180874][T17909] bridge_slave_0: entered promiscuous mode [ 672.211591][T17909] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.226885][T17909] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.244770][T17909] bridge_slave_1: entered allmulticast mode [ 672.264918][T17909] bridge_slave_1: entered promiscuous mode [ 672.279628][T17966] netlink: 'syz.3.3029': attribute type 12 has an invalid length. [ 672.493330][T17974] IPVS: Unknown mcast interface: ipvlan1 [ 672.622640][T17909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.642503][T17909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.753915][T17909] team0: Port device team_slave_0 added [ 672.775921][T17909] team0: Port device team_slave_1 added [ 672.789692][ T5844] Bluetooth: hci2: command tx timeout [ 672.900098][T17909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.907078][T17909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.961707][T17909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.994426][T17986] lo speed is unknown, defaulting to 1000 [ 673.010653][T17909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.017614][T17909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.069561][T17909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.246066][T17909] hsr_slave_0: entered promiscuous mode [ 673.254628][T17909] hsr_slave_1: entered promiscuous mode [ 673.267583][T17909] debugfs: 'hsr0' already exists in 'hsr' [ 673.275263][T17909] Cannot create hsr debugfs directory [ 673.303878][T18001] lo speed is unknown, defaulting to 1000 [ 673.740697][T17909] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.768315][T17909] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 673.788591][T17909] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 673.923142][T17909] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.949986][T17909] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 673.960354][T17909] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 673.973603][T18008] x_tables: duplicate underflow at hook 1 [ 674.085879][T17909] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.101224][T18020] openvswitch: netlink: Flow key attr not present in new flow. [ 674.107714][T17909] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 674.135747][T17909] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 674.192405][T18017] [ 674.194760][T18017] ====================================================== [ 674.201861][T18017] WARNING: possible circular locking dependency detected [ 674.208896][T18017] syzkaller #0 Not tainted [ 674.213313][T18017] ------------------------------------------------------ [ 674.220324][T18017] syz.5.3043/18017 is trying to acquire lock: [ 674.226383][T18017] ffff888143b59988 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 674.235797][T18017] [ 674.235797][T18017] but task is already holding lock: [ 674.243165][T18017] ffff888143b59448 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 674.253415][T18017] [ 674.253415][T18017] which lock already depends on the new lock. [ 674.253415][T18017] [ 674.263807][T18017] [ 674.263807][T18017] the existing dependency chain (in reverse order) is: [ 674.272806][T18017] [ 674.272806][T18017] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 674.281411][T18017] lock_acquire+0x120/0x360 [ 674.286427][T18017] blk_alloc_queue+0x538/0x620 [ 674.291701][T18017] __blk_mq_alloc_disk+0x15c/0x340 [ 674.297329][T18017] nbd_dev_add+0x46c/0xae0 [ 674.302259][T18017] nbd_init+0x168/0x1f0 [ 674.306936][T18017] do_one_initcall+0x236/0x820 [ 674.312213][T18017] do_initcall_level+0x104/0x190 [ 674.317658][T18017] do_initcalls+0x59/0xa0 [ 674.322494][T18017] kernel_init_freeable+0x334/0x4b0 [ 674.328209][T18017] kernel_init+0x1d/0x1d0 [ 674.333058][T18017] ret_from_fork+0x4bc/0x870 [ 674.338160][T18017] ret_from_fork_asm+0x1a/0x30 [ 674.343440][T18017] [ 674.343440][T18017] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 674.350649][T18017] lock_acquire+0x120/0x360 [ 674.355671][T18017] fs_reclaim_acquire+0x72/0x100 [ 674.361117][T18017] __kmalloc_cache_node_noprof+0x45/0x6f0 [ 674.367343][T18017] create_worker+0x112/0x720 [ 674.372446][T18017] workqueue_prepare_cpu+0xe4/0x170 [ 674.378148][T18017] cpuhp_invoke_callback+0x445/0x860 [ 674.383941][T18017] _cpu_up+0x2c9/0x580 [ 674.388516][T18017] cpu_up+0x1d2/0x220 [ 674.393022][T18017] cpuhp_bringup_mask+0xb2/0x1a0 [ 674.398472][T18017] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 674.404788][T18017] bringup_nonboot_cpus+0x17/0x30 [ 674.410317][T18017] smp_init+0x32/0x110 [ 674.414894][T18017] kernel_init_freeable+0x316/0x4b0 [ 674.420594][T18017] kernel_init+0x1d/0x1d0 [ 674.425429][T18017] ret_from_fork+0x4bc/0x870 [ 674.430524][T18017] ret_from_fork_asm+0x1a/0x30 [ 674.435792][T18017] [ 674.435792][T18017] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 674.443508][T18017] lock_acquire+0x120/0x360 [ 674.448519][T18017] cpus_read_lock+0x42/0x160 [ 674.453615][T18017] static_key_slow_inc+0x12/0x30 [ 674.459055][T18017] nbd_genl_reconfigure+0x10d8/0x1a50 [ 674.465015][T18017] genl_family_rcv_msg_doit+0x215/0x300 [ 674.471066][T18017] genl_rcv_msg+0x60e/0x790 [ 674.476081][T18017] netlink_rcv_skb+0x208/0x470 [ 674.481365][T18017] genl_rcv+0x28/0x40 [ 674.485857][T18017] netlink_unicast+0x82f/0x9e0 [ 674.491131][T18017] netlink_sendmsg+0x805/0xb30 [ 674.496414][T18017] __sock_sendmsg+0x21c/0x270 [ 674.501604][T18017] ____sys_sendmsg+0x505/0x830 [ 674.506881][T18017] ___sys_sendmsg+0x21f/0x2a0 [ 674.512066][T18017] __x64_sys_sendmsg+0x19b/0x260 [ 674.517506][T18017] do_syscall_64+0xfa/0xfa0 [ 674.522511][T18017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.528912][T18017] [ 674.528912][T18017] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 674.536569][T18017] lock_acquire+0x120/0x360 [ 674.541648][T18017] __mutex_lock+0x187/0x1350 [ 674.546754][T18017] nbd_queue_rq+0x257/0xf10 [ 674.551777][T18017] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 674.557844][T18017] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 674.564699][T18017] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 674.571199][T18017] blk_mq_run_hw_queue+0x348/0x4f0 [ 674.576838][T18017] blk_mq_dispatch_list+0xd0c/0xe00 [ 674.582541][T18017] blk_mq_flush_plug_list+0x469/0x550 [ 674.588424][T18017] __blk_flush_plug+0x3d3/0x4b0 [ 674.593789][T18017] __submit_bio+0x2d3/0x5a0 [ 674.598798][T18017] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 674.604939][T18017] block_read_full_folio+0x599/0x830 [ 674.610731][T18017] filemap_read_folio+0x117/0x380 [ 674.616354][T18017] do_read_cache_folio+0x350/0x590 [ 674.621974][T18017] read_part_sector+0xb6/0x2b0 [ 674.627248][T18017] adfspart_check_ICS+0xa4/0xa50 [ 674.632690][T18017] bdev_disk_changed+0x75f/0x14b0 [ 674.638221][T18017] blkdev_get_whole+0x380/0x510 [ 674.643591][T18017] bdev_open+0x31e/0xd30 [ 674.648337][T18017] blkdev_open+0x457/0x600 [ 674.653256][T18017] do_dentry_open+0x953/0x13f0 [ 674.658529][T18017] vfs_open+0x3b/0x340 [ 674.663106][T18017] path_openat+0x2ee5/0x3830 [ 674.668206][T18017] do_filp_open+0x1fa/0x410 [ 674.673226][T18017] do_sys_openat2+0x121/0x1c0 [ 674.678416][T18017] __x64_sys_openat+0x138/0x170 [ 674.683781][T18017] do_syscall_64+0xfa/0xfa0 [ 674.688788][T18017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.695188][T18017] [ 674.695188][T18017] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 674.702388][T18017] lock_acquire+0x120/0x360 [ 674.707403][T18017] __mutex_lock+0x187/0x1350 [ 674.712499][T18017] nbd_queue_rq+0xc8/0xf10 [ 674.717421][T18017] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 674.723473][T18017] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 674.730313][T18017] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 674.736797][T18017] blk_mq_run_hw_queue+0x348/0x4f0 [ 674.742411][T18017] blk_mq_dispatch_list+0xd0c/0xe00 [ 674.748114][T18017] blk_mq_flush_plug_list+0x469/0x550 [ 674.753990][T18017] __blk_flush_plug+0x3d3/0x4b0 [ 674.759345][T18017] __submit_bio+0x2d3/0x5a0 [ 674.764352][T18017] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 674.770522][T18017] block_read_full_folio+0x599/0x830 [ 674.776312][T18017] filemap_read_folio+0x117/0x380 [ 674.781868][T18017] do_read_cache_folio+0x350/0x590 [ 674.787485][T18017] read_part_sector+0xb6/0x2b0 [ 674.792756][T18017] adfspart_check_ICS+0xa4/0xa50 [ 674.798200][T18017] bdev_disk_changed+0x75f/0x14b0 [ 674.803724][T18017] blkdev_get_whole+0x380/0x510 [ 674.809078][T18017] bdev_open+0x31e/0xd30 [ 674.813825][T18017] blkdev_open+0x457/0x600 [ 674.818748][T18017] do_dentry_open+0x953/0x13f0 [ 674.824016][T18017] vfs_open+0x3b/0x340 [ 674.828592][T18017] path_openat+0x2ee5/0x3830 [ 674.833684][T18017] do_filp_open+0x1fa/0x410 [ 674.838686][T18017] do_sys_openat2+0x121/0x1c0 [ 674.843871][T18017] __x64_sys_openat+0x138/0x170 [ 674.849229][T18017] do_syscall_64+0xfa/0xfa0 [ 674.854235][T18017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.860630][T18017] [ 674.860630][T18017] -> #1 (set->srcu){.+.+}-{0:0}: [ 674.867747][T18017] lock_sync+0xba/0x160 [ 674.872409][T18017] __synchronize_srcu+0x96/0x3a0 [ 674.877853][T18017] elevator_switch+0x12b/0x640 [ 674.883117][T18017] elevator_change+0x315/0x4c0 [ 674.888390][T18017] elevator_set_default+0x186/0x260 [ 674.894135][T18017] blk_register_queue+0x34e/0x3f0 [ 674.899668][T18017] __add_disk+0x677/0xd50 [ 674.904503][T18017] add_disk_fwnode+0xfc/0x480 [ 674.909690][T18017] nbd_dev_add+0x717/0xae0 [ 674.914611][T18017] nbd_init+0x168/0x1f0 [ 674.919279][T18017] do_one_initcall+0x236/0x820 [ 674.924556][T18017] do_initcall_level+0x104/0x190 [ 674.929995][T18017] do_initcalls+0x59/0xa0 [ 674.934826][T18017] kernel_init_freeable+0x334/0x4b0 [ 674.940530][T18017] kernel_init+0x1d/0x1d0 [ 674.945364][T18017] ret_from_fork+0x4bc/0x870 [ 674.950459][T18017] ret_from_fork_asm+0x1a/0x30 [ 674.955727][T18017] [ 674.955727][T18017] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 674.963528][T18017] validate_chain+0xb9b/0x2140 [ 674.968799][T18017] __lock_acquire+0xab9/0xd20 [ 674.973980][T18017] lock_acquire+0x120/0x360 [ 674.978989][T18017] __mutex_lock+0x187/0x1350 [ 674.984079][T18017] elevator_change+0x1e5/0x4c0 [ 674.989348][T18017] elevator_set_none+0x42/0xb0 [ 674.994617][T18017] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 675.000970][T18017] nbd_start_device+0x17f/0xb10 [ 675.006341][T18017] nbd_genl_connect+0x135b/0x18f0 [ 675.011881][T18017] genl_family_rcv_msg_doit+0x215/0x300 [ 675.017939][T18017] genl_rcv_msg+0x60e/0x790 [ 675.022954][T18017] netlink_rcv_skb+0x208/0x470 [ 675.028242][T18017] genl_rcv+0x28/0x40 [ 675.032735][T18017] netlink_unicast+0x82f/0x9e0 [ 675.038005][T18017] netlink_sendmsg+0x805/0xb30 [ 675.043277][T18017] __sock_sendmsg+0x21c/0x270 [ 675.048459][T18017] ____sys_sendmsg+0x505/0x830 [ 675.053817][T18017] ___sys_sendmsg+0x21f/0x2a0 [ 675.059007][T18017] __x64_sys_sendmsg+0x19b/0x260 [ 675.064445][T18017] do_syscall_64+0xfa/0xfa0 [ 675.069450][T18017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.075850][T18017] [ 675.075850][T18017] other info that might help us debug this: [ 675.075850][T18017] [ 675.086059][T18017] Chain exists of: [ 675.086059][T18017] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 675.086059][T18017] [ 675.099886][T18017] Possible unsafe locking scenario: [ 675.099886][T18017] [ 675.107321][T18017] CPU0 CPU1 [ 675.112669][T18017] ---- ---- [ 675.118016][T18017] lock(&q->q_usage_counter(io)#54); [ 675.123384][T18017] lock(fs_reclaim); [ 675.129870][T18017] lock(&q->q_usage_counter(io)#54); [ 675.137750][T18017] lock(&q->elevator_lock); [ 675.142326][T18017] [ 675.142326][T18017] *** DEADLOCK *** [ 675.142326][T18017] [ 675.150448][T18017] 6 locks held by syz.5.3043/18017: [ 675.155623][T18017] #0: ffffffff8f5459b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 675.163791][T18017] #1: ffffffff8f5457c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 675.172744][T18017] #2: ffff888024d771c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 675.184137][T18017] #3: ffff888024d770d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 675.195091][T18017] #4: ffff888143b59448 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 675.205703][T18017] #5: ffff888143b59480 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 675.216567][T18017] [ 675.216567][T18017] stack backtrace: [ 675.222441][T18017] CPU: 0 UID: 0 PID: 18017 Comm: syz.5.3043 Not tainted syzkaller #0 PREEMPT(full) [ 675.222471][T18017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 675.222487][T18017] Call Trace: [ 675.222493][T18017] [ 675.222500][T18017] dump_stack_lvl+0x189/0x250 [ 675.222518][T18017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.222532][T18017] ? __pfx__printk+0x10/0x10 [ 675.222547][T18017] ? print_lock_name+0xde/0x100 [ 675.222562][T18017] print_circular_bug+0x2ee/0x310 [ 675.222584][T18017] check_noncircular+0x134/0x160 [ 675.222606][T18017] validate_chain+0xb9b/0x2140 [ 675.222634][T18017] __lock_acquire+0xab9/0xd20 [ 675.222653][T18017] ? elevator_change+0x1e5/0x4c0 [ 675.222667][T18017] lock_acquire+0x120/0x360 [ 675.222683][T18017] ? elevator_change+0x1e5/0x4c0 [ 675.222702][T18017] __mutex_lock+0x187/0x1350 [ 675.222716][T18017] ? elevator_change+0x1e5/0x4c0 [ 675.222731][T18017] ? xa_find_after+0xae/0x430 [ 675.222748][T18017] ? xa_find_after+0x402/0x430 [ 675.222761][T18017] ? elevator_change+0x1e5/0x4c0 [ 675.222775][T18017] ? xa_find_after+0xae/0x430 [ 675.222789][T18017] ? __pfx___mutex_lock+0x10/0x10 [ 675.222805][T18017] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 675.222826][T18017] elevator_change+0x1e5/0x4c0 [ 675.222842][T18017] elevator_set_none+0x42/0xb0 [ 675.222858][T18017] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 675.222884][T18017] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 675.222929][T18017] ? sysfs_add_file_mode_ns+0x259/0x300 [ 675.222955][T18017] nbd_start_device+0x17f/0xb10 [ 675.222977][T18017] ? device_create_file+0xf4/0x1c0 [ 675.222994][T18017] nbd_genl_connect+0x135b/0x18f0 [ 675.223011][T18017] ? __pfx_nbd_genl_connect+0x10/0x10 [ 675.223026][T18017] ? rcu_is_watching+0x15/0xb0 [ 675.223047][T18017] ? __nla_parse+0x40/0x60 [ 675.223063][T18017] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 675.223083][T18017] genl_family_rcv_msg_doit+0x215/0x300 [ 675.223101][T18017] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 675.223121][T18017] ? stack_trace_save+0x9c/0xe0 [ 675.223136][T18017] genl_rcv_msg+0x60e/0x790 [ 675.223153][T18017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.223167][T18017] ? __pfx_nbd_genl_connect+0x10/0x10 [ 675.223186][T18017] netlink_rcv_skb+0x208/0x470 [ 675.223204][T18017] ? __lock_acquire+0xab9/0xd20 [ 675.223221][T18017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.223236][T18017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.223260][T18017] ? down_read+0x1ad/0x2e0 [ 675.223275][T18017] genl_rcv+0x28/0x40 [ 675.223288][T18017] netlink_unicast+0x82f/0x9e0 [ 675.223308][T18017] ? __pfx_netlink_unicast+0x10/0x10 [ 675.223326][T18017] ? netlink_sendmsg+0x642/0xb30 [ 675.223344][T18017] ? skb_put+0x11b/0x210 [ 675.223364][T18017] netlink_sendmsg+0x805/0xb30 [ 675.223387][T18017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.223407][T18017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 675.223423][T18017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.223440][T18017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.223459][T18017] __sock_sendmsg+0x21c/0x270 [ 675.223476][T18017] ____sys_sendmsg+0x505/0x830 [ 675.223498][T18017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.223521][T18017] ? import_iovec+0x74/0xa0 [ 675.223540][T18017] ___sys_sendmsg+0x21f/0x2a0 [ 675.223553][T18017] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.223578][T18017] ? __fget_files+0x2a/0x420 [ 675.223594][T18017] ? __fget_files+0x3a0/0x420 [ 675.223614][T18017] __x64_sys_sendmsg+0x19b/0x260 [ 675.223627][T18017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.223645][T18017] ? do_syscall_64+0xbe/0xfa0 [ 675.223659][T18017] do_syscall_64+0xfa/0xfa0 [ 675.223671][T18017] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.223684][T18017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.223698][T18017] ? clear_bhb_loop+0x60/0xb0 [ 675.223713][T18017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.223727][T18017] RIP: 0033:0x7f4580b8efc9 [ 675.223740][T18017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.223753][T18017] RSP: 002b:00007f4581a8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.223767][T18017] RAX: ffffffffffffffda RBX: 00007f4580de5fa0 RCX: 00007f4580b8efc9 [ 675.223778][T18017] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000e [ 675.223788][T18017] RBP: 00007f4580c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 675.223796][T18017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.223805][T18017] R13: 00007f4580de6038 R14: 00007f4580de5fa0 R15: 00007ffe3685ea88 [ 675.223821][T18017] [ 675.669032][ T5844] Bluetooth: hci2: command tx timeout [ 675.710665][T18029] netlink: 'syz.1.3047': attribute type 1 has an invalid length. [ 675.747516][T17909] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.765672][T17909] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 675.779545][T17909] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 675.799137][ T5834] block nbd5: Receive control failed (result -32) [ 675.814624][ T5844] block nbd5: Receive control failed (result -32) [ 675.821629][T15321] block nbd5: Receive control failed (result -32) [ 675.839772][T18017] nbd5: detected capacity change from 0 to 127 [ 675.846882][T17878] block nbd5: Dead connection, failed to find a fallback [ 675.854138][T17878] block nbd5: shutting down sockets [ 675.867007][T17878] ldm_validate_partition_table(): Disk read failed. [ 675.875104][T17878] Dev nbd5: unable to read RDB block 0 [ 675.881999][T17878] nbd5: unable to read partition table [ 675.910093][T17909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 675.920950][T17909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 675.930491][T17909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 675.935291][T17878] ldm_validate_partition_table(): Disk read failed. [ 675.944741][T17878] blk_print_req_error: 234 callbacks suppressed [ 675.944757][T17878] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.946976][T17909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 675.958145][T17878] buffer_io_error: 234 callbacks suppressed [ 675.958160][T17878] Buffer I/O error on dev nbd5, logical block 0, async page read [ 675.981557][T17878] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.990699][T17878] Buffer I/O error on dev nbd5, logical block 1, async page read [ 675.999976][T17878] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.009963][T17878] Buffer I/O error on dev nbd5, logical block 2, async page read [ 676.019765][T17878] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.029799][T17878] Buffer I/O error on dev nbd5, logical block 3, async page read [ 676.034912][T17909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.044574][T17878] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.054278][T17878] Buffer I/O error on dev nbd5, logical block 0, async page read [ 676.056094][T17909] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.062269][T17878] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.074800][T13358] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.078688][T17878] Buffer I/O error on dev nbd5, logical block 1, async page read [ 676.085557][T13358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.093450][T17878] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.110850][T17878] Buffer I/O error on dev nbd5, logical block 2, async page read [ 676.119143][T17878] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.123536][T13358] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.130025][T17878] Buffer I/O error on dev nbd5, logical block 3, async page read [ 676.135261][T13358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.143970][T17878] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.159971][T17878] Buffer I/O error on dev nbd5, logical block 0, async page read [ 676.167813][T17878] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.176899][T17878] Buffer I/O error on dev nbd5, logical block 1, async page read [ 676.185693][T17878] Dev nbd5: unable to read RDB block 0 [ 676.192938][T17878] nbd5: unable to read partition table [ 676.264825][T17909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.382474][T17909] veth0_vlan: entered promiscuous mode [ 676.390972][T17909] veth1_vlan: entered promiscuous mode [ 676.410465][T17909] veth0_macvtap: entered promiscuous mode [ 676.419067][T17909] veth1_macvtap: entered promiscuous mode [ 676.431921][T17909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.445460][T17909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.457942][T13358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.470276][T13330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.479165][T13330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.488844][T13330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.511408][T17909] ieee80211 phy62: Selected rate control algorithm 'minstrel_ht' [ 676.532207][T13359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.534463][T17909] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht' [ 676.540757][T13359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.570714][T13330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.578784][T13330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.076438][T13330] tipc: Resetting bearer [ 677.206524][T13330] bond2 (unregistering): (slave gretap1): Releasing active interface [ 677.214739][T13330] gretap1 (unregistering): left allmulticast mode [ 677.241927][T13330] dvmrp1 (unregistering): left allmulticast mode [ 677.249661][T13330] dvmrp0 (unregistering): left allmulticast mode [ 677.577881][T13330] tipc: Disabling bearer [ 677.738492][T15321] Bluetooth: hci2: command tx timeout [ 677.845149][T13330] bond1 (unregistering): Released all slaves [ 677.856108][T13330] bond2 (unregistering): Released all slaves [ 677.864862][T13330] bond3 (unregistering): Released all slaves [ 677.963346][T13330] bond4 (unregistering): Released all slaves [ 677.972080][T13330] bond0 (unregistering): Released all slaves [ 678.080165][T13330] bond5 (unregistering): Released all slaves [ 678.186194][T13330] bond6 (unregistering): Released all slaves [ 678.195030][T13330] bond7 (unregistering): Released all slaves [ 678.255737][T13330] : left promiscuous mode [ 678.308758][T13330] tipc: Left network mode [ 678.319776][T13330] IPVS: stopping master sync thread 9823 ... [ 678.325925][T13330] IPVS: stopping backup sync thread 12723 ... [ 678.625903][T13330] mac80211_hwsim hwsim9 wlan0 (unregistering): left allmulticast mode [ 678.634131][T13330] mac80211_hwsim hwsim9 wlan0 (unregistering): left promiscuous mode [ 678.690456][T13330] hsr_slave_0: left promiscuous mode [ 678.696204][T13330] hsr_slave_1: left promiscuous mode [ 679.818598][T15321] Bluetooth: hci2: command tx timeout [ 680.698276][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 683.258373][ T31] INFO: task udevd:11242 blocked for more than 143 seconds. [ 683.265689][ T31] Not tainted syzkaller #0 [ 683.270919][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 683.279613][ T31] task:udevd state:D stack:22552 pid:11242 tgid:11242 ppid:5199 task_flags:0x400140 flags:0x00080003 [ 683.291742][ T31] Call Trace: [ 683.295034][ T31] [ 683.297961][ T31] __schedule+0x1798/0x4cc0 [ 683.302821][ T31] ? __pfx___schedule+0x10/0x10 [ 683.307935][ T31] ? schedule+0x91/0x360 [ 683.312215][ T31] schedule+0x165/0x360 [ 683.316361][ T31] io_schedule+0x80/0xd0 [ 683.320616][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 683.325902][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 683.331977][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 683.337539][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 683.342886][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 683.348259][ T31] do_read_cache_folio+0x1aa/0x590 [ 683.353437][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 683.359443][ T31] read_part_sector+0xb6/0x2b0 [ 683.364212][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 683.369672][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 683.375301][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 683.381304][ T31] bdev_disk_changed+0x75f/0x14b0 [ 683.386316][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 683.392044][ T31] ? wait_on_inode+0xc0/0x230 [ 683.396710][ T31] blkdev_get_whole+0x380/0x510 [ 683.401618][ T31] bdev_open+0x31e/0xd30 [ 683.405863][ T31] blkdev_open+0x457/0x600 [ 683.410654][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 683.415614][ T31] do_dentry_open+0x953/0x13f0 [ 683.420725][ T31] vfs_open+0x3b/0x340 [ 683.424785][ T31] ? path_openat+0x2ecd/0x3830 [ 683.429557][ T31] path_openat+0x2ee5/0x3830 [ 683.434134][ T31] ? __pfx_path_openat+0x10/0x10 [ 683.439082][ T31] do_filp_open+0x1fa/0x410 [ 683.443564][ T31] ? __lock_acquire+0xab9/0xd20 [ 683.448932][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 683.453951][ T31] ? _raw_spin_unlock+0x28/0x50 [ 683.458807][ T31] ? alloc_fd+0x64c/0x6c0 [ 683.463121][ T31] do_sys_openat2+0x121/0x1c0 [ 683.467780][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 683.473031][ T31] __x64_sys_openat+0x138/0x170 [ 683.477869][ T31] do_syscall_64+0xfa/0xfa0 [ 683.482629][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.488895][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 683.495068][ T31] ? clear_bhb_loop+0x60/0xb0 [ 683.499827][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.505723][ T31] RIP: 0033:0x7f2f8aca7407 [ 683.510861][ T31] RSP: 002b:00007fff9fdcbe10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 683.519334][ T31] RAX: ffffffffffffffda RBX: 00007f2f8b49c880 RCX: 00007f2f8aca7407 [ 683.527316][ T31] RDX: 00000000000a0800 RSI: 000055ab252b72d0 RDI: ffffffffffffff9c [ 683.535299][ T31] RBP: 000055ab252b6910 R08: 0000000000000000 R09: 0000000000000000 [ 683.543531][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ab252cee00 [ 683.551512][ T31] R13: 000055ab252c4190 R14: 0000000000000000 R15: 000055ab252cee00 [ 683.559518][ T31] [ 683.562594][ T31] INFO: lockdep is turned off. [ 683.567352][ T31] NMI backtrace for cpu 1 [ 683.567362][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 683.567373][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 683.567379][ T31] Call Trace: [ 683.567385][ T31] [ 683.567389][ T31] dump_stack_lvl+0x189/0x250 [ 683.567405][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.567414][ T31] ? __pfx__printk+0x10/0x10 [ 683.567426][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 683.567439][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 683.567451][ T31] ? __pfx__printk+0x10/0x10 [ 683.567461][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 683.567475][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 683.567487][ T31] watchdog+0xf60/0xfa0 [ 683.567500][ T31] ? watchdog+0x1e2/0xfa0 [ 683.567512][ T31] kthread+0x711/0x8a0 [ 683.567523][ T31] ? __pfx_watchdog+0x10/0x10 [ 683.567533][ T31] ? __pfx_kthread+0x10/0x10 [ 683.567542][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 683.567555][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.567563][ T31] ? __pfx_kthread+0x10/0x10 [ 683.567572][ T31] ret_from_fork+0x4bc/0x870 [ 683.567585][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 683.567597][ T31] ? __switch_to_asm+0x39/0x70 [ 683.567608][ T31] ? __switch_to_asm+0x33/0x70 [ 683.567617][ T31] ? __pfx_kthread+0x10/0x10 [ 683.567626][ T31] ret_from_fork_asm+0x1a/0x30 [ 683.567640][ T31] [ 683.567644][ T31] Sending NMI from CPU 1 to CPUs 0: [ 683.714045][ C0] NMI backtrace for cpu 0 [ 683.714063][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 683.714081][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 683.714090][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 683.714175][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 41 1c 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 683.714188][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 683.714203][ C0] RAX: 470907082acaac00 RBX: ffffffff8196bc07 RCX: 470907082acaac00 [ 683.714215][ C0] RDX: 0000000000000001 RSI: ffffffff8bc077c0 RDI: ffffffff8196bc07 [ 683.714227][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 683.714239][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9e0b70 [ 683.714250][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 683.714261][ C0] FS: 0000000000000000(0000) GS:ffff888125d0e000(0000) knlGS:0000000000000000 [ 683.714274][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.714285][ C0] CR2: 00007f590efb3000 CR3: 00000000420da000 CR4: 00000000003526f0 [ 683.714300][ C0] Call Trace: [ 683.714307][ C0] [ 683.714314][ C0] default_idle+0x13/0x20 [ 683.714330][ C0] default_idle_call+0x73/0xb0 [ 683.714347][ C0] do_idle+0x1e7/0x510 [ 683.714372][ C0] ? __pfx_do_idle+0x10/0x10 [ 683.714396][ C0] cpu_startup_entry+0x44/0x60 [ 683.714415][ C0] rest_init+0x2de/0x300 [ 683.714433][ C0] start_kernel+0x3ae/0x410 [ 683.714451][ C0] x86_64_start_reservations+0x24/0x30 [ 683.714472][ C0] x86_64_start_kernel+0x143/0x1c0 [ 683.714490][ C0] common_startup_64+0x13e/0x147 [ 683.714512][ C0] [ 683.715671][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 683.896794][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 683.905896][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 683.915943][ T31] Call Trace: [ 683.919220][ T31] [ 683.922136][ T31] dump_stack_lvl+0x99/0x250 [ 683.926720][ T31] ? __asan_memcpy+0x40/0x70 [ 683.931297][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.936483][ T31] ? __pfx__printk+0x10/0x10 [ 683.941064][ T31] vpanic+0x237/0x6d0 [ 683.945036][ T31] ? __pfx_vpanic+0x10/0x10 [ 683.949535][ T31] ? preempt_schedule_common+0x83/0xd0 [ 683.955293][ T31] panic+0xb9/0xc0 [ 683.959010][ T31] ? __pfx_panic+0x10/0x10 [ 683.963416][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 683.968780][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 683.974925][ T31] watchdog+0xf9f/0xfa0 [ 683.979075][ T31] ? watchdog+0x1e2/0xfa0 [ 683.983402][ T31] kthread+0x711/0x8a0 [ 683.987460][ T31] ? __pfx_watchdog+0x10/0x10 [ 683.992128][ T31] ? __pfx_kthread+0x10/0x10 [ 683.996712][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 684.001897][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 684.007080][ T31] ? __pfx_kthread+0x10/0x10 [ 684.011656][ T31] ret_from_fork+0x4bc/0x870 [ 684.016237][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 684.021343][ T31] ? __switch_to_asm+0x39/0x70 [ 684.026096][ T31] ? __switch_to_asm+0x33/0x70 [ 684.030847][ T31] ? __pfx_kthread+0x10/0x10 [ 684.035427][ T31] ret_from_fork_asm+0x1a/0x30 [ 684.040184][ T31] [ 684.043492][ T31] Kernel Offset: disabled [ 684.047797][ T31] Rebooting in 86400 seconds..