last executing test programs: 2m53.310868521s ago: executing program 3 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x9}, {0xa, 0x4e20, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}}, 0x0) 2m53.027229747s ago: executing program 3 (id=1432): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 2m52.780050384s ago: executing program 3 (id=1433): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000a40000009500230000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000100)={0x0, 0xf12c, [0x3, 0xfffffffffffffffd, 0xfffffffffffffeff, 0x3, 0x4, 0x5]}) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000", 0x52}], 0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000900000048000380050008007f000000060007004e21000014000200626174616476300000000200000000000800010002000000080003"], 0x5c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe9ffce5f56d80dc8}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x2c, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'dvmrp0\x00', @random='4\x00'}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 2m41.047992115s ago: executing program 3 (id=1485): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_SIOCADDRT(r2, 0xff08, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x28011, r4, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61143c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000034000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4001000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4001000) 2m40.721497844s ago: executing program 3 (id=1487): unshare(0x68040200) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000001c0)) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61"], 0x0) unshare(0x20280) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001}, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xfffffffffffffdfa, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x42}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x8001, 0x1, 0xffffffffffff3975, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m33.257201484s ago: executing program 3 (id=1528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='afs_cb_break\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m18.019760548s ago: executing program 32 (id=1528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='afs_cb_break\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m2.608160364s ago: executing program 4 (id=1745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84040}, 0x48800) 2m2.525683844s ago: executing program 4 (id=1746): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001300)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001d00)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005900000000000000000000000000000000000000000000000000000000000000000000000200"/140, @ANYRESOCT=r3, @ANYRES8=r0], 0x210) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x0) listen(r6, 0x9ce2) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/144], 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r8, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x40, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x40080) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 2m1.747854882s ago: executing program 4 (id=1749): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000800000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000080000000000000000009d98270e1568676e7a52f270b0fd0e800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@remote, @local, 0x0, "30a47ddacd92b91948edfc1219b5a8dee1db5ac45f22dc62a97af67dd1a76755"}, 0x3c) ioctl$SIOCGETSGCNT(r7, 0x89e1, &(0x7f0000000140)={@loopback, @remote}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='nilfs2_collection_stage_transition\x00', r1, 0x0, 0xfffffffffdfffffd}, 0x18) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) 2m0.931896746s ago: executing program 4 (id=1754): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00810000"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0xf423f) 2m0.835821996s ago: executing program 4 (id=1755): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000005800)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x11c, r2, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x8}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x11c}}, 0x8800) 2m0.668239104s ago: executing program 4 (id=1756): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) (async) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) 1m45.392356901s ago: executing program 33 (id=1756): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) (async) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) 10.208088808s ago: executing program 1 (id=2418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000180)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg$unix(r8, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680), 0x0, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000024c0)=""/198, 0xc6}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000f4ff0606050000000000000000000700000705000100070000000900020073797a30000000000800064000000004"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2c, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 10.086383319s ago: executing program 1 (id=2420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="8fa6606ecfe8a43b040791ea93ca0801678db79872b047d6290394928ca9a2737eef344bfdd355f4d969a97e73de3cc079139cb9c7c3fcd9bef9a074bc2137bd39de3abc24175f1ac4e1a0d9425501b18fb4f271541b0cb73f310335fe33c8506fe534bb968d3e82d9de44fda40f0e99e38ad8745800b035c6692d85a57ed1f97dd94df020", 0x85}, {&(0x7f0000000300)="d1c7aa39a0bbc0e11af4a70769ad9f016047a8de5593ba05917c459fe999845d6e195de5d4904bb81751995110aa19f32c6b34544cf09213d51e94f8d25283d448f88ec804c67d2fc7bb7ede31", 0x4d}], 0x2, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0xc6, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x80}, {@private=0xa010100, 0xffff}, {@multicast2, 0x6}, {@empty, 0x8000}, {@multicast1, 0xea34}]}]}}}], 0x90}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000003c0)=0xffff, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0x0, 0xe0}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5", 0x4f}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4d", 0xa3}], 0x2}}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000180)="17", 0x59a, 0x0, 0x0, 0xffffffffffffffa1) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000000201010400000000000000000a000006300001802c00018014000300fe8800000000000000000000000000fd130004"], 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4) 9.158200974s ago: executing program 1 (id=2435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x1a, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xa, 0xffe0}, {0xc, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x34}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000080000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x32, 0x0, &(0x7f0000000380)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x1a, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xa, 0xffe0}, {0xc, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x34}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000080000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_int(0xffffffffffffffff, 0x111, 0x32, 0x0, &(0x7f0000000380)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 8.84723367s ago: executing program 1 (id=2438): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) unshare(0x600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2d, 0x0, {0x36}}, 0x14}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0xc, 0x7, 0x9, 0x0, 0xf8, 0x0, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x1, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89ff]}}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x81f}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) syz_emit_ethernet(0xda, &(0x7f00000005c0)=ANY=[@ANYBLOB="0580c20000000180c200000008004f0000cc00000000002f907800000000000000004454cc91ac14142c0000000600000000000100007f00090000000002ac1414bb00000005ffffffff000000056401010000000c1a0a010100ffffff84ac145b850000000000000002000000caac1e0101ffff000094040100860d0000000306074278e8577a0000002480655800000000000900021000080010000042000086dd0006ffff080088be00100000000000000100000000000000080022eb00000000200000000200000000400000000000000800655800000000d891b6f1fbca53a71af661fd00010000d820fea7"], 0x0) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x102) write(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='cubic\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006500000000000000010000008f18f4ff10000000850000001d00000018220000", @ANYRES32=r7, @ANYBLOB="000000000101000085100000ffffffff18220000", @ANYRES32=r0, @ANYBLOB="0b000000040000001838000003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 8.619205989s ago: executing program 6 (id=2440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xe, 0x4, 0x66e5, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x80, 0xc375, 0x80000001}}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x678, 0x3, {{0x5c, 0x4, 0x2, 0x7, 0x170, 0x7, 0x0, 0x3, 0x4, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x2d, 0x3, [{0x7, 0x8, "3c51fc7263b2"}, {0x7, 0x8, "20118e54875f"}, {0x5, 0xa, "baabe0551646131f"}, {0x0, 0xd, "045c2cfe48393806f8a881"}]}, @timestamp_addr={0x44, 0x34, 0x7a, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x800}, {@empty, 0x6f1}, {@private=0xa010102, 0xa5}, {@remote}, {@multicast1, 0x2}]}, @timestamp={0x44, 0x20, 0x82, 0x0, 0x9, [0x4595, 0x7fff, 0x3, 0x10001, 0x4, 0x10001, 0x15b]}, @rr={0x7, 0x7, 0x59, [@multicast2]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x71, [@multicast2, @broadcast, @private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x19}, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x19, 0x3, 0x5, [{@rand_addr=0x64010101, 0x6}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x8}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x54, 0x62, 0x3, 0x6, [{@multicast2, 0x85}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x7}, {@local, 0x1}, {@private=0xa010101, 0x8cc}, {@loopback, 0xb}, {@private=0xa010102, 0x1af55fd9}, {@multicast2, 0xe}, {@local, 0x9}, {@loopback}]}, @end, @timestamp_prespec={0x44, 0x44, 0xbf, 0x3, 0xc, [{@multicast1, 0xdfa1}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x800}, {@broadcast, 0x7}, {@broadcast}, {@broadcast, 0x7}, {@empty, 0x1}, {@empty, 0x6}, {@rand_addr=0x64010100, 0x80000001}]}]}}}}}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x9c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000a80)={r14}) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r15}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 7.91243589s ago: executing program 6 (id=2443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x88ffffff}, 0x0) 7.739039675s ago: executing program 6 (id=2444): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020903000000000000000000000000060800034001000007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020903000000000000000000000000060800034001000007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 7.356136534s ago: executing program 6 (id=2446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xa, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 5.851429355s ago: executing program 6 (id=2452): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) unshare(0x6a040080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_vlan={0x7c, 0xc, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x400, 0x9, 0x2000000d, 0x8, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xdef, 0x1, 0x20000000, 0x32, 0x7ff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7cd}]}, {0x7, 0x6, "0ed95d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x94}}, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) unshare(0x32050100) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 32) connect$bt_l2cap(r5, &(0x7f0000000380), 0xe) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) write(r2, &(0x7f00000006c0)="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", 0x1000) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) shutdown(r6, 0x0) (async, rerun: 32) recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) (rerun: 32) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 4.978790945s ago: executing program 1 (id=2458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r1, 0x0, 0xa0028000}, 0x86) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d0000fcdbdf250400000005000b0000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r2, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x20}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_TARGET={0x8, 0x1, 0x9}]}}, @TCA_STAB={0x4}]}, 0x5c}}, 0x4000010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003ff800000000500030080ffffff05000300000000000500036c1dff00000500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x80, 0x8017, 0x0, 0x6, {{0x1f, 0x4, 0x0, 0x4, 0x7c, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x9, [{@broadcast, 0xf}]}, @noop, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x2, 0x6, "b83c7826"}, {0x6, 0x11, "b3b5fe3360592b3dc21cf3f76c7f46"}, {0x1, 0x8, "749d451e4b5a"}, {0x0, 0x10, "54ac3aec395861199f7638cc9e2f"}]}, @end, @timestamp={0x44, 0x8, 0xe6, 0x0, 0x1, [0x3]}, @rr={0x7, 0xb, 0x88, [@remote, @dev={0xac, 0x14, 0x14, 0x1f}]}, @end, @timestamp={0x44, 0x10, 0x2d, 0x0, 0x2, [0x1ff, 0x1000, 0xfffffffe]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r10, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r9, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000140)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xa8, 0x2, 0x11, @private1={0xfc, 0x1, '\x00', 0xe0}, @loopback, 0x8, 0x700, 0x4, 0x3dfc}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0xc82ab466b1d82bff, 0x5, 0x5, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, 0x1, 0x8000, 0x4, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x28, &(0x7f00000006c0)={@ipv4={""/10, ""/2, @local}}, &(0x7f0000000700)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x4, 0x80000001, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0xf, 0x23, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'erspan0\x00'}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={0x0, 0x320}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 3.167411575s ago: executing program 0 (id=2469): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) bind$rds(0xffffffffffffffff, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "df37bd7dd1f52d71", "36df584c0b108e6f70d983f458f47526", "8a431885", "ee92d87907e4d50a"}, 0x28) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000280)="581a1791", 0x4}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "6e0f00", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "69ae1eae", "170000e5ffe4ac00"}, 0x28) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400005aa, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x408d4) 2.396141955s ago: executing program 2 (id=2473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x40000000, @loopback, 0xd}, 0x1c) listen(r2, 0x5) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x24000045) r5 = accept(r2, &(0x7f0000000080)=@can, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000006000000010000000000000e0200000000000000005f5f613d"], 0x0, 0x2e}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9f}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @remote}], 0x78) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x2a0f5, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x30000000, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'tunl0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08000500050c07aa1eb77d58d787df61de00000049cef24155dd744391ff8de78b566fb3c218f9715d5e08ed236519667f66bcb15525902afe7685d4ded541f808bb60a1bc0c4f76ec315566b9d57ecffd3862862dfbe011286466066a213d7ef239fb0e5669ca25fa64ecec2eb2dba69cedf78b254ae998dbcd5f1c63cf102c00"], 0x24}}, 0x0) 2.156367815s ago: executing program 0 (id=2474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x18, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}}}}}, 0x0) 1.95583751s ago: executing program 6 (id=2475): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffee) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r4, 0x0, 0x40000000) 1.955603652s ago: executing program 5 (id=2476): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000004001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b7030000350d000085000000060000008400100004000000bf91000000000000b70200000300000085000000ae000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40}, 0x94) 1.955427489s ago: executing program 0 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x100000000000000}, 0x0) 1.922558351s ago: executing program 0 (id=2478): socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x2000002, 0xe, 0xfffffffffffffd59, &(0x7f0000000680)="df12c9f7b9a60000000000080000", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000000000030000002fb2fa7786d7504e6ed782e431299d00000080000000000000da33873e54c73edf88e7984878fafb0e73785fdf2537f9f5fbef4a2caf3568330112bf1bd7f9ad698dc9bbd7f281f91315580f3085660853c9ab438742af5fa4a3452369924c3f71eefda3ff3a04da38b2ebe45f33fe598c1c8f140d62e9a7dba4cbae83ba3b949a05ecb8cdfa6e76b1c6223156fa51c7cb613da805548f8dd167fbef97d223668b73aabebbedf52661526e33a45524c57f9f737ade0a0b2c34239ed4e9df459bc481edd1a9e49f46b7452f18b5b97328209332ac8f502f4eb67869d857d4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="017000fddbdf8d5e00b4565ed2657794728f2501100000e17ab7741ca9b54657c1f3"], 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x4000010) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r9}, 0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900df0bc46f9de336a0000004000000080000000910b9a281be92d96564422da6505c0000000000f6b0add56e01029bedad028cefb92725e01112464adea55138a4ec764c66174a52daaf51a43104f74f78e72981b24148faf258b86c16b1f209c6892aac38e4c99fe9d4a5aaf7ae1a62d22e6a3414a19c761674c337e9484a20fa2698299e06296e728a2ccf16cdcca37ed21bf8a2f7f88ab2f61513f439aed960ef98212083112cd54a530c4bb1901d1d30213972dec161ce0a1ae5433a6960c6a8f0e22d274bc51b5e99e6c1", @ANYRES32=r9, @ANYBLOB="0040000000000000000000170000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r11, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r11, @ANYRES32=r10, @ANYBLOB="00006f37ce5bb7080010000000107b8af8ff00000000bca2000000000000a602000300ffffffb703000008000000b704000000000000850000003300000895d7ab65e2b18b9573f0016e5cf3be0b0d276633736e253887f9b279e41534098d6c299336c5a233fdef57ddac0181d188fbfbc862afc4ba68e9bb02e35f7ff7f8c9b029bbb180b59f7ce6524be3af611eaa525b27da7104c27653321d40e432c148171614e59c0da3c06d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r10}, &(0x7f0000000240), &(0x7f00000006c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r12, r2, 0x25, 0x2, @val=@tcx}, 0x1c) 1.87563505s ago: executing program 5 (id=2479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001000000", @ANYRES32, @ANYBLOB="00000000000000007be8b0940000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="830000000000000020001280080001006772650014000280080007"], 0x78}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf250800010005000000080001000100000008000100010000000800"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1c, r8, 0x331, 0x70bd28, 0x0, {0xb}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x468}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480d4}, 0x4040004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r10, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r9) 1.397455843s ago: executing program 0 (id=2480): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_80211_inject_frame(&(0x7f0000001f80)=@broadcast, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @broadcast, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff0000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, 0x0, 0x40060) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end_cf_ack={{}, {0x4}, @device_b, @broadcast}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x4}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.328056937s ago: executing program 2 (id=2481): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="032ac9526be3925005384ac70e", @ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000010001fff33d40294cf000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xc4, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x78, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x23}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="780200002400010026bd7000fedbdf25670200800c00010002"], 0x278}], 0x1}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000001568dc314b99fb1c1ddbca1cbabab0c0000986fbb692a0ce4cb094ff3abb849b667fa8058f2ced2073132df48d427e641a15c4c05dbb077059ffb0048c77fa4dbf1d3ab174e34e3cbccd23b1a0742729fe87f9174de89ee4efdc1d1dc9885e786ec43e326babf1f0830b8d7111d02bfdc3e24b48d0d1cb9bc90dfb9632176332efa82dacd3738bf9ac99f12ca1332c694f497361904f5a94ccbe668934d178ce21aa6d7940064f439b53cc9ad9c64fccb56beb57f28a078691d02b244551ddf63b73862b7cf0cff83fed9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='bdi_dirty_ratelimit\x00', r6, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000020000100ffffffff000000000200200000000000000000000800100005000000080002000a0101010c000c400000000040000007"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 1.122463734s ago: executing program 5 (id=2482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 630.272552ms ago: executing program 0 (id=2483): unshare(0x22020600) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c30700fe0000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x800) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000024000103f2ffffffffffffff0100a2000400ae"], 0x18}}, 0x4000) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={0x0, 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x4}, {{0x0, 0x0, 0x0}, 0xffffff31}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000003740)=""/4070, 0xfe6}, {&(0x7f00000006c0)=""/4100, 0x1004}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4}, 0x8}, {{&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000001700)=""/215, 0xd7}, {&(0x7f0000000340)=""/29, 0x1d}], 0x4, &(0x7f0000000400)=""/61, 0x3d}, 0x8001}], 0x4, 0x30002, 0x0) (async) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x4}, {{0x0, 0x0, 0x0}, 0xffffff31}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000003740)=""/4070, 0xfe6}, {&(0x7f00000006c0)=""/4100, 0x1004}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4}, 0x8}, {{&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000001700)=""/215, 0xd7}, {&(0x7f0000000340)=""/29, 0x1d}], 0x4, &(0x7f0000000400)=""/61, 0x3d}, 0x8001}], 0x4, 0x30002, 0x0) 578.679576ms ago: executing program 5 (id=2484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000040613040000000000000000072075856c0900020073797a3100000080294b86a6c97482ee231bfe0c3073c217be8402da6f460b4768ac21a1c3ab03eb2348e3cd5e9538efdcf03b4051"], 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000a80)=""/4096, &(0x7f0000000000)=0x1000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket(0xa, 0x3, 0x87) sendmsg(r5, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0, 0x12}, {&(0x7f00000005c0)='r', 0x1}], 0x1}, 0x0) splice(r4, 0x0, r3, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000010000eafffffffffffffedf0000000000000000000000633c36014b9834ec7cc27e1d35b823d9f4c9899508750b0a5f34dacdaf356965b2a9641ea92bfd5c212a6cb30f3855faf0e4606558c69e8f2bebeffb762361905b2a8952fe43b32e5fe94979c9ec2a23ac29aa830bf5c93c73672dee50f7d2408bb9b368fdaf8c40d9b1c680fe680764160daa0291c59d2b3f3eb64996a9803718ef5d3a21"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r12, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$unix(r5, &(0x7f0000003700)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000940)="e95b06adf020ac84601f4d1c6d2b5dcde176e27a85bb7b0ee3fe4fc11a51d251b8ea9ce56f2ed6239cd72598f5970e166816ba33f783b773f88a974e620425220ddc6d57b031097f79d8da571dc079cac9b78cabdf1e60b47418221974e8e341a7263cc6b5925a92ec94aca33822cfacc5d278b2f6cc8c691cfd590409d2b57b4dc1095958158fa64fcabcf3741a19c668bd92f9355942e614d7616f379aa647773442225ae55d8eba6759ef87adfb4de46a7f4fca66609ffe8370a9b3df103de98a489388a8f4c08b7a08058baa4ac265c82da22c07ead6400f3d537cd1c4ab40b64c4c9bb5685c5bab5c550cde201a", 0xf0}, {&(0x7f0000000180)="ca9c03abe29c3af27bbd85b310b29ea5b8718cb7b914f2235ee65df7e06c11f9b25e07921fce30479cc0d72ba5c87ef771aded689541", 0x36}, {&(0x7f0000000500)="9aede79d2317c004d89aa4a5453db48fdcd7f478a1e07f30c39241c54572bcde9fdc14c4381751321bf29057f343c8cd3e2f101eb9f150b3ab458ba06f3042d1075261ee8b0a66e4f736e0d012c26a2f346b29063fb80b731cc28583d7acfced47fd168fe7e75fdb1461554a80da62ee18ef5e4eed6120fcd37cd9ec9c155ea3c8978abd4d8719a68441b8f8ae1580d30e1564e418fd42f5a94181a81df41a9dfb24f52ca02a05e7b4f665d6b387", 0xae}, {&(0x7f0000000300)}], 0x5, &(0x7f0000002a80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78, 0x200088c0}}, {{&(0x7f0000002b00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000002b80)="91be49421ebcd7691412e12506235977e0b2e7ee095677aa01d2e8c3c59666365de175afe12384b7a61896b9f910b2fe458d022a963c72a92895c04b1e7f7fad77806ed2858335b722", 0x49}, {&(0x7f0000002c00)="bad91154d4627c4c510305c49eae7ac4012d59dd5b54d5a2567f337e2c364f643a7cf946b288cb283d3b8f7baa42d7581cb1a5a5bfc9244cc58cb7d59d35e35c224d6053d504030e71c005935ff16d311754976067856696e0767bc68457870718578413c679a9b675ecff108c93c720d0f1cf3aa79aa5a09172881d77087326cb4312105fa50c4dc1d840a158d63e9db6df67198ece25050fb431f519c410fdaca753530c0248aba6c71aebe11411c74d101c46", 0xb4}, {&(0x7f0000002cc0)="3e1d565656f90b070f328f19bae29230611b8e3cefb26a4a35af7ab2550d34e6429328c03217a1446d3835db09b5af809ca82e2214319efe170dd256988581adb9a08870ff40453f3cb7d6317017d25c265d8e29ab983900f44a50652201d9009d8b6199abd385383580cc619e6dc828d52f53d657dfc7fd02588af27375808f5df61859fd3f482ed366e8b1661ced91bfe89d54640e", 0x96}], 0x3, &(0x7f00000032c0)=[@rights={{0x20, 0x1, 0x1, [r11, r9, r2, r13]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r6, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2]}}, @rights={{0x28, 0x1, 0x1, [r4, r3, r0, r8, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r5, r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r7, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r10, r9, r6]}}], 0x140, 0x40000}}, {{&(0x7f0000003400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003480)="37b6", 0x2}, {&(0x7f00000034c0)="026101292ddd4418cfe84d9eddf9b6563832c72e02b69be33475410616f309daa921e94fa93d443fbf1f0d9a20c649f554fec793d5d750f7d046c9e36fcc8f6a02f1c8fb6a57e110dc00d732df9afa212283d8c531b76e84eb2730ad8d700ac2f533e7453ad03e82b3fc9f8667f277cfac9118c2831050631d17b5efb042bda88c2aab5c176ffc5aa345c825277cdcb816f8275f35cf540058995ea96fb70b61df1387ac428501e696209589af60c7054c26e10be20096190e13e322b49fbd72a399ece43309d0a2d2ffa339410e26c45cace65d34945f915001a722e0336f4fefd7287058abc5f7f3ba872476e6f2c15b61bc9239a3cfef10", 0xf9}, {&(0x7f00000035c0)="cd607c416f81d4d1f788fe8b9646d78aca2ceb1e005dc5711eae438b1711af724a91f8c6b430de35bdeaf760e64e657cc3", 0x31}, {&(0x7f0000003600)="4dc4cd55c45bb93d3d9ff09c38db72885e296c9110936c00acec71", 0x1b}, {&(0x7f0000003640)="561d5c303dd342f2a2a01e4151d6057647a5af34c6d23d8d5b9afa8eed581eb87e9cefe9", 0x24}], 0x5, 0x0, 0x0, 0x4000045}}], 0x3, 0x800) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 567.653169ms ago: executing program 2 (id=2485): socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r1, 0xcb}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) 327.782758ms ago: executing program 2 (id=2486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1803000000000000000000000110000085100000060000001800000000000000000000000080000065000000000000001800000000000000000000000000000054030000000000009500000000000000620e9bbf6574f00e92d3dd2f29678f6b49f010ec248e4e6a9de7e3bc430ed32989fbc88a70cea9ff7e05b9b971386b5998d2f2c23b1922f80db6ac1a18579b2142edca8f9d2563022a15e45f8b7052e1fed11ea54af44008ed5ba24b69b8f9a352e21a95628b17b2eed0a59dedab938cff0cb98eca25bb6bee2defb2ae2ec3e37c04eb2d81063757ed46986cb6cb3e94293b28080f93ec3d12fa0c561254b6aae43f2013b9ca48c933a9cc94b5e569d6503f8e3ed92cb1b18647d9015960139a82dd2f34d86635ac64048059b8bda3ed961db60fabcf"], &(0x7f0000000000)='GPL\x00'}, 0x94) 327.287405ms ago: executing program 5 (id=2487): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085dbda1348fe947f1da062a00"/184, 0xb8) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xb, 0xab3529d93e363f16, 0x8, 0xd8}, &(0x7f0000000100)=0xffffffffffffff6f) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r4 = epoll_create(0xd3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000004}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000100)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x12) 168.296114ms ago: executing program 2 (id=2488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x600000000000000}, 0x0) 91.687452ms ago: executing program 1 (id=2489): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000580)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x80}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 60.640975ms ago: executing program 5 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805f", @ANYRES16=r3], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="030000006cd957d2b903c614bf46b4abf3629ff075475e4bd684e9703f0dcfd90000", 0x22) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r7, 0x8b2c, &(0x7f0000000040)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000c3492895246348bf79855db116f785cc6b65"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="000429bd70000000000001000000580008805400008008000a000100000008000a000100000324000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300060000001400040002004e237f0000010000000000000000240003000000000000000000000000000000000000000000000000000000000000000800"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x40}}, 0xe840) 0s ago: executing program 2 (id=2491): r0 = socket$inet(0x2, 0x3, 0x2) (async) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000001c}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4) (async) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) (async) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000014001a"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000005000000000000000100000d00000000030000000200000000000000000000030000000004000000020000000900000000005f61"], &(0x7f0000002740)=""/201, 0x49, 0xc9, 0x1, 0xb}, 0x28) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x8000, 0x8, 0x1, 0x4, {{0x9, 0x4, 0x3, 0x3c, 0x24, 0x68, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x94, 0xe, "ab216dfae115d0e6649d2d3a"}]}}}}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r10, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000700)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e099c8718cd7c81a759ec5d541757c", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0) (async) bind$rxrpc(r5, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) (async) listen(r5, 0x8) kernel console output (not intermixed with test programs): ? clear_bhb_loop+0x60/0xb0 [ 230.468487][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.468504][ T9500] RIP: 0033:0x7f6890d8eba9 [ 230.468522][ T9500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.468537][ T9500] RSP: 002b:00007f6891bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.468559][ T9500] RAX: ffffffffffffffda RBX: 00007f6890fd5fa0 RCX: 00007f6890d8eba9 [ 230.468574][ T9500] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 230.468585][ T9500] RBP: 00007f6891bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 230.468597][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.468608][ T9500] R13: 00007f6890fd6038 R14: 00007f6890fd5fa0 R15: 00007ffded242888 [ 230.468642][ T9500] [ 230.974435][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 231.208264][ T9497] geneve2: left promiscuous mode [ 231.323270][ T9502] hsr_slave_0: left promiscuous mode [ 231.364600][ T9502] hsr_slave_1: left promiscuous mode [ 231.506725][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.541452][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.564531][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.581366][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.867074][ T9520] vxcan1 speed is unknown, defaulting to 1000 [ 232.331835][ T9542] netlink: 64 bytes leftover after parsing attributes in process `syz.1.921'. [ 232.948646][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 233.000590][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 233.078141][ T9520] lo speed is unknown, defaulting to 1000 [ 233.471348][ T9568] vxcan1 speed is unknown, defaulting to 1000 [ 234.328418][ T9587] netlink: 4780 bytes leftover after parsing attributes in process `syz.1.934'. [ 234.356092][ T9568] lo speed is unknown, defaulting to 1000 [ 234.368150][ T9587] openvswitch: netlink: Flow key attr not present in new flow. [ 234.410413][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 235.432142][ T9600] vxcan1 speed is unknown, defaulting to 1000 [ 235.753214][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.940'. [ 236.276155][ T9600] lo speed is unknown, defaulting to 1000 [ 236.811523][ T9644] vxcan1 speed is unknown, defaulting to 1000 [ 237.516162][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'. [ 237.536761][ T9652] nbd: must specify a size in bytes for the device [ 237.651034][ T9657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.792379][ T9644] lo speed is unknown, defaulting to 1000 [ 238.025101][ T9671] bpq0: entered allmulticast mode [ 238.075453][ T9673] netlink: 2372 bytes leftover after parsing attributes in process `syz.3.955'. [ 238.771329][ T9696] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 238.990349][ T9699] bond6 (unregistering): Released all slaves [ 239.103689][ T9708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.965'. [ 239.131982][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.965'. [ 239.709044][ T9719] bond5: entered promiscuous mode [ 239.734731][ T9719] bond5: entered allmulticast mode [ 239.751276][ T9719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.175730][ T9719] bond5 (unregistering): Released all slaves [ 240.503393][ T9752] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 240.615596][ T9754] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 240.669950][ T9759] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.979'. [ 240.821453][ T9763] netlink: 68 bytes leftover after parsing attributes in process `syz.3.981'. [ 241.054611][ T9771] vxcan1 speed is unknown, defaulting to 1000 [ 241.912187][ T9771] lo speed is unknown, defaulting to 1000 [ 242.521420][ T9807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.562321][ T9818] netlink: 'syz.4.988': attribute type 6 has an invalid length. [ 242.946899][ T9832] openvswitch: netlink: Message has 16 unknown bytes. [ 243.035325][ T9839] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 243.773140][ T9851] netlink: 'syz.4.1001': attribute type 46 has an invalid length. [ 243.836407][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 243.929197][ T9851] netlink: 'syz.4.1001': attribute type 19 has an invalid length. [ 243.959288][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 244.143328][ T9853] vxcan1 speed is unknown, defaulting to 1000 [ 244.723480][ T9865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1004'. [ 244.794173][ T9868] netlink: 'syz.0.1003': attribute type 13 has an invalid length. [ 244.823940][ T9868] netlink: 'syz.0.1003': attribute type 17 has an invalid length. [ 244.832175][ T9868] netlink: 'syz.0.1003': attribute type 27 has an invalid length. [ 244.871610][ T9872] netlink: 'syz.4.1005': attribute type 2 has an invalid length. [ 244.883392][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 245.366912][ T9889] IPVS: lc: FWM 3 0x00000003 - no destination available [ 245.375447][ T5856] IPVS: starting estimator thread 0... [ 245.416180][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 245.437473][ T9889] sch_fq: defrate 0 ignored. [ 245.488927][ T9890] IPVS: using max 26 ests per chain, 62400 per kthread [ 245.571515][ T9853] lo speed is unknown, defaulting to 1000 [ 245.730168][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1013'. [ 247.960737][ T9970] netlink: 'syz.3.1033': attribute type 10 has an invalid length. [ 248.238673][ T9981] vxcan1 speed is unknown, defaulting to 1000 [ 248.304215][ T9985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1038'. [ 248.381816][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1038'. [ 248.441706][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 248.838542][ T9981] lo speed is unknown, defaulting to 1000 [ 249.462407][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 250.214449][T10022] IPVS: stopping backup sync thread 10023 ... [ 250.218099][T10023] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 250.282616][T10025] netlink: 'syz.1.1048': attribute type 10 has an invalid length. [ 250.599620][T10034] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 250.853588][T10034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.023922][T10041] bond2: (slave veth7): Enslaving as an active interface with a down link [ 251.131948][T10045] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 251.139540][T10045] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 251.273749][T10049] netlink: 'syz.0.1055': attribute type 5 has an invalid length. [ 251.310865][T10047] vxcan1 speed is unknown, defaulting to 1000 [ 251.472929][T10056] syzkaller1: entered promiscuous mode [ 251.478764][T10056] syzkaller1: entered allmulticast mode [ 251.513126][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 251.527369][T10059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.835708][T10047] lo speed is unknown, defaulting to 1000 [ 252.246887][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1063'. [ 252.595525][T10090] tipc: Enabling of bearer rejected, already enabled [ 252.725979][T10103] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 252.745629][T10103] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1072'. [ 252.768757][T10102] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1072'. [ 253.816829][T10116] syzkaller0: entered promiscuous mode [ 253.838082][T10116] syzkaller0: entered allmulticast mode [ 254.486540][T10149] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 254.771586][T10154] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 256.221539][T10136] vxcan1 speed is unknown, defaulting to 1000 [ 256.704332][T10178] IPv6: sit1: Disabled Multicast RS [ 256.738198][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 60 seconds [ 256.748985][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 60 seconds [ 256.760106][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 60 seconds [ 256.772983][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 60 seconds [ 256.893123][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 257.100710][T10136] lo speed is unknown, defaulting to 1000 [ 257.643149][T10203] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1094'. [ 257.711079][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 257.748097][T10205] netlink: 'syz.3.1096': attribute type 30 has an invalid length. [ 257.808376][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 257.811012][ T6295] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.839467][T10205] netlink: 'syz.3.1096': attribute type 30 has an invalid length. [ 257.893276][ T6295] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.973760][ T6295] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.988406][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 258.046611][ T6295] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.191165][T10230] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.274795][T10233] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1104'. [ 259.034924][T10232] netlink: 'syz.1.1104': attribute type 15 has an invalid length. [ 260.002488][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 260.600224][T10271] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1118'. [ 261.566388][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 261.638418][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'. [ 261.885610][T10316] netlink: 'syz.0.1124': attribute type 3 has an invalid length. [ 261.915955][T10316] __nla_validate_parse: 2 callbacks suppressed [ 261.915974][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 262.185369][T10335] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 262.299131][T10335] bond0: (slave dummy0): Releasing backup interface [ 262.364231][T10335] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 262.388476][T10335] team0: Failed to send options change via netlink (err -105) [ 262.396298][T10335] team0: Port device dummy0 added [ 262.708931][T10351] netlink: 'syz.3.1134': attribute type 13 has an invalid length. [ 262.744944][T10351] netlink: 'syz.3.1134': attribute type 17 has an invalid length. [ 263.020879][T10352] syzkaller0: entered promiscuous mode [ 263.067094][T10352] syzkaller0: entered allmulticast mode [ 263.317665][T10351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.364648][T10351] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.405796][T10351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.514971][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 263.739066][T10379] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1139'. [ 265.747633][T10414] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1147'. [ 265.848876][T10418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1146'. [ 266.017007][T10414] tipc: Enabled bearer , priority 0 [ 266.031100][T10400] vxcan1 speed is unknown, defaulting to 1000 [ 266.110643][T10409] tipc: Disabling bearer [ 266.427816][T10438] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1152'. [ 266.657071][T10442] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 266.787661][ T30] audit: type=1800 audit(1757898294.070:5): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1150" name="memory.events" dev="tmpfs" ino=1183 res=0 errno=0 [ 266.881263][T10448] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 266.882917][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 266.895260][T10448] dvmrp1: linktype set to 773 [ 266.914411][T10447] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 266.957706][T10447] dvmrp1: linktype set to 773 [ 267.032936][T10400] lo speed is unknown, defaulting to 1000 [ 267.096960][T10454] tipc: Enabled bearer , priority 0 [ 267.284229][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 267.295055][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1160'. [ 267.302054][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1159'. [ 267.318655][T10469] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1160'. [ 267.348230][T10468] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1160'. [ 267.801943][T10491] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1163'. [ 267.900959][T10485] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 267.914706][T10485] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1163'. [ 267.964666][T10453] tipc: Disabling bearer [ 268.408684][T10509] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 268.552169][T10508] dummy0: entered promiscuous mode [ 268.583206][T10508] batadv_slave_0: entered promiscuous mode [ 268.619197][T10508] debugfs: 'hsr1' already exists in 'hsr' [ 268.625102][T10508] Cannot create hsr debugfs directory [ 268.655690][T10508] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 268.673786][T10508] hsr1: entered allmulticast mode [ 268.683258][T10524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.693224][T10508] dummy0: entered allmulticast mode [ 268.704441][T10508] batadv_slave_0: entered allmulticast mode [ 268.939162][T10536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 268.965956][T10536] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1176'. [ 269.164164][T10536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1176'. [ 270.369384][T10576] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 271.692484][T10614] nbd: socks must be embedded in a SOCK_ITEM attr [ 271.746379][ T5881] block nbd64: NBD_DISCONNECT [ 272.026677][T10642] siw: device registration error -23 [ 272.279161][T10650] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 272.331822][T10652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.353238][T10650] __nla_validate_parse: 42 callbacks suppressed [ 272.353260][T10650] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1208'. [ 272.418210][ T5870] Bluetooth: hci0: command tx timeout [ 272.566628][T10657] gtp0: entered promiscuous mode [ 272.710416][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 273.459532][T10699] netlink: 'syz.1.1217': attribute type 11 has an invalid length. [ 273.492887][T10699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1217'. [ 273.579026][T10703] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 273.617723][T10709] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1221'. [ 273.686707][T10714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1221'. [ 273.736504][T10714] geneve2: entered promiscuous mode [ 273.774977][T10714] geneve2: entered allmulticast mode [ 274.043132][T10727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1227'. [ 274.046198][T10725] syzkaller0: entered promiscuous mode [ 274.052330][T10727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1227'. [ 274.084058][T10725] syzkaller0: entered allmulticast mode [ 274.096891][T10729] bond0: (slave gretap0): Opening slave failed [ 274.099572][T10733] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 274.131846][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 274.163440][T10729] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1228'. [ 274.205546][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 274.232853][T10735] ip6tnl2: entered promiscuous mode [ 274.243322][T10735] ip6tnl2: entered allmulticast mode [ 274.555927][T10739] team0: Port device dummy0 removed [ 275.079051][T10779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.144924][T10775] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 275.584697][T10799] bpq0: left allmulticast mode [ 275.619669][ T5870] Bluetooth: hci0: command tx timeout [ 275.793109][T10805] tipc: Enabled bearer , priority 10 [ 275.805068][ T5856] IPVS: starting estimator thread 0... [ 275.898690][T10809] IPVS: using max 22 ests per chain, 52800 per kthread [ 275.981895][T10815] netlink: 'syz.1.1250': attribute type 6 has an invalid length. [ 276.116944][T10820] vxcan1 speed is unknown, defaulting to 1000 [ 276.252900][T10829] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 276.297884][T10829] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 276.473194][T10835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.820300][T10820] lo speed is unknown, defaulting to 1000 [ 276.989259][T10868] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 277.219301][T10877] tipc: Failed to remove unknown binding: 66,1,1/2805845018:1385779996/1385779998 [ 277.271013][T10877] tipc: Failed to remove unknown binding: 66,1,1/2805845018:1385779996/1385779998 [ 277.329316][T10877] tipc: Failed to remove unknown binding: 66,1,1/2805845018:1385779996/1385779998 [ 277.475798][T10882] __nla_validate_parse: 28 callbacks suppressed [ 277.475820][T10882] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1268'. [ 277.718832][T10891] netlink: 'syz.4.1273': attribute type 83 has an invalid length. [ 277.747441][T10892] netlink: 'syz.4.1273': attribute type 83 has an invalid length. [ 277.817436][T10889] vxcan1 speed is unknown, defaulting to 1000 [ 278.013203][T10905] netlink: 'syz.0.1277': attribute type 1 has an invalid length. [ 278.043083][T10905] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1277'. [ 278.062181][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 278.073048][T10901] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1276'. [ 278.737686][T10921] ip6tnl0: Master is either lo or non-ether device [ 278.934293][T10897] vxcan1 speed is unknown, defaulting to 1000 [ 279.332063][T10889] lo speed is unknown, defaulting to 1000 [ 279.332567][T10924] vxcan1 speed is unknown, defaulting to 1000 [ 279.535825][T10945] netlink: 'syz.4.1285': attribute type 1 has an invalid length. [ 280.015774][T10897] lo speed is unknown, defaulting to 1000 [ 280.066085][T10927] vxcan1 speed is unknown, defaulting to 1000 [ 280.318373][T10950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1286'. [ 280.327615][T10950] netlink: 'syz.3.1286': attribute type 7 has an invalid length. [ 280.336831][T10950] netlink: 'syz.3.1286': attribute type 8 has an invalid length. [ 280.349676][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 280.434396][T10951] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1286'. [ 280.612380][T10924] lo speed is unknown, defaulting to 1000 [ 281.167672][T10961] IPVS: Scheduler module ip_vs_sip not found [ 281.316310][T10965] netlink: 'syz.3.1291': attribute type 9 has an invalid length. [ 281.359702][T10965] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1291'. [ 281.576067][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 281.642768][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1293'. [ 281.830370][T10927] lo speed is unknown, defaulting to 1000 [ 282.234009][T10983] vxcan1 speed is unknown, defaulting to 1000 [ 282.878494][T10988] __nla_validate_parse: 1 callbacks suppressed [ 282.878517][T10988] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1296'. [ 282.916673][T10988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1296'. [ 283.256648][T11003] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 283.265042][T10983] lo speed is unknown, defaulting to 1000 [ 283.485360][T11003] bond3: entered promiscuous mode [ 283.491252][T11003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.605323][T11007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.657501][T11007] bond3: (slave bond4): making interface the new active one [ 283.704906][T11007] bond4: entered promiscuous mode [ 283.719437][T11007] bond3: (slave bond4): Enslaving as an active interface with an up link [ 283.909690][T11016] openvswitch: netlink: IPv4 tun info is not correct [ 284.013034][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 284.062804][T11021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.079225][T11018] netlink: 'syz.1.1303': attribute type 10 has an invalid length. [ 284.095430][T11020] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 284.135927][T11029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1305'. [ 284.473807][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1308'. [ 284.573762][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1309'. [ 284.731388][T11053] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 284.772762][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 284.914972][T11042] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 284.943867][T11042] bond0 (unregistering): (slave bond2): Releasing backup interface [ 284.975693][T11042] bond0 (unregistering): Released all slaves [ 286.592534][T11082] vxcan1 speed is unknown, defaulting to 1000 [ 286.827347][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 90 seconds [ 286.838630][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 90 seconds [ 286.850721][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 90 seconds [ 286.862484][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 90 seconds [ 287.829368][T11082] lo speed is unknown, defaulting to 1000 [ 287.938088][T11115] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 288.136846][T11119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1330'. [ 288.355800][T11123] syzkaller1: entered promiscuous mode [ 288.368585][T11123] syzkaller1: entered allmulticast mode [ 288.390911][T11123] 8021q: VLANs not supported on wg0 [ 288.886937][T11141] netlink: 'syz.2.1336': attribute type 13 has an invalid length. [ 288.920954][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 288.982000][T11141] xfrm0: entered promiscuous mode [ 288.987705][T11141] xfrm0: entered allmulticast mode [ 289.049938][T11140] vxcan1 speed is unknown, defaulting to 1000 [ 289.572626][T11167] netlink: 'syz.3.1342': attribute type 10 has an invalid length. [ 289.807504][T11172] tipc: Enabled bearer , priority 0 [ 289.826509][T11172] syzkaller0: entered promiscuous mode [ 289.841403][T11172] syzkaller0: entered allmulticast mode [ 289.867802][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 289.899912][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 289.943756][T11141] vxcan1 speed is unknown, defaulting to 1000 [ 289.989684][T11171] tipc: Resetting bearer [ 290.035613][T11171] tipc: Disabling bearer [ 290.202500][T11141] lo speed is unknown, defaulting to 1000 [ 290.526538][T11140] lo speed is unknown, defaulting to 1000 [ 291.409441][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 291.428058][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 291.613034][T11185] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 291.701575][T11185] sctp: [Deprecated]: syz.3.1348 (pid 11185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.701575][T11185] Use struct sctp_sack_info instead [ 292.028384][T11203] netlink: 'syz.1.1352': attribute type 8 has an invalid length. [ 293.435760][ T30] audit: type=1800 audit(1757898320.720:6): pid=11212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1354" name="memory.events" dev="tmpfs" ino=1396 res=0 errno=0 [ 293.528535][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 293.608138][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'. [ 293.701902][T11231] netlink: 'syz.4.1358': attribute type 7 has an invalid length. [ 293.782997][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 293.819534][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'. [ 293.908444][T11231] netlink: 'syz.4.1358': attribute type 7 has an invalid length. [ 294.426336][T11257] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 294.465533][T11254] vxcan1 speed is unknown, defaulting to 1000 [ 294.661946][T11265] gre0: left allmulticast mode [ 294.912314][T11265] tipc: Resetting bearer [ 294.943296][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 294.954632][T11265] syzkaller0: left promiscuous mode [ 294.960646][T11265] syzkaller0: left allmulticast mode [ 295.038924][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1366'. [ 295.248271][T11261] vxcan1 speed is unknown, defaulting to 1000 [ 295.249579][T11254] lo speed is unknown, defaulting to 1000 [ 295.439377][T11277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1367'. [ 295.729611][T11280] can: request_module (can-proto-5) failed. [ 296.243798][T11301] vxcan1 speed is unknown, defaulting to 1000 [ 296.286631][T11261] lo speed is unknown, defaulting to 1000 [ 296.719904][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 297.040778][T11301] lo speed is unknown, defaulting to 1000 [ 297.414250][T11332] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1380'. [ 297.508488][T11332] vxcan1 speed is unknown, defaulting to 1000 [ 298.158836][T11340] syzkaller1: entered promiscuous mode [ 298.166954][T11340] syzkaller1: entered allmulticast mode [ 298.340490][T11345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.367125][T11345] team0: Port device bond5 added [ 298.386686][T11332] lo speed is unknown, defaulting to 1000 [ 299.528953][T11367] vxcan1 speed is unknown, defaulting to 1000 [ 299.729386][T11372] netlink: 'syz.4.1391': attribute type 66 has an invalid length. [ 300.085683][ T5856] lo speed is unknown, defaulting to 1000 [ 300.094754][ T5856] syz0: Port: 1 Link DOWN [ 300.138369][ T5952] lo speed is unknown, defaulting to 1000 [ 300.154546][T11384] geneve2: entered promiscuous mode [ 300.296341][T11375] vxcan1 speed is unknown, defaulting to 1000 [ 300.359223][T11367] lo speed is unknown, defaulting to 1000 [ 300.972098][T11375] lo speed is unknown, defaulting to 1000 [ 301.811935][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'. [ 302.130145][T11415] vxcan1 speed is unknown, defaulting to 1000 [ 302.405190][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 302.667722][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 303.269093][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 303.278662][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 303.287573][T11449] netlink: 'syz.3.1410': attribute type 14 has an invalid length. [ 303.652279][T11415] lo speed is unknown, defaulting to 1000 [ 303.661411][T11416] vxcan1 speed is unknown, defaulting to 1000 [ 304.677456][T11416] lo speed is unknown, defaulting to 1000 [ 304.861399][T11484] xt_HMARK: proto mask must be zero with L3 mode [ 305.021290][T11487] lo: entered promiscuous mode [ 305.026416][T11487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.184793][T11491] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1420'. [ 305.196428][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 305.473159][T11395] infiniband syz!: set down [ 305.478386][T11395] infiniband syz!: added team_slave_0 [ 305.485243][T11395] syz!: rxe_create_cq: returned err = -12 [ 305.506747][T11395] infiniband syz!: Couldn't create ib_mad CQ [ 305.523680][T11395] infiniband syz!: Couldn't open port 1 [ 305.661402][T11395] RDS/IB: syz!: added [ 305.667410][T11395] smc: adding ib device syz! with port count 1 [ 305.694922][T11395] smc: ib device syz! port 1 has no pnetid [ 305.751466][T11509] openvswitch: netlink: IP tunnel dst address not specified [ 306.007767][T11523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1429'. [ 306.285164][T11534] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1433'. [ 306.577520][T11542] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 306.601080][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'. [ 306.629792][T11542] netlink: 'syz.1.1435': attribute type 3 has an invalid length. [ 306.877003][T11530] veth11: entered promiscuous mode [ 306.935778][T11540] vxcan1 speed is unknown, defaulting to 1000 [ 307.145726][T11555] __nla_validate_parse: 1 callbacks suppressed [ 307.145748][T11555] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1438'. [ 307.167109][T11555] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1438'. [ 307.183562][T11555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1438'. [ 307.559393][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 307.568822][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 307.613700][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 307.629316][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 307.905330][T11581] tipc: Enabled bearer , priority 0 [ 307.980122][T11581] tipc: Disabling bearer [ 308.592207][T11583] netlink: 'syz.1.1444': attribute type 58 has an invalid length. [ 308.600238][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1444'. [ 308.890391][T11600] netlink: 'syz.4.1450': attribute type 21 has an invalid length. [ 309.113318][T11604] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 309.181309][T11607] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 309.199453][T11607] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 309.268868][T11604] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 310.295201][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 310.308455][T11642] smc: net device bond0 applied user defined pnetid SYZ [ 310.424393][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'. [ 312.643036][T11540] lo speed is unknown, defaulting to 1000 [ 312.643093][T11575] vxcan1 speed is unknown, defaulting to 1000 [ 312.828700][T11648] !: renamed from dummy0 [ 312.916946][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 313.263657][T11650] vxcan1 speed is unknown, defaulting to 1000 [ 313.296059][T11575] lo speed is unknown, defaulting to 1000 [ 313.766871][T11673] netlink: 'syz.2.1471': attribute type 9 has an invalid length. [ 313.791994][T11673] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.1471'. [ 314.102974][T11681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.114841][T11681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.235958][T11681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.266777][T11681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.338146][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1474'. [ 314.347173][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1474'. [ 314.400189][T11681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.425894][T11681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.515785][T11681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.529511][T11681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.624738][T11650] lo speed is unknown, defaulting to 1000 [ 315.026982][ T1111] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.041684][ T1111] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.294298][ T1111] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.304968][ T1111] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.335878][ T1111] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.355372][ T1111] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.391350][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.400591][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.410903][T11698] tipc: Enabled bearer , priority 0 [ 315.428840][T11698] syzkaller0: entered promiscuous mode [ 315.444635][T11698] syzkaller0: entered allmulticast mode [ 315.533897][T11699] tipc: Resetting bearer [ 315.554905][T11697] tipc: Resetting bearer [ 315.586137][T11701] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1477'. [ 315.612811][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1477'. [ 315.632637][T11697] tipc: Disabling bearer [ 315.715006][T11701] xfrm0: left promiscuous mode [ 315.719933][T11701] xfrm0: left allmulticast mode [ 316.325786][T11707] syzkaller1: entered promiscuous mode [ 316.355639][T11707] syzkaller1: entered allmulticast mode [ 316.385836][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 316.901791][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 120 seconds [ 316.913171][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 120 seconds [ 316.925407][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 120 seconds [ 316.938296][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 120 seconds [ 318.170656][T11729] tipc: Enabling of bearer rejected, failed to enable media [ 318.406381][T11745] vxcan1 speed is unknown, defaulting to 1000 [ 318.824793][T11758] atomic_op ffff888059cd1198 conn xmit_atomic 0000000000000000 [ 319.785935][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1495'. [ 321.573557][T11745] lo speed is unknown, defaulting to 1000 [ 321.573648][T11769] C: renamed from lo [ 321.590592][T11769] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 322.112891][T11814] vxcan1 speed is unknown, defaulting to 1000 [ 322.223173][T11818] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 322.751051][T11828] tipc: Enabling of bearer rejected, already enabled [ 322.823464][T11826] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2652152810/2652152812 [ 322.869866][T11826] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2652152810/2652152812 [ 322.909953][T11826] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2652152810/2652152812 [ 323.244391][T11814] lo speed is unknown, defaulting to 1000 [ 323.652583][T11856] vxcan1 speed is unknown, defaulting to 1000 [ 323.796111][T11863] netlink: 'syz.2.1518': attribute type 5 has an invalid length. [ 325.265956][T11880] tipc: Failed to remove unknown binding: 66,1,1/0:1247709652/1247709654 [ 325.280372][T11880] tipc: Failed to remove unknown binding: 66,1,1/0:1247709652/1247709654 [ 325.293626][T11880] tipc: Failed to remove unknown binding: 66,1,1/0:1247709652/1247709654 [ 325.334606][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1521'. [ 325.385837][T11856] lo speed is unknown, defaulting to 1000 [ 325.816253][T11896] tipc: Enabled bearer , priority 0 [ 325.828749][T11896] syzkaller0: entered promiscuous mode [ 325.836512][T11896] syzkaller0: entered allmulticast mode [ 325.920227][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1527'. [ 325.960337][T11900] tipc: Resetting bearer [ 326.086703][T11895] tipc: Resetting bearer [ 326.116982][T11895] tipc: Disabling bearer [ 326.538642][T11913] netlink: 'syz.2.1532': attribute type 10 has an invalid length. [ 326.718822][T11918] tipc: Failed to remove unknown binding: 66,1,1/0:224280745/224280747 [ 326.785868][T11921] tipc: Failed to remove unknown binding: 66,1,1/0:224280745/224280747 [ 326.794394][T11921] tipc: Failed to remove unknown binding: 66,1,1/0:224280745/224280747 [ 327.774991][T11931] netlink: 'syz.1.1537': attribute type 2 has an invalid length. [ 327.797516][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'. [ 327.815453][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 327.934536][ T6295] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.973883][ T6295] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.010249][ T6295] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.043427][ T6295] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.118524][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1540'. [ 328.172322][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 328.227366][T11942] ip6gre1: entered promiscuous mode [ 328.308509][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 328.329159][T11952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1541'. [ 328.347142][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 328.413976][ T6297] smc: removing ib device syz2 [ 328.608487][T11959] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 328.877487][T11959] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1544'. [ 329.320399][T11971] bond0: (slave vlan2): Opening slave failed [ 329.323064][T11973] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 330.298943][T11989] tipc: Enabled bearer , priority 0 [ 330.326662][T11989] syzkaller0: entered promiscuous mode [ 330.345024][T11989] syzkaller0: entered allmulticast mode [ 330.394305][T11989] tipc: Resetting bearer [ 330.437293][T11988] tipc: Resetting bearer [ 330.509704][T12008] __nla_validate_parse: 5 callbacks suppressed [ 330.509724][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1555'. [ 330.545098][T11988] tipc: Disabling bearer [ 330.614473][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'. [ 330.837303][T12020] netlink: 'syz.4.1560': attribute type 12 has an invalid length. [ 330.881605][T12020] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1560'. [ 331.354842][T12036] lo speed is unknown, defaulting to 1000 [ 331.756180][T12045] lo speed is unknown, defaulting to 1000 [ 332.042037][T12047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1567'. [ 332.209534][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 332.687196][T12058] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 332.789821][T12057] bond7: entered promiscuous mode [ 332.795158][T12057] bond7: entered allmulticast mode [ 332.802235][T12057] 8021q: adding VLAN 0 to HW filter on device bond7 [ 332.965220][T12071] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1572'. [ 333.468090][T12079] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.485887][T12079] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.685525][T12079] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.718013][T12079] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.740626][T12084] netlink: 'syz.1.1576': attribute type 39 has an invalid length. [ 333.767789][T12084] netlink: 'syz.1.1576': attribute type 12 has an invalid length. [ 333.895360][T12079] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.926121][T12079] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.167481][T12079] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.184272][T12079] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.199947][T12084] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 334.205770][T12084] dvmrp1: linktype set to 773 [ 334.367797][ T6297] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.382965][ T6297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.414785][ T6297] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.423840][ T6297] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.506118][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.533600][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.575652][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.598073][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.765793][T12096] lo speed is unknown, defaulting to 1000 [ 336.055939][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 336.284104][T12125] netlink: 'syz.1.1588': attribute type 30 has an invalid length. [ 336.490179][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 336.504534][T12138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.533057][T12138] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 336.574734][T12138] 8021q: VLANs not supported on wg1 [ 336.649727][T12142] netlink: 'syz.1.1595': attribute type 13 has an invalid length. [ 336.664133][T12142] netlink: 'syz.1.1595': attribute type 17 has an invalid length. [ 336.694142][T12142] lo: left promiscuous mode [ 337.202353][T12142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.263697][T12152] wg1: entered promiscuous mode [ 337.285679][T12152] wg1: entered allmulticast mode [ 337.415132][T12148] lo speed is unknown, defaulting to 1000 [ 337.665849][T12162] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 337.974621][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1604'. [ 338.283217][T12190] lo speed is unknown, defaulting to 1000 [ 338.886321][T12197] lo speed is unknown, defaulting to 1000 [ 339.143289][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 339.547544][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 339.643884][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'. [ 339.858987][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 339.890781][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'. [ 339.909036][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1616'. [ 339.918356][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'. [ 339.927641][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1616'. [ 339.936771][T12232] netlink: 'syz.0.1616': attribute type 6 has an invalid length. [ 339.985126][T12234] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.004523][T12234] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.164502][T12234] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.208350][T12234] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.303702][T12234] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.341849][T12234] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.475258][T12234] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.485747][T12234] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.593147][ T6295] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.604443][ T6295] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.870040][ T6295] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.895888][ T6295] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.997979][ T6295] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.018313][T12251] openvswitch: netlink: ufid size 597 bytes exceeds the range (1, 16) [ 341.026545][T12251] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.030091][ T6295] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.220883][ T6295] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.246624][ T6295] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.528109][ T5234] udevd[5234]: worker [5875] /devices/virtual/block/nbd0 is taking a long time [ 341.625060][T12266] __nla_validate_parse: 2 callbacks suppressed [ 341.625082][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 341.658521][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 341.978849][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'. [ 341.992337][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.002441][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.030138][T12277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.040518][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.065612][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.075033][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.455687][T12272] lo speed is unknown, defaulting to 1000 [ 342.499469][T12283] tipc: Enabled bearer , priority 0 [ 342.529181][T12283] syzkaller0: entered promiscuous mode [ 342.534735][T12283] syzkaller0: entered allmulticast mode [ 342.618778][T12283] tipc: Resetting bearer [ 342.673600][T12281] tipc: Resetting bearer [ 342.742904][T12281] tipc: Disabling bearer [ 342.871344][T12288] tipc: Enabled bearer , priority 0 [ 342.926575][T12291] tipc: Enabled bearer , priority 0 [ 342.949258][T12291] syzkaller0: entered promiscuous mode [ 342.954801][T12291] syzkaller0: entered allmulticast mode [ 343.019766][T12288] tipc: Disabling bearer [ 343.154512][T12291] tipc: Resetting bearer [ 343.181653][T12290] tipc: Resetting bearer [ 343.260976][T12290] tipc: Disabling bearer [ 343.461427][T12310] tipc: Enabled bearer , priority 0 [ 343.476875][T12310] syzkaller0: entered promiscuous mode [ 343.499258][T12310] syzkaller0: entered allmulticast mode [ 343.551103][T12309] tipc: Resetting bearer [ 343.639736][T12309] tipc: Disabling bearer [ 343.678014][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1641'. [ 343.706691][T12326] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.756755][T12320] : entered promiscuous mode [ 343.780355][T12326] IPVS: set_ctl: invalid protocol: 0 172.20.20.32:20004 [ 343.840088][T12320] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 344.114866][T12338] netlink: 'syz.0.1646': attribute type 14 has an invalid length. [ 344.258627][ T5869] Bluetooth: hci5: command tx timeout [ 344.323959][T12347] netlink: 'syz.4.1647': attribute type 23 has an invalid length. [ 344.643680][T12350] lo speed is unknown, defaulting to 1000 [ 344.684610][T12350] lo speed is unknown, defaulting to 1000 [ 344.732601][T12350] lo speed is unknown, defaulting to 1000 [ 344.747608][T12350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 344.768624][T12350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 344.802922][T12272] chnl_net:caif_netlink_parms(): no params data found [ 344.867007][T12350] lo speed is unknown, defaulting to 1000 [ 344.896140][T12350] lo speed is unknown, defaulting to 1000 [ 344.924172][T12350] lo speed is unknown, defaulting to 1000 [ 344.955569][T12350] lo speed is unknown, defaulting to 1000 [ 344.995967][T12350] lo speed is unknown, defaulting to 1000 [ 345.004312][T12350] lo speed is unknown, defaulting to 1000 [ 345.040819][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 345.134176][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 345.191001][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1653'. [ 345.257660][T12272] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.266429][T12272] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.276738][T12272] bridge_slave_0: entered allmulticast mode [ 345.300412][T12272] bridge_slave_0: entered promiscuous mode [ 345.318602][T12272] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.326021][T12272] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.421962][T12272] bridge_slave_1: entered allmulticast mode [ 345.431831][T12272] bridge_slave_1: entered promiscuous mode [ 345.585224][T12272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.656281][T12272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.787727][T12272] team0: Port device team_slave_0 added [ 345.812351][T12272] team0: Port device team_slave_1 added [ 346.040856][T12404] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 346.195440][T12400] bridge: RTM_NEWNEIGH with invalid ether address [ 346.231887][T12272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.240119][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.286914][T12272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.313474][T12272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.330239][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.368053][ T5869] Bluetooth: hci5: command tx timeout [ 346.380532][T12272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.486430][T12272] hsr_slave_0: entered promiscuous mode [ 346.499591][T12272] hsr_slave_1: entered promiscuous mode [ 346.509431][T12272] debugfs: 'hsr0' already exists in 'hsr' [ 346.515225][T12272] Cannot create hsr debugfs directory [ 346.629066][T12413] lo speed is unknown, defaulting to 1000 [ 346.773836][T12425] IPVS: set_ctl: invalid protocol: 65535 0.0.0.0:0 [ 346.979391][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 150 seconds [ 346.990462][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 150 seconds [ 347.002055][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 150 seconds [ 347.014103][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 150 seconds [ 347.150097][T12439] tipc: Failed to remove unknown binding: 66,1,1/2805845018:1596731530/1596731532 [ 347.261956][T12439] tipc: Failed to remove unknown binding: 66,1,1/2805845018:1596731530/1596731532 [ 347.272585][T12439] tipc: Failed to remove unknown binding: 66,1,1/2805845018:1596731530/1596731532 [ 347.306191][T12272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 347.345552][T12445] syzkaller1: entered promiscuous mode [ 347.390707][T12445] syzkaller1: entered allmulticast mode [ 347.422763][T12272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.463499][T12272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.486274][T12450] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1673'. [ 347.528596][T12450] netlink: 'syz.4.1673': attribute type 1 has an invalid length. [ 347.528801][T12272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.579017][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 347.605550][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 347.674266][T12450] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.681631][T12412] pim6reg1: entered promiscuous mode [ 347.687087][T12412] pim6reg1: entered allmulticast mode [ 347.707523][T12454] bond7: (slave gretap1): making interface the new active one [ 347.717648][T12454] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 348.117748][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 348.141111][T12468] lo speed is unknown, defaulting to 1000 [ 348.196932][T12272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.225970][T12472] nbd: must specify at least one socket [ 348.284140][T12413] lo speed is unknown, defaulting to 1000 [ 348.334752][T12272] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.366383][T12478] tipc: Enabling of bearer rejected, already enabled [ 348.419143][ T5869] Bluetooth: hci5: command tx timeout [ 348.435995][T12478] syzkaller0: entered promiscuous mode [ 348.445586][T12478] syzkaller0: entered allmulticast mode [ 348.464678][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.471965][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.536211][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.543513][ T6295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.564300][T12481] : entered promiscuous mode [ 348.733720][T12272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.197645][T12468] lo speed is unknown, defaulting to 1000 [ 349.211338][T12496] netlink: 'syz.2.1683': attribute type 8 has an invalid length. [ 349.232134][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'. [ 349.423956][T12272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.204222][T12508] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3610651665/3610651667 [ 350.221062][T12272] veth0_vlan: entered promiscuous mode [ 350.238704][T12272] veth1_vlan: entered promiscuous mode [ 350.290125][T12511] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3610651665/3610651667 [ 350.320833][T12272] veth0_macvtap: entered promiscuous mode [ 350.368325][T12511] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3610651665/3610651667 [ 350.413208][T12272] veth1_macvtap: entered promiscuous mode [ 350.466823][T12272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.498904][ T5869] Bluetooth: hci5: command tx timeout [ 350.520183][T12272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.547774][ T3539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.623227][ T3539] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.646881][ T3539] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.684459][ T3539] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.016578][T12531] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1691'. [ 351.068300][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.098422][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.171234][ T6297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.186286][ T6297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.686311][T12562] syz.1.1702 uses old SIOCAX25GETINFO [ 351.702297][ T5869] block nbd1: Receive control failed (result -107) [ 351.756601][T12568] netlink: 'syz.5.1703': attribute type 1 has an invalid length. [ 351.776143][T12558] nbd1: detected capacity change from 0 to 32 [ 351.800910][T12568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.820541][ T5881] block nbd1: Dead connection, failed to find a fallback [ 351.856652][ T5881] block nbd1: shutting down sockets [ 351.871638][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1703'. [ 351.878161][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.901307][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 351.911041][T12568] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1703'. [ 351.929389][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.950077][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 351.964941][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 351.987138][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 352.028378][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.049814][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 352.076954][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.122706][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 352.154553][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.188363][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 352.207657][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.225198][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 352.240211][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.250708][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 352.280723][ T5881] ldm_validate_partition_table(): Disk read failed. [ 352.302674][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.322310][T12590] netlink: 154912 bytes leftover after parsing attributes in process `syz.1.1710'. [ 352.332151][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 352.364642][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.405819][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read [ 352.466301][ T5881] Dev nbd1: unable to read RDB block 0 [ 352.483810][ T5881] nbd1: unable to read partition table [ 352.524653][T12591] lo speed is unknown, defaulting to 1000 [ 352.534211][ T5881] ldm_validate_partition_table(): Disk read failed. [ 352.567814][ T5881] Dev nbd1: unable to read RDB block 0 [ 352.583936][ T5881] nbd1: unable to read partition table [ 352.689749][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 352.708142][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 353.224286][T12616] can: request_module (can-proto-5) failed. [ 353.457548][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 353.978217][T12641] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 354.029351][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 354.036234][T12641] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 354.145442][T12591] lo speed is unknown, defaulting to 1000 [ 354.176809][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 354.339818][T12659] tipc: Enabling of bearer rejected, already enabled [ 354.370523][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 354.534017][T12662] bridge_slave_0: left allmulticast mode [ 354.555745][T12662] bridge_slave_0: left promiscuous mode [ 354.576261][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.607698][T12662] bridge_slave_1: left allmulticast mode [ 354.613787][T12662] bridge_slave_1: left promiscuous mode [ 354.620049][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.636458][T12662] bond0: (slave bond_slave_0): Releasing backup interface [ 354.652631][T12662] bond0: (slave bond_slave_1): Releasing backup interface [ 354.696380][T12662] team0: Port device team_slave_0 removed [ 354.727273][T12662] team0: Port device team_slave_1 removed [ 354.737056][T12662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.745287][T12662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.756712][T12662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.764904][T12662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.775182][T12662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.777700][T12673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1735'. [ 355.175095][T12661] lo speed is unknown, defaulting to 1000 [ 355.934013][T12665] lo speed is unknown, defaulting to 1000 [ 356.669451][T12661] lo speed is unknown, defaulting to 1000 [ 357.174895][T12713] Bluetooth: hci1: too big key_count value 32778 [ 357.202818][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 357.338749][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 357.351284][T12716] tipc: Enabling of bearer rejected, failed to enable media [ 357.616850][T12665] lo speed is unknown, defaulting to 1000 [ 358.298262][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1752'. [ 358.308425][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1752'. [ 358.515885][T12755] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 358.854820][T12759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1758'. [ 358.919860][T12759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1758'. [ 358.982951][T12759] bridge0: entered promiscuous mode [ 359.020003][T12759] ip6gretap0: entered promiscuous mode [ 359.033812][T12759] debugfs: 'hsr1' already exists in 'hsr' [ 359.048237][T12759] Cannot create hsr debugfs directory [ 359.054001][T12759] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 359.065419][T12759] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 359.401084][T12767] netlink: 'syz.0.1760': attribute type 178 has an invalid length. [ 359.671603][T12776] lo speed is unknown, defaulting to 1000 [ 359.727624][T12778] netlink: 'syz.1.1764': attribute type 5 has an invalid length. [ 360.387639][T12787] lo speed is unknown, defaulting to 1000 [ 360.532759][T12776] lo speed is unknown, defaulting to 1000 [ 360.585556][ T5869] Bluetooth: hci0: command tx timeout [ 361.251648][T12787] lo speed is unknown, defaulting to 1000 [ 362.932170][T12830] netlink: 'syz.5.1781': attribute type 2 has an invalid length. [ 362.955342][T12830] netlink: 'syz.5.1781': attribute type 1 has an invalid length. [ 362.964770][T12830] netlink: 'syz.5.1781': attribute type 1 has an invalid length. [ 362.974448][T12830] netlink: 'syz.5.1781': attribute type 2 has an invalid length. [ 363.375506][T12846] lo speed is unknown, defaulting to 1000 [ 363.566464][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1787'. [ 363.769013][T12870] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1789'. [ 363.802509][T12870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.208975][T12877] lo speed is unknown, defaulting to 1000 [ 364.483810][T12886] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1794'. [ 364.517366][T12888] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1793'. [ 364.567589][T12887] sctp: [Deprecated]: syz.2.1793 (pid 12887) Use of int in maxseg socket option. [ 364.567589][T12887] Use struct sctp_assoc_value instead [ 364.925831][T12846] lo speed is unknown, defaulting to 1000 [ 364.970790][T12896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.018953][T12898] netlink: 'syz.2.1798': attribute type 10 has an invalid length. [ 365.174470][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1799'. [ 365.217145][T12901] netlink: 'syz.5.1799': attribute type 10 has an invalid length. [ 365.228201][T12901] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1799'. [ 365.337751][T12901] team0: Port device geneve0 added [ 365.347423][T12904] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1799'. [ 365.549949][T12877] lo speed is unknown, defaulting to 1000 [ 366.610347][T12921] netlink: 'syz.2.1805': attribute type 2 has an invalid length. [ 366.721082][T12921] k›*·]‘: entered promiscuous mode [ 366.801924][T12922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.849254][ T5968] lo speed is unknown, defaulting to 1000 [ 366.878123][ T5968] syz0: Port: 1 Link ACTIVE [ 366.893836][ T5968] lo speed is unknown, defaulting to 1000 [ 366.938593][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 366.972156][T12921] tipc: Enabling of bearer rejected, failed to enable media [ 366.998100][T12922] veth0_to_team: entered promiscuous mode [ 367.008188][T12922] veth0_to_team: entered allmulticast mode [ 367.040035][T12920] delete_channel: no stack [ 367.639255][T12952] tipc: Enabled bearer , priority 0 [ 367.662413][T12952] syzkaller0: entered promiscuous mode [ 367.676410][T12952] syzkaller0: entered allmulticast mode [ 367.729579][T12943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.738878][T12943] bridge0: port 1(bond0) entered blocking state [ 367.745424][T12943] bridge0: port 1(bond0) entered disabled state [ 367.753399][T12943] bond0: entered allmulticast mode [ 367.766719][T12943] bond0: entered promiscuous mode [ 367.774690][T12943] bridge0: port 1(bond0) entered blocking state [ 367.781170][T12943] bridge0: port 1(bond0) entered forwarding state [ 367.800547][T12951] tipc: Resetting bearer [ 367.872686][T12951] tipc: Disabling bearer [ 367.896522][ T6295] bridge0: port 1(bond0) entered disabled state [ 368.037082][T12970] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 368.069814][T12970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1814'. [ 368.208778][T12979] netlink: 'syz.1.1818': attribute type 1 has an invalid length. [ 368.262865][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1819'. [ 368.586772][T12997] __nla_validate_parse: 2 callbacks suppressed [ 368.586789][T12997] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1823'. [ 369.310145][T12995] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 369.392379][T13009] netlink: 'syz.1.1826': attribute type 2 has an invalid length. [ 369.540408][T13021] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 369.578766][T13018] lo speed is unknown, defaulting to 1000 [ 369.657221][T13028] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1831'. [ 370.548399][T13030] bond4: left promiscuous mode [ 370.586216][T13030] hsr1: left allmulticast mode [ 370.593797][T13030] dummy0: left allmulticast mode [ 370.601385][T13030] batadv_slave_0: left allmulticast mode [ 370.621900][T13030] ip6gre1: left promiscuous mode [ 370.630184][T13030] bond7: left promiscuous mode [ 370.635212][T13030] bond7: left allmulticast mode [ 370.653545][ T5968] lo speed is unknown, defaulting to 1000 [ 370.669327][ T5968] syz2: Port: 1 Link DOWN [ 370.689127][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.722271][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.758826][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.791173][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.857812][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 370.893302][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 370.947227][T13042] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1834'. [ 371.187343][T13018] lo speed is unknown, defaulting to 1000 [ 371.625816][T13069] veth0: entered promiscuous mode [ 371.636516][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 371.683487][T13069] veth0 (unregistering): left promiscuous mode [ 371.735145][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 371.844153][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 371.848580][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.950649][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.980389][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.006766][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.191535][T13087] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 372.248303][T13087] netlink: 'syz.2.1845': attribute type 3 has an invalid length. [ 372.256200][T13087] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1845'. [ 372.553377][T13095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1843'. [ 372.582384][T13097] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 372.704174][T13101] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 372.714523][T13101] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 372.739313][T13101] bond5: (slave vcan1): making interface the new active one [ 372.747548][T13101] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 372.783264][T13097] bond5: (slave vcan2): The slave device specified does not support setting the MAC address [ 372.809139][T13097] bond5: (slave vcan2): Enslaving as a backup interface with an up link [ 372.826852][T13103] openvswitch: netlink: Key type 1296 is out of range max 32 [ 373.081299][T13109] pim6reg: entered allmulticast mode [ 373.103250][T13115] pim6reg: left allmulticast mode [ 373.114444][T13110] syz.0.1850: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 373.143742][T13110] CPU: 1 UID: 0 PID: 13110 Comm: syz.0.1850 Not tainted syzkaller #0 PREEMPT(full) [ 373.143770][T13110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.143782][T13110] Call Trace: [ 373.143790][T13110] [ 373.143799][T13110] dump_stack_lvl+0x189/0x250 [ 373.143836][T13110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.143861][T13110] ? __pfx__printk+0x10/0x10 [ 373.143890][T13110] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.143916][T13110] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.143975][T13110] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 373.144002][T13110] warn_alloc+0x214/0x310 [ 373.144039][T13110] ? __pfx_warn_alloc+0x10/0x10 [ 373.144079][T13110] ? __get_vm_area_node+0x28f/0x300 [ 373.144108][T13110] ? xskq_create+0xbf/0x170 [ 373.144136][T13110] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 373.144202][T13110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 373.144231][T13110] ? xskq_create+0x56/0x170 [ 373.144256][T13110] ? __kasan_kmalloc+0x93/0xb0 [ 373.144288][T13110] vmalloc_user_noprof+0xad/0xf0 [ 373.144318][T13110] ? xskq_create+0xbf/0x170 [ 373.144342][T13110] xskq_create+0xbf/0x170 [ 373.144368][T13110] xsk_init_queue+0xb0/0x110 [ 373.144392][T13110] xsk_setsockopt+0x57b/0x8d0 [ 373.144417][T13110] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.144437][T13110] ? __pfx_aa_sk_perm+0x10/0x10 [ 373.144473][T13110] ? aa_sock_opt_perm+0xff/0x1b0 [ 373.144499][T13110] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 373.144522][T13110] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.144546][T13110] do_sock_setsockopt+0x17c/0x1b0 [ 373.144580][T13110] __x64_sys_setsockopt+0x13f/0x1b0 [ 373.144613][T13110] do_syscall_64+0xfa/0x3b0 [ 373.144636][T13110] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.144660][T13110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.144681][T13110] ? clear_bhb_loop+0x60/0xb0 [ 373.144706][T13110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.144726][T13110] RIP: 0033:0x7f26b4f8eba9 [ 373.144746][T13110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.144764][T13110] RSP: 002b:00007f26b5ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 373.144787][T13110] RAX: ffffffffffffffda RBX: 00007f26b51d6090 RCX: 00007f26b4f8eba9 [ 373.144802][T13110] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 373.144815][T13110] RBP: 00007f26b5011e19 R08: 0000000000000004 R09: 0000000000000000 [ 373.144828][T13110] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 373.144841][T13110] R13: 00007f26b51d6128 R14: 00007f26b51d6090 R15: 00007fff193ca078 [ 373.144877][T13110] [ 373.144886][T13110] Mem-Info: [ 373.424722][T13110] active_anon:7255 inactive_anon:0 isolated_anon:0 [ 373.424722][T13110] active_file:3400 inactive_file:39981 isolated_file:0 [ 373.424722][T13110] unevictable:768 dirty:177 writeback:0 [ 373.424722][T13110] slab_reclaimable:12431 slab_unreclaimable:150065 [ 373.424722][T13110] mapped:34577 shmem:1363 pagetables:1185 [ 373.424722][T13110] sec_pagetables:0 bounce:0 [ 373.424722][T13110] kernel_misc_reclaimable:0 [ 373.424722][T13110] free:1252571 free_pcp:13545 free_cma:0 [ 373.472427][T13110] Node 0 active_anon:29020kB inactive_anon:0kB active_file:13600kB inactive_file:159728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138308kB dirty:708kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13224kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.519033][T13110] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.555114][T13110] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.601428][T13110] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 373.629516][T13110] Node 0 DMA32 free:1112452kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28876kB inactive_anon:0kB active_file:13600kB inactive_file:158156kB unevictable:1536kB writepending:708kB present:3129332kB managed:2557384kB mlocked:0kB bounce:0kB free_pcp:36828kB local_pcp:9432kB free_cma:0kB [ 373.697782][T13110] lowmem_reserve[]: 0 0 1 1 1 [ 373.712013][T13110] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 373.768655][T13110] lowmem_reserve[]: 0 0 0 0 0 [ 373.780496][T13110] Node 1 Normal free:3882460kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17888kB local_pcp:11136kB free_cma:0kB [ 373.833150][T13110] lowmem_reserve[]: 0 0 0 0 0 [ 373.845951][T13110] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 373.877113][T13110] Node 0 DMA32: 371*4kB (UME) 399*8kB (ME) 316*16kB (UM) 158*32kB (UME) 52*64kB (ME) 45*128kB (UM) 12*256kB (M) 4*512kB (ME) 1*1024kB (U) 7*2048kB (UME) 257*4096kB (UM) = 1097028kB [ 373.913928][T13110] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 373.937042][T13110] Node 1 Normal: 207*4kB (UME) 62*8kB (UME) 49*16kB (UME) 145*32kB (UME) 38*64kB (UME) 10*128kB (UME) 5*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 944*4096kB (M) = 3882460kB [ 373.956371][T13110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.967018][T13110] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.976857][T13110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.986846][T13110] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.996290][T13110] 44741 total pagecache pages [ 374.001335][T13110] 0 pages in swap cache [ 374.005778][T13110] Free swap = 124996kB [ 374.010206][T13110] Total swap = 124996kB [ 374.014526][T13110] 2097051 pages RAM [ 374.018627][T13110] 0 pages HighMem/MovableOnly [ 374.023324][T13110] 425679 pages reserved [ 374.027793][T13110] 0 pages cma reserved [ 374.239839][T13144] __nla_validate_parse: 5 callbacks suppressed [ 374.239865][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 374.286693][T13147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1864'. [ 374.301872][T13140] veth0_to_team: left promiscuous mode [ 374.307426][T13140] veth0_to_team: left allmulticast mode [ 374.328433][T13140] veth2: left promiscuous mode [ 374.333624][T13140] veth2: left allmulticast mode [ 374.381244][ T5870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.392986][ T5870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.402475][ T5870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.412930][ T5870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.418951][T13140] bond3: left promiscuous mode [ 374.425071][T13140] bond4: left promiscuous mode [ 374.429251][ T5870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.441180][T13140] geneve2: left promiscuous mode [ 374.466847][ T5856] lo speed is unknown, defaulting to 1000 [ 374.473008][ T5856] syz0: Port: 1 Link DOWN [ 374.481611][T13145] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 374.505500][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 374.532479][T13147] netlink: 'syz.0.1864': attribute type 30 has an invalid length. [ 374.552516][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 374.561455][ T49] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.561495][ T49] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.561553][ T49] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.561579][ T49] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.561617][ T49] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.561644][ T49] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.561680][ T49] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.561706][ T49] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.561755][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.561793][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.561831][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.561868][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.686678][T13147] netlink: 'syz.0.1864': attribute type 30 has an invalid length. [ 374.695004][ T5856] lo speed is unknown, defaulting to 1000 [ 374.734924][T13150] lo speed is unknown, defaulting to 1000 [ 375.031069][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 375.110794][T13176] sit2: entered promiscuous mode [ 375.644503][T13199] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1873'. [ 375.661758][T13199] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1873'. [ 375.664548][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1874'. [ 375.725155][T13201] batadv0: entered promiscuous mode [ 375.732357][T13201] macsec1: entered promiscuous mode [ 375.747286][T13201] batadv0: left promiscuous mode [ 375.801071][T13150] lo speed is unknown, defaulting to 1000 [ 375.910433][T13204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1875'. [ 376.160525][T13216] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 376.225588][T13211] lo speed is unknown, defaulting to 1000 [ 376.251300][T13214] veth1_macvtap: left promiscuous mode [ 376.288861][T13217] netlink: 'syz.2.1880': attribute type 2 has an invalid length. [ 376.289549][T13214] macsec0: entered promiscuous mode [ 376.313093][T13214] macsec0: entered allmulticast mode [ 376.334833][T13217] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1880'. [ 376.369484][T13221] veth1_macvtap: entered promiscuous mode [ 376.409002][T13221] veth1_macvtap: entered allmulticast mode [ 376.431731][T13221] macsec0: left promiscuous mode [ 376.437237][T13221] macsec0: left allmulticast mode [ 376.449697][T13221] veth1_macvtap: left allmulticast mode [ 376.498893][T13150] chnl_net:caif_netlink_parms(): no params data found [ 376.508434][ T5870] Bluetooth: hci6: command tx timeout [ 377.059892][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 180 seconds [ 377.070845][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 180 seconds [ 377.082725][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 180 seconds [ 377.095116][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 180 seconds [ 377.108591][T13245] bridge3: entered promiscuous mode [ 377.125558][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.138337][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.145647][T13150] bridge_slave_0: entered allmulticast mode [ 377.170308][T13150] bridge_slave_0: entered promiscuous mode [ 377.181307][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.188584][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.195865][T13150] bridge_slave_1: entered allmulticast mode [ 377.204378][T13150] bridge_slave_1: entered promiscuous mode [ 377.472224][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.505339][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.586839][T13260] netlink: 'syz.0.1895': attribute type 10 has an invalid length. [ 377.748452][T13150] team0: Port device team_slave_0 added [ 377.768678][T13262] tipc: Enabled bearer , priority 0 [ 377.784111][T13150] team0: Port device team_slave_1 added [ 377.914194][T13262] syzkaller0: entered promiscuous mode [ 377.920415][T13262] syzkaller0: entered allmulticast mode [ 378.043161][T13281] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 378.155554][T13286] can: request_module (can-proto-5) failed. [ 378.579360][ T5870] Bluetooth: hci6: command tx timeout [ 380.661526][ T5870] Bluetooth: hci6: command tx timeout [ 381.101667][T13211] lo speed is unknown, defaulting to 1000 [ 381.129531][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.136715][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.165057][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.184221][T13261] tipc: Resetting bearer [ 381.214528][T13261] tipc: Disabling bearer [ 381.250553][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.257774][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.285085][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.393109][T13312] __nla_validate_parse: 2 callbacks suppressed [ 381.393134][T13312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1908'. [ 381.602873][T13323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1910'. [ 381.653151][T13150] hsr_slave_0: entered promiscuous mode [ 381.681433][T13150] hsr_slave_1: entered promiscuous mode [ 381.691042][T13150] debugfs: 'hsr0' already exists in 'hsr' [ 381.696844][T13150] Cannot create hsr debugfs directory [ 381.718459][T13323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1910'. [ 381.752077][T13327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1911'. [ 382.015112][T13330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1912'. [ 382.036085][T13330] unsupported nlmsg_type 40 [ 382.068655][T13324] lo speed is unknown, defaulting to 1000 [ 382.305388][T13330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'. [ 382.739253][ T5870] Bluetooth: hci6: command tx timeout [ 382.934163][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 382.990777][T13352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'. [ 383.038534][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 383.055747][T13352] netlink: 'syz.0.1919': attribute type 5 has an invalid length. [ 383.101234][T13150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 383.184519][T13150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 383.217247][T13150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.283869][T13150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.797749][T13385] lo speed is unknown, defaulting to 1000 [ 383.826906][T13381] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 383.883050][T13150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.127059][T13150] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.218556][T13324] lo speed is unknown, defaulting to 1000 [ 384.263691][T13405] bridge5: entered allmulticast mode [ 384.343091][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.350505][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.366294][T13408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1926'. [ 384.430927][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.438297][ T6295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.656648][T13418] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 385.109120][T13433] vlan2: entered promiscuous mode [ 385.114222][T13433] bond0: entered promiscuous mode [ 385.158768][T13433] bond_slave_0: entered promiscuous mode [ 385.165227][T13433] bond_slave_1: entered promiscuous mode [ 385.324335][T13150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.591103][T13385] lo speed is unknown, defaulting to 1000 [ 385.832946][T13436] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 385.899893][T13451] lo speed is unknown, defaulting to 1000 [ 386.167762][T13456] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 386.317655][T13150] veth0_vlan: entered promiscuous mode [ 386.370357][T13150] veth1_vlan: entered promiscuous mode [ 386.456962][T13150] veth0_macvtap: entered promiscuous mode [ 386.489981][T13150] veth1_macvtap: entered promiscuous mode [ 386.545699][T13150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.581998][T13150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.603114][T13455] lo speed is unknown, defaulting to 1000 [ 386.618559][ T1155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.640030][ T1155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.714513][ T1155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.736810][ T1155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.067129][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.116878][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.138261][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 387.204041][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.213437][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.555480][T13466] netlink: 'syz.6.1937': attribute type 10 has an invalid length. [ 387.573954][T13466] team0: Device ipvlan1 failed to register rx_handler [ 387.595273][T13466] __nla_validate_parse: 7 callbacks suppressed [ 387.595294][T13466] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1937'. [ 387.626096][T13451] lo speed is unknown, defaulting to 1000 [ 387.632446][T13462] lo speed is unknown, defaulting to 1000 [ 388.210277][T13472] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 388.597621][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1941'. [ 388.648793][T13455] lo speed is unknown, defaulting to 1000 [ 388.848463][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1942'. [ 389.113154][T13487] bridge_slave_1: left allmulticast mode [ 389.134677][T13487] bridge_slave_1: left promiscuous mode [ 389.196425][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.249559][T13487] bridge_slave_0: left allmulticast mode [ 389.255471][T13487] bridge_slave_0: left promiscuous mode [ 389.271228][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.434738][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 389.669343][T13462] lo speed is unknown, defaulting to 1000 [ 389.955030][T13494] lo speed is unknown, defaulting to 1000 [ 390.289146][T13500] lo speed is unknown, defaulting to 1000 [ 391.233423][T13522] wg2: entered promiscuous mode [ 391.256985][T13522] wg2: entered allmulticast mode [ 391.592632][T13494] lo speed is unknown, defaulting to 1000 [ 391.929169][T13500] lo speed is unknown, defaulting to 1000 [ 394.085603][T13567] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1962'. [ 394.857611][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1967'. [ 395.008797][T13587] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1970'. [ 395.105965][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 395.161630][T13585] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1969'. [ 395.197486][T13585] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20000 [ 395.209790][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1972'. [ 395.282605][T13598] netlink: 'syz.0.1971': attribute type 39 has an invalid length. [ 395.345264][T13597] netlink: zone id is out of range [ 395.388565][T13597] netlink: zone id is out of range [ 395.394286][T13597] netlink: zone id is out of range [ 395.406871][T13597] netlink: zone id is out of range [ 395.429022][T13597] netlink: zone id is out of range [ 395.445798][T13597] netlink: zone id is out of range [ 395.465421][T13597] netlink: zone id is out of range [ 395.504876][T13597] netlink: zone id is out of range [ 395.520573][T13603] bridge0: port 1(erspan0) entered blocking state [ 395.527430][T13603] bridge0: port 1(erspan0) entered disabled state [ 395.556851][T13597] netlink: zone id is out of range [ 395.558826][T13603] erspan0: entered allmulticast mode [ 395.572615][T13603] erspan0: entered promiscuous mode [ 395.580587][T13597] netlink: zone id is out of range [ 395.594736][T13603] bridge0: port 1(erspan0) entered blocking state [ 395.601748][T13603] bridge0: port 1(erspan0) entered forwarding state [ 395.677591][T13601] erspan0: left allmulticast mode [ 395.705241][T13601] erspan0: left promiscuous mode [ 395.710590][T13601] bridge0: port 1(erspan0) entered disabled state [ 396.350395][T13631] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1977'. [ 397.004761][ T30] audit: type=1800 audit(1757898424.300:7): pid=13623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1977" name="memory.events" dev="tmpfs" ino=333 res=0 errno=0 [ 397.167753][T13644] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1982'. [ 397.274778][T13644] bond0: entered promiscuous mode [ 397.314272][T13644] bond_slave_0: entered promiscuous mode [ 397.349614][T13644] bond_slave_1: entered promiscuous mode [ 397.373701][T13644] bond0: left promiscuous mode [ 397.388637][T13644] bond_slave_0: left promiscuous mode [ 397.414316][T13644] bond_slave_1: left promiscuous mode [ 397.490026][T13651] netlink: 'syz.6.1982': attribute type 13 has an invalid length. [ 397.524358][T13651] netlink: 'syz.6.1982': attribute type 17 has an invalid length. [ 397.621301][T13654] netlink: 'syz.5.1985': attribute type 8 has an invalid length. [ 398.784441][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 398.972556][T13663] ip6tnl1: entered promiscuous mode [ 398.982404][T13663] ip6tnl1: entered allmulticast mode [ 399.022115][T13644] lo speed is unknown, defaulting to 1000 [ 399.751165][T13692] bridge0: Device is already in use. [ 399.979627][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 400.031509][T13688] netlink: 'syz.2.1994': attribute type 27 has an invalid length. [ 400.088075][T13688] netlink: 'syz.2.1994': attribute type 27 has an invalid length. [ 400.169265][T13691] lo speed is unknown, defaulting to 1000 [ 400.856503][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1999'. [ 400.881573][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1999'. [ 400.967422][T13644] lo speed is unknown, defaulting to 1000 [ 400.975136][T13701] lo speed is unknown, defaulting to 1000 [ 401.555815][T13691] lo speed is unknown, defaulting to 1000 [ 402.235324][T13701] lo speed is unknown, defaulting to 1000 [ 402.366949][T13736] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2006'. [ 402.558181][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2007'. [ 402.677570][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 403.629956][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 403.716174][T13758] syzkaller0: entered promiscuous mode [ 403.726508][T13758] syzkaller0: entered allmulticast mode [ 403.970692][T13767] 8021q: VLANs not supported on gre0 [ 404.116070][T13770] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2015'. [ 404.188462][T13770] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20000 [ 404.483267][T13779] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2019'. [ 404.597575][T13785] lo speed is unknown, defaulting to 1000 [ 405.427438][T13785] lo speed is unknown, defaulting to 1000 [ 406.650905][T13851] netlink: 'syz.2.2039': attribute type 31 has an invalid length. [ 406.811825][T13858] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2041'. [ 407.145777][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 210 seconds [ 407.157439][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 210 seconds [ 407.169417][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 210 seconds [ 407.180677][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 210 seconds [ 407.276709][T13873] lo speed is unknown, defaulting to 1000 [ 407.617641][T13898] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2050'. [ 407.742732][T13877] lo speed is unknown, defaulting to 1000 [ 408.274777][T13890] lo speed is unknown, defaulting to 1000 [ 408.312029][T13873] lo speed is unknown, defaulting to 1000 [ 408.851629][T13921] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2055'. [ 409.552874][T13921] team0: Port device team_slave_0 removed [ 409.592052][T13891] lo speed is unknown, defaulting to 1000 [ 409.609249][T13877] lo speed is unknown, defaulting to 1000 [ 411.076797][T13972] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2067'. [ 411.124313][T13959] lo speed is unknown, defaulting to 1000 [ 411.220322][T13890] lo speed is unknown, defaulting to 1000 [ 411.424386][T13974] netlink: 'syz.6.2068': attribute type 13 has an invalid length. [ 411.459297][T13974] netlink: 'syz.6.2068': attribute type 17 has an invalid length. [ 411.657152][T13974] net_ratelimit: 5 callbacks suppressed [ 411.657165][T13974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.794915][T13983] macsec1: entered promiscuous mode [ 411.818683][T13983] macsec0: entered promiscuous mode [ 411.825109][T13983] macsec1: entered allmulticast mode [ 411.843506][T13983] macsec0: entered allmulticast mode [ 412.573283][T14003] syzkaller0: entered promiscuous mode [ 412.581194][T14003] syzkaller0: entered allmulticast mode [ 412.601594][T13891] lo speed is unknown, defaulting to 1000 [ 413.266562][T14024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.709280][T13959] lo speed is unknown, defaulting to 1000 [ 416.045781][T14051] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2085'. [ 416.590119][T14066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.950408][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 416.962049][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2091'. [ 417.334595][T14073] lo speed is unknown, defaulting to 1000 [ 418.052674][T14085] tipc: Enabled bearer , priority 0 [ 418.070091][T14085] syzkaller0: entered promiscuous mode [ 418.076611][T14085] syzkaller0: entered allmulticast mode [ 418.182699][T14085] tipc: Resetting bearer [ 418.208697][T14084] tipc: Resetting bearer [ 418.265255][T14084] tipc: Disabling bearer [ 418.515359][T14081] lo speed is unknown, defaulting to 1000 [ 419.300311][T14073] lo speed is unknown, defaulting to 1000 [ 419.443918][T14112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2101'. [ 419.895971][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 419.914070][T14122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.929136][T14126] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 419.937119][T14126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.963877][T14126] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2105'. [ 420.007592][T14124] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 420.289145][T14133] netlink: 'syz.1.2108': attribute type 1 has an invalid length. [ 420.299931][T14133] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 420.324522][T14081] lo speed is unknown, defaulting to 1000 [ 420.562506][T14143] tipc: Enabling of bearer rejected, already enabled [ 420.938353][T14147] lo speed is unknown, defaulting to 1000 [ 421.598060][T14163] bridge3: entered promiscuous mode [ 421.616336][T14163] bridge3: entered allmulticast mode [ 421.645152][T14163] team0: Port device bridge3 added [ 421.723548][T14170] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2117'. [ 421.738596][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 421.778250][T14170] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2117'. [ 421.798293][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 421.810951][T14170] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2117'. [ 422.179525][T14177] syzkaller1: entered promiscuous mode [ 422.191948][T14177] syzkaller1: entered allmulticast mode [ 422.483762][T14147] lo speed is unknown, defaulting to 1000 [ 422.672278][T14181] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 424.391962][T14206] netlink: 'syz.5.2127': attribute type 5 has an invalid length. [ 424.688882][T14209] erspan0: entered promiscuous mode [ 424.731772][T14209] erspan0: left promiscuous mode [ 425.035985][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 425.174677][T14225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2133'. [ 425.184212][T14225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2133'. [ 425.218274][T14225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2133'. [ 425.234037][T14230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2136'. [ 426.334740][T14278] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 426.389104][T14279] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 426.609072][T14287] siw: device registration error -23 [ 426.644114][T14289] tipc: Enabling of bearer rejected, failed to enable media [ 427.067219][T14302] __nla_validate_parse: 2 callbacks suppressed [ 427.067240][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2152'. [ 427.092734][T14302] bond0: (slave rose0): refused to change device type [ 427.910382][T14326] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2161'. [ 428.044071][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2163'. [ 428.571017][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 428.665593][T14364] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 429.506224][T14385] netlink: 'syz.2.2177': attribute type 13 has an invalid length. [ 429.772405][T14385] lo speed is unknown, defaulting to 1000 [ 429.989166][T14394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2179'. [ 430.399266][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2182'. [ 430.408538][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2182'. [ 430.482369][T14407] netlink: 'syz.5.2181': attribute type 13 has an invalid length. [ 430.495937][T14407] netlink: 'syz.5.2181': attribute type 17 has an invalid length. [ 430.601417][T14410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2184'. [ 430.633836][T14410] openvswitch: netlink: Key type 784 is out of range max 32 [ 430.663832][T14407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.687063][T14402] xfrm0: entered promiscuous mode [ 430.719042][T14402] xfrm0: entered allmulticast mode [ 430.736205][T14410] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2184'. [ 430.785254][T14410] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2184'. [ 430.825246][T14412] lo speed is unknown, defaulting to 1000 [ 431.550266][T14385] lo speed is unknown, defaulting to 1000 [ 432.611189][T14412] lo speed is unknown, defaulting to 1000 [ 432.659188][T14446] lo speed is unknown, defaulting to 1000 [ 432.937099][T14459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.168814][T14446] lo speed is unknown, defaulting to 1000 [ 434.273462][T14472] netlink: 'syz.2.2201': attribute type 13 has an invalid length. [ 434.292676][T14477] kthread_run failed with err -4 [ 434.325754][T14472] netlink: 'syz.2.2201': attribute type 17 has an invalid length. [ 434.650021][T14472] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.753732][T14472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.783295][ T5952] lo speed is unknown, defaulting to 1000 [ 434.802740][ T5952] syz0: Port: 1 Link ACTIVE [ 434.807468][ T5952] lo speed is unknown, defaulting to 1000 [ 435.010423][T14486] openvswitch: netlink: Message has 4 unknown bytes. [ 435.436707][T14502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.499120][T14502] __nla_validate_parse: 2 callbacks suppressed [ 435.499142][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2208'. [ 435.723844][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 436.465432][T14517] xt_limit: Overflow, try lower: 271964/0 [ 436.820675][T14539] syzkaller0: create flow: hash 1177658131 index 1 [ 436.862548][T14538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2220'. [ 436.989992][T14541] tipc: Started in network mode [ 436.995013][T14541] tipc: Node identity 3a45b85c00bc, cluster identity 4711 [ 437.003269][T14541] tipc: Enabled bearer , priority 0 [ 437.016898][T14530] syzkaller0: delete flow: hash 1177658131 index 1 [ 437.126356][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 437.229629][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 240 seconds [ 437.248709][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 240 seconds [ 437.261426][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 240 seconds [ 437.273246][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 240 seconds [ 438.119690][ T43] tipc: Node number set to 989444188 [ 439.500274][T14548] wg1: left promiscuous mode [ 439.505153][T14548] wg1: left allmulticast mode [ 439.515146][T14548] tipc: Resetting bearer [ 439.522255][T14548] syzkaller0: left promiscuous mode [ 439.527608][T14548] syzkaller0: left allmulticast mode [ 439.537560][T14548] veth11: left promiscuous mode [ 439.565549][T14548] bridge3: left promiscuous mode [ 439.570921][T14548] bridge3: left allmulticast mode [ 439.593911][T14543] hsr_slave_0: left promiscuous mode [ 439.616948][T14543] hsr_slave_1: left promiscuous mode [ 439.693418][ T1087] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.743710][T14541] tipc: Disabling bearer [ 439.791638][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 439.836894][ T5234] udevd[5234]: worker [5875] /devices/virtual/block/nbd0 timeout; kill it [ 439.889675][ T5234] udevd[5234]: seq 15345 '/devices/virtual/block/nbd0' killed [ 439.965730][ T1101] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.019845][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'. [ 440.046956][ T1101] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.116150][ T1101] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.791018][T14617] netlink: 'syz.5.2240': attribute type 15 has an invalid length. [ 441.045670][T14624] lo speed is unknown, defaulting to 1000 [ 441.166084][T14629] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 441.173867][T14631] openvswitch: netlink: Multiple metadata blocks provided [ 441.200551][T14631] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.213858][T14631] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 441.846279][T14628] lo speed is unknown, defaulting to 1000 [ 441.850644][T14652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.911172][T14660] geneve3: entered promiscuous mode [ 441.916454][T14660] geneve3: entered allmulticast mode [ 442.710289][T14690] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2257'. [ 442.927407][T14661] lo speed is unknown, defaulting to 1000 [ 443.131032][T14624] lo speed is unknown, defaulting to 1000 [ 444.050713][T14704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.753985][T14628] lo speed is unknown, defaulting to 1000 [ 444.805940][T14661] lo speed is unknown, defaulting to 1000 [ 445.140947][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 445.167713][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 446.264031][T14757] lo speed is unknown, defaulting to 1000 [ 448.018892][T14786] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2279'. [ 448.020316][T14757] lo speed is unknown, defaulting to 1000 [ 448.618356][T14811] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 448.630426][T14818] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2286'. [ 448.841205][T14811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 449.283503][T14821] lo speed is unknown, defaulting to 1000 [ 449.740661][T14842] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2293'. [ 450.039915][T14851] netlink: 'syz.5.2297': attribute type 1 has an invalid length. [ 450.048602][T14851] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2297'. [ 450.415142][T14855] lo speed is unknown, defaulting to 1000 [ 450.661774][T14865] netlink: 'syz.1.2299': attribute type 10 has an invalid length. [ 450.751017][T14871] sctp: [Deprecated]: syz.5.2298 (pid 14871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.751017][T14871] Use struct sctp_sack_info instead [ 450.807793][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'. [ 451.244321][T14821] lo speed is unknown, defaulting to 1000 [ 451.413011][T14886] netlink: 'syz.0.2304': attribute type 12 has an invalid length. [ 451.431914][T14886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2304'. [ 451.859475][T14855] lo speed is unknown, defaulting to 1000 [ 451.951191][T14907] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 451.968702][T14907] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2310'. [ 451.990434][T14907] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2310'. [ 453.749583][T14954] xt_l2tp: v2 tid > 0xffff: 37482740 [ 454.877576][T15018] lo speed is unknown, defaulting to 1000 [ 455.013272][T15023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2337'. [ 455.214171][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2339'. [ 455.417742][T15018] lo speed is unknown, defaulting to 1000 [ 455.765051][T15040] netlink: 'syz.6.2341': attribute type 1 has an invalid length. [ 456.156115][T15058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2346'. [ 456.361758][T15067] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 456.441375][T15074] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2348'. [ 456.473614][T15075] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 456.745704][T15085] netlink: 'syz.1.2351': attribute type 13 has an invalid length. [ 456.780538][T15087] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 456.798668][T15085] netlink: 'syz.1.2351': attribute type 17 has an invalid length. [ 457.069175][T15085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.090090][ T5952] lo speed is unknown, defaulting to 1000 [ 457.104210][ T5952] syz2: Port: 1 Link ACTIVE [ 457.171886][T15100] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2354'. [ 457.191028][T15091] lo speed is unknown, defaulting to 1000 [ 457.935318][T15119] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2363'. [ 457.986960][T15123] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2363'. [ 458.468688][T15127] lo speed is unknown, defaulting to 1000 [ 459.033954][T15091] lo speed is unknown, defaulting to 1000 [ 459.091069][T15147] lo speed is unknown, defaulting to 1000 [ 459.297452][T15151] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 459.433541][T15151] bond2: entered promiscuous mode [ 459.438823][T15151] bond2: entered allmulticast mode [ 459.444648][T15151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.799269][T15162] tipc: Started in network mode [ 459.804570][T15162] tipc: Node identity 26ca776b88aa, cluster identity 4711 [ 459.813187][T15162] tipc: Enabled bearer , priority 0 [ 459.823608][T15162] syzkaller0: entered promiscuous mode [ 459.833958][T15162] syzkaller0: entered allmulticast mode [ 459.900400][T15162] tipc: Resetting bearer [ 459.937539][T15161] tipc: Resetting bearer [ 459.970262][T15161] tipc: Disabling bearer [ 460.144848][T15127] lo speed is unknown, defaulting to 1000 [ 460.215875][T15147] lo speed is unknown, defaulting to 1000 [ 460.605658][T15175] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2380'. [ 460.613047][T15173] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2379'. [ 460.642837][T15175] hsr_slave_0: left promiscuous mode [ 460.685617][T15175] hsr_slave_1: left promiscuous mode [ 460.969979][T15175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2380'. [ 461.038503][T15175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2380'. [ 461.759852][T15201] lo speed is unknown, defaulting to 1000 [ 461.813188][T15208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.940805][T15217] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 462.959614][T15217] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 463.304278][T15220] lo speed is unknown, defaulting to 1000 [ 463.514780][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 463.808796][T15241] netlink: 'syz.6.2398': attribute type 4 has an invalid length. [ 463.894414][T15242] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2398'. [ 464.229773][T15244] lo speed is unknown, defaulting to 1000 [ 465.049724][T15201] lo speed is unknown, defaulting to 1000 [ 465.145186][T15262] netlink: 'syz.2.2399': attribute type 6 has an invalid length. [ 465.248781][T15260] lo speed is unknown, defaulting to 1000 [ 465.503425][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2403'. [ 465.885240][T15244] lo speed is unknown, defaulting to 1000 [ 465.921862][T15220] lo speed is unknown, defaulting to 1000 [ 466.459128][T15260] lo speed is unknown, defaulting to 1000 [ 467.299858][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 270 seconds [ 467.311001][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 270 seconds [ 467.322315][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 270 seconds [ 467.335509][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 270 seconds [ 467.941284][T15286] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2410'. [ 467.976648][T15286] nbd: illegal input index 65508 [ 468.108584][ T5869] Bluetooth: hci5: command 0x0406 tx timeout [ 468.499558][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2414'. [ 468.699581][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2415'. [ 468.985379][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2417'. [ 469.302755][T15345] netlink: 'syz.6.2426': attribute type 2 has an invalid length. [ 469.394854][T15342] bridge0: port 2(erspan0) entered blocking state [ 469.408254][T15342] bridge0: port 2(erspan0) entered disabled state [ 469.430418][T15342] erspan0: entered allmulticast mode [ 469.440386][T15342] erspan0: entered promiscuous mode [ 469.456533][T15342] bridge0: port 2(erspan0) entered blocking state [ 469.459974][T15353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2428'. [ 469.463272][T15342] bridge0: port 2(erspan0) entered forwarding state [ 469.475416][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 469.489462][T15351] erspan0: left allmulticast mode [ 469.489491][T15351] erspan0: left promiscuous mode [ 469.489690][T15351] bridge0: port 2(erspan0) entered disabled state [ 469.876599][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2434'. [ 469.986207][T15368] lo speed is unknown, defaulting to 1000 [ 470.406910][T15385] lo speed is unknown, defaulting to 1000 [ 470.408773][T15388] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2440'. [ 470.534736][ T24] IPVS: starting estimator thread 0... [ 470.628112][T15393] IPVS: using max 23 ests per chain, 55200 per kthread [ 471.022552][T15402] tipc: Enabling of bearer rejected, already enabled [ 471.059729][T15402] syzkaller0: entered promiscuous mode [ 471.083920][T15402] syzkaller0: entered allmulticast mode [ 471.106534][T15368] lo speed is unknown, defaulting to 1000 [ 471.857713][T15385] lo speed is unknown, defaulting to 1000 [ 473.310538][T15441] syzkaller0: entered promiscuous mode [ 473.337808][T15441] syzkaller0: entered allmulticast mode [ 473.408682][T15429] lec:lec_atm_close: lec0: Shut down! [ 473.451877][T15441] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2451'. [ 473.489578][T15444] netlink: 'syz.2.2453': attribute type 2 has an invalid length. [ 473.595614][ T5952] IPVS: starting estimator thread 0... [ 473.702629][T15450] IPVS: using max 23 ests per chain, 55200 per kthread [ 473.722829][T15446] lo speed is unknown, defaulting to 1000 [ 474.038118][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 475.467372][T15446] lo speed is unknown, defaulting to 1000 [ 476.016411][T15513] netlink: 'syz.0.2469': attribute type 6 has an invalid length. [ 476.057243][T15514] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2470'. [ 476.094435][T15514] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2470'. [ 476.104701][T15514] netlink: 'syz.5.2470': attribute type 1 has an invalid length. [ 476.113417][T15514] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2470'. [ 476.522188][T15518] netlink: 'syz.2.2472': attribute type 5 has an invalid length. [ 477.186913][T15536] lo speed is unknown, defaulting to 1000 [ 477.385735][T15542] netlink: 'syz.5.2479': attribute type 101 has an invalid length. [ 477.408577][T15542] netlink: 'syz.5.2479': attribute type 7 has an invalid length. [ 477.757621][T15549] netlink: 'syz.2.2481': attribute type 1 has an invalid length. [ 477.856975][T15551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2481'. [ 477.969561][T15549] 8021q: adding VLAN 0 to HW filter on device bond8 [ 478.089293][T15552] veth1: entered promiscuous mode [ 478.110890][T15549] netlink: 'syz.2.2481': attribute type 1 has an invalid length. [ 478.146353][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.157984][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.173096][T15549] netlink: 'syz.2.2481': attribute type 3 has an invalid length. [ 478.254383][T15549] netlink: 564 bytes leftover after parsing attributes in process `syz.2.2481'. [ 478.366019][T15536] lo speed is unknown, defaulting to 1000 [ 478.553432][T15566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2484'. [ 478.562093][T15564] netlink: 'syz.2.2485': attribute type 10 has an invalid length. [ 479.047325][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2490'. [ 479.082982][T15579] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2490'. [ 479.497489][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2495'. [ 479.543554][T15596] tipc: Enabling of bearer rejected, already enabled [ 479.680155][T15602] netlink: 'syz.2.2497': attribute type 10 has an invalid length. [ 497.388197][ T94] block nbd0: Possible stuck request ffff8880252b5080: control (read@0,1024B). Runtime 300 seconds [ 497.399080][ T94] block nbd0: Possible stuck request ffff8880252b5240: control (read@1024,1024B). Runtime 300 seconds [ 497.410492][ T94] block nbd0: Possible stuck request ffff8880252b5400: control (read@2048,1024B). Runtime 300 seconds [ 497.421568][ T94] block nbd0: Possible stuck request ffff8880252b55c0: control (read@3072,1024B). Runtime 300 seconds [ 512.739309][ T31] INFO: task syz.4.1756:12748 blocked for more than 143 seconds. [ 512.747194][ T31] Not tainted syzkaller #0 [ 512.752676][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.761879][ T31] task:syz.4.1756 state:D stack:25392 pid:12748 tgid:12747 ppid:5877 task_flags:0x400140 flags:0x00004004 [ 512.774945][ T31] Call Trace: [ 512.778868][ T31] [ 512.781853][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 512.786411][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.791698][ T31] ? __pfx___schedule+0x10/0x10 [ 512.797004][ T31] ? schedule+0x91/0x360 [ 512.802066][ T31] schedule+0x165/0x360 [ 512.806272][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.812301][ T31] __mutex_lock+0x7e6/0x1350 [ 512.816937][ T31] ? __mutex_lock+0x5bb/0x1350 [ 512.822297][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 512.828532][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.833832][ T31] ? __nlmsg_put+0xef/0x1b0 [ 512.839112][ T31] ? genlmsg_put+0x137/0x2e0 [ 512.843759][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 512.850205][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 512.856331][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 512.863123][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 512.871311][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 512.877481][ T31] ? stack_trace_save+0x9c/0xe0 [ 512.882986][ T31] genl_rcv_msg+0x60e/0x790 [ 512.887554][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.893279][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 512.978440][ T31] netlink_rcv_skb+0x208/0x470 [ 512.983300][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.048407][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.053619][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.098501][ T31] ? down_read+0x1ad/0x2e0 [ 513.103099][ T31] genl_rcv+0x28/0x40 [ 513.107149][ T31] netlink_unicast+0x82c/0x9e0 [ 513.125984][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 513.131942][ T31] ? netlink_sendmsg+0x642/0xb30 [ 513.137008][ T31] ? skb_put+0x11b/0x210 [ 513.142185][ T31] netlink_sendmsg+0x805/0xb30 [ 513.147031][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.152972][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 513.158427][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.163748][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.170837][ T31] __sock_sendmsg+0x219/0x270 [ 513.175580][ T31] ____sys_sendmsg+0x505/0x830 [ 513.180994][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.186345][ T31] ? import_iovec+0x74/0xa0 [ 513.191477][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 513.196200][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.202130][ T31] ? __fget_files+0x2a/0x420 [ 513.206759][ T31] ? __fget_files+0x3a0/0x420 [ 513.211993][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 513.216978][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.223049][ T31] ? rcu_is_watching+0x15/0xb0 [ 513.228591][ T31] ? do_syscall_64+0xbe/0x3b0 [ 513.233316][ T31] do_syscall_64+0xfa/0x3b0 [ 513.238282][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.243810][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.250551][ T31] ? clear_bhb_loop+0x60/0xb0 [ 513.255437][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.262135][ T31] RIP: 0033:0x7f085bb8eba9 [ 513.266591][ T31] RSP: 002b:00007f085c99f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.275697][ T31] RAX: ffffffffffffffda RBX: 00007f085bdd5fa0 RCX: 00007f085bb8eba9 [ 513.286341][ T31] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: 0000000000000007 [ 513.294933][ T31] RBP: 00007f085bc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 513.304768][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.320428][ T31] R13: 00007f085bdd6038 R14: 00007f085bdd5fa0 R15: 00007ffd67cc7868 [ 513.332779][ T31] [ 513.335927][ T31] INFO: task syz.4.1756:12749 blocked for more than 143 seconds. [ 513.380924][ T31] Not tainted syzkaller #0 [ 513.385930][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.404006][ T31] task:syz.4.1756 state:D stack:25624 pid:12749 tgid:12747 ppid:5877 task_flags:0x400040 flags:0x00004004 [ 513.418292][ T31] Call Trace: [ 513.421610][ T31] [ 513.424572][ T31] __schedule+0x1798/0x4cc0 [ 513.436682][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.443739][ T31] ? __pfx___schedule+0x10/0x10 [ 513.449676][ T31] ? schedule+0x91/0x360 [ 513.454075][ T31] schedule+0x165/0x360 [ 513.458997][ T31] schedule_preempt_disabled+0x13/0x30 [ 513.464486][ T31] __mutex_lock+0x7e6/0x1350 [ 513.469808][ T31] ? __mutex_lock+0x5bb/0x1350 [ 513.474676][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 513.480885][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 513.485923][ T31] ? __nlmsg_put+0xef/0x1b0 [ 513.491036][ T31] ? genlmsg_put+0x137/0x2e0 [ 513.495676][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 513.501945][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 513.508621][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 513.513859][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 513.519784][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 513.525896][ T31] ? stack_trace_save+0x9c/0xe0 [ 513.531309][ T31] genl_rcv_msg+0x60e/0x790 [ 513.535847][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.541281][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 513.547446][ T31] netlink_rcv_skb+0x208/0x470 [ 513.552822][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.557710][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.563016][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.568869][ T31] ? down_read+0x1ad/0x2e0 [ 513.573327][ T31] genl_rcv+0x28/0x40 [ 513.577332][ T31] netlink_unicast+0x82c/0x9e0 [ 513.582502][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 513.587786][ T31] ? netlink_sendmsg+0x642/0xb30 [ 513.593328][ T31] ? skb_put+0x11b/0x210 [ 513.597599][ T31] netlink_sendmsg+0x805/0xb30 [ 513.602643][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.608594][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 513.613568][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.619327][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.624661][ T31] __sock_sendmsg+0x219/0x270 [ 513.629520][ T31] ____sys_sendmsg+0x505/0x830 [ 513.634323][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.639705][ T31] ? import_iovec+0x74/0xa0 [ 513.644234][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 513.649529][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.654767][ T31] ? __fget_files+0x2a/0x420 [ 513.659860][ T31] ? __fget_files+0x3a0/0x420 [ 513.664596][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 513.669866][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.675463][ T31] ? rcu_is_watching+0x15/0xb0 [ 513.680817][ T31] ? do_syscall_64+0xbe/0x3b0 [ 513.685526][ T31] do_syscall_64+0xfa/0x3b0 [ 513.690311][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.695511][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.702213][ T31] ? clear_bhb_loop+0x60/0xb0 [ 513.707015][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.713256][ T31] RIP: 0033:0x7f085bb8eba9 [ 513.717686][ T31] RSP: 002b:00007f085c97e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.726833][ T31] RAX: ffffffffffffffda RBX: 00007f085bdd6090 RCX: 00007f085bb8eba9 [ 513.735117][ T31] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: 0000000000000007 [ 513.743632][ T31] RBP: 00007f085bc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 513.752141][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.760856][ T31] R13: 00007f085bdd6128 R14: 00007f085bdd6090 R15: 00007ffd67cc7868 [ 513.769378][ T31] [ 513.772453][ T31] [ 513.772453][ T31] Showing all locks held in the system: [ 513.808386][ T31] 1 lock held by khungtaskd/31: [ 513.813408][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 513.848452][ T31] 2 locks held by getty/5623: [ 513.853294][ T31] #0: ffff88802fb050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 513.898488][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 513.917985][ T31] 3 locks held by syz-executor/5866: [ 513.923326][ T31] #0: ffff88802c664dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 513.957684][ T31] #1: ffff88802c6640b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 514.018502][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 514.060399][ T31] 1 lock held by udevd/5875: [ 514.065044][ T31] #0: ffff888142bdd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 514.116536][ T31] 3 locks held by kworker/1:3/5924: [ 514.135818][ T31] 3 locks held by kworker/0:4/5932: [ 514.156424][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 514.198832][ T31] #1: ffffc9000a9afbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 514.248586][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 514.278394][ T31] 2 locks held by syz.3.1528/11898: [ 514.283654][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.308528][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 514.327501][ T31] 2 locks held by syz.4.1756/12748: [ 514.348609][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.356939][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 514.395557][ T31] 2 locks held by syz.4.1756/12749: [ 514.428434][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.436828][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 514.498634][ T31] [ 514.501031][ T31] ============================================= [ 514.501031][ T31] [ 514.547953][ T31] NMI backtrace for cpu 1 [ 514.547975][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 514.547998][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.548010][ T31] Call Trace: [ 514.548019][ T31] [ 514.548027][ T31] dump_stack_lvl+0x189/0x250 [ 514.548062][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.548086][ T31] ? __pfx__printk+0x10/0x10 [ 514.548130][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 514.548163][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 514.548195][ T31] ? __pfx__printk+0x10/0x10 [ 514.548228][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 514.548262][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 514.548297][ T31] watchdog+0xf93/0xfe0 [ 514.548332][ T31] ? watchdog+0x1de/0xfe0 [ 514.548367][ T31] kthread+0x70e/0x8a0 [ 514.548397][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.548424][ T31] ? __pfx_kthread+0x10/0x10 [ 514.548451][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.548474][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.548495][ T31] ? __pfx_kthread+0x10/0x10 [ 514.548521][ T31] ret_from_fork+0x436/0x7d0 [ 514.548547][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 514.548576][ T31] ? __switch_to_asm+0x39/0x70 [ 514.548600][ T31] ? __switch_to_asm+0x33/0x70 [ 514.548624][ T31] ? __pfx_kthread+0x10/0x10 [ 514.548651][ T31] ret_from_fork_asm+0x1a/0x30 [ 514.548695][ T31] [ 514.548706][ T31] Sending NMI from CPU 1 to CPUs 0: [ 514.705655][ C0] NMI backtrace for cpu 0 [ 514.705674][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 514.705692][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.705702][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 514.705725][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 49 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 514.705740][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 514.705756][ C0] RAX: 03ae74514686a200 RBX: ffffffff819693f8 RCX: 03ae74514686a200 [ 514.705769][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba5df RDI: ffffffff8be33c00 [ 514.705781][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 514.705792][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38c30 [ 514.705803][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 514.705814][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 514.705827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.705837][ C0] CR2: 00007f27d4707d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 514.705854][ C0] Call Trace: [ 514.705861][ C0] [ 514.705867][ C0] default_idle+0x13/0x20 [ 514.705887][ C0] default_idle_call+0x74/0xb0 [ 514.705908][ C0] do_idle+0x1e8/0x510 [ 514.705926][ C0] ? __pfx_do_idle+0x10/0x10 [ 514.705950][ C0] cpu_startup_entry+0x44/0x60 [ 514.705965][ C0] rest_init+0x2de/0x300 [ 514.705987][ C0] start_kernel+0x3a9/0x410 [ 514.706008][ C0] x86_64_start_reservations+0x24/0x30 [ 514.706030][ C0] x86_64_start_kernel+0x143/0x1c0 [ 514.706053][ C0] common_startup_64+0x13e/0x147 [ 514.706080][ C0] [ 514.723013][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 514.723035][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 514.723057][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.723068][ T31] Call Trace: [ 514.723077][ T31] [ 514.723086][ T31] dump_stack_lvl+0x99/0x250 [ 514.723114][ T31] ? __asan_memcpy+0x40/0x70 [ 514.723137][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.723160][ T31] ? __pfx__printk+0x10/0x10 [ 514.723198][ T31] vpanic+0x281/0x750 [ 514.723223][ T31] ? __pfx_vpanic+0x10/0x10 [ 514.723243][ T31] ? preempt_schedule+0xae/0xc0 [ 514.723266][ T31] ? preempt_schedule_common+0x83/0xd0 [ 514.723293][ T31] panic+0xb9/0xc0 [ 514.723313][ T31] ? __pfx_panic+0x10/0x10 [ 514.723336][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 514.723360][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 514.723392][ T31] watchdog+0xfd2/0xfe0 [ 514.723423][ T31] ? watchdog+0x1de/0xfe0 [ 514.723455][ T31] kthread+0x70e/0x8a0 [ 514.723488][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.723513][ T31] ? __pfx_kthread+0x10/0x10 [ 514.723537][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.723556][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.723575][ T31] ? __pfx_kthread+0x10/0x10 [ 514.723605][ T31] ret_from_fork+0x436/0x7d0 [ 514.723628][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 514.723653][ T31] ? __switch_to_asm+0x39/0x70 [ 514.723675][ T31] ? __switch_to_asm+0x33/0x70 [ 514.723697][ T31] ? __pfx_kthread+0x10/0x10 [ 514.723721][ T31] ret_from_fork_asm+0x1a/0x30 [ 514.723760][ T31] [ 515.047743][ T31] Kernel Offset: disabled [ 515.052062][ T31] Rebooting in 86400 seconds..