last executing test programs: 9.179382616s ago: executing program 1 (id=2808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) (async) 8.261286169s ago: executing program 1 (id=2817): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000002000000000000000e87e6e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x80000000000000}, {0xfffffffffffffffc, 0x0, 0x1000000}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3], &(0x7f00000002c0)='syzkaller\x00', 0x400001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9a4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xfffffffc}, 0x10, 0x0, r5}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 6.690007727s ago: executing program 2 (id=2825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000800000000000000000000fe003e8e000000000000003b8879360000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000e56f0a00000000000073013d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000ff0300000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000006000000000000000085000000950000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @null, @null]}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x320) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 6.525740881s ago: executing program 2 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x6c, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r11, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r11], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r13 = socket(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c04}, 0x40c4) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x300, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e6301423e37ff4a286545a6aaf8c5ad0eb47c26f52215a4e0c727c3a41c28898b1728c72"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @local, 0xd090}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9810}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x402}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1317}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4aa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa712a060}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x454}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) 6.156637823s ago: executing program 2 (id=2828): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x27, 0x3, 0x5) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000003600000095ff080000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd5a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xb0, 0x0, &(0x7f0000000840)="f7edad0000000004000000000000af4b87f68625461714f01c929f144c13f5624925149adad8986a660ee7ae2b990890a75212db9d9617ec3fe631f1a5f2ffba7ebe6bd3c4c8dbe85bf3392ab7d2ab91d44261b3e10100d1ce06e2f1defa1c02f0b10477570f3715cd57bc436f622b62b5c6bd9fa37dddda508fe4b62f94bca108a89db111cde05e66ac6a90b980ded2a6227831da2a9c3d5fc98c10020000000000000055b6e734e2bd27c37e50216b", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x6}, 0x50) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fcffffffffffffff00000000000000000000000000000000000000000000004425257d65757d539dd25e000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000fdffffffffffffffdd020400400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ff010000000000000000000000000001000000000000ff00000000000400000000000000fc02000700000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001"], 0x23c}}, 0x28000080) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r5, 0x1, 0x4, 0x0, &(0x7f0000000500)) unshare(0x24020400) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4000800}, 0x4000042) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x58, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, @in6={0xa, 0x4e20, 0xda, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={r11, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x5, 0x9, 0xfffffff9, 0xd8, 0x4, 0x5d}, &(0x7f0000000200)=0x9c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r10, r9, 0x25, 0x14, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r12, 0x8004b708, 0x0) 5.967146875s ago: executing program 2 (id=2829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) write$tun(r0, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x3, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0xfffffff8, 0x1000, 0x9, 0x5, 0x6, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x1000b, 0x40, 0xbed4, 0x8, 0x3, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4008, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x9, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x1, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x40000002, 0xfffffffe, 0x84, 0x100, 0x5, 0xffff, 0x81, 0xb, 0x5, 0x20006, 0x9, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) unshare(0x400) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4091}, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x48, &(0x7f0000000000)={0x7, 0x7, 0x1}, &(0x7f00000002c0)=0x28) setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f00000001c0)=0x1215, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 5.340711508s ago: executing program 2 (id=2831): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500000001000000"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvmsg$qrtr(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x140}, 0x38, 0x40010042) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008894}, 0x4c010) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 5.03522811s ago: executing program 1 (id=2832): r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@loopback, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000380)) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(r6, &(0x7f0000000480)={0x2, 0x0, @local}, &(0x7f00000004c0)=0x10) (async) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000500)="90653c23db41eaf100b222de91dba1975c27ccc20412b4e64e630cb228280be6a6329505a9c6caa723c4a7449b44696fde6f1086aab9aa6346912b048c4a31b160385062227a085fffc01353be56d0bcac512210df972edbd7f372f6cf036a19b9a8334db96460c5d5dd22e21bfe1e1e81c3d6675c136d9ce68e6753bb18eaed859371a2b41645ab3d340df1dab8a371", 0x90}, {&(0x7f00000005c0)="484435549aea4cc7873f0ffcda7c30523459876dd5e9c7b030994f6a6a81e6f64d11f154a428ba1a16d464c956da0ccb658df18b159195a05ec5fc0cc77a360b21372df914a19e56622d5fff6f6760254413b092389fa3c84380237af49fbe33303ea6dd3abd0aaa7ae3f7c47e4687005a11b5282a5026df019527ae32cb90a6a186095fc50f46f66ef90238d7718aaa911bca0fc9ca92b9f2d33063faac7fe96da4570494080b0d7aaa32d988dac3029385fbfeb439b566c1b2b9acce0d4879e4b96fbf2f6dee31c581a11e373b4d3f9100c068e402", 0xd6}, {&(0x7f00000006c0)="d0586e6186a1b07e22dc3741f41155ed0da89f68719b1920414109c32fc5f5c099ffc574f11327e88f6dd6d2db2abda0c2a8eee4ca85772a4477d025d179aa82860d6c49ca4101b3c81be181c811605d2ac3f3cc08d67dc9a73286f2556a0be92d", 0x61}], 0x3) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r7, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000855}, 0x408c4) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000008c0)={'pim6reg1\x00', {0x2, 0x0, @multicast2}}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008041}, 0x40010) (async) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x10, 0x3f5, 0x8, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) (async) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000b00)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000b40)={'some', 0x20, 0x401, 0x20, 0x8000000000000000}, 0x2f) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0xce7f70b5b90b53f7}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r10, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20840}, 0x4000000) (async) recvmsg(r5, &(0x7f0000001100)={&(0x7f0000000dc0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e40)=""/182, 0xb6}, {&(0x7f0000000f00)=""/3, 0x3}, {&(0x7f0000000f40)=""/197, 0xc5}, {&(0x7f0000001040)=""/48, 0x30}], 0x4, &(0x7f00000010c0)=""/50, 0x32}, 0x2) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, r11, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x68, 0x3, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1000}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004000}, 0x4004) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004700)={0xffffffffffffffff, 0x0, 0xa1, 0x1000, &(0x7f0000002600)="7b2929a5dd13cb22d463a01cb890c7dfc875fb78086043865bfc997a7768f300c544c8b157a6bf0a4dba04caf2c6048ef1ab8b21c4c70d2172b7106e93f22a68f56e02e7341ee886c4afd54eba013fbb2c260c4bc728c41b10a2a45e554ec38f14b46ab4ceb635884037d8ac291b71a4ae5ce651b49dc67b862e471310f99f7fb392f6e9ef58b62c74c8b157c5f0aa34d514fdd06b3e10c0bcbc8bd22766f785ca", &(0x7f00000026c0)=""/4096, 0x2, 0x0, 0x1000, 0x33, &(0x7f00000036c0)="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", &(0x7f00000046c0)="cfda7c9816c3ebe0dd6bd8b8d5ff644bf0eee3cdac8d5feabfb82d4dc5c228626ac388fa14b8d6a4ead24cfd9dc51b121401c3", 0x0, 0x0, 0x301}, 0x50) 4.767903832s ago: executing program 1 (id=2835): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x8, @private1, 0x983}], 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x7600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0xe, 0x2, 0x0, 0x3, 0x8, 0x9}}, {0x16, 0x2, [0x5, 0x8001, 0x1, 0x9, 0xe, 0x5, 0xd, 0x3a56, 0x6492]}}]}]}, 0x5c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x0, 0x1a, 0x0, 0xfffffffd}, 0x28) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) 4.113734456s ago: executing program 4 (id=2839): unshare(0x20000400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000008a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10003}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x82) ioctl$PPPIOCGIDLE(r0, 0x4004743c, 0x0) 4.061204131s ago: executing program 3 (id=2840): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) (async) unshare(0x2c060000) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}]}]}, 0x78}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907020000000000000007020000", @ANYRES32=0x0, @ANYBLOB="07000d8005"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) (async) unshare(0x24020400) (async) r6 = accept$packet(r3, 0x0, &(0x7f00000000c0)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfdfffc80, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) (async) getsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.391652489s ago: executing program 3 (id=2841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000090000dd0a0000000000007301a300000000009500000000000000425e494e53a90f38f870e056d03b2010633dee8a3a6601dbd212"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) write(r0, &(0x7f0000000580)="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", 0x1000) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, &(0x7f0000000000)=0x9, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={r6, 0x87a}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000001880)={r6, 0x1000, "4edebf267f9fbf37e738088b69329d169aba6327494586a36d0e4aae108eed5564db60841654681d6acded28b8d4dc1b380a0ce544ff535997b0c38798c073b2325fc2356d99ebdb6e32f2eca20898e55985c09a3e87b48300bbd63f28218c9b4ab21e4f730dc3e0d2d4771fb1f1d6a2710a01a577c55c1b3d78a91a2c0138e75419ee68b6e8adb6fd7bc1f263b59c2acbbe7a6885682b9736a6452dcb0f18f58a1913ffbd55c62dda7a286e79b6362820aaa7f14cc0edb04f67504904a59c3594d2aa717e413c9fd0eb6ab8667628d15b4f782f0e7c9b846b94caed741f7f2b353f24537129e208491bd8475a53de1a72fd0c6b763012bfd52f71f3e70ce9cb1316340d5a7daf27878ff3f72fed45e113f4889683f3da9f4f57644763a73ca807ebfa6e9349ad034996effb8ee75cd82e8345ea9aa9aa0ba65ef91d76acf608201e3bf2ffa2397857e67efa4683847c19c4fedaf02ec69d67ec823c7ca45a65ac8a8c0c86eaf0aba7b10ad3c7535505743e27abb2e7482c997db70f12dcdf360f30c425b2295378c72e6a2b1a5bd78aabf46082cf9a98d1038fb203daec0b38a83bf2dac62c741d28b320938dd6fbad1dd0f80ec1e7c9a6105b8886c02a09e2be02ebd892792210fe55e4bf2a18b5d45dc8591f8ec49d8ed71ca6c79699cdc8b4b9ed7561b6aea97cdc7b629ab319d0196fe2e318bac0a65e3e383b0022e23452811daaaef89a9dea9303f83f5151060d33c04460189f8676abe556cfe0cd2b2c87874956fd8014bfaa8be73d239791abc386f0aa8528d85587f26ba88736e29a2ccc3870ec4c25567233105d291de07663ee72187a13c00897cdfd73ad44d35bd9eb7e7ab065add56f77ec6f1abaf52010b2d6510d8d5dbaf1601b62b4a9b9e1d4c33eff1a05b2fa87a570e3eef817401c1508240582eb298bb603ec8e0d09ea6e2acd1bbb750704f67c540b73d165bd68d530617bb075d8fef348b4197146603b206b1b85c89c7b877b397897cc7aedc0a8629dee946089a76f11c063000aee4c300f083b7b9a0a980f097c32c398862f2173de8c4de44fc10a4672b2a9a3ea2c6f9f39dfe89b2187adb2f1364b03dffa736a6a9ca8ea053add079edb86e5d9b8a53e869cb87072e1634bccf7b2297ba4b795c5f181eba88a980006bc4fcdd1d016f81a8c8d72f42dcf4dbe87a1a9e0a698436882ab2254c7651b1c46f431f6aa7048efc8a19b50fc8efdebb98f58c8e3706e715550b4053ab6db94acc2c2e01a7e461fff10d7f4aaedee02bf8dd73d26bf5ee7aa25ab11f3a41b1cdaf618367b0e15ab5e7edad1a885fc86700b27cde8481bfbe258ddf48733f8f866d97ef04a745c1a51275727e2d1ba9b0a1fe58488e7d25364b2611932978d1657cddbabb1e55b8bf1675b8ff3d28a6c97edabfe4eceffa9a00d7f2abc9ce9f6876b6cd47909e89f53a975976f54971c6e60c674e23a30860386f8f6a90e6edcfa190906cad205e38dada73feafa081f54b0e3ae32d73303242b8f8d19a8fae59abf66e3681a194b739bfdc824ec33b31f8d683cb3b42fb3db33ecb12c68cf70a1bbf42afe51473b032096b657c0a46c6e4d0265b7efd0618f4f184636525ddeb9e5bbe04f2cc66bf26a0f5f9121f4ff2c3e6e85670a29cb48d7655fe615967639a127040a5e304a34cf7c1d450302453aba6d7b24ee278fbe1f86729fa5f9aacb446601b967c3cb60902e4c6c73a212b35bf98fa221c669a8aee14987fe336f45c400ba48c6e7ed5817ace9bfa27a7b0e6f0ef8c1b909600edd91e745f6be187aa1d719291ceaba1fa81175a611a85dc7ed29d4a9a96b6450c882748bb809b18eb4c102944d56b64fa0018071e38605a97506c9ae2d6ff378ed364eaffbba6b1f5e9e30de41df6e7fbe35289c22242da932469504dcf8a59858eabed26a5fe65dc37795ab52ed0e9b7654745fdf5a06bba59bee9d69bbe4e4ee26d1935f5e7ff35426ba0af6756d19ffc1f9aa821f5590e2606098e4f2b8ecdd1299f89127b14ef90f3e9c6025b558bbcc922e33d41d17e282ce9c4dc7b3f656244483602048396cb117ec6ddef031596f83009c91b339230c4a7127d8181b1595680347084ed5753b130ee841c5797fa28b367600f2fd1c01267aa6ae911304299f8edbbf557227a58a06d66467dee8af396c417c2f23a16fc0624417cc13fc9c98a99f0a0e3646dd734805c4bc8ba7f06445465413d0743949ea67a1bb68b0b93317fefaded38520b7ae09b8615bd47c2a2139675258cb5dedfedeeb807cfee9f2c58619ab991506bf9fed7b4c4f0ef05a126a87cd46233859d0dcd9f194946cfe82cdbb5520c4ab65c0a34d48928b2d10cb9b7eb330d70259923efa9998a98cdaa1a567b915f7c6c97ab1306653e9a637862b45473eb636c3f3cb1300e8456cf8fbfda375d90b0d801fe489cbd38c0d7b0527cd8e963bd26807bdce6d3f49a0a6d65e7b4a98f4045c773892ca822b752789f746358c44faa31e37b3899ddfde89a1ccec399424200b85aaf1e2618f216ea39020fa10dfa3ca782e662386655b4edf66ec48738aa32828260f785d4148080c4bb2be692fd67f940f6f6d6b6df0776279b699d7d12f8110d154f9d2159a79d69279084ee17de271b86ac63eecbbc221df52e2f430e58609e8980a298d748f046de3e199c2e9b0690a52cc15d1827b121c1b15820826cda7279228919515dee209d364ca268e59933096c536c8dadd0b86069e11cf07e09b72ad7958ced229fdc6d310ec5b8ccaa57357c9be3ea878a1e611a20bb64ce215e1d9ae773db9ccd855045e1b74f9abe9dbc86db9f95da0da64a7c1e2bcf6dd5f7d2ae86d01424b28f5b30b2df9559c4069f07fa895c56db8b1a9942f9c83960343ed0c4469720dbc75e9031c16f2bc584c5ee73985d3a5cfc3d95a66c1f78f37561e977df6e85beb7019256b80d4144f013f2b8ef2aa4c4f159a8833a542e468d5d4e9ed0ef827ee636cb3b5d8f8a928be6367fefbb4295495e8ec30f46b83b8d62048afed2528049e0e758464f148ca21b5ab06c5251d2f0e7c1927763532b62ec7dd730536c8c1672feb89bb52103448e2fbd94bc92cdcdce8a6e9ebde3c634b91f29ab3f3fb1773d95f696ebc05be86f3297841c097b016716c25f31b2cb821c0a6d7ae98bbe328b358c6430f1cbfefd26e43e43c3b9993aa2423c6dab94e36245af9e70a293c5917d798e516891b5917c391fadce4f090aec802f3c2d04d71d044684ecc4b98fef9e84b655f76621643d651b1626e0b60ebc30f2a9711a0e21731744601d8cc9c516f96392afe4d06c45ee01e9cbfba66bbb21a70dc4b4ce2cbc157031a3444964a27cc2e48601c1c5f71c8cc979af4da9d00d7d5e47d5419a1c4f6206a57b9758ff8cbd3bee4b11ef9a7ad0b3c048ff0e68200278c196eda9a12ed4fce3269e1cde649fef6ca41259b324b647d9942770007bdb83d62e28842b41074c49fbf56e5368866cd4ff5cd12d0de567514da6955cd904ef5c6ee57901cb6edd1c40494f70b2e0ea384360aedd5785a2aabd7fe3e3660ed10b7435118640458c21e456df8754bb11f6deae5fc5a23d3c415af43f728a6a0c5b1fbc9d26f916324d9aac3a09a248fbe6844a43a8e8211c76e31a9a0049e974875573cc5bb130a7d3ac30fbf063709d581ed694fd02bd2e7dc3c745d342c8c16897b77ee325f2369c5b46e72e8ab6f0d1db53d6174571c70d2e5ed2a79c34fc54ba40928a4da3bd9540fdedeba17ca923dc9b200db49cac5391b93cff6bac262f53bd0b6779d96672874a9155102d43bdc1aad062805979c1e470469008b8be35ea0150e8841448b6bfcae2bb5dfb562652045f040b0c59d1935a742152af4ea85251516c2be037e79b2e9dfd9318296c0e8a30397e2dc0b01d381ae1f8164415ab3fde861daae23eb1207eac8f1b2fd4500254df2afce859ffa2d14e16029ee83b97cd7970d16cedc8888a3609763a58438eef24bb151fbd4f01c30c68d3fbb7789044b123d1bccab97e5016748adb307642aaa089f4f4617cd6e34e2cc11c324b811c348b735fb2435534bf619421531e3923a802c3b075a55633674dc6e405a8e8581cac3246809d1ded575df23c62862e8df7a553ca9e4b4faa1ede4aedc331fe1e475224ba391d66c03652fe4c1affb002e96953a55218e2f5b2fc2df2088bee66f5d2c1fcce0b4912b362fd4ecff7a0087d754d8de7f459aaf028bc432b67ec209e7601a1d578fc5a00ee8e8d89ca41fbcc4cdfa080e6a986cdf00be9b059a83b5f1e7b00e74e2a067f71e772e827f4e3033c557476563120ea7812e14dfcd42da5e66746e44f5df649d482d78e351cb4cb5ed832ba845de5633af8c2a94dcc90aa9388316ff68e8275ed531c4f28177d9c36c67c7a4a9d51b62545965f6597d8eaf60616e8c84c6e38094ec7fad0ab46be71b7c4baa682c7cf296dff411fab602cce35115b11ef5fd5b049ad684ffc81404db8b9399b272e3740c27981d6427a3f385d3776df47300d8f7ba2fc99d6eb210470a27e00534a12ff2466e3d27e9328db9feff0a8f0018079fcffcd6c6205bc77a9cf2b1cedf0aee86f5209008a3a462132e2ced5d2454c6cd1e01fc697e9d53b2255438ea5fbb5ad14bde146c5a96595a34227cb77fea6fb43c9bb6b3a1abbb8983cf55784ca1f38301d5cf988ed7717750c244138ec8ee5ce3933524be838b23048ea3ec38f58f9133b39ef8678e0bb96cfdde9225b788b6464d1237e060ed854384ea801708a8c2168b77f06ad8b3728f53d9ab939d0d14529e651ca66f3e7de50169ba99a844a9826f3829e24c79fee958d4330b8d14553c642cffed01b41dde2505cd4ebc8b9bc01160884bdb5120a8362a7fb4d92b22c02efd470f304243cbea45db2856cceabadee7da60b76a46422e5d34512abb72087751cf626a5fc9c159546dc675f475df2a8a5c48ea1fece2a6c390a354ea124c1d8278e81dfa9fbc12e1e7ff123874a95220de4df4c09e55b72aa4eec4eb3e92fbda149bf12b94b056b1ac13afad4ed5c5599d22fed8da556384e7a382d1c76f0050d020662c4a55d008dec29154b28f9a12f72ea5e4a6405b1e688c47dd786acf58bdb52b5c05c17b6777fe05b746524be795edd1489e94b8678be80e261ff1990bc6219d9d0bbaf5b7ecb93b1f3c29316ca8f704d6b2eb2af7491f36f0712266c00376983afc29929eb2893f3da17fd040f50a96393734de8eeef4ac91bc5fb293d7620e47b9e74ce0009b162d8487b7887ad6be90a4b1586f0bbfa9eab96967e99c4648d3e691ed968ab043c19a67197207d22e4eb0de72774a6b22798f4c642a53714cc5aa7f7c593573186111aa6982aa1bdba2cd16290655e8d709f2a473ef8f905d3bcac635bd5e461db731adcf22c44629ab2a93bbe6b2c51a4f7c4aab8b79f8ea7975cd063163f29209c7e70009f37482795a77422e2c33885e73b38c03909581570afa78467d24e71828567e3cb3540f8691283e32e7626ebaf4e108fe8941a85acb6de930b32cdb9127f5c1319a9d9215eecefe0846b5a79802cf5e562a2c8228db418f172f3eaec82424c15e28928151a7fa0825c46911f583ee92082056f81c7dbc1e5fa5f69d6fa848d7a3fdaf1681d70cc0f7749ea82b7f22ecd42eea143c76a51a1209b303526d28a191cbe9c046bd3f6520a217c499fdff94195f09864c2dd6e440c606f7bd39a1aced752ec36d6ee1aafb0d0f9e3a2240a7b191da5e1e6eb85b052fabb5c1c3d18c"}, &(0x7f0000000240)=0x1008) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r3) write$tun(r2, &(0x7f0000000040)=ANY=[], 0xfdef) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1e, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x10000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r10, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r11, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom$inet6(r11, &(0x7f00000003c0)=""/125, 0x7d, 0x2, 0x0, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000021401004631700001dcdf2508000100000000000900020073797a31", @ANYRES64=r1, @ANYRES64=r0, @ANYRES8=r12, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES8=r12, @ANYRES32=r0, @ANYBLOB="eff760"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x40810) 3.366446077s ago: executing program 4 (id=2842): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000001300000000e00000020000000000200000000000000000000000000000000002000000000000000000000000000a"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}]}}}}}}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000100), 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) close(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[], 0x6c}}, 0x0) 2.477641906s ago: executing program 0 (id=2846): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e200000000000"], 0x4b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r5, 0x2f, 0x0, 0x800, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000140)}, 0x40) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0xfffffffd, 0x4, @mcast1, @local, 0x1, 0x7, 0x8, 0x4}}) (async, rerun: 64) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x5e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) r11 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x22}}}]}, 0x58}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x1, 0x0, {{0x1f, 0x4, 0x0, 0x18, 0x7c, 0x64, 0x0, 0x40, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@end, @timestamp_prespec={0x44, 0x2c, 0x50, 0x3, 0x8, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe9}, {@local, 0x9}]}, @generic={0x86, 0x11, "01123ec3db94d747f73749461f55a4"}, @end, @timestamp_prespec={0x44, 0xc, 0x6, 0x3, 0xc, [{@local, 0x3}]}, @timestamp={0x44, 0x14, 0xe8, 0x0, 0x1, [0x5, 0x8, 0xf, 0x9]}, @noop, @ssrr={0x89, 0x7, 0x24, [@multicast1]}]}}}}}) r17 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async, rerun: 64) r19 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) bind$packet(r19, &(0x7f00000001c0)={0x11, 0x0, r18, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="90f9ceb1f6d9d42b7197010007", @ANYRES16, @ANYBLOB="000229bd7000fddbdf25060000006c0001800800030003000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r8, @ANYBLOB="140002006e657470636930000000000000000000140002006d61637365633000000000000000000008000100", @ANYRES16=r6, @ANYBLOB="14000200766c616e3000000000000000000000000c00018008000100", @ANYRES32=r12, @ANYBLOB="2400018008000100", @ANYRES32=r15, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080001103325b383686ac1ced48b4d53bb39672509133d6cf8cd742a62a92f7344781fe4db566d6624059adc05980b00000367767fff7ad520bc73", @ANYRES32=r16, @ANYBLOB="340001801400020077673100000000000000000000000000140002006261746164763000000000000000000008000100", @ANYRES32=r18, @ANYBLOB="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", @ANYRES32=r20, @ANYBLOB="1400020074756e6c300000000000000000000000140002007465616d300000000000000000c9a41614b72c6db91ee35f5d1e200000001000020069703667726530000000000000000000c4e80e7776657468315f766c616e00000000000014000200766c616e300000000000000000000000140002006e657464657673696d3000000000000014000200736974300000000000000000000000001400020076654d8b09ff11fc667a22c11adb446104b5b4f6b25fa84dc9dd764965fce5b6d7a94e6cbedfd9f89c6361b138e950816f597212ce11e74c1cb4ace045d5c255126b07aca899dbfd9816e8dee4e9e3734a2dc3cd4ce1f7dc710788f8f2897abb22ff17d5c5b46e472234d41992ef70f299cd41e2a9b86c636c08a83713fd14b44e714f45c28c6ef39df2160d3e77434f8de0b2f134cb4af0c68e45a81407ba1ed9ec0829d39774d7d3af504f3cebdfc4aa8a0c7717cc8564997bcf328306375c2b0caf61b3a866d7a381c35eca33f70c014e37ed8a4967a61ca458b3ed143b749bdd47c6176538af8bcf6f89bf0f7409b83d9760c3e5c0f2f4b4407c186c618c2ea4702ba53bc9ea94ff22a29909759e225d162d22aa2a786b6ef99de5c548f337e9bf4fe5d7d443716ef182b565a747ff77e6dff52da3b24928872a86ba7fd4d2a4a65b6a6770ea84683b3c48d2b3b9268ae5d247f4085c69ef71cc52b1d82487480c20c8b7f41a795b98432a56e610dbffe18df6cfe6a980d145e563d1cf863247b52eb9c5341844b1806e4a9f6711cae26e2befafbd3744551c5bde7efc6a277a3a58d12e8ff097898d54302a4304dc69f4ec04f51d86fc79f759ccacc464aa271a2db2cf199e71f32a0f158ee0ff24be683c1cc065775973042d3fc31193dee80f1efc"], 0x190}, 0x1, 0x0, 0x0, 0x4048891}, 0x800) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) 2.107081779s ago: executing program 0 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28020000", @ANYRES16=r3, @ANYBLOB="020027bd7000ffdbdf25010000001400070000000000000000000000ffffac1414bb"], 0x28}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004801) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r7, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) shutdown(r4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000001480)={r10, 0x65, "c38d58f316cfb1e050a05e45def314115479b42b422aa3700e14b9b555e4c13ba61e68ec25fc30ea0d76727827e3f59c64a75adea656269dce1c9a643f81cb459206bfaf8e4eb784c2bdca40b8e202c59ccc58b203696645bfefd98d2a3ba1589d13b9864d"}, &(0x7f0000001500)=0x6d) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0xfffffffe, 0x9, 0x1008, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r13, &(0x7f0000000440)="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", &(0x7f0000000300)=""/156}, 0x20) close(0x3) 1.298012637s ago: executing program 1 (id=2848): bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x8, [@struct={0xd, 0x9, 0x0, 0x4, 0x1, 0x0, [{0x10, 0x1, 0xd}, {0xa, 0x3, 0x37732058}, {0x2, 0x3, 0x100}, {0x1, 0x2, 0xb4}, {0x3, 0x5, 0xc2}, {0x7, 0x3, 0xdbb}, {0xc, 0x5, 0x6}, {0x3, 0x5, 0x5}, {0x6, 0x0, 0x6}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x1}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @fwd={0x8}, @volatile={0x1}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0x1}, @typedef]}, {0x0, [0x0, 0x5f, 0x30, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000500)=""/163, 0xf4, 0xa3, 0x1, 0x80000001}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='kfree_skb\x00', r1, 0x0, 0x8}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000140)=""/185, &(0x7f0000000000)=0xb9) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={r1, 0x0, 0xfffffffffffffff7, 0xb}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xffffffffffffffac, 0x0, 0x40f00}, 0x94) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 1.28564781s ago: executing program 3 (id=2849): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8044) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x358, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x328, 0x2, [@TCA_CGROUP_EMATCHES={0x11c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x68, 0x2, 0x0, 0x0, {{0x2, 0x9, 0xff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1760, 0x8, 0x6}, {0x0, 0x3, 0x5}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x1}, {0x4, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x80}, {0x101, 0x1, 0x5db9, 0x4, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x3}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x5}, {0x1, 0x5, 0x5}}}, @TCF_EM_NBYTE={0x10, 0x988, 0x0, 0x0, {{0xfed, 0x2, 0x4}, {0x8}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x2, 0xfff}, {0x0, 0xa, 0x0, "f994f9bf5b4628b48b43"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x2}, {{0x3}, {0x2, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_CGROUP_ACT={0x208, 0x1, [@m_mpls={0x128, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8100}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf8acc}, @TCA_MPLS_TTL={0x5}]}, {0xe3, 0x6, "be3046af001d40c717523eaa51ca18f1c0499abd461ff2ef978fe35657a827911feb3f5e87d47e56e52b940fe3324ee726e5f087fa77ab94d946edea2f7e52d725ff37705a9de6dfe2809e3f28f5ddcdeb60d55996eab7f3d55253d3d54bf653ea29b899648f9c1f6c4dcbd7a94e246efb3a93b6bbc3db44ff58c1ca47da290059112fbafed4d3fa23f0e6997a7008a2811d92e69e44221d0efbbe34eca4d8fc4ce5ea10f62e7eeae6f858b5e79eeea7147149d7b0d685819a7743066df08a55965eb2d4e570afc30d82450edbcdee256829cc2c2f2a850b01961ac5a641ed"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0xdc, 0x14, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '*[\\(]\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xc3, 0x3ff, 0x20000000, 0x9, 0xc}}]}, {0x8a, 0x6, "2a5ee997e6849fbdcdeb3fe081aa37001954b7e140e8afaf30cb7dc06ba36f2d529e83976f9b54ac123994261272b78c0cae751f653c3a187a9a7a3fb74c790d91f82dc7a1b16a14fbc39f73b9b094b41473611e986268e3b34e61586abe5d2fdb82dd0688c4d86e88338edf08e72d77c551846fd590d3236b3b6aa1d38e1712533a06c1640e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 1.159708521s ago: executing program 0 (id=2850): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000400)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000400)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701}, 0x14}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, 0x0, 0x4080) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000900)={0x200, 0x18, '\x00', 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100026bd7000fcdbdf250c0000000800030023e0acf3dd13815022695975aa96ba6c234caa4a26ba129f1a4940631e6bf760f5ee7d469332c7eac105a7527ff7bc85c676eaaba526482a9aa492fc06eb4aa78ae5a227e1306a5240f211f29b467553d313f7632d4e9a98ce3a2ebcd1", @ANYRES32=r9, @ANYBLOB="0c009900000000004300000009000700328e1b25a60000000800090001ac0f000a000600080211000001000013000a00b0a25325bdf471cdcf1fa61f9a0b41000800370002000000"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20008800) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) (async) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000000000d00000000000000000000000d04000000000000000000000200000000040000000000000f0300"/77], 0x0, 0x4d}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000005000000000000000000000d00000000000000000000000d04000000000000000000000200000000040000000000000f0300"/77], 0x0, 0x4d}, 0x28) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)}}], 0x2, 0x20040140) (async) sendmmsg$inet6(r10, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)}}], 0x2, 0x20040140) accept(r10, 0xfffffffffffffffd, &(0x7f0000000680)) 1.03850218s ago: executing program 1 (id=2851): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="58200000100037e2ff000000335d84d414857d74325b", @ANYRES32=r3, @ANYBLOB="83000700000000003800128008000100677265002c00028008000600ac1414bb0500160001000000060010004e21000005000a000000000006000e0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, &(0x7f00000004c0), 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0x2, 'syz0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=""/253, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000003d40)=""/22, 0x16}], 0x3, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000200)={0x0, &(0x7f0000000340)}) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaab969d5fa2087a3aa0180c2000002080046000018006600000084907800000c00e0"], 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={r0, 0x101, 0x6, 0xb}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000a187b639904240561e0b40fc7cf272a8c0d2c243cb41c4c5756d5a706f03839db5356ed1f7c498ef773120872b92cda58384e329ca65b12cf45072d05fb4b984251c3c7"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000000000000000000000a42b88798fa400e6d90000000000000043713a268d7c4eed868a1739707a07e08bfe57a8a9800cf2505d1036528d6bd5f78d9c147e3c272c32b9a7662ffbf3c59d7140560e7160388fbc7bcbec667f9cd651dfbdb2d99c119148cd9968"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff030000000000", @ANYRES32=r6, @ANYBLOB="000000000000800000000000020000000000000003bdaad490184c7c431ebdf5ac2f10206f95f6cbab4735ec899bbc63e557d8067da4d251e0b527569ce0fab0694cacba4aa9bdfd698afd0062cb363d39a6d9534e029d1fdef88cbc3f9879ceec8aa346615e27132f86ea1efeb9c6dba52b89979eb06ca4a282618d55e445ba38de9d8421c2af5944743164e734f19130bb02eec7f68c5f54244d3b917cdc34b1d31ed5c88d519b76d719e97a0c5fb250c82f9bc293585b696103a0ed81231ac17833700fee31f7381b7d5c909a61a70cbe2450a23fa26d483b641fec2a5f874b05353a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/182], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$inet6_sctp(0xa, 0x1, 0x84) 931.07055ms ago: executing program 4 (id=2852): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) socket$inet6(0xa, 0x2, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) unshare(0x28000600) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xf0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_proto_private(r8, 0x89e0, &(0x7f0000001080)) getsockopt$netlink(r3, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x1c, 0x52, 0x401, 0x0, 0x0, {}, [@NETCONFA_PROXY_NEIGH={0x8}]}, 0x1c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r9, 0x34, 0x0, @val=@iter={0x0}}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 902.878876ms ago: executing program 2 (id=2853): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) socket$inet(0x2, 0x3, 0x30) r1 = socket(0x1e, 0x4, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000480)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014000280080002400000000d08000440000000150900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a2acb207ed2939255cbb97db46a07d0c4b5871ccc710b940fed2e83e708276ec429b20d05b422240b0b48edc0d05dd51138e31ebcddb7244d835f3519e21c1303bcdbb75ebdafde644423e923677736884a"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x48001) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000026c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) 827.98615ms ago: executing program 0 (id=2854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x0, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010025bd7004fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="30080600034a04000a000100aaaaaaaaaa1f000044001680400001800c0007"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 468.821776ms ago: executing program 0 (id=2855): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@netrom, @rose, @netrom, @default, @bcast, @bcast, @remote, @default]}, &(0x7f0000000240)=0x48, 0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0b00fe1d97ff80011898879e416be02000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x3, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) recvmmsg(r7, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x9d}], 0x1, 0x170, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r10, {0xd, 0xfff2}, {0x1, 0xe}, {0xc, 0x4}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x9b}, 0x1, 0x0, 0x0, 0x30004061}, 0x8014) 463.817863ms ago: executing program 3 (id=2856): r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000080)) (async) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000200)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x6, @random="76d9cbf322d6"}, 0x2c, {0x2, 0x4e24, @loopback}, 'veth1_to_batadv\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="615b579c5b149c8dc94917b0ffa882c786f0baa32a542ff2b3315ef06fffcd30ff0dcdfaed1a7c6791fef211c81da9f6b2fa2671d44ad601dc84c02f1f6b403e8fbe9a7ccd57ae08b1b7e68eb4f6746bd3b567414f98c5c1c3f096a4e58fe3520c2616a35591f436c351dd9d", @ANYRES64=r2, @ANYRES32=r2, @ANYRES64, @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'veth0_virt_wifi\x00', 0x2}, 0x18) 321.304867ms ago: executing program 3 (id=2857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000800080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="8c", 0x1}], 0x1}}], 0x1, 0x8000) sendmmsg$alg(r5, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x5f501}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x5, @vifc_lcl_ifindex=r10, @rand_addr=0x64010100}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4ce26f48f683cbffd2ade49ffd277600000010000304000000000000000000000400af2d06a5e6e77eaaae83df2496b550d0fd59903e4db10b509d63b6c48fb9306f82cfd3485cc2f114c9e7b990df4427219f60ea3a993b9ddc50c9bbb2f319a168322b8038bac2d1c7ea5973a968762cf287c9cf1da74f6a0ee27a5d9b214af4e6c20b867f9a5087af5238671ec469d46071f7f0b9a8824de55f2668a128a525c84de86c5fcde73ea81403299372b52294c6ed97cc7fddfee7482eb932347ced4581e02614a47ff22ba87929dca7b3e5c1cc8b6297a28024b4a6c91f4e436092587c90f1014462874297a53748d62203b3242fa3912276ef0884e9c234525ededc9d080221280270366904856321f62a4b770000000000", @ANYRES32=0x0, @ANYBLOB="58120000000000002c0012800b00010062726964676500001c00028008001c000500000008001a000000008008001b00f8ffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 317.408753ms ago: executing program 4 (id=2858): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000100)=""/223, 0x26, 0xdf, 0x1}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 204.079064ms ago: executing program 4 (id=2859): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 96.448374ms ago: executing program 3 (id=2860): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) unshare(0x68040200) r0 = socket(0x2c, 0x800, 0x1000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'erspan0\x00', r3, 0x8, 0x20, 0xff, 0x1, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x67, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xe6, 0x0, 0x2, [0x9, 0x1, 0x9c, 0x1000, 0xffff]}, @timestamp_prespec={0x44, 0x3c, 0x2b, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x5}, {@local, 0x5}, {@local, 0x8}, {@remote, 0x9}, {@remote, 0x5}, {@rand_addr=0x64010101, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @lsrr={0x83, 0x7, 0x34, [@multicast1]}, @cipso={0x86, 0x22, 0x2, [{0x1, 0xa, "186ce74a36948d80"}, {0x6, 0x6, "5238f3bb"}, {0x6, 0xc, "6beefd93ca6f5d511367"}]}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r4 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002cbd7000000000002c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x8040) socket$inet_sctp(0x2, 0x1, 0x84) 96.026776ms ago: executing program 0 (id=2861): unshare(0x24020400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40483, 0xc132}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xa, 0x3, {{0x28, 0x4, 0x0, 0x4, 0xa0, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @remote, {[@generic={0x0, 0xf, "3566047a64f58ebb2c4c91864b"}, @cipso={0x86, 0x25, 0x1, [{0x7, 0xc, "9adc6f03155561d4b725"}, {0x6, 0xb, "25d0a023426ff283dd"}, {0x0, 0x2}, {0x1, 0x6, "ce25a5c6"}]}, @rr={0x7, 0x13, 0xc7, [@private=0xa010101, @broadcast, @private=0xa010101, @private=0xa010101]}, @timestamp_prespec={0x44, 0x44, 0x10, 0x3, 0x7, [{@rand_addr=0x64010100}, {@local}, {@multicast1, 0x3}, {@multicast1}, {@multicast2, 0x4}, {@loopback, 0x7}, {@empty, 0x7}, {@multicast2, 0x7}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2, @multicast1}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x90, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xe44f57f201e11f49}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcb}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000890}, 0x8004) 0s ago: executing program 4 (id=2862): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0x5, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@bloom_filter={0x1e, 0xab0, 0x9, 0x4, 0x0, 0x1, 0xd, '\x00', r1, r2, 0x3, 0x5, 0x4, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r4}, &(0x7f0000000f00), &(0x7f0000000f40)=r3}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 589999][T10797] mpoa:mpoad_close: () going down [ 264.875463][T10856] batadv_slave_1: entered promiscuous mode [ 264.891847][T10856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1201'. [ 264.902460][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 265.010709][T10855] batadv_slave_1: left promiscuous mode [ 265.240244][T10876] netlink: 'syz.2.1207': attribute type 10 has an invalid length. [ 265.267217][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 265.294232][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1206'. [ 266.199431][T10902] netlink: 'syz.4.1213': attribute type 13 has an invalid length. [ 266.223918][T10902] netlink: 'syz.4.1213': attribute type 17 has an invalid length. [ 266.231480][T10869] lo speed is unknown, defaulting to 1000 [ 266.311947][T10909] netlink: 'syz.4.1213': attribute type 32 has an invalid length. [ 266.320424][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1213'. [ 266.408746][T10902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.420982][T10902] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.452578][T10902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.291643][T10928] batadv_slave_1: entered promiscuous mode [ 267.309923][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1217'. [ 267.321151][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 267.539895][T10927] batadv_slave_1: left promiscuous mode [ 267.927641][T10920] lo speed is unknown, defaulting to 1000 [ 268.223846][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 268.439295][T10958] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1226'. [ 268.448590][T10958] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1226'. [ 268.463186][T10957] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 268.499998][T10957] bond0: (slave wlan1): Opening slave failed [ 268.625729][T10957] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 268.660308][T10956] syz.3.1226 (10956) used greatest stack depth: 17864 bytes left [ 268.938554][T10942] lo speed is unknown, defaulting to 1000 [ 268.989221][T10974] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 269.026338][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 269.332058][T10986] batadv_slave_1: entered promiscuous mode [ 269.594869][T10978] batadv_slave_1: left promiscuous mode [ 269.617635][T11002] ip6gretap1: entered promiscuous mode [ 269.860518][T11011] netlink: 'syz.3.1235': attribute type 12 has an invalid length. [ 269.987148][T11014] __nla_validate_parse: 2 callbacks suppressed [ 269.987172][T11014] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1238'. [ 270.135382][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 270.647482][T11051] batadv_slave_1: entered promiscuous mode [ 270.680308][T11051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1248'. [ 270.710795][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 270.755294][T11054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1250'. [ 270.756390][T11050] batadv_slave_1: left promiscuous mode [ 271.966475][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1258'. [ 272.058786][T11094] batadv_slave_1: entered promiscuous mode [ 272.189777][T11086] nbd: socks must be embedded in a SOCK_ITEM attr [ 272.258046][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 272.382116][T11093] batadv_slave_1: left promiscuous mode [ 272.422583][T11104] tipc: Enabled bearer , priority 0 [ 272.454049][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 272.570666][T11105] tipc: Disabling bearer [ 272.666273][T11109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1263'. [ 272.827489][T11114] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1264'. [ 273.498046][T11126] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 273.830341][T11140] batadv_slave_1: entered promiscuous mode [ 273.854295][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 274.068414][T11137] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 274.081333][T11145] nbd: nbd3 already in use [ 274.086645][T11145] nbd: nbd3 already in use [ 274.102934][T11145] bond0: entered promiscuous mode [ 274.108525][T11145] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 274.120858][T11145] batadv0: entered promiscuous mode [ 274.127671][T11145] debugfs: 'hsr1' already exists in 'hsr' [ 274.133432][T11145] Cannot create hsr debugfs directory [ 274.153092][T11145] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 274.179839][T11145] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 274.222028][T11139] batadv_slave_1: left promiscuous mode [ 274.254066][T11119] lo speed is unknown, defaulting to 1000 [ 274.552279][T11164] geneve2: left promiscuous mode [ 274.603528][T11164] geneve2: left allmulticast mode [ 274.624805][T11164] bond1: left promiscuous mode [ 274.629635][T11164] bond1: left allmulticast mode [ 274.670927][T11164] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 274.686488][T11164] macvtap1: left promiscuous mode [ 274.705416][T11164] hsr1: left allmulticast mode [ 274.710254][T11164] dummy0: left allmulticast mode [ 274.719257][T11164] batadv_slave_0: left allmulticast mode [ 274.743922][T11177] bridge_slave_1: left allmulticast mode [ 274.757532][T11177] bridge_slave_1: left promiscuous mode [ 274.780617][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.881766][T11177] bridge_slave_0: left promiscuous mode [ 274.905342][T11177] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.089170][T11197] __nla_validate_parse: 6 callbacks suppressed [ 275.089190][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 275.678852][T11237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1297'. [ 275.869752][T11243] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 275.904370][T11243] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.1297'. [ 276.313242][T11256] netlink: 'syz.4.1302': attribute type 29 has an invalid length. [ 276.357637][T11258] ip6tnl0: Caught tx_queue_len zero misconfig [ 276.430968][T11256] netlink: 'syz.4.1302': attribute type 29 has an invalid length. [ 276.452528][T11256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1302'. [ 276.521492][T11264] gretap1: entered promiscuous mode [ 276.572328][T11265] netlink: 'syz.3.1303': attribute type 10 has an invalid length. [ 276.582645][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 276.606011][T11265] veth1_vlan: entered allmulticast mode [ 276.612508][T11265] veth1_vlan: left promiscuous mode [ 276.614350][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 276.620386][T11265] team0: Device veth1_vlan failed to register rx_handler [ 277.210030][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 277.393884][T11239] lo speed is unknown, defaulting to 1000 [ 277.517782][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 277.568975][T11312] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1315'. [ 277.590225][T11308] netlink: 'syz.3.1311': attribute type 66 has an invalid length. [ 277.742517][ T55] block nbd2: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 90 seconds [ 277.754164][ T55] block nbd2: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 90 seconds [ 277.765643][ T55] block nbd2: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 90 seconds [ 277.777092][ T55] block nbd2: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 90 seconds [ 278.108909][T11329] tun0: tun_chr_ioctl cmd 1074025675 [ 278.125787][T11329] tun0: persist enabled [ 278.134391][T11329] tun0: tun_chr_ioctl cmd 1074025675 [ 278.139739][T11329] tun0: persist enabled [ 278.155285][T11329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1319'. [ 278.164371][T11329] netlink: 'syz.2.1319': attribute type 5 has an invalid length. [ 278.203777][T11294] lo speed is unknown, defaulting to 1000 [ 279.275054][T11351] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 279.374414][T11353] netlink: 'syz.0.1326': attribute type 4 has an invalid length. [ 279.842238][T11373] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 280.098451][T11386] __nla_validate_parse: 3 callbacks suppressed [ 280.098476][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 281.109822][T11411] IPVS: set_ctl: invalid protocol: 255 172.30.1.3:20002 [ 281.539358][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 281.591308][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 282.065735][T11454] FAULT_INJECTION: forcing a failure. [ 282.065735][T11454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.079141][T11454] CPU: 0 UID: 0 PID: 11454 Comm: syz.1.1355 Not tainted syzkaller #0 PREEMPT(full) [ 282.079169][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.079181][T11454] Call Trace: [ 282.079189][T11454] [ 282.079197][T11454] dump_stack_lvl+0x189/0x250 [ 282.079225][T11454] ? __pfx____ratelimit+0x10/0x10 [ 282.079255][T11454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.079277][T11454] ? __pfx__printk+0x10/0x10 [ 282.079317][T11454] should_fail_ex+0x414/0x560 [ 282.079350][T11454] _copy_to_user+0x31/0xb0 [ 282.079376][T11454] simple_read_from_buffer+0xe1/0x170 [ 282.079407][T11454] proc_fail_nth_read+0x1b3/0x220 [ 282.079431][T11454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.079455][T11454] ? rw_verify_area+0x2a6/0x4d0 [ 282.079476][T11454] ? __lock_acquire+0xab9/0xd20 [ 282.079500][T11454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.079522][T11454] vfs_read+0x1fd/0xa30 [ 282.079544][T11454] ? fdget_pos+0x247/0x320 [ 282.079576][T11454] ? __pfx___mutex_lock+0x10/0x10 [ 282.079596][T11454] ? __pfx_vfs_read+0x10/0x10 [ 282.079630][T11454] ? __fget_files+0x2a/0x420 [ 282.079663][T11454] ? __fget_files+0x3a0/0x420 [ 282.079688][T11454] ? __fget_files+0x2a/0x420 [ 282.079725][T11454] ksys_read+0x145/0x250 [ 282.079753][T11454] ? __pfx_ksys_read+0x10/0x10 [ 282.079784][T11454] ? do_syscall_64+0xbe/0x3b0 [ 282.079808][T11454] do_syscall_64+0xfa/0x3b0 [ 282.079824][T11454] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.079858][T11454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.079876][T11454] ? clear_bhb_loop+0x60/0xb0 [ 282.079901][T11454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.079919][T11454] RIP: 0033:0x7f31baf8d8dc [ 282.079938][T11454] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.079965][T11454] RSP: 002b:00007f31bbe40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.079997][T11454] RAX: ffffffffffffffda RBX: 00007f31bb1e6090 RCX: 00007f31baf8d8dc [ 282.080011][T11454] RDX: 000000000000000f RSI: 00007f31bbe400a0 RDI: 0000000000000004 [ 282.080024][T11454] RBP: 00007f31bbe40090 R08: 0000000000000000 R09: 0000000000000000 [ 282.080036][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.080047][T11454] R13: 00007f31bb1e6128 R14: 00007f31bb1e6090 R15: 00007ffe035698c8 [ 282.080083][T11454] [ 282.490472][T11462] tipc: Enabling of bearer rejected, failed to enable media [ 282.624246][T11474] batadv_slave_1: entered promiscuous mode [ 282.641972][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 282.652856][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 282.692743][T11473] batadv_slave_1: left promiscuous mode [ 283.288968][T11502] IPVS: set_ctl: invalid protocol: 224 172.20.20.15:1 [ 283.457502][T11481] lo speed is unknown, defaulting to 1000 [ 283.705023][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 283.724720][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'. [ 284.110507][T11529] netlink: 'syz.3.1374': attribute type 21 has an invalid length. [ 284.180265][T11529] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1374'. [ 284.223780][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 284.806248][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1378'. [ 285.104476][T11562] batadv_slave_1: entered promiscuous mode [ 285.186953][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1382'. [ 285.199564][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 285.264960][T11560] batadv_slave_1: left promiscuous mode [ 285.290499][T11580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1383'. [ 285.477933][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 285.844612][T11613] netlink: 'syz.0.1396': attribute type 16 has an invalid length. [ 285.863883][T11613] netlink: 'syz.0.1396': attribute type 17 has an invalid length. [ 286.044790][ T7012] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.063980][ T7012] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.072573][ T7012] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.081884][ T7012] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.175126][T11581] lo speed is unknown, defaulting to 1000 [ 286.349467][ T7012] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.364082][ T7012] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.372632][ T7012] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.381758][ T7012] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.390688][T11616] lo speed is unknown, defaulting to 1000 [ 286.593484][T11633] batadv_slave_1: entered promiscuous mode [ 286.643213][T11633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1401'. [ 286.654885][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 286.780531][T11632] batadv_slave_1: left promiscuous mode [ 286.864805][T11624] lo speed is unknown, defaulting to 1000 [ 286.930197][T11638] xt_socket: unknown flags 0xd0 [ 287.013237][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1402'. [ 287.679394][T11652] netlink: 'syz.1.1406': attribute type 16 has an invalid length. [ 287.986273][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 288.061577][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'. [ 288.077580][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1413'. [ 288.305788][T11677] batadv_slave_1: entered promiscuous mode [ 288.384809][T11676] batadv_slave_1: left promiscuous mode [ 288.521677][T11693] bond3: entered promiscuous mode [ 288.527433][T11693] bond3: entered allmulticast mode [ 288.535748][T11693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.594896][T11702] netlink: 'syz.0.1418': attribute type 8 has an invalid length. [ 288.688255][T11693] bond3 (unregistering): Released all slaves [ 289.029543][T11715] batadv_slave_0: entered promiscuous mode [ 289.117745][T11729] team0: Device macvtap1 is already an upper device of the team interface [ 289.338541][T11739] batadv_slave_1: entered promiscuous mode [ 289.378283][T11737] batadv_slave_1: left promiscuous mode [ 289.594903][T11748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.837182][T11762] netlink: 'syz.2.1435': attribute type 10 has an invalid length. [ 289.884276][T11762] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 289.891998][T11762] bond0: (slave wlan1): Opening slave failed [ 289.914595][T11726] lo speed is unknown, defaulting to 1000 [ 290.363156][T11793] netlink: 'syz.0.1441': attribute type 4 has an invalid length. [ 290.393837][T11793] __nla_validate_parse: 21 callbacks suppressed [ 290.393858][T11793] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1441'. [ 290.481717][T11793] : renamed from bond0 [ 290.570947][T11798] batadv_slave_1: entered promiscuous mode [ 290.604592][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1443'. [ 290.621606][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 290.714905][T11797] batadv_slave_1: left promiscuous mode [ 290.801467][T11807] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1446'. [ 290.890004][T11811] bond0: (slave bond_slave_0): Releasing backup interface [ 290.900047][T11811] bond0: (slave bond_slave_1): Releasing backup interface [ 290.920341][T11813] block nbd5: Unsupported socket: shutdown callout must be supported. [ 290.945196][T11811] team0: Port device team_slave_0 removed [ 290.961093][T11811] team0: Port device team_slave_1 removed [ 290.997125][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.006150][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.017498][T11811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 291.127165][T11819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1449'. [ 291.144170][T11819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1449'. [ 291.279726][T11819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1449'. [ 291.293445][T11819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1449'. [ 291.612810][T11819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1449'. [ 291.628753][T11819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1449'. [ 291.747868][T11833] Bluetooth: MGMT ver 1.23 [ 291.753564][T11833] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 291.994757][T11845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.002099][T11845] IPv6: NLM_F_CREATE should be set when creating new route [ 292.009421][T11845] IPv6: NLM_F_CREATE should be set when creating new route [ 292.016744][T11845] IPv6: NLM_F_CREATE should be set when creating new route [ 292.028900][T11845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.054028][T11840] netlink: 'syz.2.1454': attribute type 21 has an invalid length. [ 292.105189][T11847] netlink: 'syz.3.1457': attribute type 13 has an invalid length. [ 292.133165][T11847] netlink: 'syz.3.1457': attribute type 17 has an invalid length. [ 292.541146][T11847] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.579821][T11847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.638559][T11859] syz.0.1458: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 292.661405][T11859] CPU: 1 UID: 0 PID: 11859 Comm: syz.0.1458 Not tainted syzkaller #0 PREEMPT(full) [ 292.661434][T11859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.661446][T11859] Call Trace: [ 292.661454][T11859] [ 292.661462][T11859] dump_stack_lvl+0x189/0x250 [ 292.661494][T11859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.661516][T11859] ? __pfx__printk+0x10/0x10 [ 292.661541][T11859] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 292.661561][T11859] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 292.661583][T11859] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 292.661605][T11859] warn_alloc+0x214/0x310 [ 292.661638][T11859] ? __pfx_warn_alloc+0x10/0x10 [ 292.661673][T11859] ? __get_vm_area_node+0x28f/0x300 [ 292.661697][T11859] ? fq_pie_init+0x430/0x840 [ 292.661730][T11859] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 292.661792][T11859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.661830][T11859] ? rcu_is_watching+0x15/0xb0 [ 292.661848][T11859] ? fq_pie_init+0x430/0x840 [ 292.661872][T11859] ? fq_pie_init+0x430/0x840 [ 292.661893][T11859] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 292.661916][T11859] ? fq_pie_init+0x430/0x840 [ 292.661943][T11859] ? tcf_block_get+0x67/0xa0 [ 292.661959][T11859] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 292.661983][T11859] fq_pie_init+0x430/0x840 [ 292.662012][T11859] ? __pfx_fq_pie_init+0x10/0x10 [ 292.662037][T11859] qdisc_create+0x7ac/0xea0 [ 292.662075][T11859] tc_modify_qdisc+0x1538/0x20e0 [ 292.662121][T11859] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 292.662184][T11859] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 292.662207][T11859] rtnetlink_rcv_msg+0x77c/0xb70 [ 292.662226][T11859] ? __lock_acquire+0xab9/0xd20 [ 292.662254][T11859] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 292.662272][T11859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.662314][T11859] netlink_rcv_skb+0x208/0x470 [ 292.662332][T11859] ? __lock_acquire+0xab9/0xd20 [ 292.662355][T11859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.662377][T11859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.662411][T11859] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.662441][T11859] netlink_unicast+0x82f/0x9e0 [ 292.662471][T11859] ? __pfx_netlink_unicast+0x10/0x10 [ 292.662492][T11859] ? netlink_sendmsg+0x642/0xb30 [ 292.662511][T11859] ? skb_put+0x11b/0x210 [ 292.662538][T11859] netlink_sendmsg+0x805/0xb30 [ 292.662569][T11859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.662595][T11859] ? aa_sock_msg_perm+0xf1/0x1d0 [ 292.662627][T11859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.662646][T11859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.662668][T11859] __sock_sendmsg+0x21c/0x270 [ 292.662701][T11859] ____sys_sendmsg+0x505/0x830 [ 292.662731][T11859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.662765][T11859] ? import_iovec+0x74/0xa0 [ 292.662793][T11859] ___sys_sendmsg+0x21f/0x2a0 [ 292.662830][T11859] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.662900][T11859] ? __fget_files+0x2a/0x420 [ 292.662925][T11859] ? __fget_files+0x3a0/0x420 [ 292.662963][T11859] __x64_sys_sendmsg+0x19b/0x260 [ 292.662989][T11859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.663025][T11859] ? rcu_is_watching+0x15/0xb0 [ 292.663049][T11859] ? do_syscall_64+0xbe/0x3b0 [ 292.663074][T11859] do_syscall_64+0xfa/0x3b0 [ 292.663090][T11859] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.663115][T11859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.663134][T11859] ? clear_bhb_loop+0x60/0xb0 [ 292.663157][T11859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.663175][T11859] RIP: 0033:0x7f905458eec9 [ 292.663193][T11859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.663209][T11859] RSP: 002b:00007f90527ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.663233][T11859] RAX: ffffffffffffffda RBX: 00007f90547e5fa0 RCX: 00007f905458eec9 [ 292.663246][T11859] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007 [ 292.663259][T11859] RBP: 00007f9054611f91 R08: 0000000000000000 R09: 0000000000000000 [ 292.663270][T11859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.663281][T11859] R13: 00007f90547e6038 R14: 00007f90547e5fa0 R15: 00007ffff7677c88 [ 292.663314][T11859] [ 292.663323][T11859] Mem-Info: [ 293.076939][T11859] active_anon:6519 inactive_anon:0 isolated_anon:0 [ 293.076939][T11859] active_file:3335 inactive_file:39992 isolated_file:0 [ 293.076939][T11859] unevictable:768 dirty:114 writeback:0 [ 293.076939][T11859] slab_reclaimable:12425 slab_unreclaimable:202858 [ 293.076939][T11859] mapped:32541 shmem:1364 pagetables:1120 [ 293.076939][T11859] sec_pagetables:0 bounce:0 [ 293.076939][T11859] kernel_misc_reclaimable:0 [ 293.076939][T11859] free:1217857 free_pcp:17790 free_cma:0 [ 293.123407][T11859] Node 0 active_anon:26076kB inactive_anon:0kB active_file:13340kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130164kB dirty:456kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12636kB pagetables:4320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.123694][ T55] block nbd4: Possible stuck request ffff8880254ee000: control (read@0,1024B). Runtime 60 seconds [ 293.158043][T11859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.196181][ T55] block nbd4: Possible stuck request ffff8880254ee1c0: control (read@1024,1024B). Runtime 60 seconds [ 293.197010][T11859] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.211302][ T55] block nbd4: Possible stuck request ffff8880254ee380: control (read@2048,1024B). Runtime 60 seconds [ 293.248025][ T55] block nbd4: Possible stuck request ffff8880254ee540: control (read@3072,1024B). Runtime 60 seconds [ 293.259081][T11859] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 293.264960][T11859] Node 0 DMA32 free:963844kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26144kB inactive_anon:0kB active_file:13340kB inactive_file:157936kB unevictable:1540kB writepending:576kB present:3129332kB managed:2559912kB mlocked:4kB bounce:0kB free_pcp:52992kB local_pcp:19180kB free_cma:0kB [ 293.297262][T11859] lowmem_reserve[]: 0 0 1 1 1 [ 293.302015][T11859] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 293.331591][T11859] lowmem_reserve[]: 0 0 0 0 0 [ 293.336536][T11859] Node 1 Normal free:3895436kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15020kB local_pcp:8556kB free_cma:0kB [ 293.367979][T11859] lowmem_reserve[]: 0 0 0 0 0 [ 293.372883][T11859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 293.385631][T11859] Node 0 DMA32: 645*4kB (UM) 540*8kB (UM) 101*16kB (UM) 324*32kB (UM) 102*64kB (UME) 54*128kB (UM) 31*256kB (UME) 10*512kB (UM) 13*1024kB (UME) 8*2048kB (UME) 217*4096kB (M) = 963908kB [ 293.404097][T11859] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 293.416407][T11859] Node 1 Normal: 203*4kB (UE) 26*8kB (UME) 31*16kB (UME) 87*32kB (UME) 27*64kB (UME) 6*128kB (UME) 4*256kB (UM) 7*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3895436kB [ 293.434843][T11859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.444659][T11859] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 293.453985][T11859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.463526][T11859] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 293.472858][T11859] 44688 total pagecache pages [ 293.477723][T11859] 0 pages in swap cache [ 293.481871][T11859] Free swap = 124996kB [ 293.486063][T11859] Total swap = 124996kB [ 293.490225][T11859] 2097051 pages RAM [ 293.494085][T11859] 0 pages HighMem/MovableOnly [ 293.498767][T11859] 424983 pages reserved [ 293.502907][T11859] 0 pages cma reserved [ 293.512521][T11844] lo speed is unknown, defaulting to 1000 [ 293.624826][T11839] mpoa:mpoad_close: () going down [ 294.200606][T11854] lo speed is unknown, defaulting to 1000 [ 294.593409][T11910] batadv_slave_1: entered promiscuous mode [ 294.847544][T11908] batadv_slave_1: left promiscuous mode [ 298.287688][ T5233] udevd[5233]: worker [5886] /devices/virtual/block/nbd2 is taking a long time [ 298.296774][ T5233] udevd[5233]: worker [5876] /devices/virtual/block/nbd4 is taking a long time [ 307.813999][ T55] block nbd2: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 120 seconds [ 307.824958][ T55] block nbd2: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 120 seconds [ 307.835942][ T55] block nbd2: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 120 seconds [ 307.846958][ T55] block nbd2: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 120 seconds [ 322.533878][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 323.814029][ T55] block nbd4: Possible stuck request ffff8880254ee000: control (read@0,1024B). Runtime 90 seconds [ 323.824923][ T55] block nbd4: Possible stuck request ffff8880254ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 323.835938][ T55] block nbd4: Possible stuck request ffff8880254ee380: control (read@2048,1024B). Runtime 90 seconds [ 323.846865][ T55] block nbd4: Possible stuck request ffff8880254ee540: control (read@3072,1024B). Runtime 90 seconds [ 333.567940][T11946] netlink: 'syz.1.1478': attribute type 39 has an invalid length. [ 333.646073][T11950] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 333.754408][T11950] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.765856][T11957] batadv_slave_1: entered promiscuous mode [ 333.849556][T11959] bond3: (slave veth9): Enslaving as an active interface with a down link [ 333.873299][T11961] __nla_validate_parse: 6 callbacks suppressed [ 333.873322][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1485'. [ 333.890448][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 333.970208][T11962] gretap1: entered promiscuous mode [ 334.001151][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 334.040450][T11962] bond3: (slave gretap1): making interface the new active one [ 334.054095][T11962] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 334.085496][T11954] batadv_slave_1: left promiscuous mode [ 334.139235][T11950] macvlan2: entered promiscuous mode [ 334.159547][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 334.177875][T11950] macvlan2: entered allmulticast mode [ 334.329747][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 334.415488][T11982] sctp: [Deprecated]: syz.2.1489 (pid 11982) Use of int in maxseg socket option. [ 334.415488][T11982] Use struct sctp_assoc_value instead [ 334.534649][T11960] lo speed is unknown, defaulting to 1000 [ 334.822006][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 334.897421][T11996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.899768][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1500'. [ 335.913862][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1500'. [ 335.935276][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1500'. [ 335.945251][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1500'. [ 336.828694][T12079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.107846][T12085] batadv_slave_1: entered promiscuous mode [ 337.154389][T12084] batadv_slave_1: left promiscuous mode [ 337.169967][T12087] batadv_slave_1: entered promiscuous mode [ 337.292677][T12086] batadv_slave_1: left promiscuous mode [ 337.885498][T12091] lo speed is unknown, defaulting to 1000 [ 337.905548][ T55] block nbd2: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 150 seconds [ 337.917326][ T55] block nbd2: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 150 seconds [ 337.928604][ T55] block nbd2: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 150 seconds [ 337.940144][ T55] block nbd2: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 150 seconds [ 338.628008][T12151] netlink: 'syz.0.1534': attribute type 58 has an invalid length. [ 338.687302][T12149] tipc: Enabled bearer , priority 0 [ 338.695328][T12149] syzkaller0: entered promiscuous mode [ 338.702169][T12149] syzkaller0: entered allmulticast mode [ 338.754366][T12160] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 338.765271][T12160] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 338.804187][T12149] tipc: Resetting bearer [ 338.827693][T12146] tipc: Resetting bearer [ 338.889402][T12146] tipc: Disabling bearer [ 339.139878][T12179] !: renamed from dummy0 [ 339.479034][T12179] lo speed is unknown, defaulting to 1000 [ 339.590096][T12195] syzkaller1: entered promiscuous mode [ 339.606721][T12195] syzkaller1: entered allmulticast mode [ 339.827459][T12178] lo speed is unknown, defaulting to 1000 [ 340.026881][T12214] veth0_vlan: Caught tx_queue_len zero misconfig [ 340.199590][T12214] syzkaller1: entered promiscuous mode [ 340.206726][T12214] syzkaller1: entered allmulticast mode [ 340.361209][T12224] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 340.369431][T12224] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 340.651321][T12237] batadv_slave_1: entered promiscuous mode [ 340.723147][T12237] __nla_validate_parse: 12 callbacks suppressed [ 340.723169][T12237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'. [ 340.800686][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 340.948479][T12236] batadv_slave_1: left promiscuous mode [ 341.125322][T12218] lo speed is unknown, defaulting to 1000 [ 341.143040][T12250] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 341.150461][T12185] lo speed is unknown, defaulting to 1000 [ 341.151362][T12250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1559'. [ 341.168883][T12249] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 341.181934][T12249] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1559'. [ 341.448463][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'. [ 341.519379][T12256] netlink: 'syz.1.1560': attribute type 12 has an invalid length. [ 341.538197][T12256] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1560'. [ 341.686191][T12259] IPVS: length: 214 != 24 [ 341.839487][T12261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1562'. [ 342.396359][T12258] lo speed is unknown, defaulting to 1000 [ 342.452316][T12289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1570'. [ 342.481826][ T7012] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.489983][ T7012] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.503967][ T7068] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.643909][ T7069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.844418][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 343.051816][T12312] bridge0: entered promiscuous mode [ 343.057571][T12312] macsec3: entered promiscuous mode [ 343.064579][T12312] bridge0: port 1(macsec3) entered blocking state [ 343.071175][T12312] bridge0: port 1(macsec3) entered disabled state [ 343.078192][T12312] macsec3: entered allmulticast mode [ 343.083539][T12312] bridge0: entered allmulticast mode [ 343.091021][T12312] macsec3: left allmulticast mode [ 343.096712][T12312] bridge0: left allmulticast mode [ 343.103322][T12312] bridge0: left promiscuous mode [ 343.174523][ T5953] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.305140][T12325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1579'. [ 343.347462][T12325] bridge_slave_0: entered allmulticast mode [ 343.431331][T12333] block nbd3: NBD_DISCONNECT [ 343.470784][T12333] block nbd3: Send disconnect failed -107 [ 343.479248][T12325] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 343.575173][T12339] IPv6: Can't replace route, no match found [ 344.064208][T12359] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 344.072934][T12359] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 344.175177][T12358] netlink: 'syz.2.1590': attribute type 16 has an invalid length. [ 345.105314][T12395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.165503][T12390] lo speed is unknown, defaulting to 1000 [ 345.174232][T12401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.345569][T12402] lo speed is unknown, defaulting to 1000 [ 346.458846][T12439] __nla_validate_parse: 7 callbacks suppressed [ 346.458868][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 346.465855][T12443] netlink: 'syz.1.1614': attribute type 1 has an invalid length. [ 346.612165][T12443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.614106][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.958704][T12446] bond3: (slave veth5): Enslaving as an active interface with a down link [ 347.106104][T12450] veth0_to_bridge: entered promiscuous mode [ 347.139376][T12460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.143825][ T7068] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.166543][T12460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.210721][T12460] hsr0: entered promiscuous mode [ 347.216398][T12460] hsr0: entered allmulticast mode [ 347.234180][T12460] hsr_slave_0: entered allmulticast mode [ 347.244450][T12460] hsr_slave_1: entered allmulticast mode [ 347.262604][T12459] netlink: 'syz.4.1617': attribute type 15 has an invalid length. [ 347.973904][ T7068] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.144758][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 348.145738][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 348.220630][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'. [ 348.260524][T12487] netlink: 'syz.0.1623': attribute type 15 has an invalid length. [ 348.274643][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 348.313774][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'. [ 348.348836][T12487] netlink: 'syz.0.1623': attribute type 15 has an invalid length. [ 348.511304][T12498] syzkaller1: entered promiscuous mode [ 348.520186][T12498] syzkaller1: entered allmulticast mode [ 349.334182][T12522] netlink: 'syz.0.1633': attribute type 3 has an invalid length. [ 349.375978][T12522] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1633'. [ 349.414521][T12508] lo speed is unknown, defaulting to 1000 [ 349.898540][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 350.472621][T12564] tipc: Enabled bearer , priority 0 [ 350.703448][T12537] lo speed is unknown, defaulting to 1000 [ 351.248931][T12580] tipc: Enabled bearer , priority 0 [ 351.257544][T12587] syzkaller0: entered promiscuous mode [ 351.271222][T12587] syzkaller0: entered allmulticast mode [ 351.344069][T12580] tipc: Resetting bearer [ 351.395143][T12579] tipc: Resetting bearer [ 351.787014][T12579] tipc: Disabling bearer [ 352.012025][T12603] tipc: Enabled bearer , priority 10 [ 352.461572][T12588] lo speed is unknown, defaulting to 1000 [ 352.926635][T12635] netlink: 'syz.2.1660': attribute type 13 has an invalid length. [ 353.123758][ T5953] tipc: Node number set to 3602621129 [ 353.164457][T12638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1661'. [ 353.277088][T12635] tipc: Resetting bearer [ 353.371708][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.425664][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.454260][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.644619][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.908367][ T55] block nbd4: Possible stuck request ffff8880254ee000: control (read@0,1024B). Runtime 120 seconds [ 353.919746][ T55] block nbd4: Possible stuck request ffff8880254ee1c0: control (read@1024,1024B). Runtime 120 seconds [ 353.932132][ T55] block nbd4: Possible stuck request ffff8880254ee380: control (read@2048,1024B). Runtime 120 seconds [ 353.944170][ T55] block nbd4: Possible stuck request ffff8880254ee540: control (read@3072,1024B). Runtime 120 seconds [ 355.174248][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.275840][T12677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1674'. [ 355.527735][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'. [ 355.636560][T12671] lo speed is unknown, defaulting to 1000 [ 355.660075][T12687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.827496][T12691] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1678'. [ 356.012282][T12694] batadv_slave_1: entered promiscuous mode [ 356.048914][T12693] batadv_slave_1: left promiscuous mode [ 356.261543][T12666] lo speed is unknown, defaulting to 1000 [ 356.482611][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 356.500373][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 356.667007][T12701] netlink: 'syz.1.1682': attribute type 10 has an invalid length. [ 357.530915][T12722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.620035][T12722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.667221][T12722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.731595][T12722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.925867][T12742] tipc: Enabling of bearer rejected, failed to enable media [ 358.097232][T12719] lo speed is unknown, defaulting to 1000 [ 358.155276][T12754] batadv_slave_1: entered promiscuous mode [ 358.210011][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1696'. [ 358.249933][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 358.311841][T12753] batadv_slave_1: left promiscuous mode [ 358.319323][T12757] pimreg: tun_chr_ioctl cmd 1074025677 [ 358.336095][T12757] pimreg: linktype set to 780 [ 358.344549][T12757] pimreg: tun_chr_ioctl cmd 35111 [ 358.482180][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 358.550390][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 358.584953][T12762] vlan2: entered allmulticast mode [ 358.590144][T12762] bridge_slave_0: entered allmulticast mode [ 359.070293][T12786] tipc: Enabling of bearer rejected, failed to enable media [ 359.094950][T12790] batadv_slave_1: entered promiscuous mode [ 359.110444][T12790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1708'. [ 359.120954][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 359.173043][T12791] tipc: Enabling of bearer rejected, already enabled [ 359.200808][T12789] batadv_slave_1: left promiscuous mode [ 360.337273][T12800] lo speed is unknown, defaulting to 1000 [ 360.621786][T12806] lo speed is unknown, defaulting to 1000 [ 360.925263][T12847] batadv_slave_1: entered promiscuous mode [ 360.980431][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1720'. [ 361.005994][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 361.078832][T12846] batadv_slave_1: left promiscuous mode [ 361.100705][T12811] lo speed is unknown, defaulting to 1000 [ 361.850904][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 362.090580][T12875] netlink: 'syz.1.1727': attribute type 32 has an invalid length. [ 362.208488][T12876] FAULT_INJECTION: forcing a failure. [ 362.208488][T12876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.286706][T12876] CPU: 1 UID: 0 PID: 12876 Comm: syz.0.1728 Not tainted syzkaller #0 PREEMPT(full) [ 362.286733][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 362.286744][T12876] Call Trace: [ 362.286751][T12876] [ 362.286759][T12876] dump_stack_lvl+0x189/0x250 [ 362.286795][T12876] ? __pfx____ratelimit+0x10/0x10 [ 362.286824][T12876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.286846][T12876] ? __pfx__printk+0x10/0x10 [ 362.286886][T12876] should_fail_ex+0x414/0x560 [ 362.286919][T12876] _copy_from_user+0x2d/0xb0 [ 362.286945][T12876] sctp_setsockopt+0x19f/0x1200 [ 362.286972][T12876] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 362.286995][T12876] do_sock_setsockopt+0x179/0x1b0 [ 362.287023][T12876] __x64_sys_setsockopt+0x13f/0x1b0 [ 362.287051][T12876] do_syscall_64+0xfa/0x3b0 [ 362.287069][T12876] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.287095][T12876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.287114][T12876] ? clear_bhb_loop+0x60/0xb0 [ 362.287137][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.287154][T12876] RIP: 0033:0x7f905458eec9 [ 362.287171][T12876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.287187][T12876] RSP: 002b:00007f90527cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 362.287208][T12876] RAX: ffffffffffffffda RBX: 00007f90547e6090 RCX: 00007f905458eec9 [ 362.287222][T12876] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 362.287233][T12876] RBP: 00007f90527cd090 R08: 0000000000000008 R09: 0000000000000000 [ 362.287244][T12876] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 362.287255][T12876] R13: 00007f90547e6128 R14: 00007f90547e6090 R15: 00007ffff7677c88 [ 362.287286][T12876] [ 362.555195][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 363.174893][T12887] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 363.300101][T12878] lo speed is unknown, defaulting to 1000 [ 363.341281][T12907] __nla_validate_parse: 1 callbacks suppressed [ 363.341301][T12907] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1733'. [ 363.372021][T12910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1734'. [ 363.395111][ T30] audit: type=1804 audit(1758730581.709:5): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1734" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1815 res=1 errno=0 [ 363.419404][ T30] audit: type=1800 audit(1758730581.709:6): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1734" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1815 res=0 errno=0 [ 363.492018][T12907] batadv1: entered promiscuous mode [ 363.497753][T12907] batadv1: entered allmulticast mode [ 363.947367][T12942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.243989][ T5233] udevd[5233]: worker [5886] /devices/virtual/block/nbd2 timeout; kill it [ 367.253999][ T5233] udevd[5233]: seq 14576 '/devices/virtual/block/nbd2' killed [ 367.974154][ T55] block nbd2: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 180 seconds [ 367.985034][ T55] block nbd2: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 180 seconds [ 367.997081][ T55] block nbd2: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 180 seconds [ 368.008167][ T55] block nbd2: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 180 seconds [ 369.904439][T12957] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1743'. [ 369.952781][T12959] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1743'. [ 370.114954][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1751'. [ 370.142743][T12973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1751'. [ 370.356473][T12985] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 370.549097][T12962] lo speed is unknown, defaulting to 1000 [ 371.568179][T12968] lo speed is unknown, defaulting to 1000 [ 371.587963][T12985] lo speed is unknown, defaulting to 1000 [ 371.627719][T12991] lo speed is unknown, defaulting to 1000 [ 371.688035][T12954] lo speed is unknown, defaulting to 1000 [ 372.576090][T13027] syzkaller1: entered promiscuous mode [ 372.590375][T13027] syzkaller1: entered allmulticast mode [ 373.093905][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.369129][T13050] netlink: 'syz.3.1769': attribute type 10 has an invalid length. [ 373.515577][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 373.553829][T13027] lo speed is unknown, defaulting to 1000 [ 373.818585][T13057] bond0: Caught tx_queue_len zero misconfig [ 373.924792][T13057] syzkaller1: entered promiscuous mode [ 373.933101][T13057] syzkaller1: entered allmulticast mode [ 373.953914][T13036] lo speed is unknown, defaulting to 1000 [ 374.185948][T13062] tipc: Enabling of bearer rejected, failed to enable media [ 374.290065][T13068] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 374.485409][T13079] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 374.589771][T13078] syzkaller0: entered promiscuous mode [ 374.599074][T13078] syzkaller0: entered allmulticast mode [ 374.664112][T13068] tipc: Enabled bearer , priority 0 [ 374.818766][T13067] tipc: Resetting bearer [ 374.896384][T13067] tipc: Disabling bearer [ 374.944376][ T7063] lo speed is unknown, defaulting to 1000 [ 374.946114][T12889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 374.950170][ T7063] syz2: Port: 1 Link ACTIVE [ 374.995019][T13098] netlink: 'syz.2.1783': attribute type 13 has an invalid length. [ 375.174293][T13101] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1784'. [ 375.283815][T13108] macsec1: entered allmulticast mode [ 375.298354][T13108] ip6gretap0: entered allmulticast mode [ 375.332078][T13108] ip6gretap0: left allmulticast mode [ 375.373537][T13115] tipc: Enabling of bearer rejected, failed to enable media [ 375.384006][T13116] batadv_slave_1: entered promiscuous mode [ 375.390777][T13106] tipc: Enabling of bearer rejected, failed to enable media [ 375.472946][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1788'. [ 375.555145][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 375.611444][T13114] batadv_slave_1: left promiscuous mode [ 375.955421][T13132] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 376.042297][T13140] bond0: (slave gretap0): Opening slave failed [ 376.360347][T13151] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1799'. [ 376.457617][T13159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1798'. [ 376.648027][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'. [ 376.673816][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'. [ 377.052023][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 377.063545][T13190] netlink: 'syz.2.1811': attribute type 11 has an invalid length. [ 377.416586][T13201] tipc: Enabling of bearer rejected, already enabled [ 377.486969][T13202] netlink: 'syz.1.1816': attribute type 13 has an invalid length. [ 377.506892][T13202] netlink: 'syz.1.1816': attribute type 17 has an invalid length. [ 377.713049][T13202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.716017][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1817'. [ 377.738145][T13202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.282838][T13228] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1822'. [ 378.410131][T13199] lo speed is unknown, defaulting to 1000 [ 378.541039][T13234] tipc: Enabled bearer , priority 0 [ 378.550098][T13234] syzkaller0: entered promiscuous mode [ 378.557168][T13234] syzkaller0: entered allmulticast mode [ 378.574376][T13233] tipc: Resetting bearer [ 378.625216][T13233] tipc: Disabling bearer [ 378.834536][T13252] tipc: Enabling of bearer rejected, already enabled [ 379.253859][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 379.399418][T13239] lo speed is unknown, defaulting to 1000 [ 379.431365][T13236] lo speed is unknown, defaulting to 1000 [ 379.445883][T13204] lo speed is unknown, defaulting to 1000 [ 380.014888][T13262] lo speed is unknown, defaulting to 1000 [ 380.167064][T13272] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 380.823553][T13295] tipc: Enabling of bearer rejected, already enabled [ 380.841922][T13297] bridge0: port 1(macvlan3) entered blocking state [ 380.849654][T13297] bridge0: port 1(macvlan3) entered disabled state [ 380.858466][T13297] macvlan3: entered allmulticast mode [ 380.864025][T13297] bridge0: entered allmulticast mode [ 380.871238][T13297] macvlan3: left allmulticast mode [ 380.876676][T13297] bridge0: left allmulticast mode [ 381.034835][T13301] batadv0: entered promiscuous mode [ 381.044355][T13301] batadv0: entered allmulticast mode [ 381.297240][T13286] lo speed is unknown, defaulting to 1000 [ 381.330375][T13313] __nla_validate_parse: 4 callbacks suppressed [ 381.330395][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 381.379988][T13313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1850'. [ 381.449568][T13313] geneve0: entered promiscuous mode [ 381.461911][T13313] geneve0: entered allmulticast mode [ 381.479866][ T7019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.503807][ T7019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.551028][ T7019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.581141][ T7019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.947679][T13329] syzkaller0: entered promiscuous mode [ 381.953278][T13329] syzkaller0: entered allmulticast mode [ 381.985068][T13306] lo speed is unknown, defaulting to 1000 [ 382.028470][ T5953] IPVS: starting estimator thread 0... [ 382.124501][T13336] IPVS: using max 24 ests per chain, 57600 per kthread [ 383.974058][ T55] block nbd4: Possible stuck request ffff8880254ee000: control (read@0,1024B). Runtime 150 seconds [ 383.985156][ T55] block nbd4: Possible stuck request ffff8880254ee1c0: control (read@1024,1024B). Runtime 150 seconds [ 383.996337][ T55] block nbd4: Possible stuck request ffff8880254ee380: control (read@2048,1024B). Runtime 150 seconds [ 384.007469][ T55] block nbd4: Possible stuck request ffff8880254ee540: control (read@3072,1024B). Runtime 150 seconds [ 384.120668][T13362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1864'. [ 384.197948][T13358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1862'. [ 384.282707][T13367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1863'. [ 384.304654][T13370] tipc: Enabling of bearer rejected, already enabled [ 384.318894][T13370] tipc: Resetting bearer [ 384.328310][T13370] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1865'. [ 384.824082][T13365] lo speed is unknown, defaulting to 1000 [ 385.005382][T13394] netlink: 'syz.4.1873': attribute type 3 has an invalid length. [ 385.116885][T13394] siw: device registration error -23 [ 385.175686][T13394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.184648][T13394] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.200809][T13394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.336962][T13411] netlink: 'syz.0.1877': attribute type 27 has an invalid length. [ 385.363924][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.374398][T13411] veth0_to_bridge: left promiscuous mode [ 385.383549][T13411] veth0_to_bond: left allmulticast mode [ 385.448167][T13411] ip6gretap1: left promiscuous mode [ 385.483077][T13411] tipc: Resetting bearer [ 385.496785][T13411] syzkaller0: left promiscuous mode [ 385.502216][T13411] syzkaller0: left allmulticast mode [ 385.518600][T13411] gtp0: left promiscuous mode [ 385.523460][T13411] gtp0: left allmulticast mode [ 385.777056][T13432] tipc: Enabling of bearer rejected, already enabled [ 385.833275][T13435] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1885'. [ 386.255530][T13436] lo speed is unknown, defaulting to 1000 [ 386.433952][T13459] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1887'. [ 386.881499][T13479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1896'. [ 386.938221][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 386.979727][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1896'. [ 386.984393][T13473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1894'. [ 387.013982][T13483] wireguard1: entered promiscuous mode [ 387.014516][T13481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1896'. [ 387.020077][T13483] wireguard1: entered allmulticast mode [ 387.030385][T13481] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1896'. [ 387.035769][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1896'. [ 387.107944][T13480] netlink: 'syz.4.1894': attribute type 1 has an invalid length. [ 387.221408][T13452] lo speed is unknown, defaulting to 1000 [ 387.615898][T13501] tipc: Enabling of bearer rejected, already enabled [ 388.019248][T13524] tipc: Enabling of bearer rejected, already enabled [ 388.032425][T13526] netlink: 'syz.3.1906': attribute type 9 has an invalid length. [ 388.044896][T13526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1906'. [ 388.110348][T13524] tipc: Resetting bearer [ 388.121206][T13531] netlink: 'syz.4.1907': attribute type 3 has an invalid length. [ 388.130001][T13531] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1907'. [ 388.214172][T13533] veth1_to_hsr: entered promiscuous mode [ 388.358938][T13542] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001 [ 388.464179][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.676877][T13550] sctp: [Deprecated]: syz.1.1912 (pid 13550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.676877][T13550] Use struct sctp_sack_info instead [ 388.724295][T13555] batadv_slave_1: entered promiscuous mode [ 388.898264][T13554] batadv_slave_1: left promiscuous mode [ 389.225869][T13574] tipc: Enabling of bearer rejected, already enabled [ 389.819947][T13601] batadv_slave_1: entered promiscuous mode [ 389.865045][T13537] lo speed is unknown, defaulting to 1000 [ 389.933029][T13604] batadv_slave_1: entered promiscuous mode [ 390.094887][T13599] batadv_slave_1: left promiscuous mode [ 390.108566][T13603] batadv_slave_1: left promiscuous mode [ 390.200171][T13578] lo speed is unknown, defaulting to 1000 [ 391.112894][T13631] tipc: Enabling of bearer rejected, failed to enable media [ 391.881237][T13673] __nla_validate_parse: 9 callbacks suppressed [ 391.881258][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 391.922152][T13672] vlan2: entered promiscuous mode [ 391.927821][T13672] macvtap0: entered promiscuous mode [ 391.987275][T13676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1946'. [ 392.038509][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 392.047689][T13682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1948'. [ 392.067082][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 392.083583][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'. [ 392.122097][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1947'. [ 392.417335][T13704] netlink: 'syz.1.1953': attribute type 303 has an invalid length. [ 392.555127][T13677] lo speed is unknown, defaulting to 1000 [ 392.606505][T13711] netlink: 'syz.2.1956': attribute type 1 has an invalid length. [ 392.614907][T13711] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1956'. [ 392.627975][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 392.783894][T13715] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1957'. [ 392.955314][T13725] netlink: 'syz.1.1961': attribute type 11 has an invalid length. [ 393.349261][T13748] netlink: 'syz.1.1968': attribute type 1 has an invalid length. [ 393.369740][T13746] bridge0: port 1(erspan0) entered blocking state [ 393.376950][T13746] bridge0: port 1(erspan0) entered disabled state [ 393.383819][T13746] erspan0: entered allmulticast mode [ 393.393960][T13746] erspan0: entered promiscuous mode [ 393.575653][T13746] erspan0: left allmulticast mode [ 393.580963][T13746] erspan0: left promiscuous mode [ 393.589464][T13746] bridge0: port 1(erspan0) entered disabled state [ 393.613668][T13753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.627045][T13723] lo speed is unknown, defaulting to 1000 [ 393.673867][T13756] veth11: entered promiscuous mode [ 393.686347][T13756] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 393.703510][T13751] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 395.881417][T13788] lo speed is unknown, defaulting to 1000 [ 397.094205][T13835] lo speed is unknown, defaulting to 1000 [ 397.713190][T13849] lo speed is unknown, defaulting to 1000 [ 397.719430][T13868] tipc: Enabling of bearer rejected, already enabled [ 398.054046][ T55] block nbd2: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 210 seconds [ 398.065038][ T55] block nbd2: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 210 seconds [ 398.076518][ T55] block nbd2: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 210 seconds [ 398.087885][ T55] block nbd2: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 210 seconds [ 398.792975][T13882] netlink: 'syz.4.1997': attribute type 2 has an invalid length. [ 399.050096][T13898] __nla_validate_parse: 2 callbacks suppressed [ 399.050115][T13898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 399.123953][T13898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 399.574250][T13884] lo speed is unknown, defaulting to 1000 [ 399.640961][T13916] tipc: Enabled bearer , priority 0 [ 399.648772][T13917] syzkaller0: entered promiscuous mode [ 399.654815][T13917] syzkaller0: entered allmulticast mode [ 399.776828][T13917] tipc: Resetting bearer [ 399.937254][T13914] tipc: Resetting bearer [ 400.013280][T13914] tipc: Disabling bearer [ 400.114766][T13909] lo speed is unknown, defaulting to 1000 [ 400.338905][T13928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2008'. [ 400.594233][T13936] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 400.628952][T13936] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 400.676285][T13939] tipc: Enabling of bearer rejected, already enabled [ 400.690040][T13939] netem: change failed [ 400.843196][T13944] syz.2.2014 uses old SIOCAX25GETINFO [ 401.691765][ T30] audit: type=1800 audit(1758730619.999:7): pid=13966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2018" name="memory.events" dev="tmpfs" ino=2005 res=0 errno=0 [ 402.235524][T13949] lo speed is unknown, defaulting to 1000 [ 402.988951][T13958] lo speed is unknown, defaulting to 1000 [ 403.026560][T13976] lo speed is unknown, defaulting to 1000 [ 403.434884][T13995] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2025'. [ 403.444111][T13995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.637053][T13998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.802447][T13998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.988419][T13998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.176751][T13998] bond0: (slave netdevsim0): Releasing backup interface [ 404.199072][T13998] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 404.225677][T13998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.379403][ T6998] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.434439][ T6998] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.539087][ T6998] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.554781][ T6998] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.636320][T14015] FAULT_INJECTION: forcing a failure. [ 404.636320][T14015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.677304][T14015] CPU: 1 UID: 0 PID: 14015 Comm: syz.4.2032 Not tainted syzkaller #0 PREEMPT(full) [ 404.677333][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.677344][T14015] Call Trace: [ 404.677353][T14015] [ 404.677362][T14015] dump_stack_lvl+0x189/0x250 [ 404.677388][T14015] ? __pfx____ratelimit+0x10/0x10 [ 404.677418][T14015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.677439][T14015] ? __pfx__printk+0x10/0x10 [ 404.677463][T14015] ? __might_fault+0xb0/0x130 [ 404.677500][T14015] should_fail_ex+0x414/0x560 [ 404.677531][T14015] _copy_from_user+0x2d/0xb0 [ 404.677555][T14015] ___sys_sendmsg+0x158/0x2a0 [ 404.677583][T14015] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.677646][T14015] ? __fget_files+0x2a/0x420 [ 404.677670][T14015] ? __fget_files+0x3a0/0x420 [ 404.677708][T14015] __x64_sys_sendmsg+0x19b/0x260 [ 404.677734][T14015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.677770][T14015] ? __pfx_ksys_write+0x10/0x10 [ 404.677792][T14015] ? rcu_is_watching+0x15/0xb0 [ 404.677817][T14015] ? do_syscall_64+0xbe/0x3b0 [ 404.677840][T14015] do_syscall_64+0xfa/0x3b0 [ 404.677857][T14015] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.677884][T14015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.677902][T14015] ? clear_bhb_loop+0x60/0xb0 [ 404.677926][T14015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.677944][T14015] RIP: 0033:0x7ff96dd8eec9 [ 404.677962][T14015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.677978][T14015] RSP: 002b:00007ff96ecb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.678000][T14015] RAX: ffffffffffffffda RBX: 00007ff96dfe5fa0 RCX: 00007ff96dd8eec9 [ 404.678014][T14015] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 404.678027][T14015] RBP: 00007ff96ecb1090 R08: 0000000000000000 R09: 0000000000000000 [ 404.678039][T14015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.678049][T14015] R13: 00007ff96dfe6038 R14: 00007ff96dfe5fa0 R15: 00007ffd65029618 [ 404.678083][T14015] [ 405.185671][T14006] lo speed is unknown, defaulting to 1000 [ 405.274976][T14034] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.456262][T14034] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.534287][T14034] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.640506][T14034] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.733970][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.798896][T12889] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.843868][T12889] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.882877][T12889] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.929359][ T7019] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.062777][T14047] syz_tun: entered allmulticast mode [ 406.088372][T14047] dvmrp8: entered allmulticast mode [ 406.138352][T14013] lo speed is unknown, defaulting to 1000 [ 406.222901][T14027] lo speed is unknown, defaulting to 1000 [ 406.790896][T14050] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2039'. [ 406.868929][T14047] lo speed is unknown, defaulting to 1000 [ 406.924814][T14043] lo speed is unknown, defaulting to 1000 [ 407.111864][T14048] syz_tun: left allmulticast mode [ 407.131380][T14048] dvmrp8: left allmulticast mode [ 407.758698][T14056] lo speed is unknown, defaulting to 1000 [ 408.199948][T14063] 8021q: adding VLAN 0 to HW filter on device bond5 [ 408.280905][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'. [ 408.552672][T14074] batadv_slave_1: entered promiscuous mode [ 408.588985][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2045'. [ 408.625136][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 408.731693][T14073] batadv_slave_1: left promiscuous mode [ 408.882215][T14081] veth11: entered promiscuous mode [ 408.920518][T14088] tipc: Enabled bearer , priority 0 [ 408.940653][T14089] syzkaller0: entered promiscuous mode [ 408.975478][T14089] syzkaller0: entered allmulticast mode [ 409.054175][T14089] tipc: Resetting bearer [ 409.092496][T14089] tipc: Disabling bearer [ 409.352809][T14110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2057'. [ 409.614783][T14096] lo speed is unknown, defaulting to 1000 [ 409.823341][T14112] lo speed is unknown, defaulting to 1000 [ 410.123824][T14136] tipc: Enabling of bearer rejected, already enabled [ 410.311931][T14118] lo speed is unknown, defaulting to 1000 [ 410.625449][T14152] nbd3: detected capacity change from 0 to 127 [ 410.650470][ T51] block nbd3: Receive control failed (result -104) [ 411.009009][T14162] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2071'. [ 411.245485][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.273821][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.454444][T14176] netlink: 'syz.4.2074': attribute type 4 has an invalid length. [ 411.598026][T14153] lo speed is unknown, defaulting to 1000 [ 411.907076][T14172] lo speed is unknown, defaulting to 1000 [ 413.249993][T14229] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 413.305946][T14215] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2086'. [ 413.330833][ T7019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.343431][ T7019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.445483][T14211] lo speed is unknown, defaulting to 1000 [ 413.446570][T14231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2090'. [ 413.541912][T14208] lo speed is unknown, defaulting to 1000 [ 413.622791][T14231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2090'. [ 413.974480][ T55] block nbd3: Connection timed out, retrying (0/1 alive) [ 413.982184][ T55] block nbd3: Connection timed out, retrying (0/1 alive) [ 413.989741][ T55] block nbd3: Connection timed out, retrying (0/1 alive) [ 413.997108][ T55] block nbd3: Connection timed out, retrying (0/1 alive) [ 414.004969][ T55] block nbd3: Dead connection, failed to find a fallback [ 414.013209][ T55] block nbd3: shutting down sockets [ 414.020186][ T55] blk_print_req_error: 27 callbacks suppressed [ 414.020205][ T55] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.040294][ T55] buffer_io_error: 27 callbacks suppressed [ 414.040313][ T55] Buffer I/O error on dev nbd3, logical block 3, async page read [ 414.059553][ T55] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.070002][T14241] block nbd4: Possible stuck request ffff8880254ee000: control (read@0,1024B). Runtime 180 seconds [ 414.080845][T14241] block nbd4: Possible stuck request ffff8880254ee1c0: control (read@1024,1024B). Runtime 180 seconds [ 414.092245][ T55] Buffer I/O error on dev nbd3, logical block 2, async page read [ 414.100154][T14241] block nbd4: Possible stuck request ffff8880254ee380: control (read@2048,1024B). Runtime 180 seconds [ 414.111411][ T55] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.120570][T14241] block nbd4: Possible stuck request ffff8880254ee540: control (read@3072,1024B). Runtime 180 seconds [ 414.131681][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 414.139789][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.149060][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 414.158261][ T8175] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.167578][ T8175] Buffer I/O error on dev nbd3, logical block 0, async page read [ 414.175622][ T8175] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.184869][ T8175] Buffer I/O error on dev nbd3, logical block 1, async page read [ 414.192810][ T8175] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.202249][ T8175] Buffer I/O error on dev nbd3, logical block 2, async page read [ 414.210473][ T8175] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.219738][ T8175] Buffer I/O error on dev nbd3, logical block 3, async page read [ 414.233010][ T8175] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.242227][ T8175] Buffer I/O error on dev nbd3, logical block 0, async page read [ 414.250675][ T8175] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.259788][ T8175] Buffer I/O error on dev nbd3, logical block 1, async page read [ 414.271784][ T8175] ldm_validate_partition_table(): Disk read failed. [ 414.281586][ T8175] Dev nbd3: unable to read RDB block 0 [ 414.292127][ T8175] nbd3: unable to read partition table [ 414.361307][ T8175] ldm_validate_partition_table(): Disk read failed. [ 414.381564][ T8175] Dev nbd3: unable to read RDB block 0 [ 414.397199][ T8175] nbd3: unable to read partition table [ 414.420737][T14240] bridge0: entered allmulticast mode [ 414.911994][T14271] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 414.919643][T14271] dvmrp1: linktype set to 805 [ 415.278643][T14281] 8021q: adding VLAN 0 to HW filter on device  [ 415.308756][T14281] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.357714][T14281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.602092][T14265] lo speed is unknown, defaulting to 1000 [ 415.739386][T14297] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 415.780080][T14298] TCP: TCP_TX_DELAY enabled [ 415.895836][T14294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2104'. [ 415.913583][T14294] vlan3: entered promiscuous mode [ 415.926432][T14304] netlink: 'syz.2.2108': attribute type 74 has an invalid length. [ 415.933791][T14294] erspan0: entered promiscuous mode [ 415.950510][T14305] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2108'. [ 416.166675][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2111'. [ 416.245811][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2111'. [ 416.399442][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'. [ 416.413010][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'. [ 416.450484][T14293] lo speed is unknown, defaulting to 1000 [ 416.487817][T14276] lo speed is unknown, defaulting to 1000 [ 416.759443][T14334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2117'. [ 416.862822][T14315] lo speed is unknown, defaulting to 1000 [ 417.923299][T14353] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20002 [ 418.295052][T14371] batadv_slave_1: entered promiscuous mode [ 418.337472][T14371] __nla_validate_parse: 2 callbacks suppressed [ 418.337496][T14371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2129'. [ 418.395919][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'. [ 418.491066][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2128'. [ 418.492745][T14370] batadv_slave_1: left promiscuous mode [ 418.534912][T14384] 8021q: VLANs not supported on vxcan0 [ 418.769328][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 419.862385][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'. [ 419.883242][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'. [ 420.391810][T14444] batadv_slave_1: entered promiscuous mode [ 420.424253][T14444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2142'. [ 420.475609][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'. [ 422.423444][T14439] lo speed is unknown, defaulting to 1000 [ 422.429503][T14443] batadv_slave_1: left promiscuous mode [ 422.983968][T14478] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 423.032548][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2151'. [ 423.268133][T14492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2153'. [ 423.547473][T14484] lo speed is unknown, defaulting to 1000 [ 424.056961][T14506] netlink: 'syz.3.2156': attribute type 8 has an invalid length. [ 424.065137][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 424.137392][T14503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2155'. [ 424.223180][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 424.249597][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2157'. [ 424.330625][T14511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2158'. [ 424.746476][T14523] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2163'. [ 424.757354][T14523] openvswitch: netlink: Flow key attr not present in new flow. [ 424.829325][T14528] netlink: 'syz.3.2164': attribute type 10 has an invalid length. [ 424.840700][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'. [ 424.893149][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 425.360712][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 425.393902][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2171'. [ 425.551867][T14556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.780097][T14550] lo speed is unknown, defaulting to 1000 [ 425.792833][T14566] netlink: 'syz.2.2168': attribute type 4 has an invalid length. [ 425.911157][ T30] audit: type=1800 audit(1758730644.229:8): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2176" name="memory.events" dev="tmpfs" ino=2279 res=0 errno=0 [ 426.043157][ T30] audit: type=1804 audit(1758730644.259:9): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2176" name="memory.events" dev="tmpfs" ino=2279 res=1 errno=0 [ 426.085129][T14577] netlink: 'syz.0.2176': attribute type 1 has an invalid length. [ 426.390208][T14581] nbd5: detected capacity change from 0 to 127 [ 426.404999][ T51] block nbd5: Receive control failed (result -32) [ 426.417447][T14160] block nbd5: Dead connection, failed to find a fallback [ 426.461542][T14160] block nbd5: shutting down sockets [ 426.468100][T14591] syzkaller1: entered promiscuous mode [ 426.495905][T14160] blk_print_req_error: 138 callbacks suppressed [ 426.495924][T14160] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.524808][T14591] syzkaller1: entered allmulticast mode [ 426.546937][T14160] buffer_io_error: 138 callbacks suppressed [ 426.546956][T14160] Buffer I/O error on dev nbd5, logical block 0, async page read [ 426.577951][T14160] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.587353][T14591] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 426.608234][T14594] netlink: 'syz.2.2181': attribute type 29 has an invalid length. [ 426.616331][T14160] Buffer I/O error on dev nbd5, logical block 1, async page read [ 426.635727][T14160] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.744316][T14160] Buffer I/O error on dev nbd5, logical block 2, async page read [ 426.754283][T14160] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.768078][T14160] Buffer I/O error on dev nbd5, logical block 3, async page read [ 426.777004][T14160] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.789062][T14160] Buffer I/O error on dev nbd5, logical block 0, async page read [ 426.798178][T14160] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.807353][T14160] Buffer I/O error on dev nbd5, logical block 1, async page read [ 426.817360][T14160] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.848669][T14160] Buffer I/O error on dev nbd5, logical block 2, async page read [ 426.879026][T14160] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.903665][T14160] Buffer I/O error on dev nbd5, logical block 3, async page read [ 426.922348][T14160] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.982011][T14160] Buffer I/O error on dev nbd5, logical block 0, async page read [ 427.000842][T14160] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.020466][T14160] Buffer I/O error on dev nbd5, logical block 1, async page read [ 427.058431][T14160] ldm_validate_partition_table(): Disk read failed. [ 427.078945][T14160] Dev nbd5: unable to read RDB block 0 [ 427.089085][T14160] nbd5: unable to read partition table [ 427.135451][T14160] ldm_validate_partition_table(): Disk read failed. [ 427.145902][T14160] Dev nbd5: unable to read RDB block 0 [ 427.155723][T14160] nbd5: unable to read partition table [ 427.300062][T14594] netlink: 'syz.2.2181': attribute type 29 has an invalid length. [ 427.408951][T14601] veth13: entered promiscuous mode [ 427.882147][T14624] syzkaller1: entered promiscuous mode [ 427.901707][T14624] syzkaller1: entered allmulticast mode [ 427.934167][T14638] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 101 [ 428.119216][T14616] lo speed is unknown, defaulting to 1000 [ 428.134341][ T55] block nbd2: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 240 seconds [ 428.145364][ T55] block nbd2: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 240 seconds [ 428.156884][ T55] block nbd2: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 240 seconds [ 428.168211][ T55] block nbd2: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 240 seconds [ 428.381840][T14639] lo speed is unknown, defaulting to 1000 [ 428.688069][T14654] netlink: 'syz.4.2192': attribute type 4 has an invalid length. [ 430.089478][T14682] netlink: 'syz.1.2199': attribute type 1 has an invalid length. [ 430.105609][T14682] __nla_validate_parse: 8 callbacks suppressed [ 430.105630][T14682] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2199'. [ 430.339274][T14652] lo speed is unknown, defaulting to 1000 [ 430.355020][T14661] lo speed is unknown, defaulting to 1000 [ 430.746548][T14659] lo speed is unknown, defaulting to 1000 [ 431.202556][T14695] netlink: 'syz.1.2202': attribute type 15 has an invalid length. [ 432.496809][T14722] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2207'. [ 432.523857][T14722] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 432.576101][T14714] lo speed is unknown, defaulting to 1000 [ 432.622947][T14726] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 432.792932][T14736] netlink: 'syz.2.2212': attribute type 3 has an invalid length. [ 432.804628][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2212'. [ 433.339218][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2214'. [ 433.405084][T14748] netlink: 'syz.2.2215': attribute type 13 has an invalid length. [ 433.414374][T14746] bridge0: entered promiscuous mode [ 433.424359][T14746] macsec1: entered allmulticast mode [ 433.429685][T14746] bridge0: entered allmulticast mode [ 433.438815][T14748] netlink: 'syz.2.2215': attribute type 17 has an invalid length. [ 433.456909][T14746] bridge0: port 1(macsec1) entered blocking state [ 433.475636][T14746] bridge0: port 1(macsec1) entered disabled state [ 433.494484][T14746] bridge0: left allmulticast mode [ 433.500736][T14746] bridge0: left promiscuous mode [ 433.567905][T14749] xfrm0: entered promiscuous mode [ 433.573002][T14749] xfrm0: entered allmulticast mode [ 433.685051][T14748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.716350][T14748] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.738327][T14748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.967528][T14760] batadv_slave_1: entered promiscuous mode [ 433.998643][T14761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2219'. [ 434.014048][T14763] syzkaller1: entered promiscuous mode [ 434.019583][T14763] syzkaller1: entered allmulticast mode [ 434.024776][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2218'. [ 434.046634][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 434.126694][T14767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2219'. [ 434.161799][T14770] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2219'. [ 434.182373][T14758] batadv_slave_1: left promiscuous mode [ 434.552014][T14750] lo speed is unknown, defaulting to 1000 [ 434.890231][T14783] pim6reg1: entered promiscuous mode [ 434.896179][T14783] pim6reg1: entered allmulticast mode [ 435.147973][T14785] tipc: Enabling of bearer rejected, failed to enable media [ 435.165527][T14763] lo speed is unknown, defaulting to 1000 [ 436.704182][T14817] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2233'. [ 436.914740][T14833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2237'. [ 437.045374][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 437.075291][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2238'. [ 437.094834][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 437.105033][T14802] lo speed is unknown, defaulting to 1000 [ 437.119111][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2238'. [ 437.472306][T14846] tipc: Enabling of bearer rejected, failed to enable media [ 437.754103][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 437.803888][T14856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 437.976426][T14863] ip6tnl2: entered promiscuous mode [ 438.087110][T14865] tipc: Enabling of bearer rejected, already enabled [ 438.098733][T14867] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2248'. [ 438.191501][T14870] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2249'. [ 438.665771][T14891] tipc: Enabling of bearer rejected, already enabled [ 438.886411][T14898] delete_channel: no stack [ 438.891124][T14898] delete_channel: no stack [ 439.074672][T14916] batadv_slave_1: entered promiscuous mode [ 439.141908][T14916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2263'. [ 439.236300][T14922] netlink: 'syz.3.2264': attribute type 1 has an invalid length. [ 439.244856][T14922] NCSI netlink: No device for ifindex 0 [ 439.275351][T14915] batadv_slave_1: left promiscuous mode [ 439.403488][T14931] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 439.435991][T14931] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 439.653875][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.664112][T14946] sctp: [Deprecated]: syz.4.2271 (pid 14946) Use of int in maxseg socket option. [ 439.664112][T14946] Use struct sctp_assoc_value instead [ 439.807267][T14951] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 439.817364][T14951] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 439.870449][T14951] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 439.884758][ T7017] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 439.899212][T14951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.931416][T14951] veth5: entered promiscuous mode [ 439.946672][T14951] bond0: (slave bond_slave_0): Releasing backup interface [ 439.956857][T14951] bond0: (slave €Â0): Releasing backup interface [ 439.969091][T14951] team0: Port device team_slave_0 removed [ 439.978940][T14951] team0: Port device team_slave_1 removed [ 439.985600][T14951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.005995][T14951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.014551][ T7017] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 440.205652][T14951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.157585][T14959] lo speed is unknown, defaulting to 1000 [ 441.687376][T14986] batadv_slave_1: entered promiscuous mode [ 441.754866][T14986] __nla_validate_parse: 5 callbacks suppressed [ 441.754890][T14986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2280'. [ 441.806043][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 441.823761][ T51] Bluetooth: hci0: command tx timeout [ 441.833477][T14985] batadv_slave_1: left promiscuous mode [ 442.074807][T14978] lo speed is unknown, defaulting to 1000 [ 442.096902][T14972] lo speed is unknown, defaulting to 1000 [ 442.608728][T15001] pim6reg: entered allmulticast mode [ 442.657807][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 442.954374][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2286'. [ 443.044073][T15006] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.120051][T15015] bond5: (slave macsec0): Error -34 calling dev_set_mtu [ 443.686989][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 444.114540][T15050] netlink: 'syz.0.2297': attribute type 10 has an invalid length. [ 444.134450][ T55] block nbd4: Possible stuck request ffff8880254ee000: control (read@0,1024B). Runtime 210 seconds [ 444.145891][ T55] block nbd4: Possible stuck request ffff8880254ee1c0: control (read@1024,1024B). Runtime 210 seconds [ 444.157280][ T55] block nbd4: Possible stuck request ffff8880254ee380: control (read@2048,1024B). Runtime 210 seconds [ 444.173994][ T55] block nbd4: Possible stuck request ffff8880254ee540: control (read@3072,1024B). Runtime 210 seconds [ 444.188696][T15046] nbd: couldn't find device at index 0 [ 444.618455][T15026] lo speed is unknown, defaulting to 1000 [ 444.694756][T15070] block nbd6: server does not support multiple connections per device. [ 444.698440][T15073] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2303'. [ 444.703736][T15070] block nbd6: shutting down sockets [ 444.717978][T15073] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 444.734775][T15072] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2303'. [ 444.757297][T15072] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 444.805141][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'. [ 444.815317][T15077] batadv_slave_1: entered promiscuous mode [ 444.964158][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2304'. [ 444.979424][T15076] batadv_slave_1: left promiscuous mode [ 445.622295][T15107] pimreg: tun_chr_ioctl cmd 2148553947 [ 445.647152][T15114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2314'. [ 445.668129][T15114] syzkaller1: entered promiscuous mode [ 445.674042][T15114] syzkaller1: entered allmulticast mode [ 445.740930][T15116] unsupported nlmsg_type 40 [ 446.641718][T15158] syzkaller1: entered promiscuous mode [ 446.654716][T15158] syzkaller1: entered allmulticast mode [ 446.827936][T15166] __nla_validate_parse: 10 callbacks suppressed [ 446.827959][T15166] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2331'. [ 446.928548][T15170] dvmrp9: entered allmulticast mode [ 447.031435][T15170] bridge0: failed insert local address into bridge forwarding table [ 447.532315][T15177] lo speed is unknown, defaulting to 1000 [ 447.775176][T15169] dvmrp9: left allmulticast mode [ 447.934109][T15194] netlink: 'syz.4.2337': attribute type 9 has an invalid length. [ 447.942498][T15194] netlink: 'syz.4.2337': attribute type 6 has an invalid length. [ 447.951205][T15194] netlink: 'syz.4.2337': attribute type 7 has an invalid length. [ 447.961394][T15194] netlink: 'syz.4.2337': attribute type 8 has an invalid length. [ 447.973188][T15193] netlink: 'syz.4.2337': attribute type 9 has an invalid length. [ 447.988903][T15193] netlink: 'syz.4.2337': attribute type 6 has an invalid length. [ 447.996773][T15193] netlink: 'syz.4.2337': attribute type 7 has an invalid length. [ 448.005169][T15193] netlink: 'syz.4.2337': attribute type 8 has an invalid length. [ 448.025925][T15179] lo speed is unknown, defaulting to 1000 [ 448.213500][T15207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2340'. [ 448.270437][T15207] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2340'. [ 448.282911][T15206] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 448.350284][T15207] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2340'. [ 448.361115][T15207] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2340'. [ 448.371792][T15206] team0: Mode changed to "activebackup" [ 448.446950][T15211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2342'. [ 448.457288][T15211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2342'. [ 448.588312][T15193] lo speed is unknown, defaulting to 1000 [ 448.893045][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 449.453514][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2351'. [ 449.771777][T15249] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 449.796042][T15251] ªªªªªª: renamed from wg2 [ 449.898764][T15249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 450.114244][ T30] audit: type=1804 audit(1758730668.419:10): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2356" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2409 res=1 errno=0 [ 450.210800][ T30] audit: type=1800 audit(1758730668.419:11): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2356" name="cgroup.controllers" dev="tmpfs" ino=2409 res=0 errno=0 [ 450.473950][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2359'. [ 450.586319][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802eb09000: rx timeout, send abort [ 450.819071][T15258] lo speed is unknown, defaulting to 1000 [ 450.921878][T15282] netlink: 'syz.3.2364': attribute type 3 has an invalid length. [ 451.094618][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802eb09000: abort rx timeout. Force session deactivation [ 452.475019][T15327] __nla_validate_parse: 3 callbacks suppressed [ 452.475038][T15327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2378'. [ 452.491271][T15327] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2378'. [ 452.500565][T15327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2378'. [ 453.380478][T15330] lo speed is unknown, defaulting to 1000 [ 453.435329][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2383'. [ 454.311428][T15371] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 454.398344][T15376] batadv_slave_1: entered promiscuous mode [ 454.440248][T15376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2393'. [ 454.471599][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2393'. [ 454.539712][T15375] batadv_slave_1: left promiscuous mode [ 454.554604][T15378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2394'. [ 454.566690][T15380] netlink: 'syz.1.2395': attribute type 15 has an invalid length. [ 454.809070][T15392] netlink: 'syz.1.2398': attribute type 10 has an invalid length. [ 455.857369][T15412] lo speed is unknown, defaulting to 1000 [ 456.307431][T15440] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2414'. [ 456.336879][T15440] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 456.375634][T15440] netlink: 'syz.0.2414': attribute type 1 has an invalid length. [ 456.614651][T15440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 456.830798][T15444] bond5: (slave gretap1): making interface the new active one [ 456.848358][T15444] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 457.005206][T15460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2421'. [ 457.500030][T15481] sch_tbf: burst 0 is lower than device ip6gre0 mtu (2560) ! [ 457.524311][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 457.591405][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 457.631459][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 457.644283][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 457.689636][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2430'. [ 457.709516][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'. [ 457.888379][T15504] netlink: 'syz.2.2435': attribute type 1 has an invalid length. [ 457.898316][T15504] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2435'. [ 457.909590][T15504] netlink: 'syz.2.2435': attribute type 5 has an invalid length. [ 457.915751][T15503] netlink: 'syz.3.2434': attribute type 11 has an invalid length. [ 458.227065][ T55] block nbd2: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 270 seconds [ 458.241661][ T55] block nbd2: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 270 seconds [ 458.253777][ T55] block nbd2: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 270 seconds [ 458.265305][ T55] block nbd2: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 270 seconds [ 458.879705][T15541] vlan2: entered promiscuous mode [ 458.892614][T15541] vlan2: entered allmulticast mode [ 458.904870][T15541] bond0: entered allmulticast mode [ 458.933161][T15516] lo speed is unknown, defaulting to 1000 [ 458.968369][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 459.023026][T15541] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2446'. [ 459.122200][T15528] sctp: [Deprecated]: syz.4.2442 (pid 15528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.122200][T15528] Use struct sctp_sack_info instead [ 459.270428][T15551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2449'. [ 459.818972][T15556] lo speed is unknown, defaulting to 1000 [ 460.098679][T15581] xt_HMARK: spi-set and port-set can't be combined [ 460.220970][T15567] lo speed is unknown, defaulting to 1000 [ 460.402291][T15587] tipc: Enabling of bearer rejected, already enabled [ 460.923990][T15579] lo speed is unknown, defaulting to 1000 [ 460.981583][T15608] batadv_slave_1: entered promiscuous mode [ 461.067962][T15607] batadv_slave_1: left promiscuous mode [ 462.172500][T15636] tipc: Enabling of bearer rejected, already enabled [ 462.489419][T15629] lo speed is unknown, defaulting to 1000 [ 462.727665][T15659] __nla_validate_parse: 73 callbacks suppressed [ 462.727686][T15659] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2479'. [ 462.767456][T15661] batadv_slave_1: entered promiscuous mode [ 462.840167][T15657] batadv_slave_1: left promiscuous mode [ 463.027768][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2483'. [ 463.289012][T15676] veth0_to_bridge: entered promiscuous mode [ 463.317908][T15678] veth0_to_bridge: left promiscuous mode [ 463.365937][T15679] netlink: 'syz.0.2483': attribute type 1 has an invalid length. [ 463.390716][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 463.581837][T15692] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2486'. [ 463.591181][T15692] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2486'. [ 463.638776][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 463.836319][T15700] tipc: Enabling of bearer rejected, failed to enable media [ 463.990280][T15683] lo speed is unknown, defaulting to 1000 [ 464.284818][T15707] lo speed is unknown, defaulting to 1000 [ 464.590768][T15727] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 464.841420][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2501'. [ 465.077838][T15746] netlink: 'syz.1.2502': attribute type 4 has an invalid length. [ 465.102692][T15752] netlink: 'syz.4.2504': attribute type 16 has an invalid length. [ 465.110911][T15746] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2502'. [ 465.127903][T15752] netlink: 'syz.4.2504': attribute type 17 has an invalid length. [ 465.800182][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 465.841490][T15761] IPv6: NLM_F_REPLACE set, but no existing node found! [ 466.137010][T15770] geneve4: entered promiscuous mode [ 466.187132][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.199021][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.215563][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.232680][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.382003][ T51] Bluetooth: hci4: link tx timeout [ 466.387334][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 466.595833][T15769] lo speed is unknown, defaulting to 1000 [ 466.678640][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2519'. [ 466.915805][T15818] netlink: 'syz.3.2523': attribute type 1 has an invalid length. [ 467.139857][T15831] netlink: 'syz.2.2528': attribute type 7 has an invalid length. [ 467.265056][T15834] ipvlan2: entered promiscuous mode [ 467.450839][T15847] netlink: 'syz.3.2533': attribute type 4 has an invalid length. [ 467.573349][T15862] batadv_slave_1: entered promiscuous mode [ 467.751079][T15867] __nla_validate_parse: 118 callbacks suppressed [ 467.751105][T15867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2537'. [ 467.826389][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 467.987848][T15861] batadv_slave_1: left promiscuous mode [ 468.293161][T15881] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2540'. [ 468.381426][T15889] netlink: 'syz.1.2542': attribute type 2 has an invalid length. [ 468.389540][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 468.411797][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2542'. [ 468.474224][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 468.486213][T15891] netlink: 'syz.0.2543': attribute type 13 has an invalid length. [ 468.505260][T15891] netlink: 'syz.0.2543': attribute type 17 has an invalid length. [ 468.917626][T15891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.936944][T15892] xfrm0: entered promiscuous mode [ 468.942282][T15892] xfrm0: entered allmulticast mode [ 468.962851][T15882] lo speed is unknown, defaulting to 1000 [ 469.107318][T15913] netlink: 'syz.0.2547': attribute type 4 has an invalid length. [ 469.674716][T15908] lo speed is unknown, defaulting to 1000 [ 469.757829][T15900] lo speed is unknown, defaulting to 1000 [ 469.787741][T15895] lo speed is unknown, defaulting to 1000 [ 470.152579][T15915] lo speed is unknown, defaulting to 1000 [ 470.401188][T15920] @0Ù: renamed from bond_slave_1 [ 470.432779][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 471.371018][T15951] netlink: 'syz.2.2558': attribute type 4 has an invalid length. [ 472.333264][T15969] lo speed is unknown, defaulting to 1000 [ 472.364586][T15991] netlink: 'syz.3.2569': attribute type 4 has an invalid length. [ 472.429781][T15993] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2570'. [ 472.571078][T15997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2571'. [ 472.580881][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2571'. [ 472.596615][T15972] lo speed is unknown, defaulting to 1000 [ 472.678867][T15997] bond7: entered promiscuous mode [ 472.699486][T15997] bond7: entered allmulticast mode [ 472.726729][T15997] 8021q: adding VLAN 0 to HW filter on device bond7 [ 473.141040][T16001] lo speed is unknown, defaulting to 1000 [ 473.149381][T15980] lo speed is unknown, defaulting to 1000 [ 473.925252][T16013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2574'. [ 473.937731][T16013] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 473.992240][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 474.139728][T16017] bond5: entered promiscuous mode [ 474.163870][T16017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 474.223659][ T55] block nbd4: Possible stuck request ffff8880254ee000: control (read@0,1024B). Runtime 240 seconds [ 474.235221][ T55] block nbd4: Possible stuck request ffff8880254ee1c0: control (read@1024,1024B). Runtime 240 seconds [ 474.247072][ T55] block nbd4: Possible stuck request ffff8880254ee380: control (read@2048,1024B). Runtime 240 seconds [ 474.261662][ T55] block nbd4: Possible stuck request ffff8880254ee540: control (read@3072,1024B). Runtime 240 seconds [ 474.376312][T16024] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 474.621151][T16042] netlink: 'syz.0.2580': attribute type 4 has an invalid length. [ 474.631070][T16039] macvlan1: entered promiscuous mode [ 474.642333][T16044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 474.654376][T16039] ipvlan0: entered promiscuous mode [ 474.682331][T16039] ipvlan0: left promiscuous mode [ 474.693191][T16039] macvlan1: left promiscuous mode [ 474.741193][T16037] pimreg: entered allmulticast mode [ 474.764030][T16037] pimreg: left allmulticast mode [ 474.803539][T16051] geneve2: entered promiscuous mode [ 474.825096][T16055] netlink: 'syz.0.2583': attribute type 1 has an invalid length. [ 474.930053][T16055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.050406][T16060] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 475.061964][T16060] bond6: (slave batadv1): making interface the new active one [ 475.071646][T16060] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 475.218943][T16072] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 475.250023][T16071] delete_channel: no stack [ 475.332099][T16046] lo speed is unknown, defaulting to 1000 [ 475.386315][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2588'. [ 475.479113][T16074] syzkaller1: entered promiscuous mode [ 475.485005][T16074] syzkaller1: entered allmulticast mode [ 475.959050][T16096] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 476.127872][T16096] bond6: entered promiscuous mode [ 476.133031][T16096] bond6: entered allmulticast mode [ 476.139606][T16096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.152460][T16065] lo speed is unknown, defaulting to 1000 [ 476.354854][T16081] lo speed is unknown, defaulting to 1000 [ 477.041570][T16104] netlink: 'syz.4.2598': attribute type 4 has an invalid length. [ 477.143977][T16092] lo speed is unknown, defaulting to 1000 [ 477.286323][T16115] netlink: 'syz.2.2600': attribute type 83 has an invalid length. [ 477.507476][T16117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2601'. [ 478.408295][T16111] lo speed is unknown, defaulting to 1000 [ 479.526628][T16161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2608'. [ 479.732713][T16171] netlink: 'syz.1.2610': attribute type 5 has an invalid length. [ 479.944602][T16179] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2614'. [ 480.099256][T16158] lo speed is unknown, defaulting to 1000 [ 480.130153][T16181] veth1: Caught tx_queue_len zero misconfig [ 480.720315][T16177] lo speed is unknown, defaulting to 1000 [ 480.938917][T16190] syzkaller0: entered promiscuous mode [ 480.956594][T16190] syzkaller0: entered allmulticast mode [ 481.367127][T16204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2621'. [ 483.841861][T16199] lo speed is unknown, defaulting to 1000 [ 485.136700][T16223] lo speed is unknown, defaulting to 1000 [ 486.004922][T16249] lo speed is unknown, defaulting to 1000 [ 486.012677][T16239] lo speed is unknown, defaulting to 1000 [ 486.335867][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2643'. [ 486.344990][T16277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2643'. [ 486.359880][T16277] digital: digital_start_poll: Unknown protocol [ 486.949312][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'. [ 487.518691][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 487.562166][T16302] macvtap2: entered promiscuous mode [ 487.577652][T16302] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 487.606190][T16284] lo speed is unknown, defaulting to 1000 [ 487.738176][T16309] netlink: 'syz.1.2651': attribute type 1 has an invalid length. [ 487.761496][T16309] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2651'. [ 487.785291][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 487.830129][T16309] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 487.836310][T16309] syzkaller1: linktype set to 778 [ 488.133367][T16307] lo speed is unknown, defaulting to 1000 [ 488.294492][ T55] block nbd2: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 300 seconds [ 488.305517][ T55] block nbd2: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 300 seconds [ 488.316905][ T55] block nbd2: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 300 seconds [ 488.328850][ T55] block nbd2: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 300 seconds [ 488.378466][T16321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2656'. [ 488.433104][T16321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2656'. [ 488.463250][T16321] nbd: must specify at least one socket [ 488.946908][T16337] tipc: Enabling of bearer rejected, already enabled [ 489.046656][T16344] netlink: 'syz.3.2662': attribute type 11 has an invalid length. [ 489.517308][T16336] lo speed is unknown, defaulting to 1000 [ 489.827298][T16344] lo speed is unknown, defaulting to 1000 [ 490.641769][T16378] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 490.650128][T16378] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2670'. [ 491.056794][T16385] netlink: 'syz.0.2671': attribute type 1 has an invalid length. [ 491.191362][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'. [ 491.608325][T16375] lo speed is unknown, defaulting to 1000 [ 491.902292][T16409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2677'. [ 492.188940][T16413] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2679'. [ 492.377325][T16415] dvmrp1: entered allmulticast mode [ 492.386734][T16415] dvmrp1: left allmulticast mode [ 492.465006][T16419] tipc: Enabling of bearer rejected, already enabled [ 492.474347][T16420] syzkaller0: entered promiscuous mode [ 492.479955][T16420] syzkaller0: entered allmulticast mode [ 492.506412][T16408] lo speed is unknown, defaulting to 1000 [ 492.852818][T16434] tipc: Enabling of bearer rejected, already enabled [ 494.488738][T16477] lo speed is unknown, defaulting to 1000 [ 494.573090][T16494] netlink: 'syz.2.2701': attribute type 29 has an invalid length. [ 494.610645][T16494] netlink: 'syz.2.2701': attribute type 29 has an invalid length. [ 494.652939][T16494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2701'. [ 494.680785][T16501] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2703'. [ 495.473549][T16503] lo speed is unknown, defaulting to 1000 [ 495.488017][T16484] lo speed is unknown, defaulting to 1000 [ 495.599731][T16498] lo speed is unknown, defaulting to 1000 [ 496.374030][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 496.700957][T16532] lo speed is unknown, defaulting to 1000 [ 496.806244][T16545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2713'. [ 497.224900][T16556] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2716'. [ 497.614644][T16568] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2720'. [ 498.334196][T16577] lo speed is unknown, defaulting to 1000 [ 499.454832][T16625] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 499.504608][T16594] lo speed is unknown, defaulting to 1000 [ 499.558214][T16573] lo speed is unknown, defaulting to 1000 [ 500.994357][T16651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2741'. [ 501.198943][T16654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2743'. [ 501.291230][T16663] batadv_slave_1: entered promiscuous mode [ 501.325061][T16663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2746'. [ 501.344978][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'. [ 501.389881][T16662] batadv_slave_1: left promiscuous mode [ 501.577510][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'. [ 501.702568][T16679] tipc: Enabled bearer , priority 10 [ 501.768425][T16680] netlink: 'syz.3.2751': attribute type 10 has an invalid length. [ 501.780270][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 501.809569][T16687] netlink: 'syz.1.2755': attribute type 1 has an invalid length. [ 501.906233][T16687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.979767][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'. [ 501.983768][T16691] 8021q: adding VLAN 0 to HW filter on device bond6 [ 502.000103][T16691] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 502.021213][T16691] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 502.085642][T16707] batadv_slave_1: entered promiscuous mode [ 502.122833][T16707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2761'. [ 502.180562][T16706] batadv_slave_1: left promiscuous mode [ 502.314255][T16718] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 502.327074][T16718] netlink: 'syz.2.2764': attribute type 11 has an invalid length. [ 502.335461][T16718] __nla_validate_parse: 1 callbacks suppressed [ 502.335480][T16718] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2764'. [ 502.355463][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2764'. [ 502.464824][T16724] tipc: Enabling of bearer rejected, failed to enable media [ 502.700525][T16737] netlink: 'syz.2.2773': attribute type 16 has an invalid length. [ 502.711088][T16737] netlink: 'syz.2.2773': attribute type 17 has an invalid length. [ 502.720219][T16735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2772'. [ 502.740820][T16737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.802869][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2773'. [ 502.830987][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2773'. [ 503.161285][T16751] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 503.203422][T16749] netlink: 'syz.1.2778': attribute type 15 has an invalid length. [ 503.222197][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'. [ 503.236752][T16749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2778'. [ 503.620055][T16775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2786'. [ 503.714511][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2785'. [ 504.178616][T16787] can: request_module (can-proto-0) failed. [ 504.294654][ T55] block nbd4: Possible stuck request ffff8880254ee000: control (read@0,1024B). Runtime 270 seconds [ 504.306026][ T55] block nbd4: Possible stuck request ffff8880254ee1c0: control (read@1024,1024B). Runtime 270 seconds [ 504.319498][ T55] block nbd4: Possible stuck request ffff8880254ee380: control (read@2048,1024B). Runtime 270 seconds [ 504.326543][T16796] tipc: Enabled bearer , priority 10 [ 504.336479][ T55] block nbd4: Possible stuck request ffff8880254ee540: control (read@3072,1024B). Runtime 270 seconds [ 504.618075][T16785] lo speed is unknown, defaulting to 1000 [ 504.950066][T16815] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 504.972367][T16817] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:12 [ 505.936859][T16839] netlink: 'syz.0.2804': attribute type 62 has an invalid length. [ 506.119833][T16850] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 506.140646][T16850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.854058][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.369942][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2814'. [ 507.486511][T16880] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2814'. [ 507.652292][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 507.671952][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 508.429509][T16877] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 508.505965][T16904] !: renamed from dummy0 [ 508.656449][T16908] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20001 [ 508.732981][T16877] Failed to register nexthop notifier [ 508.733871][T16908] IPVS: length: 202 != 24 [ 509.253761][T16925] netlink: 'syz.0.2824': attribute type 1 has an invalid length. [ 509.261560][T16925] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2824'. [ 509.311815][T16892] lo speed is unknown, defaulting to 1000 [ 509.358447][T16932] batadv_slave_1: entered promiscuous mode [ 509.456757][T16932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'. [ 509.516790][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2826'. [ 509.563471][T16931] batadv_slave_1: left promiscuous mode [ 509.762127][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 510.102136][T16942] xfrm0: left promiscuous mode [ 510.119170][T16942] xfrm0: left allmulticast mode [ 510.136131][T16942] tipc: Resetting bearer [ 510.146276][T16942] syzkaller0: left promiscuous mode [ 510.151603][T16942] syzkaller0: left allmulticast mode [ 510.333499][T16905] lo speed is unknown, defaulting to 1000 [ 511.275094][T16985] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 511.509289][T16986] bond8: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 511.556248][ T6999] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 511.557424][T16987] 8021q: adding VLAN 0 to HW filter on device bond8 [ 512.175657][T16985] bond8 (unregistering): (slave ip6gretap3): Removing an active aggregator [ 512.205119][T16985] bond8 (unregistering): (slave ip6gretap3): Releasing backup interface [ 512.228171][T16985] bond8 (unregistering): Released all slaves [ 512.286312][T16977] lo speed is unknown, defaulting to 1000 [ 512.515025][T17025] netlink: 'syz.0.2843': attribute type 13 has an invalid length. [ 512.533213][T17025] netlink: 'syz.0.2843': attribute type 17 has an invalid length. [ 512.623166][T17025] 8021q: adding VLAN 0 to HW filter on device  [ 512.661840][T17025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.878485][T17035] tipc: Enabling of bearer rejected, already enabled [ 512.918003][T17033] tipc: Enabling of bearer rejected, already enabled [ 512.949384][T17034] syzkaller0: entered promiscuous mode [ 512.973744][T17034] syzkaller0: entered allmulticast mode [ 513.194325][T17037] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2845'. [ 513.501303][T17019] lo speed is unknown, defaulting to 1000 [ 513.584654][T17026] lo speed is unknown, defaulting to 1000 [ 514.992398][T17060] lo speed is unknown, defaulting to 1000 [ 515.138965][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 515.527070][T17096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2857'. [ 515.734041][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 515.814584][ T31] INFO: task udevd:5886 blocked for more than 143 seconds. [ 515.821898][ T31] Not tainted syzkaller #0 [ 515.833636][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.842486][ T31] task:udevd state:D stack:22616 pid:5886 tgid:5886 ppid:1 task_flags:0x400140 flags:0x00004006 [ 515.867274][ T31] Call Trace: [ 515.870627][ T31] [ 515.890294][ T31] __schedule+0x1798/0x4cc0 [ 515.896053][ T31] ? __pfx___schedule+0x10/0x10 [ 515.901058][ T31] ? schedule+0x91/0x360 [ 515.905482][ T31] schedule+0x165/0x360 [ 515.909689][ T31] io_schedule+0x80/0xd0 [ 515.923698][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 515.929174][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 515.935338][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 515.944945][ T31] ? __filemap_get_folio+0x6e0/0xaf0 [ 515.953750][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 515.959105][ T31] do_read_cache_folio+0x1aa/0x590 [ 515.964426][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 515.969932][ T31] read_part_sector+0xb6/0x2b0 [ 515.975251][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 515.980677][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 515.986979][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 515.993030][ T31] bdev_disk_changed+0x75c/0x14b0 [ 515.998744][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 516.004368][ T31] ? wait_on_inode+0xc0/0x230 [ 516.009278][ T31] blkdev_get_whole+0x380/0x510 [ 516.014455][ T31] bdev_open+0x31e/0xd30 [ 516.018823][ T31] blkdev_open+0x457/0x600 [ 516.023868][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 516.028964][ T31] do_dentry_open+0x950/0x13f0 [ 516.034196][ T31] vfs_open+0x3b/0x340 [ 516.038379][ T31] ? path_openat+0x2ecd/0x3830 [ 516.043242][ T31] path_openat+0x2ee5/0x3830 [ 516.048090][ T31] ? arch_stack_walk+0xfc/0x150 [ 516.053059][ T31] ? stack_depot_save_flags+0x40/0x860 [ 516.058988][ T31] ? __pfx_path_openat+0x10/0x10 [ 516.064521][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.070806][ T31] do_filp_open+0x1fa/0x410 [ 516.075661][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.080633][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 516.086280][ T31] ? _raw_spin_unlock+0x28/0x50 [ 516.091255][ T31] ? alloc_fd+0x64c/0x6c0 [ 516.103751][ T31] do_sys_openat2+0x121/0x1c0 [ 516.110829][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 516.120019][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.127820][ T31] ? rcu_is_watching+0x15/0xb0 [ 516.134961][ T31] __x64_sys_openat+0x138/0x170 [ 516.142887][ T31] do_syscall_64+0xfa/0x3b0 [ 516.149849][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.158493][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.185955][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.194861][T17078] lo speed is unknown, defaulting to 1000 [ 516.204384][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.215979][ T31] RIP: 0033:0x7f675eaa7407 [ 516.228234][ T31] RSP: 002b:00007ffc43234fa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 516.247226][ T31] RAX: ffffffffffffffda RBX: 00007f675f17b880 RCX: 00007f675eaa7407 [ 516.263747][ T31] RDX: 00000000000a0800 RSI: 000055e7601a3360 RDI: ffffffffffffff9c [ 516.275846][ T31] RBP: 000055e7601a2910 R08: 0000000000000000 R09: 0000000000000000 [ 516.284094][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e7601bae00 [ 516.298471][ T31] R13: 000055e7601b0190 R14: 0000000000000000 R15: 000055e7601bae00 [ 516.306851][ T31] [ 516.310137][ T31] [ 516.310137][ T31] Showing all locks held in the system: [ 516.337871][ T31] 2 locks held by ksoftirqd/1/23: [ 516.342966][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 516.375068][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 516.384184][ T31] 1 lock held by khungtaskd/31: [ 516.389071][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 516.414726][ T31] 5 locks held by kworker/u9:0/51: [ 516.419897][ T31] #0: ffff888027a31948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.444719][ T31] #1: ffffc90000bb7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.475621][ T31] #2: ffff888032dacdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 516.495091][ T31] #3: ffff888032dac0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 516.514182][ T31] #4: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 516.525465][ T31] 2 locks held by getty/5622: [ 516.530347][ T31] #0: ffff888033ada0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 516.556851][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 516.591846][ T31] 1 lock held by udevd/5876: [ 516.596941][ T31] #0: ffff888025423358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 516.606397][ T31] 1 lock held by udevd/5886: [ 516.611019][ T31] #0: ffff888143b63358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 516.627412][ T31] 5 locks held by kworker/u8:28/7020: [ 516.632843][ T31] 2 locks held by syz.1.2851/17078: [ 516.638461][ T31] 5 locks held by syz.3.2860/17103: [ 516.643833][ T31] 2 locks held by syz.4.2862/17110: [ 516.649057][ T31] #0: ffffffff8f53d5a8 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 516.660835][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 516.672573][ T31] [ 516.675139][ T31] ============================================= [ 516.675139][ T31] [ 516.683795][ T31] NMI backtrace for cpu 0 [ 516.683814][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 516.683835][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.683846][ T31] Call Trace: [ 516.683854][ T31] [ 516.683862][ T31] dump_stack_lvl+0x189/0x250 [ 516.683892][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.683914][ T31] ? __pfx__printk+0x10/0x10 [ 516.683951][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 516.683980][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 516.684008][ T31] ? __pfx__printk+0x10/0x10 [ 516.684037][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.684069][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 516.684097][ T31] watchdog+0xf93/0xfe0 [ 516.684128][ T31] ? watchdog+0x1de/0xfe0 [ 516.684159][ T31] kthread+0x70e/0x8a0 [ 516.684185][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.684217][ T31] ? __pfx_kthread+0x10/0x10 [ 516.684241][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.684268][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.684295][ T31] ? __pfx_kthread+0x10/0x10 [ 516.684318][ T31] ret_from_fork+0x439/0x7d0 [ 516.684339][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.684364][ T31] ? __switch_to_asm+0x39/0x70 [ 516.684385][ T31] ? __switch_to_asm+0x33/0x70 [ 516.684406][ T31] ? __pfx_kthread+0x10/0x10 [ 516.684428][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.684469][ T31] [ 516.684476][ T31] Sending NMI from CPU 0 to CPUs 1: [ 516.831696][ C1] NMI backtrace for cpu 1 [ 516.831714][ C1] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 516.831732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.831741][ C1] RIP: 0010:__lock_acquire+0x449/0xd20 [ 516.831766][ C1] Code: b6 e9 44 0f 44 ea 44 8b a7 e8 0a 00 00 41 8d 4c 24 ff 83 f9 ff bd ff ff ff ff 0f 4c e9 ff c5 45 8d 7c 24 01 49 ff cc 44 89 f9 <83> c1 fe 78 44 44 89 e3 81 e3 ff ff ff 7f 83 f9 31 73 1d 48 8d 0c [ 516.831779][ C1] RSP: 0018:ffffc90000a08688 EFLAGS: 00000003 [ 516.831794][ C1] RAX: 0000000000022007 RBX: 0000000000000003 RCX: 0000000000000003 [ 516.831804][ C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: ffff88803102bc00 [ 516.831814][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c195 [ 516.831824][ C1] R10: ffffc90000a088d8 R11: ffffffff81ac3b00 R12: 0000000000000001 [ 516.831834][ C1] R13: 0000000000000001 R14: ffff88803102c740 R15: 0000000000000003 [ 516.831845][ C1] FS: 0000555562a64500(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 516.831857][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.831868][ C1] CR2: 0000001b33921ffc CR3: 0000000077b7e000 CR4: 00000000003526f0 [ 516.831883][ C1] Call Trace: [ 516.831889][ C1] [ 516.831898][ C1] ? unwind_next_frame+0xa5/0x2390 [ 516.831914][ C1] lock_acquire+0x120/0x360 [ 516.831931][ C1] ? unwind_next_frame+0xa5/0x2390 [ 516.831956][ C1] ? unwind_next_frame+0xa5/0x2390 [ 516.831970][ C1] ? rcu_core+0xcab/0x1770 [ 516.831989][ C1] ? unwind_next_frame+0xa5/0x2390 [ 516.832003][ C1] unwind_next_frame+0xc2/0x2390 [ 516.832016][ C1] ? unwind_next_frame+0xa5/0x2390 [ 516.832032][ C1] ? unwind_next_frame+0xa5/0x2390 [ 516.832047][ C1] ? kmem_cache_free+0x18f/0x400 [ 516.832067][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.832083][ C1] arch_stack_walk+0x11c/0x150 [ 516.832101][ C1] ? rcu_core+0xcab/0x1770 [ 516.832121][ C1] stack_trace_save+0x9c/0xe0 [ 516.832136][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 516.832154][ C1] ? __lock_acquire+0xab9/0xd20 [ 516.832173][ C1] kasan_save_track+0x3e/0x80 [ 516.832189][ C1] ? kasan_save_track+0x3e/0x80 [ 516.832203][ C1] ? kasan_save_free_info+0x46/0x50 [ 516.832216][ C1] ? __kasan_slab_free+0x5b/0x80 [ 516.832232][ C1] ? kmem_cache_free+0x18f/0x400 [ 516.832248][ C1] ? rcu_core+0xcab/0x1770 [ 516.832284][ C1] ? rcu_core+0xcab/0x1770 [ 516.832301][ C1] kasan_save_free_info+0x46/0x50 [ 516.832315][ C1] __kasan_slab_free+0x5b/0x80 [ 516.832331][ C1] kmem_cache_free+0x18f/0x400 [ 516.832348][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 516.832363][ C1] ? rcu_core+0xc37/0x1770 [ 516.832382][ C1] rcu_core+0xcab/0x1770 [ 516.832406][ C1] ? __pfx_rcu_core+0x10/0x10 [ 516.832424][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 516.832441][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 516.832462][ C1] ? sched_clock_cpu+0x74/0x430 [ 516.832483][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 516.832502][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 516.832523][ C1] ? sched_clock_cpu+0x74/0x430 [ 516.832541][ C1] ? lapic_next_event+0x11/0x20 [ 516.832555][ C1] ? clockevents_program_event+0x24d/0x360 [ 516.832576][ C1] handle_softirqs+0x283/0x870 [ 516.832597][ C1] ? do_softirq+0xec/0x180 [ 516.832619][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 516.832641][ C1] ? tcp_recvmsg+0x1fa/0x810 [ 516.832656][ C1] do_softirq+0xec/0x180 [ 516.832675][ C1] [ 516.832680][ C1] [ 516.832686][ C1] ? __pfx_do_softirq+0x10/0x10 [ 516.832709][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 516.832728][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 516.832748][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 516.832770][ C1] ? tcp_recvmsg+0x1fa/0x810 [ 516.832784][ C1] tcp_recvmsg+0x1fa/0x810 [ 516.832801][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 516.832817][ C1] ? aa_sk_perm+0x81e/0x950 [ 516.832836][ C1] ? sock_rps_record_flow+0x19/0x410 [ 516.832851][ C1] inet_recvmsg+0x147/0x250 [ 516.832866][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 516.832881][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 516.832895][ C1] ? security_socket_recvmsg+0x7e/0x2e0 [ 516.832912][ C1] sock_recvmsg+0x1a8/0x270 [ 516.832935][ C1] sock_read_iter+0x231/0x2f0 [ 516.832961][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 516.832978][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 516.833002][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 516.833017][ C1] ? security_file_permission+0x75/0x290 [ 516.833038][ C1] vfs_read+0x55a/0xa30 [ 516.833058][ C1] ? __pfx_vfs_read+0x10/0x10 [ 516.833078][ C1] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 516.833097][ C1] ksys_read+0x145/0x250 [ 516.833115][ C1] ? __pfx_ksys_read+0x10/0x10 [ 516.833130][ C1] ? rcu_is_watching+0x15/0xb0 [ 516.833145][ C1] ? do_syscall_64+0xbe/0x3b0 [ 516.833160][ C1] do_syscall_64+0xfa/0x3b0 [ 516.833174][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.833188][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.833204][ C1] ? clear_bhb_loop+0x60/0xb0 [ 516.833220][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.833234][ C1] RIP: 0033:0x7f3fc5f8d89d [ 516.833246][ C1] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb bd e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d c1 ac 22 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 516.833258][ C1] RSP: 002b:00007fff71980d78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.833273][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fc5f8d89d [ 516.833284][ C1] RDX: 0000000000000004 RSI: 00007fff71980d8c RDI: 0000000000000003 [ 516.833294][ C1] RBP: 0000000000000000 R08: 0000000031c95844 R09: 7fffffffffffffff [ 516.833304][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff719811a0 [ 516.833313][ C1] R13: 0000000000000004 R14: 00007fff71980d8c R15: 00007fff71980e20 [ 516.833330][ C1] [ 516.909514][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 516.909534][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 516.909555][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.909567][ T31] Call Trace: [ 516.909575][ T31] [ 516.909583][ T31] dump_stack_lvl+0x99/0x250 [ 516.909609][ T31] ? __asan_memcpy+0x40/0x70 [ 516.909629][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.909649][ T31] ? __pfx__printk+0x10/0x10 [ 516.909684][ T31] vpanic+0x281/0x750 [ 516.909705][ T31] ? __pfx_vpanic+0x10/0x10 [ 516.909723][ T31] ? preempt_schedule+0xae/0xc0 [ 516.909750][ T31] ? preempt_schedule_common+0x83/0xd0 [ 516.909781][ T31] panic+0xb9/0xc0 [ 516.909798][ T31] ? __pfx_panic+0x10/0x10 [ 516.909818][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 516.909847][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 516.909873][ T31] watchdog+0xfd2/0xfe0 [ 516.909901][ T31] ? watchdog+0x1de/0xfe0 [ 516.909928][ T31] kthread+0x70e/0x8a0 [ 516.909951][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.909972][ T31] ? __pfx_kthread+0x10/0x10 [ 516.909994][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.910017][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.910040][ T31] ? __pfx_kthread+0x10/0x10 [ 516.910060][ T31] ret_from_fork+0x439/0x7d0 [ 516.910080][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.910103][ T31] ? __switch_to_asm+0x39/0x70 [ 516.910121][ T31] ? __switch_to_asm+0x33/0x70 [ 516.910141][ T31] ? __pfx_kthread+0x10/0x10 [ 516.910161][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.910203][ T31] [ 517.564082][ T31] Kernel Offset: disabled [ 517.568399][ T31] Rebooting in 86400 seconds..