last executing test programs: 9.411624579s ago: executing program 0 (id=4574): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r2) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000001040)=""/105, 0x69}], 0x2}, 0x324}], 0x1, 0x40002022, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x1e8, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x140}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9, @loopback, @loopback, @icmp_id=0x68, @gre_key}}}}, {{@ip={@private, @local, 0xffffff00, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x62, 0x0, 0x7}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) (async) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYRES64=r6, @ANYRESDEC=r0], 0x154}}, 0x40000) (async) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1000, @private1, 0xffffffff}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000c00)="d191d3b1", 0x4}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB="580000000000000029000000370000003a07000000000000072800000001080701000500000000000000020000000000000007000000000000000104000000000000c910fe8000000000000000000000000000aa000000001400000000000000290000000800000003000000000000001400000000000000290000083e000000070000000000000014"], 0xa0}}], 0x2, 0x4004851) (async) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) (async) r7 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_int(r7, 0x0, 0x18, 0x0, &(0x7f0000000040)) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 9.148516005s ago: executing program 0 (id=4577): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'vxcan1\x00', 0x1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 8.770009867s ago: executing program 0 (id=4582): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xe07d1000) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x42}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000180)="ce010c4aa321b67bc7f67a42da27eefd212290941c1821b84a90ae6bfd6950", 0x1}, {&(0x7f0000000140)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0xfffffeee}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4040084) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) close(0x4) r2 = epoll_create(0x3ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000280)={0x2000000}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x4000c010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.991177868s ago: executing program 0 (id=4587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000000c0)={0x1, 0xd, 0xe, 0xf7e}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0\x00', 0x2}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, 0x0, 0x4c040) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x7f82c3, 0x0) 7.768870038s ago: executing program 1 (id=4588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf25010000201400020077673000000000000000000000000000080005000100000088000880840000805c0009801c000080060001000200000008000200ac14141f05000300000000001c000080060001000200000008000200ffffffff05000300030000001c00004f060001000200000008000200ac1414aa050003000300000002000080240001"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 7.605489424s ago: executing program 1 (id=4589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b49000001000000000000000045000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0xc4, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x7fffffffffffffff, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002380)=@delchain={0x8a0, 0x2c, 0x10, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff2, 0xffff}, {0x2, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x874, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x868, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xb, 0x7, 0x5, 0x6, 0x9, 0x40, 0x459f84e5, 0x2, 0x5, 0x2, 0x8001, 0x17d936e9, 0x3, 0xa01, 0xe7, 0x7, 0x800, 0x10, 0x0, 0x80000001, 0x6, 0x4, 0x38, 0x4, 0x401, 0x67, 0x9, 0xf7f, 0x4, 0x1, 0x925d, 0x1, 0xffffffff, 0xfffffffe, 0xecd, 0xd8a, 0x0, 0xfffffffb, 0xfffffffc, 0x702a, 0x6, 0x8, 0x10, 0x4, 0xeff4, 0x5, 0x7, 0x5, 0x0, 0x0, 0x2a8a59ef, 0xffffffff, 0x5, 0xfc, 0x1, 0x49c53607, 0x2, 0x80000001, 0x2f, 0x8, 0xfffffffa, 0x4fa, 0x8, 0x4, 0x3, 0x800, 0x7, 0xffffff7b, 0x0, 0x7f, 0x80000000, 0x9, 0x2, 0x22c, 0x4, 0x180, 0xab, 0x954c, 0x2, 0x0, 0x5, 0x7, 0x5, 0x4, 0x3, 0x7, 0x1, 0x2eda, 0x7f, 0x3, 0x7, 0x540, 0x9, 0x80, 0x180000, 0x2, 0x401, 0x10001, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5, 0x7ff, 0x1, 0x3, 0xfa42, 0xfffffff7, 0x9, 0x7fff800, 0x3, 0x6, 0x6, 0x5, 0x10001, 0x6, 0x9, 0x6cd, 0xa08, 0xe821, 0x8000, 0x5, 0x2, 0x5, 0xc1, 0x6, 0x200, 0x1, 0x7, 0x2, 0x5, 0x7ff, 0x4, 0x4, 0x2, 0xfff, 0x8, 0x78c16f5b, 0x1, 0x4ad9f223, 0x81, 0x1, 0x1, 0x0, 0x3, 0x4, 0xfff, 0x1ff, 0x9, 0x3, 0xffffff75, 0x0, 0x5b5c142a, 0x8, 0x9, 0x8e73, 0x101, 0x7, 0x1, 0x9, 0x1, 0xe, 0x7, 0x5, 0x1ff, 0xf6, 0x0, 0x3, 0x4, 0x6, 0x57, 0x3, 0x4d80, 0x2, 0xfffff376, 0x61, 0x10000, 0x2, 0x4, 0x74be, 0x7, 0x8001, 0x5, 0x7, 0x8c000000, 0x4, 0x9, 0x6, 0x4, 0x9, 0x5, 0x99f, 0x80000001, 0x7, 0x9, 0x6, 0x10001, 0x200, 0x8, 0x2, 0x8000, 0xcd53, 0x1, 0xc0000, 0x4, 0x6, 0x10000, 0x5, 0x2, 0xe1, 0x8, 0x81, 0x80a1, 0x1, 0x0, 0x6, 0xffffff10, 0x78dcb124, 0x3, 0xd7d0, 0x9, 0xfffffffd, 0x5, 0x9, 0xffff4e05, 0x80, 0x10001, 0x5, 0x5, 0x658bfd45, 0x6, 0x3f6e3ed6, 0x20, 0x3, 0x3, 0x5, 0x2, 0x959, 0x3, 0x9, 0x7, 0x71, 0x3, 0x9, 0x6, 0x7ffffffc, 0x1, 0x4, 0x8000, 0xe94, 0xb47, 0x1, 0x5, 0x7fff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x3, 0x5, 0x8f, {0x1, 0x1, 0x9, 0x10, 0x3, 0x5}, {0x10, 0x1, 0x8, 0xaad6, 0x1000}, 0xfffffffc, 0x1ff, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x5b01, 0x4, 0xffff0000, 0x0, 0xfffffd0a, 0xfff, 0x0, 0x7, 0xf9b, 0xb, 0x0, 0xe, 0x4, 0x49, 0x6, 0x400, 0x1, 0x7, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x2, 0x6, 0x1d7, 0x0, 0x7fffffff, 0x80, 0x400, 0x6cb7, 0x7, 0x9, 0x8, 0x9, 0x4, 0x401, 0x2, 0x8, 0xe261, 0xffff, 0x9, 0x6, 0xe, 0x25a, 0x4, 0x1000, 0x80000001, 0x4, 0x5, 0x0, 0xbd, 0xfffffff7, 0x0, 0x8, 0x1000, 0xb4a, 0x6, 0x1, 0x4c, 0xa, 0xd, 0x7, 0x7, 0x8, 0x8000000, 0xc3a, 0x8001, 0x7, 0x6, 0x7, 0x0, 0x41, 0x7, 0x9, 0x0, 0x2, 0x80000001, 0x7, 0x31bb69ea, 0xfff, 0xfd, 0xd, 0x3, 0x8, 0x6, 0xb3, 0x7, 0x80, 0x3, 0x2e8000, 0x4d0b, 0x8001, 0x9, 0x1, 0x7, 0x390, 0x401, 0x6, 0x0, 0x7, 0x7, 0x2, 0x6, 0x80000001, 0x80000000, 0x7, 0xc, 0x0, 0xae24, 0x7, 0x8, 0x8000, 0x7, 0x5a3, 0x5, 0x7ff, 0x8, 0x1ff, 0x4c, 0x9, 0xabb, 0x9, 0x5, 0x0, 0x9, 0x7f, 0x5, 0x0, 0x8000, 0x4, 0x10, 0x1, 0x88, 0x81, 0x1, 0x950b, 0x400, 0xb7d, 0x1, 0x30c1, 0x3, 0x5, 0x9, 0x38, 0x8001, 0x5c, 0x1, 0x3ff, 0x7, 0x6, 0x4, 0x100010, 0x4, 0xd, 0x4, 0x9, 0x7f, 0x9, 0x909, 0x4, 0xaf7, 0x2ce40000, 0xfffffffc, 0x36b, 0x8, 0x7, 0x9, 0x6, 0x2, 0x4, 0x2, 0x3, 0x5, 0xfff, 0x2, 0x3, 0x4, 0x5, 0x8, 0xffff, 0x0, 0x4, 0xfffffff7, 0x2, 0x5, 0xed7, 0x6, 0xd, 0xb, 0x7, 0xcb2, 0x1ff, 0x9, 0x60000000, 0x0, 0x2, 0x4, 0x53, 0x8001, 0x9, 0x3fbe, 0x0, 0x9d, 0x7, 0x9, 0x81, 0x40, 0x6, 0x442a, 0x80000001, 0x80, 0x900, 0x5, 0x1, 0x7fffffff, 0x1, 0xf, 0xa, 0x90000000, 0x3c3e0f69, 0x5, 0x4, 0x208, 0x1ff, 0x9, 0x1, 0x2, 0x3, 0x10, 0x5, 0xd133, 0x8, 0x40, 0x8, 0x1, 0x7fff, 0x7, 0x2, 0xfffffffe, 0x61d, 0x5, 0x80000000, 0xa0, 0x7, 0x9, 0x9, 0x4d0, 0x8, 0x4, 0x7, 0x8, 0x2, 0x1]}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYBLOB="070000000000000000000000000000000000000055f4cb377ae3b6144b", @ANYRES32, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 7.455632552s ago: executing program 0 (id=4591): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000000140)=[{&(0x7f00000026c0)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{}, "d48469ea7655f416", "3cbf12f3b23340ffe100", '$UY8', "bfca9be3cad800"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{}, "d48469ea7655f416", "3cbf12f3b23340ffe100", '$UY8', "bfca9be3cad800"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="080000000300000008000100030000000300ff6d51b3c854f30000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.278065814s ago: executing program 2 (id=4592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6aff71b62bbb0fe006eea66c7000000001800000008", 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7, 0x38}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x101}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) 7.079937781s ago: executing program 2 (id=4594): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111d8000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 7.05892195s ago: executing program 2 (id=4595): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x783200, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r6, &(0x7f0000000340)={@void, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r11, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4066, 0xfe2}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) close(r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYBLOB="74a39f35b9404690ceda1a054c6fbc37ae7b7e25a823859d8b3398d021d5fde83d73f65875669979d6103d", @ANYRESHEX=r12, @ANYRES8=r13], 0x40}}, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="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", 0xcd}, {&(0x7f0000003240)="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", 0xe62}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) 6.556848821s ago: executing program 4 (id=4598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.389129546s ago: executing program 3 (id=4599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf25010000211400020077673000000000000000000000000000080005000100000088000880840000805c0009801c000080060001000200000008000200ac14141f05000300000000001c000080060001000200000008000200ffffffff05000300030000001c00004f060001000200000008000200ac1414aa050003000300000002000080240001"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 6.17387107s ago: executing program 1 (id=4600): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000b, 0x2010, 0xffffffffffffffff, 0x2d75000) 6.080284456s ago: executing program 4 (id=4601): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000001d80)={&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="ab19cdbd2a9270b92c16227cb3e6ca04d00558b1e93a8d7652a492de4340cec561e6e9f50652b7deec854b681febf7ec4fc5b6ca8fc49613ddf6249aa63f8258e5e951c363b59394305b7eedc5378fa60dc408d31ee9797a9035a85a10ee959663cc07b569ea575f1eba0cecba8613c5d8e2613382f739cad28e75eab0285bb7e9656390bdabd85494", 0x89}, {&(0x7f00000018c0)="ecca0e093f890954dc54be3d", 0xc}, {&(0x7f0000001900)="db0b64c4c2a7b6e1493597b16a54f11ec91ef8bd49f3fb97325749d68f12ccfd21fc6bbd335ccbe8a4ca422c4f53e4fb07d40f1af89a5aa50d42773c31d49da82d8287909281e2167e445ee2bcb4a106f3e0836c2ef91f6fe62abe5d387398389268dc6ff0bb07ec185b74b32f028cb7e2bb0be739e7bd877b1debe0f2bbc8433e0ed22c73329293bcf82a6d4f4f03a87a52c64503ef70db7c783c2842e6ff97a4778d8538f93c0a8f5625af2570ad5efa94052b5b7c50f70025d58b49aaf1014439c868e24b16b648db5fd010136a8b4db3b724559dfc24ff6693a99fcdef278bb0b637", 0xe4}, {&(0x7f0000001a00)="a706fcb35c5c6dbf79a1ec76cce0dcfdb50c0254751109391aaa4c9436cd413b41f8928d8a6049c96c7e0a074d90fed1be38291346dd9f4f47a68f3b237431b27f185098f72283fbee420e", 0x4b}, {&(0x7f0000001a80)="e03ebbc8624ea4c412a1985c7af148eed9fbf415efed1371ad3c8c7b70b8a70127e5f71d782fd8312f3f36b82c63728d6dee7efa8b7fc7d476bad348", 0x3c}, {&(0x7f0000001ac0)="17c4c4a71b5d941631efc66b77f886dc6bb2967ff74bf101d3c529c097a87b414a98978f90fdd26e4ddd2fa0278ba6b5c50ab8bf11c14e16a78a46ba5c5a5f5512d40296581c0b35d23fb2329a2b308ed7744a0d2193958eb760cd6eb52b04cd38e8a3c7a08269d622b4a548cf8e817d853c86", 0x73}, {&(0x7f0000001b40)="1e72962418574677a8a286a5741537ca93c73a53915920e16fceb2ca2dc118c295e8a56d8726e0e1dc3a4491490f60e20b081a96f1237c6d9f9eb15c0687282380726597ab3c012ca201fc5692e5010f8a62", 0x52}, {&(0x7f0000001bc0)="e59f6b69a9dea244ce78733aa2385869ae852689fb8778e24fd16aae2a9001921798df357a4eb7082e2cb42a992c234e0955b1eaac66880520d644620fdaa174dbd0b3df58d0e2ad69715d8ae36915ebcd3f86137f76c557a3c26e8822d6716d56431e380dc22dae15d3efdf8e22eee42380aaf7d5aee4799fe9cf1e868a3fc2d82338ca4f111ac01af2ccd03a375ff795eea513697595fbc52a0c73884980a30b7d875877ffcb7b60c0caf0b925255c209b95d3856cf618036a687a605995bbbdcfd4fce09cc3b0036b5c79b937e7b18cee250dca4a02c12de6ed4ddf93976ecc60a94abe865b4892ebbfb21c1b85213ed63491f53bad81", 0xf8}], 0x9}, 0x18800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000000c0)=0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x4, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44080) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x13, @private=0xa010102, 0x4e23, 0x2, 'fo\x00', 0x10, 0xffff, 0x6f}, 0x2c) 5.99815511s ago: executing program 3 (id=4602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e4fffffffffffbff", "9da15200", "b6730761", "f3ffffffffffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000005, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 5.971793152s ago: executing program 2 (id=4603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x80000, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128l-aesni)\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) 5.929272967s ago: executing program 4 (id=4604): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x1, 0x681a, "c3b36c243991"}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='veth0_to_team\x00', 0x6040, &(0x7f00000000c0)={@align=0x3, {0xe, 0x1, 0x7, 0x4}}, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x10}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x28, r3, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x2004c840) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x5, 0x7, 0x68, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x10000, 0x91fe}}) r8 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x200400c5) r11 = socket$packet(0x11, 0x2, 0x300) bind$packet(r11, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r13, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x7fff, 0x1a}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x667}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044044}, 0x4800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@remote, @multicast2, 0x0}, &(0x7f0000000340)=0xc) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r16) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r16, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x20, r17, 0x1, 0xf000000, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x194, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x194}}, 0x4) 5.926186832s ago: executing program 3 (id=4605): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c01}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x10001}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r11, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r12, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) connect$can_j1939(r8, &(0x7f00000002c0)={0x1d, r9, 0x800003, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r11, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x300, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x5, 0x2, @l2={'ib', 0x3a, 'ip_vti0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc041) (async) r13 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r13, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfe80, @empty}, 0x71, &(0x7f0000001080)=[{&(0x7f0000001980)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a34af0e2eabf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819eeae05952", 0x1004}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff00) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.799021521s ago: executing program 4 (id=4606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept4(r1, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000100)=0x80, 0x800) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8814}, 0x0) 5.709384328s ago: executing program 3 (id=4607): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x800, 0x10}, 0xc) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xf3, 0x0, 0x1, 0x0, r3, 0xfffffff8, '\x00', r4, r5, 0x4, 0x3, 0x5}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x1f0c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x634, 0x7, 0x5, 0x0, 0x0, 0x655, 0xfffffbff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x83d, 0x7ff, 0x6, 0x2, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x6, 0x9, 0xd, 0x9, 0x8001}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x9}, 0x94) 5.548899262s ago: executing program 4 (id=4608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900140000060015000200000014001680100008800c000380"], 0x38}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x4, 0x10}, {0xffff, 0xffff}, {0x5, 0x8}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x1, 0x3, 0x0, 0x2, 0x10, 0xf, 0x6}}, {0x10, 0x2, [0xd8, 0x2, 0x3, 0x4, 0x0, 0x0]}}, {{0x1c, 0x1, {0x7, 0xd9, 0x8d, 0x2, 0x0, 0x10001, 0x7, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0x4, 0x3, 0xd, 0x4, 0x0, 0x8, 0x73, 0x3}}, {0xa, 0x2, [0x7, 0x0, 0x2]}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xb, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r11) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) r13 = socket(0x2b, 0x80801, 0x1) connect$inet6(r13, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) listen(r13, 0x1) 5.548291597s ago: executing program 1 (id=4609): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000002000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) 5.380666811s ago: executing program 1 (id=4610): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x7eb, @mcast1, 0x8}, 0x1c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, {0x306, @multicast}, 0x46, {0x2, 0xffff, @empty}, 'syzkaller1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffff", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 5.251112333s ago: executing program 2 (id=4611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/216, 0x3ff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$OCFS2_IOC_GROUP_ADD64(r9, 0x40186f03, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x2, 0x6, 0x78, 0x67, 0x0, 0x4, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp_prespec={0x44, 0x1c, 0x6b, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@multicast1, 0x4}, {@multicast1, 0x40}]}]}}, {0x4e22, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "7509271dcd6f3bb97e9e678d216915771b3089c9687a8166", "1e5704e81cf36b30dae9116a706286ca0e51dba753e54e09b3c6b93f8d0df762"}}}}}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5.145403365s ago: executing program 1 (id=4612): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000e50b8f317fabe03b364160960300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8de00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r2, &(0x7f0000000a00)={&(0x7f00000000c0)={0x2a, 0x3, 0x8000}, 0xc, &(0x7f00000005c0)=[{&(0x7f0000000100)="47f2121a76f91eb620ff11a4d0660f6455b3c65548b6b09363c77ddbfb4e", 0x1e}, {&(0x7f0000000140)="bcb2047b074f41592a4b176db3cd34cf53b44b47db4e544d36f5947ca17cf27e9dd1ad73293e3bb86a4d2f7dc5f0d5d28809132a47da6a076be240a5468123600a82d0f30ad57a5a1488ffa96d65b5280dc8447281e3534112980625554755d53d4df938efdab0482fa051b29bd02621dc6d6efb569d88789cf55696e294fd13f8bf4504bfed9afbbde2f866683bc9d330", 0x91}, {&(0x7f0000000200)="9861a5180e3a348ea0c8d823100a04ddc89136d121d96b343cf247f9c27931bf6e7275d5a1c91259bbd6bc4458d64df3d0a50a546a91157bde0d3929c87d437125358147ae5ef692dba8120271238778dab022", 0x53}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="0a934381ea3ba9b951bacad2dd5e0dfa32e86147786f3377f080581734869bc3b5d0531d5e0990f52700b9b8a9ec90bb791e8ac678b8f776a0de29f463eef2f4913d7ebd890f877383e948d7b45ddce18c3fde48d183a535161d318f095ddcdc8403c55a68c1ec2520ddf98fcd03aee1db6c7feb30c056379b89f47b3f66", 0x7e}, {&(0x7f00000003c0)="f4e9afec77225e513387f820b10af24682899aaa51002a466cb172943e54ed8f629238b2da2927e0bdad6ef160832891dfe25d711f5d34c1cfe103adaa070cdddedb76f87e4d25", 0x47}, {&(0x7f0000000440)="5659e201a93d733788f3ca604508eba1021e2faf7b40b0c9cd75c83648702af1cc74152fde227f2c36a90343a8a9e3998ba8b55048da67e6222b77a64bf87cfa8db9bb21f6a57a11a3d70709e00c3b050b770bb5b3237c2e8b6dea2616b45b0c20dd14f3267b2bb4116f1461d1c79fed037850b739992310e5679ce8eefbc7115bc0219da913d92f90d8", 0x8a}, {&(0x7f0000000500)="2aa4e95a7b84c4ec46e1f3a59d1a3a55c979e4ae6a05ac8cb816c0775fe4c83b667a0844a63ab77c15abc03436789ca48be9c0ea0fbc08ab99c691bb5c60a060990a9dd5279d77fac8180a93aed599da954dd893b33984d511f06c1508a6e4ffa23bd2366e9bcee9debaedaba1e4a0418702e1790ad3004e61b31c2970316d28d6ba5b2aa80c7ed1d05e50a5f6ee21fecd81879758b412447853a88812798723e36ce7d4c4", 0xa5}], 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x398, 0x800}, 0x38) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000700)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="00007000000700000000006f0e00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3}, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x8000) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) r11 = socket$kcm(0x2, 0xa, 0x2) sendto(r11, 0x0, 0x0, 0x68ec, &(0x7f00000004c0)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80) close(0x3) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000094000000160a01000000000000000000010000000900010073797a30000000000900020073797a3100000000680003800800014000000005080002400000000454"], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.119078801s ago: executing program 3 (id=4613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf25010000411400020077673000000000000000000000000000080005000100000088000880840000805c0009801c000080060001000200000008000200ac14141f05000300000000001c000080060001000200000008000200ffffffff05000300030000001c00004f060001000200000008000200ac1414aa050003000300000002000080240001"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 1.118181121s ago: executing program 3 (id=4614): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x62}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x123) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x400) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e25, 0x3, 0x2, 0x40, 0x0, 0x2f}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x75, 0xfffffffffffffffb}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x32}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0xb7, 0x0, 0x0, 0x3}}, 0xe8) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x49, &(0x7f0000000600), 0x2a) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.117717612s ago: executing program 0 (id=4615): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x50) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30f500000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003"], 0x10c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000003850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 41.019442ms ago: executing program 4 (id=4616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000a64000000060a0b1600000000000000000200000a3800048018000180080001006f7366000c000280080001400000000d1c0001800a00010600000000000000000c000280080004400000000f6300010073797a3000001b0009000b0073797a0500000000140000001100010000000000000000000000000a4936c947d3d35bd7e8a3d2d8914c0a3a4833d3061107f12612b1f09c994a3f44b2948c2d276f1457324e9e8053fa7d0dbe5883d0dc9873104f2b8df0d8f1139261e6679002dd64a5e2cf4d612f6e4943f9b6e54d63be4c90b9a5ef6be9000000000000000000000000000000008c59a40cf1d54e472b197d8b2923fc9675dcf26895244d42378dc1f4e46b"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61f0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000280), 0x0}, 0x20) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x84, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x48c5}, 0x20008800) 0s ago: executing program 2 (id=4617): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r3 = socket(0x8, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0xb18, 0x0, 0x12, 0x600, 0x0, 0x202, 0xa48, 0x2e8, 0x2e8, 0xa48, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x948, 0x978, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2, 0x0, {0x3}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0xffff8001, 0x2}, {0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x65, 0x3}, {0x9, 0x1}, {0x33d8786a, 0x1}, {0x2, 0x2}], [{0x7, 0x8c}, {0x1, 0x5}, {0x3ff, 0xda}, {0x5, 0x80000000}, {0x6, 0x1}, {0x5, 0x3}, {0x9037, 0x8}, {0x1000, 0x1}, {0x7, 0x7ff}, {0x7}, {0x7, 0x4}], 0x7, 0x1}, {[{0x1, 0x3}, {0x80000000, 0x2}, {0x81, 0x3}, {0x8, 0x1}, {0x3}, {0x8, 0x1}, {0x5, 0x3}, {0x6ec7, 0x1}, {0x1, 0x2}, {0x9}, {0xffffffff}], [{0x0, 0x8000}, {0x1, 0x51}, {0x800, 0x1}, {0x40, 0xfffffffe}, {0x1, 0x400}, {0xffffffff, 0x4}, {0x1, 0x2f}, {0x6, 0xe3}, {0x5, 0x2336}, {0x2, 0x7fffffff}, {0x3, 0x100}], 0x2, 0x5}, {[{0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x401}, {0xffff, 0x2}, {0x80, 0x3}, {0xc, 0x1}, {0x7, 0x2}, {0x4}, {0x8, 0x1}, {0x84, 0x2}], [{0x2, 0x48ea5d6a}, {0x6, 0x1}, {0x5, 0xf7}, {0xc}, {0xab, 0x5}, {0x2, 0x9}, {0x6, 0x6}, {0x67, 0x5}, {0x40, 0x6}, {0x1800, 0xd}, {0x1ff, 0x8d6}], 0x7}, {[{0x6, 0x2}, {0xfffffff9}, {0xc}, {0x8, 0x1}, {0x8, 0x3}, {0xf, 0x1}, {0xe00}, {0x7fffffff}, {0x7, 0x2}, {0x5, 0x1}], [{0xe, 0x80000000}, {0x1, 0x9}, {0xea, 0x5}, {0x6, 0x5}, {0xa, 0x1}, {0x8, 0x8}, {0x8, 0x1}, {0x401, 0x2}, {0xfff, 0x9}, {0xb, 0x9}, {0x9, 0xffff}], 0xb, 0x4}, {[{0x585b, 0x2}, {0x800, 0x2}, {0x80, 0x1}, {0x6, 0x1}, {0x8001, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x100}, {0xfff, 0x3}, {0x1}, {0x8001, 0x1}], [{0x6, 0x8}, {0x7f, 0x5}, {0x6, 0xf}, {0x3}, {0x2}, {0x80000000, 0x4}, {0x400, 0x6de0}, {0x8, 0x9}, {0x7, 0x800}, {0x98f, 0x10000}, {0xa9, 0x7}], 0x6, 0x9}, {[{0x8}, {0x81}, {0x0, 0x3}, {0xb, 0x3}, {0x2, 0x1}, {0xd7, 0x1}, {0x8, 0x3}, {0xf8a9, 0x3}, {0x5}, {0x0, 0x3}, {0x8, 0x2}], [{0x67c4, 0x8b}, {0xeb2, 0x1}, {0x0, 0x7ff}, {0x2, 0x9}, {0x3, 0x3}, {0x81, 0x8cc2}, {0xd, 0x200}, {0x2, 0x7}, {0x4, 0x800}, {0x7, 0x1d}, {0x9, 0x40}], 0x7, 0xb}, {[{0x6, 0x2}, {0x207, 0x2}, {0x0, 0x1b385c99f5cbecae}, {0x10000, 0x1}, {0x65593b7e, 0x2}, {0xdd}, {0x1, 0x2}, {0x4, 0x3}, {0x8, 0x1}, {0x6, 0x2}, {0x4, 0x2}], [{0x2, 0x2}, {0x5, 0x8}, {0x478f, 0x6}, {0x5cc0, 0x3}, {0x967, 0x3}, {0x0, 0x9}, {0x4, 0xfffffffb}, {0x800, 0xffffffff}, {0x81, 0xffff}, {0x6, 0xc}, {0x101, 0x7}], 0x7, 0x5}, {[{0xfffffffd, 0x3}, {0x3, 0x2}, {0xfffffffd, 0x3}, {0x9}, {0x5e84, 0x2}, {0x0, 0x1}, {0x4c2}, {0x8b6a, 0x2}, {0x10, 0x3}, {0x8001, 0x3}, {0x5, 0x3}], [{0x1, 0xc}, {0xf33, 0x8}, {0x6, 0xffffff01}, {0x3, 0x4}, {0x9, 0x66}, {0xb, 0x5}, {0x0, 0xf6c9}, {0x0, 0x4}, {0x2, 0x1000000}, {0x7, 0x4}, {0x40, 0x5d55}], 0xa, 0x5}, {[{}, {0xfff, 0x3}, {0xfffffff7, 0x2}, {0x5, 0x3}, {0x1}, {0x4, 0x1}, {0xae0, 0x3}, {0xffffffc0}, {0x8, 0x1}, {0x4}, {0x7, 0x3}], [{0x1, 0xfffffffc}, {0x1000, 0x7}, {0x2, 0xffffffff}, {0x80, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x1}, {0x8, 0x80}, {0xfffff802, 0x34a16896}], 0x6, 0x9}, {[{0x88, 0x3}, {0x9, 0x1}, {0xa610000, 0x1}, {0x0, 0x2}, {0x3, 0x2}, {0x44, 0x2}, {0x9}, {0x3, 0x1}, {0x2}, {0x9, 0x1}, {0x9}], [{0x80000000, 0x6}, {0x7fffffff}, {0x382, 0x3ff}, {0x1, 0x8}, {0xbd, 0x2c8}, {0x7}, {0x10000, 0x5ff}, {0x7, 0x6}, {0x1fd, 0x2}, {0x7, 0xffffffff}, {0x4, 0xe6}], 0x0, 0x3}, {[{0x3, 0x1}, {0x1, 0x2}, {0x4}, {0x36, 0x3}, {0xe1}, {0x9, 0x6}, {0x1}, {0x101, 0x2}, {0x23, 0x3}, {0x6}, {0xffffffff, 0x2}], [{0x7, 0x8}, {0x84b, 0x4}, {0x9, 0x1}, {0x18d, 0x75091ebd}, {0x2, 0xf9}, {0x4, 0xfffffff5}, {0xa, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x1ff, 0x3ff}, {0x12505a58, 0x9}], 0x0, 0x4}], 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb78) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r10, 0x0, 0x20048041) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x8000, 0x5, {{0x16, 0x4, 0x3, 0x6, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@lsrr={0x83, 0xf, 0x77, [@multicast1, @local, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0x6c, 0x1, 0x9, [{@empty, 0xd}, {@rand_addr=0x64010102}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x1, 0xd, "37231f67de75025cc8bd10"}, {0x0, 0x4, "d0cb"}]}, @noop, @ssrr={0x89, 0x7, 0x5, [@empty]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x5, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xe, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "f35cdffa4c22ce"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000110700)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x7, "e81e98e4abedff"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) kernel console output (not intermixed with test programs): . [ 555.341335][T18745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.348584][T18745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.375811][T18745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.389818][T18928] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3285'. [ 555.458317][T18745] hsr_slave_0: entered promiscuous mode [ 555.472658][T18745] hsr_slave_1: entered promiscuous mode [ 555.489305][T18745] debugfs: 'hsr0' already exists in 'hsr' [ 555.500831][T18745] Cannot create hsr debugfs directory [ 555.794712][T18745] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.806307][T18745] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.855884][T18939] netlink: 'syz.4.3289': attribute type 178 has an invalid length. [ 555.948181][T18939] IPVS: Error connecting to the multicast addr [ 555.976347][T18745] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.987019][T18745] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.011274][T18941] netlink: 'syz.3.3290': attribute type 10 has an invalid length. [ 556.011274][T18942] netlink: 'syz.3.3290': attribute type 10 has an invalid length. [ 556.019420][T18942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.036208][T18942] team0: Port device bond0 added [ 556.070690][T18745] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.093927][T18745] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.204162][T18745] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.214627][T18745] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.237557][T18944] syzkaller0: entered promiscuous mode [ 556.243671][T18944] syzkaller0: entered allmulticast mode [ 556.286722][T18944] tipc: Started in network mode [ 556.297405][T18944] tipc: Node identity 4e7f8adc4007, cluster identity 4711 [ 556.316995][T18944] tipc: Enabled bearer , priority 0 [ 556.327476][T18948] Bluetooth: MGMT ver 1.23 [ 556.353832][T18943] tipc: Resetting bearer [ 556.402022][T18943] tipc: Disabling bearer [ 556.655912][T18745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 556.676821][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.685246][T18745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 556.704990][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.714451][T18745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 556.728109][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'. [ 556.743551][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.755604][T18745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 556.770391][T18745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.926853][T18745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.954879][T18745] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.974844][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.982121][ T8796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.012605][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.019800][ T8803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.072261][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'. [ 557.145465][T18973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.191043][T18973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.005768][T19028] macsec2: entered promiscuous mode [ 558.228772][T19040] netlink: 'syz.0.3315': attribute type 3 has an invalid length. [ 558.413322][ T5639] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 558.420157][ T4949] Bluetooth: hci2: command 0x0401 tx timeout [ 558.567086][T18745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.692698][T18745] veth0_vlan: entered promiscuous mode [ 558.717486][T18745] veth1_vlan: entered promiscuous mode [ 558.772725][T18745] veth0_macvtap: entered promiscuous mode [ 558.787286][T18745] veth1_macvtap: entered promiscuous mode [ 558.822395][T18745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.851768][T18745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.882542][ T1132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.903624][ T1132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.931480][ T1132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.953598][ T1132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.222737][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.251466][T19065] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3322'. [ 559.254715][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.267491][T19067] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 559.344088][T19067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.387076][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.402997][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.437952][T19072] bond1: (slave geneve3): making interface the new active one [ 559.484623][T19072] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 559.625914][T19077] vlan0: entered promiscuous mode [ 559.746908][T19079] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.755077][T19079] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.903280][T19079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.798817][T19108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3331'. [ 565.340017][ T48] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.348720][ T48] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.357398][ T48] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.370659][ T48] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.391282][T19098] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 565.455171][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3332'. [ 565.682268][T19112] syzkaller0: entered promiscuous mode [ 565.687791][T19112] syzkaller0: entered allmulticast mode [ 565.710631][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.713146][T19118] ipip0: entered promiscuous mode [ 565.726003][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.735534][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.746859][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.761904][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 567.848303][ T4949] Bluetooth: hci1: command tx timeout [ 569.017078][ T5632] bond0: (slave syz_tun): Releasing backup interface [ 569.235864][T19155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.259809][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3337'. [ 569.282135][T19164] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3339'. [ 569.330025][T19157] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3336'. [ 569.340972][ T4949] block nbd1: Receive control failed (result -1) [ 569.383698][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3338'. [ 569.408457][T19155] tipc: New replicast peer: 172.30.1.4 [ 569.415036][T19155] tipc: Enabled bearer , priority 10 [ 569.437040][T19164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3339'. [ 569.919524][ T4949] Bluetooth: hci1: command tx timeout [ 570.297728][ T8803] vlan5: left allmulticast mode [ 570.315295][ T8803] geneve0: left allmulticast mode [ 570.328240][ T8803] vlan5: left promiscuous mode [ 570.338374][ T8803] geneve0: left promiscuous mode [ 570.354148][ T8803] bridge0: port 4(vlan5) entered disabled state [ 570.385957][ T8803] bridge_slave_1: left promiscuous mode [ 570.403109][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.450397][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.547112][ T8803] pim6reg: left allmulticast mode [ 570.555438][ T8803] dvmrp8: left allmulticast mode [ 570.623699][ T30] audit: type=1800 audit(1781645695.046:7): pid=19226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3347" name="memory.events" dev="tmpfs" ino=407 res=0 errno=0 [ 570.882612][ T8803] bond13 (unregistering): (slave gretap1): Releasing backup interface [ 570.953631][ T8803] bond15 (unregistering): (slave gretap2): Releasing active interface [ 570.972170][ T8803] bond15 (unregistering): (slave gretap2): the permanent HWaddr of slave - da:58:36:46:7f:f8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 571.033826][ T8803] bond14 (unregistering): (slave geneve3): Releasing active interface [ 571.050262][ T8803] bond9 (unregistering): (slave geneve2): Releasing active interface [ 571.134925][ T8803] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 571.151745][ T8803] bond11 (unregistering): (slave bridge3): Releasing active interface [ 571.164535][ T8803] bond15 (unregistering): (slave bridge4): Releasing active interface [ 571.182459][ T8803] bond17 (unregistering): (slave bridge5): Releasing backup interface [ 571.190764][ T8803] bridge5 (unregistering): left promiscuous mode [ 571.227441][ T8803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.237818][ T8803] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 571.248198][ T8803] bond0 (unregistering): Released all slaves [ 571.258922][ T8803] bond1 (unregistering): Released all slaves [ 571.277622][ T8803] bond2 (unregistering): Released all slaves [ 571.296907][ T8803] bond3 (unregistering): Released all slaves [ 571.316665][ T8803] bond4 (unregistering): (slave bond5): Releasing backup interface [ 571.326725][ T8803] bond4 (unregistering): Released all slaves [ 571.350581][ T8803] bond5 (unregistering): Released all slaves [ 571.365575][ T8803] bond6 (unregistering): Released all slaves [ 571.381998][ T8803] bond7 (unregistering): Released all slaves [ 571.401929][ T8803] bond8 (unregistering): Released all slaves [ 571.415584][ T8803] bond9 (unregistering): Released all slaves [ 571.429488][ T8803] bond10 (unregistering): Released all slaves [ 571.446131][ T8803] bond11 (unregistering): (slave veth11): Releasing active interface [ 571.460970][ T8803] bond11 (unregistering): (slave veth13): Releasing active interface [ 571.470644][ T8803] bond11 (unregistering): Released all slaves [ 571.484842][ T8803] bond12 (unregistering): Released all slaves [ 571.499204][ T8803] bond13 (unregistering): Released all slaves [ 571.512598][ T8803] bond14 (unregistering): Released all slaves [ 571.535106][ T8803] bond15 (unregistering): Released all slaves [ 571.551239][ T8803] bond16 (unregistering): Released all slaves [ 571.565122][ T8803] bond17 (unregistering): Released all slaves [ 571.585127][ T8803] bond18 (unregistering): Released all slaves [ 571.601290][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'. [ 571.619962][ T5641] tipc: Node number set to 242780892 [ 571.638833][T19131] lo speed is unknown, defaulting to 1000 [ 571.644587][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 571.774650][T19245] FAULT_INJECTION: forcing a failure. [ 571.774650][T19245] name failslab, interval 1, probability 0, space 0, times 0 [ 571.788373][T19245] CPU: 0 UID: 0 PID: 19245 Comm: syz.2.3350 Not tainted syzkaller #0 PREEMPT(full) [ 571.788416][T19245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.788445][T19245] Call Trace: [ 571.788453][T19245] [ 571.788469][T19245] dump_stack_lvl+0xe8/0x150 [ 571.788501][T19245] should_fail_ex+0x40c/0x560 [ 571.788533][T19245] should_failslab+0xa8/0x100 [ 571.788550][T19245] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 571.788565][T19245] ? __alloc_skb+0x189/0x7a0 [ 571.788643][T19245] ? __alloc_skb+0x1d7/0x7a0 [ 571.788655][T19245] ? __local_bh_enable_ip+0xd0/0x130 [ 571.788669][T19245] __alloc_skb+0x1d7/0x7a0 [ 571.788684][T19245] netlink_sendmsg+0x5d4/0xb40 [ 571.788755][T19245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.788767][T19245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 571.788806][T19245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 571.788819][T19245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.788831][T19245] ____sys_sendmsg+0x9b9/0xa20 [ 571.788842][T19245] ? __might_fault+0xaf/0x130 [ 571.788857][T19245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.788872][T19245] ? import_iovec+0x73/0xa0 [ 571.788885][T19245] ___sys_sendmsg+0x2a5/0x360 [ 571.788895][T19245] ? __lock_acquire+0x683/0x2cd0 [ 571.788908][T19245] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.788942][T19245] ? __fget_files+0x2a/0x420 [ 571.788954][T19245] ? __fget_files+0x3a2/0x420 [ 571.788971][T19245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 571.788982][T19245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.788997][T19245] ? __pfx_ksys_write+0x10/0x10 [ 571.789015][T19245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.789027][T19245] do_syscall_64+0x174/0x580 [ 571.789041][T19245] ? trace_irq_disable+0x3b/0x140 [ 571.789056][T19245] ? clear_bhb_loop+0x40/0x90 [ 571.789068][T19245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.789078][T19245] RIP: 0033:0x7fc82379ce59 [ 571.789090][T19245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.789099][T19245] RSP: 002b:00007fc8219f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.789111][T19245] RAX: ffffffffffffffda RBX: 00007fc823a15fa0 RCX: 00007fc82379ce59 [ 571.789118][T19245] RDX: 0000000024000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 571.789125][T19245] RBP: 00007fc8219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 571.789131][T19245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.789136][T19245] R13: 00007fc823a16038 R14: 00007fc823a15fa0 R15: 00007ffd9e3fe278 [ 571.789152][T19245] [ 572.063365][ T4949] Bluetooth: hci1: command tx timeout [ 572.304472][ T8803] : left promiscuous mode [ 572.514101][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 572.589413][T19279] openvswitch: netlink: Tunnel attr 4104 out of range max 16 [ 572.622870][T19279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.645517][T19270] bond2 (unregistering): Released all slaves [ 572.815415][ T8803] tipc: Left network mode [ 573.083561][ T8803] IPVS: stopping backup sync thread 8209 ... [ 573.291186][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3360'. [ 573.305429][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 573.315864][T19131] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.348259][T19131] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.360629][T19131] bridge_slave_0: entered allmulticast mode [ 573.374302][T19304] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 573.384921][T19131] bridge_slave_0: entered promiscuous mode [ 573.465741][T19304] syz_tun: entered promiscuous mode [ 573.504358][T19304] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 573.525807][T19131] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.545731][T19131] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.561408][T19131] bridge_slave_1: entered allmulticast mode [ 573.574750][T19131] bridge_slave_1: entered promiscuous mode [ 573.816813][T19131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.944764][T19330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.023955][T19320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3364'. [ 574.034714][T19131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.078460][ T4949] Bluetooth: hci1: command tx timeout [ 574.198549][T19325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'. [ 574.340032][T19131] team0: Port device team_slave_0 added [ 574.363199][T19131] team0: Port device team_slave_1 added [ 574.385519][T19325] hmac(sha224: left promiscuous mode [ 574.557225][T19131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.579811][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.617202][T19131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.667083][T19131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.684577][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.750098][T19131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.779433][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 574.900875][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.909605][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.157919][ T8803] team0 (unregistering): Port device team_slave_1 removed [ 575.281996][T19131] hsr_slave_0: entered promiscuous mode [ 575.291676][T19131] hsr_slave_1: entered promiscuous mode [ 575.298312][T19131] debugfs: 'hsr0' already exists in 'hsr' [ 575.304180][T19131] Cannot create hsr debugfs directory [ 575.604488][ T8803] IPVS: stop unused estimator thread 0... [ 576.769701][T19322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.816292][T19131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 576.903301][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 576.975885][T19131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 576.992658][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.001393][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3372'. [ 577.086349][T19131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 577.151415][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.175291][T19131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 577.227151][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.241577][T19379] netlink: 'syz.1.3374': attribute type 13 has an invalid length. [ 577.374553][T19391] netlink: 'syz.0.3375': attribute type 4 has an invalid length. [ 577.405323][T19391] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3375'. [ 577.405894][T19396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3376'. [ 577.532513][T19131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.625386][T19131] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.672512][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.679768][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.784360][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.791586][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.386908][T19445] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3385'. [ 578.726991][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3387'. [ 578.821159][ T3312] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.858459][ T3312] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.867800][ T3312] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.948183][ T3312] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.735534][T19511] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3397'. [ 579.736561][T19131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.772320][T19511] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3397'. [ 579.912880][T19504] ip6erspan0: entered allmulticast mode [ 579.968809][T19521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3399'. [ 580.034050][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3400'. [ 580.106746][T19525] netlink: 'syz.3.3400': attribute type 13 has an invalid length. [ 580.573972][T19540] syzkaller1: entered promiscuous mode [ 580.590799][T19540] syzkaller1: entered allmulticast mode [ 580.607680][T19131] veth0_vlan: entered promiscuous mode [ 580.637275][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 580.654321][T19131] veth1_vlan: entered promiscuous mode [ 580.657542][T19547] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 580.684240][T19547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.771878][T19131] veth0_macvtap: entered promiscuous mode [ 580.797957][T19131] veth1_macvtap: entered promiscuous mode [ 580.867499][T19131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.967796][T19131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.015176][ T8796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.044544][ T8796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.089238][ T8796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.106553][T19572] netlink: 'syz.3.3409': attribute type 1 has an invalid length. [ 581.125898][ T8796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.180687][T19575] rdma_op ffff888077c7c1f0 conn xmit_rdma 0000000000000000 [ 581.264185][T19576] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 581.314726][T15262] IPVS: starting estimator thread 0... [ 581.407433][ T8796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.430244][ T8796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.450261][T19581] IPVS: using max 34 ests per chain, 81600 per kthread [ 581.489527][T19583] netlink: 'syz.1.3414': attribute type 8 has an invalid length. [ 581.534927][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.552653][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.978423][T19617] openvswitch: netlink: Flow actions attr not present in new flow. [ 582.942153][T19658] __nla_validate_parse: 5 callbacks suppressed [ 582.942172][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3429'. [ 583.046829][T19658] veth3: entered promiscuous mode [ 583.285816][T19674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3432'. [ 583.336850][T19674] openvswitch: netlink: Flow actions attr not present in new flow. [ 583.379257][T19679] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3434'. [ 583.715098][T19696] netlink: 'syz.3.3438': attribute type 16 has an invalid length. [ 583.727242][T19696] netlink: 'syz.3.3438': attribute type 17 has an invalid length. [ 583.761476][T19696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.773006][T19696] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.784429][T19696] batadv0: left promiscuous mode [ 583.791005][T19696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.797717][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 583.848639][T19696] batman_adv: batadv0: Interface activated: veth0_to_batadv [ 583.856879][T19696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.867882][T19696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.881313][T19696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 583.891951][T19696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.906010][T19696] veth1_vlan: left promiscuous mode [ 583.912516][T19696] veth0_vlan: left promiscuous mode [ 583.922421][T19696] veth0_vlan: entered promiscuous mode [ 583.931061][T19696] veth1_vlan: entered promiscuous mode [ 583.940404][T19696] veth1_macvtap: left promiscuous mode [ 583.946766][T19696] veth0_macvtap: left promiscuous mode [ 583.953361][T19696] veth0_macvtap: entered promiscuous mode [ 583.960296][T19696] veth1_macvtap: entered promiscuous mode [ 583.971063][T19696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.979718][T19696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.987626][T19696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.995974][T19696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.007174][T19696] mac80211_hwsim hwsim39 wlan0: left promiscuous mode [ 584.014084][T19696] mac80211_hwsim hwsim39 wlan0: left allmulticast mode [ 584.024407][T19696] geneve2: left promiscuous mode [ 584.033166][T19696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.043816][T19700] syzkaller1: entered promiscuous mode [ 584.049803][T19700] syzkaller1: entered allmulticast mode [ 584.066798][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.074001][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.083263][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.090412][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.117129][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.136908][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.186884][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.195964][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.401606][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3445'. [ 584.532598][ T8796] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 584.576475][T19729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3447'. [ 584.583519][ T8796] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 584.585655][T19729] openvswitch: netlink: Flow actions attr not present in new flow. [ 584.594321][ T6253] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 584.709675][ T6253] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 584.774060][T19733] netlink: set zone limit has 4 unknown bytes [ 584.903995][T19742] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3450'. [ 584.925388][T19737] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3450'. [ 585.042661][ T8796] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 585.054459][ T8796] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 585.068313][ T6286] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 585.258358][ T6252] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 585.548325][ T6286] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 585.558973][ T6286] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 587.529460][T19724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.762279][T19758] lo: Caught tx_queue_len zero misconfig [ 587.881103][T19768] lo: Caught tx_queue_len zero misconfig [ 588.172623][T19784] ip6tnl0: Caught tx_queue_len zero misconfig [ 588.245563][T19779] syzkaller0: entered promiscuous mode [ 588.264553][T19779] syzkaller0: entered allmulticast mode [ 588.397962][T19798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3469'. [ 588.418996][T19798] sock: sock_set_timeout: `syz.3.3469' (pid 19798) tries to set negative timeout [ 588.510139][T19798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3469'. [ 588.540968][T19802] netlink: 'syz.0.3471': attribute type 11 has an invalid length. [ 588.663663][T19802] netlink: 'syz.0.3471': attribute type 11 has an invalid length. [ 588.723253][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3471'. [ 588.787282][T19802] netlink: 'syz.0.3471': attribute type 1 has an invalid length. [ 588.829824][T19802] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3471'. [ 588.855501][T19817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3476'. [ 588.886297][T19802] netlink: 'syz.0.3471': attribute type 1 has an invalid length. [ 588.906201][T19817] openvswitch: netlink: Flow actions attr not present in new flow. [ 588.919932][T19802] netlink: 634 bytes leftover after parsing attributes in process `syz.0.3471'. [ 588.954979][T19802] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3471'. [ 588.965890][T19822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.343229][T19838] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 589.587656][T19850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.741055][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 589.786878][T19851] hsr_slave_0: left promiscuous mode [ 589.822360][T19851] hsr_slave_1: left promiscuous mode [ 589.879261][T19853] tipc: New replicast peer: 255.255.255.255 [ 589.897823][T19853] tipc: Enabled bearer , priority 10 [ 589.950514][T19850] netlink: 'syz.0.3484': attribute type 9 has an invalid length. [ 589.968698][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 590.000188][T19850] macvlan2: entered promiscuous mode [ 590.009814][T19850] gretap0: entered promiscuous mode [ 590.016462][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3487'. [ 590.018234][T19850] macvlan2: entered allmulticast mode [ 590.033339][T19850] gretap0: entered allmulticast mode [ 590.369917][T19864] syzkaller0: entered promiscuous mode [ 590.387300][T19867] openvswitch: netlink: Flow actions attr not present in new flow. [ 590.417656][T19864] syzkaller0: entered allmulticast mode [ 590.587076][T19877] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 590.979740][T19890] syzkaller1: entered promiscuous mode [ 591.003593][T19890] syzkaller1: entered allmulticast mode [ 591.581522][T19927] netlink: 'syz.4.3505': attribute type 13 has an invalid length. [ 591.613274][T19927] netlink: 'syz.4.3505': attribute type 17 has an invalid length. [ 592.543492][T19972] Cannot find add_set index 4 as target [ 592.706485][T19976] tipc: Started in network mode [ 592.733777][T19976] tipc: Node identity 4246, cluster identity 4711 [ 592.758907][T19980] openvswitch: netlink: Flow actions attr not present in new flow. [ 592.766493][T19976] tipc: Node number set to 16966 [ 592.924582][T19997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.954058][T19982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.430659][T20025] __nla_validate_parse: 9 callbacks suppressed [ 593.430676][T20025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3533'. [ 593.493007][T20028] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3535'. [ 593.531813][T20028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3535'. [ 593.667334][T20042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.910096][T20057] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 594.409940][T20091] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3554'. [ 594.442678][T20094] 8021q: VLANs not supported on sit0 [ 594.470434][T20098] netlink: 'syz.4.3557': attribute type 2 has an invalid length. [ 594.480357][T20098] netlink: 'syz.4.3557': attribute type 8 has an invalid length. [ 594.488866][T20098] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3557'. [ 594.545850][T20094] syzkaller0: entered promiscuous mode [ 594.551908][T20094] syzkaller0: entered allmulticast mode [ 594.610603][T20104] openvswitch: netlink: Tunnel attr 4104 out of range max 16 [ 594.618703][T20104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.649805][T20106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3560'. [ 595.393156][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 595.438321][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 595.438340][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 596.726116][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 597.674764][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 597.684543][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 597.693572][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 597.703862][T20133] tipc: Enabling of bearer rejected, already enabled [ 597.840057][T20147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.012717][T20153] netlink: 'syz.1.3573': attribute type 1 has an invalid length. [ 598.253997][T20173] netlink: 'syz.2.3576': attribute type 3 has an invalid length. [ 598.292975][T20186] netlink: 'syz.3.3581': attribute type 2 has an invalid length. [ 598.423051][T20190] netlink: 'syz.0.3580': attribute type 1 has an invalid length. [ 598.468186][T20190] netlink: 'syz.0.3580': attribute type 2 has an invalid length. [ 598.547478][T20197] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 598.774730][T20216] __nla_validate_parse: 63 callbacks suppressed [ 598.774751][T20216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3585'. [ 598.823401][T20216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3585'. [ 598.891418][T20216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3585'. [ 598.979581][T20225] gretap2: entered promiscuous mode [ 599.055602][T20230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3593'. [ 599.286050][T20249] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3600'. [ 599.309738][T20247] openvswitch: netlink: IP tunnel dst address not specified [ 599.358753][T20247] bond2: option min_links: invalid value (18446744073709551612) [ 599.366539][T20247] bond2: option min_links: allowed values 0 - 2147483647 [ 599.377325][T20247] bond2 (unregistering): Released all slaves [ 599.403655][T20253] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3601'. [ 599.413245][T20251] 8021q: VLANs not supported on ip_vti0 [ 599.629668][T20261] bond1 (unregistering): Released all slaves [ 599.635991][T20267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3605'. [ 599.809673][T20272] netlink: 'syz.3.3606': attribute type 1 has an invalid length. [ 599.882854][T20278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.895148][T20280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3608'. [ 600.011366][T20256] gretap0: left allmulticast mode [ 600.053987][T20256] gretap0: left promiscuous mode [ 600.069015][T20290] openvswitch: netlink: Tunnel attr 4104 out of range max 16 [ 600.090448][T20290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.378225][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 600.400391][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 600.711469][T20313] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:256 [ 601.063735][T20329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.385457][T20335] openvswitch: netlink: Tunnel attr 4104 out of range max 16 [ 601.409224][T20335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.557014][T20306] lo speed is unknown, defaulting to 1000 [ 601.709232][T20346] netlink: 'syz.0.3629': attribute type 4 has an invalid length. [ 601.745893][T20346] netlink: 'syz.0.3629': attribute type 4 has an invalid length. [ 601.831535][T20352] netlink: 'syz.4.3631': attribute type 2 has an invalid length. [ 601.850571][T20352] netlink: 'syz.4.3631': attribute type 1 has an invalid length. [ 602.801803][T20373] openvswitch: netlink: Tunnel attr 4104 out of range max 16 [ 602.848736][T20373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.893608][T20379] netlink: 'syz.3.3641': attribute type 13 has an invalid length. [ 603.080461][T20388] netlink: 'syz.3.3641': attribute type 3 has an invalid length. [ 603.149939][T15262] IPVS: starting estimator thread 0... [ 603.269679][T20395] IPVS: using max 38 ests per chain, 91200 per kthread [ 603.316903][T20398] netlink: 'syz.2.3645': attribute type 10 has an invalid length. [ 603.409209][T20398] team0: Port device geneve1 added [ 603.755951][T20413] tipc: Enabling of bearer rejected, already enabled [ 603.851133][T20414] netlink: 'syz.1.3650': attribute type 89 has an invalid length. [ 604.241838][T20430] netlink: 'syz.1.3656': attribute type 11 has an invalid length. [ 604.626417][T20453] tipc: New replicast peer: 255.255.255.255 [ 604.651285][T20453] tipc: Enabled bearer , priority 10 [ 604.667938][T20456] __nla_validate_parse: 12 callbacks suppressed [ 604.667958][T20456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3664'. [ 605.073437][T20464] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 605.247899][T20464] bond1 (unregistering): Released all slaves [ 605.874938][T20478] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.875505][T20484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3672'. [ 605.888189][T20478] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.054526][T20478] batman_adv: batadv0: Interface deactivated: veth0_to_batadv [ 606.065716][T20478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.080980][T20478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.265554][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.296289][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.307530][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.321427][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.490274][T20507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3678'. [ 606.572978][T20512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3680'. [ 606.865121][T20527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3685'. [ 606.943065][T20527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.015208][T20533] bond2: (slave veth3): Enslaving as an active interface with an up link [ 607.070177][T20533] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3685'. [ 607.147068][T20538] xt_hashlimit: size too large, truncated to 1048576 [ 607.160378][T20533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3685'. [ 607.203310][T20533] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 607.521671][ T9] page_pool_release_retry() stalled pool shutdown: id 121, 1 inflight 241 sec [ 607.825598][T20555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3690'. [ 609.632960][T20516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.054106][ T9] IPVS: starting estimator thread 0... [ 610.167713][T20579] netlink: 'syz.4.3697': attribute type 11 has an invalid length. [ 610.193274][T20576] IPVS: using max 27 ests per chain, 64800 per kthread [ 612.764876][T20599] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.772619][T20599] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.786145][T20646] IPVS: set_ctl: invalid protocol: 11 172.20.20.25:20001 [ 613.178976][T20599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.207723][T20599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.785843][T20646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3712'. [ 613.842885][ T1060] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.880540][ T1060] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.926177][ T1060] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.958844][ T1060] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.082240][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3715'. [ 614.228853][T20664] FAULT_INJECTION: forcing a failure. [ 614.228853][T20664] name failslab, interval 1, probability 0, space 0, times 0 [ 614.248685][T20667] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3717'. [ 614.283554][T20667] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 614.302401][T20664] CPU: 0 UID: 0 PID: 20664 Comm: syz.2.3718 Not tainted syzkaller #0 PREEMPT(full) [ 614.302430][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.302440][T20664] Call Trace: [ 614.302447][T20664] [ 614.302454][T20664] dump_stack_lvl+0xe8/0x150 [ 614.302480][T20664] should_fail_ex+0x40c/0x560 [ 614.302514][T20664] should_failslab+0xa8/0x100 [ 614.302540][T20664] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 614.302565][T20664] ? __alloc_skb+0x189/0x7a0 [ 614.302592][T20664] ? __alloc_skb+0x1d7/0x7a0 [ 614.302613][T20664] ? __local_bh_enable_ip+0xd0/0x130 [ 614.302635][T20664] __alloc_skb+0x1d7/0x7a0 [ 614.302663][T20664] netlink_sendmsg+0x5d4/0xb40 [ 614.302693][T20664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.302717][T20664] ? aa_sock_msg_perm+0xf1/0x1b0 [ 614.302744][T20664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.302765][T20664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.302785][T20664] ____sys_sendmsg+0x9b9/0xa20 [ 614.302802][T20664] ? __might_fault+0xaf/0x130 [ 614.302827][T20664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.302853][T20664] ? import_iovec+0x73/0xa0 [ 614.302877][T20664] ___sys_sendmsg+0x2a5/0x360 [ 614.302894][T20664] ? __lock_acquire+0x683/0x2cd0 [ 614.302916][T20664] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.302967][T20664] ? __fget_files+0x2a/0x420 [ 614.302986][T20664] ? __fget_files+0x3a2/0x420 [ 614.303012][T20664] __x64_sys_sendmsg+0x1bd/0x2a0 [ 614.303032][T20664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.303060][T20664] ? __pfx_ksys_write+0x10/0x10 [ 614.303091][T20664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.303108][T20664] do_syscall_64+0x174/0x580 [ 614.303128][T20664] ? trace_irq_disable+0x3b/0x140 [ 614.303152][T20664] ? clear_bhb_loop+0x40/0x90 [ 614.303173][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.303190][T20664] RIP: 0033:0x7fc82379ce59 [ 614.303206][T20664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.303221][T20664] RSP: 002b:00007fc8219f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.303239][T20664] RAX: ffffffffffffffda RBX: 00007fc823a15fa0 RCX: 00007fc82379ce59 [ 614.303252][T20664] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 614.303263][T20664] RBP: 00007fc8219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 614.303273][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.303282][T20664] R13: 00007fc823a16038 R14: 00007fc823a15fa0 R15: 00007ffd9e3fe278 [ 614.303309][T20664] [ 614.409614][T20667] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 614.588646][T20667] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 614.624983][T20667] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 614.936207][T20688] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3724'. [ 615.063710][T20693] FAULT_INJECTION: forcing a failure. [ 615.063710][T20693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.098583][T20693] CPU: 0 UID: 0 PID: 20693 Comm: syz.0.3727 Not tainted syzkaller #0 PREEMPT(full) [ 615.098610][T20693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.098621][T20693] Call Trace: [ 615.098628][T20693] [ 615.098636][T20693] dump_stack_lvl+0xe8/0x150 [ 615.098666][T20693] should_fail_ex+0x40c/0x560 [ 615.098698][T20693] _copy_to_user+0x31/0xb0 [ 615.098739][T20693] simple_read_from_buffer+0xe1/0x170 [ 615.098767][T20693] proc_fail_nth_read+0x1bb/0x230 [ 615.098819][T20693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.098844][T20693] ? rw_verify_area+0x24a/0x4c0 [ 615.098869][T20693] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.098890][T20693] vfs_read+0x213/0xa80 [ 615.098918][T20693] ? __pfx___mutex_lock+0x10/0x10 [ 615.098997][T20693] ? __pfx_vfs_read+0x10/0x10 [ 615.099023][T20693] ? __fget_files+0x2a/0x420 [ 615.099049][T20693] ? __fget_files+0x3a2/0x420 [ 615.099069][T20693] ? __fget_files+0x2a/0x420 [ 615.099098][T20693] ksys_read+0x150/0x270 [ 615.099124][T20693] ? __pfx_ksys_read+0x10/0x10 [ 615.099157][T20693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.099178][T20693] do_syscall_64+0x174/0x580 [ 615.099197][T20693] ? trace_irq_disable+0x3b/0x140 [ 615.099222][T20693] ? clear_bhb_loop+0x40/0x90 [ 615.099243][T20693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.099260][T20693] RIP: 0033:0x7f45ec95d68e [ 615.099279][T20693] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 615.099293][T20693] RSP: 002b:00007f45ed8dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.099310][T20693] RAX: ffffffffffffffda RBX: 00007f45ed8dc6c0 RCX: 00007f45ec95d68e [ 615.099323][T20693] RDX: 000000000000000f RSI: 00007f45ed8dc0a0 RDI: 0000000000000004 [ 615.099333][T20693] RBP: 00007f45ed8dc090 R08: 0000000000000000 R09: 0000000000000000 [ 615.099343][T20693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.099352][T20693] R13: 00007f45ecc16038 R14: 00007f45ecc15fa0 R15: 00007ffc21c61008 [ 615.099382][T20693] [ 615.792164][T20702] pimreg: entered allmulticast mode [ 616.016636][T20716] netlink: 'syz.2.3734': attribute type 1 has an invalid length. [ 616.033524][T20716] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3734'. [ 616.077898][T20716] netlink: 'syz.2.3734': attribute type 10 has an invalid length. [ 616.110880][T20716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.125643][T20716] team0: Port device netdevsim1 added [ 616.143785][T20720] netlink: 'syz.2.3734': attribute type 10 has an invalid length. [ 616.273559][T20720] team0: Port device netdevsim1 removed [ 616.289752][T20720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.299585][T20720] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 616.309494][T20725] tipc: Enabling of bearer rejected, already enabled [ 616.450411][T20702] pimreg: left allmulticast mode [ 616.546006][T20736] openvswitch: netlink: IP tunnel TTL not specified. [ 616.890992][T20756] FAULT_INJECTION: forcing a failure. [ 616.890992][T20756] name failslab, interval 1, probability 0, space 0, times 0 [ 616.911278][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'. [ 616.946017][T20750] netlink: 'syz.3.3741': attribute type 30 has an invalid length. [ 616.956445][T20756] CPU: 0 UID: 0 PID: 20756 Comm: syz.4.3744 Not tainted syzkaller #0 PREEMPT(full) [ 616.956471][T20756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.956482][T20756] Call Trace: [ 616.956489][T20756] [ 616.956497][T20756] dump_stack_lvl+0xe8/0x150 [ 616.956524][T20756] should_fail_ex+0x40c/0x560 [ 616.956557][T20756] should_failslab+0xa8/0x100 [ 616.956575][T20756] ? skb_clone+0x212/0x3a0 [ 616.956595][T20756] kmem_cache_alloc_noprof+0x87/0x650 [ 616.956627][T20756] skb_clone+0x212/0x3a0 [ 616.956650][T20756] __netlink_deliver_tap+0x413/0x860 [ 616.956682][T20756] ? netlink_deliver_tap+0x2e/0x1b0 [ 616.956702][T20756] netlink_deliver_tap+0x19c/0x1b0 [ 616.956721][T20756] netlink_unicast+0x77f/0x940 [ 616.956754][T20756] netlink_sendmsg+0x813/0xb40 [ 616.956782][T20756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.956803][T20756] ? aa_sock_msg_perm+0xf1/0x1b0 [ 616.956830][T20756] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 616.956850][T20756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.956869][T20756] ____sys_sendmsg+0x9b9/0xa20 [ 616.956887][T20756] ? __might_fault+0xaf/0x130 [ 616.956914][T20756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.956939][T20756] ? import_iovec+0x73/0xa0 [ 616.956960][T20756] ___sys_sendmsg+0x2a5/0x360 [ 616.956977][T20756] ? __lock_acquire+0x683/0x2cd0 [ 616.956997][T20756] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.957045][T20756] ? __fget_files+0x2a/0x420 [ 616.957064][T20756] ? __fget_files+0x3a2/0x420 [ 616.957091][T20756] __x64_sys_sendmsg+0x1bd/0x2a0 [ 616.957111][T20756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.957137][T20756] ? __pfx_ksys_write+0x10/0x10 [ 616.957173][T20756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.957193][T20756] do_syscall_64+0x174/0x580 [ 616.957214][T20756] ? trace_irq_disable+0x3b/0x140 [ 616.957238][T20756] ? clear_bhb_loop+0x40/0x90 [ 616.957260][T20756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.957277][T20756] RIP: 0033:0x7f812dd9ce59 [ 616.957294][T20756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.957308][T20756] RSP: 002b:00007f812ed44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.957327][T20756] RAX: ffffffffffffffda RBX: 00007f812e015fa0 RCX: 00007f812dd9ce59 [ 616.957351][T20756] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 616.957361][T20756] RBP: 00007f812ed44090 R08: 0000000000000000 R09: 0000000000000000 [ 616.957372][T20756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.957382][T20756] R13: 00007f812e016038 R14: 00007f812e015fa0 R15: 00007fff434013d8 [ 616.957412][T20756] [ 616.986869][ T1060] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.088702][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'. [ 617.111385][T20760] netlink: 'syz.1.3745': attribute type 10 has an invalid length. [ 617.131758][T20757] netlink: 'syz.3.3741': attribute type 30 has an invalid length. [ 617.163648][ T1060] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.357090][ T1060] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.395130][T20760] team0 (unregistering): Port device team_slave_0 removed [ 617.412082][T20760] team0 (unregistering): Port device team_slave_1 removed [ 617.426446][ T1060] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.521502][T20771] tipc: Enabling of bearer rejected, already enabled [ 617.680379][T20773] syzkaller1: entered promiscuous mode [ 617.694783][T20773] syzkaller1: entered allmulticast mode [ 617.732042][T20773] ip6tnl2: entered allmulticast mode [ 617.776498][T20777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3749'. [ 618.068605][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3750'. [ 618.091386][T20784] syzkaller0: entered promiscuous mode [ 618.103839][T20784] syzkaller0: entered allmulticast mode [ 618.147337][T20784] tipc: Enabled bearer , priority 0 [ 618.161100][T20784] tipc: Resetting bearer [ 618.701124][T20792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3753'. [ 618.782562][T20789] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 618.858238][T20783] tipc: Resetting bearer [ 618.976187][T20783] tipc: Disabling bearer [ 619.204151][T20809] tipc: Started in network mode [ 619.209340][T20809] tipc: Node identity ac14140f, cluster identity 4711 [ 619.216420][T20809] tipc: New replicast peer: 255.255.255.255 [ 619.224252][T20809] tipc: Enabled bearer , priority 10 [ 619.325550][T20810] __nla_validate_parse: 1 callbacks suppressed [ 619.325569][T20810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3756'. [ 619.358675][T20810] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3756'. [ 619.684361][T20830] netlink: 'syz.3.3760': attribute type 11 has an invalid length. [ 619.984606][T20841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3762'. [ 620.002438][T20841] netlink: 'syz.1.3762': attribute type 2 has an invalid length. [ 620.017750][T20841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3762'. [ 620.228756][ T6298] tipc: Node number set to 2886997007 [ 620.389314][T20859] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3768'. [ 621.488303][T20902] netlink: 8472 bytes leftover after parsing attributes in process `syz.3.3778'. [ 622.389487][T20931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3784'. [ 622.498990][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 622.595181][T20936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3784'. [ 622.763546][T20948] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3788'. [ 622.815400][T20942] siw: device registration error -23 [ 626.211045][T20970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.318592][ T4949] Bluetooth: hci5: command 0x0406 tx timeout [ 626.522192][T21025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.536192][T21025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.606718][T21025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.646077][T21040] __nla_validate_parse: 1 callbacks suppressed [ 626.646184][T21040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 626.666130][T21025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 626.695137][T21025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.711218][T21034] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3813'. [ 626.730028][T21025] hsr0: left promiscuous mode [ 626.742210][T21025] veth1_vlan: left promiscuous mode [ 626.769242][T21025] veth0_vlan: left promiscuous mode [ 626.789441][T21025] veth0_vlan: entered promiscuous mode [ 626.811633][T21025] veth1_vlan: entered promiscuous mode [ 626.826140][T21025] veth1_macvtap: left promiscuous mode [ 626.833601][T21025] veth0_macvtap: left promiscuous mode [ 626.843299][T21025] veth0_macvtap: entered promiscuous mode [ 626.851528][T21025] veth1_macvtap: entered promiscuous mode [ 626.865110][T21025] ip6gretap0: entered promiscuous mode [ 626.873375][T21025] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 626.884809][T21025] 8021q: adding VLAN 0 to HW filter on device eth0 [ 626.893033][T21025] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 626.904024][T21025] 8021q: adding VLAN 0 to HW filter on device eth1 [ 626.913471][T21025] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 626.926395][T21025] 8021q: adding VLAN 0 to HW filter on device eth2 [ 626.935231][T21025] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 626.946395][T21025] 8021q: adding VLAN 0 to HW filter on device eth3 [ 626.981219][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.988520][ T8796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.997713][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.004918][ T8796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.082404][T21041] syzkaller0: entered promiscuous mode [ 627.088859][T21041] syzkaller0: entered allmulticast mode [ 627.095118][ T8791] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.109452][T21047] netlink: 'syz.3.3814': attribute type 11 has an invalid length. [ 627.161425][ T8791] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.186210][ T8791] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.339659][T21058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3818'. [ 629.957826][ T8791] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.091438][T21073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.039071][T21076] Bluetooth: hci4: command 0x0406 tx timeout [ 657.045157][T21075] Bluetooth: hci0: command 0x0406 tx timeout [ 667.839632][ T6275] page_pool_release_retry() stalled pool shutdown: id 121, 1 inflight 301 sec [ 682.638297][ T5639] Bluetooth: hci2: command 0x0401 tx timeout [ 698.609499][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3825'. [ 698.646257][T21090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3825'. [ 698.694001][T21105] hmó3)ó: entered promiscuous mode [ 698.845713][T21110] syz.0.3828: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 698.877628][T21110] CPU: 0 UID: 0 PID: 21110 Comm: syz.0.3828 Not tainted syzkaller #0 PREEMPT(full) [ 698.877655][T21110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 698.877668][T21110] Call Trace: [ 698.877675][T21110] [ 698.877684][T21110] dump_stack_lvl+0xe8/0x150 [ 698.877714][T21110] warn_alloc+0x249/0x340 [ 698.877746][T21110] ? __pfx_stack_trace_save+0x10/0x10 [ 698.877782][T21110] ? __pfx_warn_alloc+0x10/0x10 [ 698.877816][T21110] ? __kasan_kmalloc+0x93/0xb0 [ 698.877843][T21110] ? __kmalloc_cache_noprof+0x318/0x660 [ 698.877880][T21110] ? xskq_create+0x56/0x170 [ 698.877994][T21110] ? xsk_init_queue+0x8a/0xe0 [ 698.878050][T21110] ? xsk_setsockopt+0x52a/0x960 [ 698.878078][T21110] ? do_sock_setsockopt+0x17c/0x1b0 [ 698.878097][T21110] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 698.878122][T21110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.878150][T21110] __vmalloc_node_range_noprof+0x12c/0x1730 [ 698.878209][T21110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 698.878245][T21110] ? __kasan_kmalloc+0x93/0xb0 [ 698.878280][T21110] vmalloc_user_noprof+0xad/0xe0 [ 698.878308][T21110] ? xskq_create+0xbf/0x170 [ 698.878326][T21110] xskq_create+0xbf/0x170 [ 698.878349][T21110] xsk_init_queue+0x8a/0xe0 [ 698.878380][T21110] xsk_setsockopt+0x52a/0x960 [ 698.878413][T21110] ? __pfx_xsk_setsockopt+0x10/0x10 [ 698.878442][T21110] ? __pfx_aa_sk_perm+0x10/0x10 [ 698.878474][T21110] ? aa_sock_opt_perm+0xff/0x1a0 [ 698.878504][T21110] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 698.878529][T21110] ? __pfx_xsk_setsockopt+0x10/0x10 [ 698.878558][T21110] do_sock_setsockopt+0x17c/0x1b0 [ 698.878583][T21110] __x64_sys_setsockopt+0x13d/0x1b0 [ 698.878605][T21110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.878627][T21110] do_syscall_64+0x174/0x580 [ 698.878650][T21110] ? trace_irq_disable+0x3b/0x140 [ 698.878680][T21110] ? clear_bhb_loop+0x40/0x90 [ 698.878705][T21110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.878725][T21110] RIP: 0033:0x7f45ec99ce59 [ 698.878745][T21110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.878762][T21110] RSP: 002b:00007f45ed8bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 698.878783][T21110] RAX: ffffffffffffffda RBX: 00007f45ecc16090 RCX: 00007f45ec99ce59 [ 698.878799][T21110] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 698.878811][T21110] RBP: 00007f45eca32d6f R08: 0000000000000004 R09: 0000000000000000 [ 698.878824][T21110] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.878837][T21110] R13: 00007f45ecc16128 R14: 00007f45ecc16090 R15: 00007ffc21c61008 [ 698.878878][T21110] [ 699.150393][T21110] Mem-Info: [ 699.154675][T21110] active_anon:7507 inactive_anon:0 isolated_anon:0 [ 699.154675][T21110] active_file:3510 inactive_file:40204 isolated_file:0 [ 699.154675][T21110] unevictable:768 dirty:152 writeback:0 [ 699.154675][T21110] slab_reclaimable:12045 slab_unreclaimable:185315 [ 699.154675][T21110] mapped:30856 shmem:1293 pagetables:1362 [ 699.154675][T21110] sec_pagetables:0 bounce:0 [ 699.154675][T21110] kernel_misc_reclaimable:0 [ 699.154675][T21110] free:1219751 free_pcp:22668 free_cma:0 [ 699.202348][T21110] Node 0 active_anon:30028kB inactive_anon:0kB active_file:14040kB inactive_file:160608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123424kB dirty:608kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14940kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 699.238664][T21110] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 699.301437][T21110] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.394184][T21110] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 699.412676][T21110] Node 0 DMA32 free:1025036kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29828kB inactive_anon:0kB active_file:14040kB inactive_file:160608kB unevictable:1536kB writepending:708kB zspages:0kB present:3129332kB managed:2552916kB mlocked:0kB bounce:0kB free_pcp:40248kB local_pcp:20692kB free_cma:0kB [ 699.453511][T21110] lowmem_reserve[]: 0 0 0 0 0 [ 699.460912][T21110] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.496684][T21110] lowmem_reserve[]: 0 0 0 0 0 [ 699.501993][T21110] Node 1 Normal free:3843728kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:49740kB local_pcp:23956kB free_cma:0kB [ 699.541145][T21110] lowmem_reserve[]: 0 0 0 0 0 [ 699.546038][T21110] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 699.561102][T21110] Node 0 DMA32: 8221*4kB (UME) 5643*8kB (UME) 2942*16kB (UME) 158*32kB (UME) 534*64kB (UME) 886*128kB (UME) 718*256kB (UME) 381*512kB (UME) 217*1024kB (UM) 68*2048kB (UME) 2*4096kB (UM) = 1026284kB [ 699.583132][T21110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 699.623545][T21110] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 11*16kB (UM) 4*32kB (UM) 7*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 936*4096kB (UM) = 3843728kB [ 699.675280][T21110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.700731][T21110] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 699.714390][T21110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.730257][T21110] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 699.742241][T21110] 45003 total pagecache pages [ 699.746984][T21110] 0 pages in swap cache [ 699.753890][T21110] Free swap = 124996kB [ 699.758591][T21110] Total swap = 124996kB [ 699.762792][T21110] 2097051 pages RAM [ 699.766845][T21110] 0 pages HighMem/MovableOnly [ 699.773094][T21110] 427036 pages reserved [ 699.777571][T21110] 0 pages cma reserved [ 699.897023][T21131] syzkaller0: entered promiscuous mode [ 699.904241][T21131] syzkaller0: entered allmulticast mode [ 699.944992][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3831'. [ 700.002866][T21134] netlink: 'syz.2.3833': attribute type 1 has an invalid length. [ 700.092081][T21134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.241631][T21139] netlink: 'syz.1.3834': attribute type 2 has an invalid length. [ 700.720392][T21153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3838'. [ 701.782426][T21174] netlink: 'syz.1.3841': attribute type 11 has an invalid length. [ 701.797681][T21176] netlink: 'syz.3.3842': attribute type 10 has an invalid length. [ 701.816104][T21176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3842'. [ 701.845209][T21176] team0: Port device geneve1 added [ 701.871464][ T8791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.902421][ T8791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.937677][ T8791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.972535][ T8791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.177281][T21190] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 702.194338][T21190] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.202045][T21190] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.290234][T21190] bond0: Caught tx_queue_len zero misconfig [ 702.501070][T21198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3847'. [ 702.547299][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3847'. [ 702.633270][T21202] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3848'. [ 702.935013][ T1060] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.966051][ T1060] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.001009][ T1060] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.034415][ T1060] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.106853][ T1060] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.125512][ T1060] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.143611][ T1060] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.178913][ T1060] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.403761][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3853'. [ 703.533633][ T1060] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7 [ 703.615547][T21236] netlink: 912 bytes leftover after parsing attributes in process `syz.3.3855'. [ 703.649582][T21236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3855'. [ 703.779415][T21233] lo speed is unknown, defaulting to 1000 [ 704.223476][T21228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.444036][T21249] x_tables: duplicate underflow at hook 2 [ 704.463937][T21251] siw: device registration error -23 [ 704.528151][T21247] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 704.703507][T21263] vlan3: entered promiscuous mode [ 704.730786][T21263] bridge0: entered promiscuous mode [ 704.736403][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3858'. [ 704.821501][T21257] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 704.922919][T21264] ipvlan2: entered allmulticast mode [ 704.932502][T21264] gretap0: entered allmulticast mode [ 704.966965][T21267] netlink: 'syz.1.3862': attribute type 4 has an invalid length. [ 705.270436][T21277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 705.332420][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 705.699940][T21297] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3868'. [ 705.719393][T21297] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3868'. [ 705.812651][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 705.812935][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3871'. [ 705.873026][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3871'. [ 705.920467][T21312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3872'. [ 706.300764][T21332] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 706.544306][T21344] tipc: Started in network mode [ 706.569189][T21344] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 706.593647][T21344] tipc: Enabling of bearer rejected, failed to enable media [ 707.218607][T21367] bond1: option lacp_rate: invalid value (128) [ 707.230614][T21367] bond1 (unregistering): Released all slaves [ 707.551681][T21385] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 707.612548][T21384] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 707.641179][T21385] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 707.679900][T21393] tipc: Enabling of bearer rejected, already enabled [ 707.792968][T21401] ip6t_srh: unknown srh invflags 4000 [ 708.150182][ T8796] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.168354][ T8796] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.181058][ T8796] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.191389][ T8796] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.243935][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 708.286121][T21442] netlink: 'syz.2.3908': attribute type 29 has an invalid length. [ 708.740902][T21454] __nla_validate_parse: 10 callbacks suppressed [ 708.740914][T21454] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3913'. [ 710.640614][T21409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.876038][T21457] syzkaller1: entered promiscuous mode [ 710.898207][T21457] syzkaller1: entered allmulticast mode [ 711.023348][ T30] audit: type=1107 audit(1781645835.446:8): pid=21461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 711.269887][T21486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3925'. [ 711.325590][ T8791] vlan3: left allmulticast mode [ 711.331811][ T8791] geneve0: left allmulticast mode [ 711.337228][ T8791] bridge0: port 1(vlan3) entered disabled state [ 711.364644][ T8791] pimreg9: left allmulticast mode [ 711.435876][T21496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3927'. [ 711.629619][T21503] netlink: 'syz.0.3926': attribute type 1 has an invalid length. [ 711.783251][ T8791] bond9 (unregistering): (slave gretap1): Releasing active interface [ 711.796197][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'. [ 711.812573][ T8791] batman_adv: batadv0: Removing interface: gretap2 [ 711.924785][ T8791] bond7 (unregistering): (slave bridge3): Releasing active interface [ 711.933297][ T8791] bridge3 (unregistering): left promiscuous mode [ 711.939802][ T8791] bridge3 (unregistering): left allmulticast mode [ 711.952912][ T8791] bond10 (unregistering): (slave bridge4): Releasing active interface [ 711.966010][ T8791] bond13 (unregistering): (slave bridge5): Releasing active interface [ 711.974625][ T8791] bridge5 (unregistering): left promiscuous mode [ 711.981386][ T8791] bridge5 (unregistering): left allmulticast mode [ 712.011858][ T8791] bond0 (unregistering): Released all slaves [ 712.022947][ T8791] bond1 (unregistering): Released all slaves [ 712.041749][ T8791] bond2 (unregistering): (slave veth3): Releasing backup interface [ 712.055812][ T8791] bond2 (unregistering): Released all slaves [ 712.073843][ T8791] bond3 (unregistering): Released all slaves [ 712.090935][ T8791] bond4 (unregistering): (slave vlan2): Releasing active interface [ 712.100157][ T8791] bond4 (unregistering): Released all slaves [ 712.124900][ T8791] bond5 (unregistering): Released all slaves [ 712.157089][ T8791] bond6 (unregistering): (slave veth7): Releasing backup interface [ 712.170935][ T8791] veth7: left promiscuous mode [ 712.187635][ T8791] bond6 (unregistering): Released all slaves [ 712.240199][ T8791] bond7 (unregistering): Released all slaves [ 712.267239][ T8791] bond8 (unregistering): Released all slaves [ 712.294261][ T8791] bond9 (unregistering): Released all slaves [ 712.313405][ T8791] bond10 (unregistering): Released all slaves [ 712.335612][T21519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3932'. [ 712.343778][T21521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3934'. [ 712.348241][ T8791] bond11 (unregistering): Released all slaves [ 712.377544][ T8791] bond12 (unregistering): Released all slaves [ 712.405348][ T8791] bond13 (unregistering): Released all slaves [ 712.439327][ T8791] bond14 (unregistering): Released all slaves [ 712.748133][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3938'. [ 712.793834][ T8791] hmó3)ó€: left promiscuous mode [ 712.856924][T21537] tipc: Can't bind to reserved service type 1 [ 712.972275][ T8791] tipc: Disabling bearer [ 712.999068][ T8791] tipc: Left network mode [ 713.212009][T21548] syzkaller0: entered promiscuous mode [ 713.217892][T21548] syzkaller0: entered allmulticast mode [ 713.320684][ T1132] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.333279][ T1132] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.365922][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3944'. [ 713.487378][T21563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3944'. [ 714.246366][T21585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3949'. [ 714.269479][T21585] block nbd0: must specify backend [ 716.930796][ T1132] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.939166][ T1132] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.009452][T21573] veth0_macvtap: entered allmulticast mode [ 717.032859][T21573] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 717.076139][T21585] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 717.077919][ T1132] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.146599][ T1132] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.235954][T21617] netlink: 'syz.2.3952': attribute type 1 has an invalid length. [ 717.267638][T21617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.294006][ T1132] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.337401][ T1132] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.424591][T21621] netlink: 'syz.0.3951': attribute type 21 has an invalid length. [ 717.446340][T21621] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3951'. [ 717.508248][T21621] netlink: 'syz.0.3951': attribute type 4 has an invalid length. [ 717.553260][T21621] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3951'. [ 717.828366][T21663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3961'. [ 717.900491][T21665] netlink: 'syz.4.3964': attribute type 12 has an invalid length. [ 717.919025][T21665] netlink: 'syz.4.3964': attribute type 29 has an invalid length. [ 717.937882][T21665] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3964'. [ 717.947693][T21665] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3964'. [ 717.964352][T21669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3965'. [ 717.981570][T21668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3965'. [ 718.000734][T21669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3965'. [ 718.019442][T21668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3965'. [ 718.466812][T21653] lo speed is unknown, defaulting to 1000 [ 719.009583][T21696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.013262][T21699] netlink: 'syz.4.3973': attribute type 2 has an invalid length. [ 719.025857][T21696] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.040825][T21696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.053561][T21699] netlink: 'syz.4.3973': attribute type 1 has an invalid length. [ 719.120970][T21696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.145458][T21696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.182521][T21696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 719.228134][T21696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 719.250363][T21696] veth1_vlan: left promiscuous mode [ 719.257672][T21696] veth0_vlan: left promiscuous mode [ 719.267012][T21696] veth0_vlan: entered promiscuous mode [ 719.281827][T21696] veth1_vlan: entered promiscuous mode [ 719.299730][T21696] veth1_macvtap: left promiscuous mode [ 719.306682][T21696] veth0_macvtap: left promiscuous mode [ 719.314082][T21696] veth0_macvtap: entered promiscuous mode [ 719.321449][T21696] veth1_macvtap: entered promiscuous mode [ 719.340437][T21696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.351630][T21696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.360895][T21696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.378886][T21697] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 719.385977][T21697] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 719.401209][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.408387][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.428689][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.435873][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.489203][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.498590][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.507105][T21716] __nla_validate_parse: 3 callbacks suppressed [ 719.507124][T21716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3977'. [ 720.251302][T21743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3981'. [ 720.296065][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.317625][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.357849][ T1060] smbdirect: ib_dev[syz2] removed [ 720.439148][ T8796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 720.480839][ T8796] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.896359][ T8791] IPVS: stop unused estimator thread 0... [ 720.963076][T21773] syzkaller1: entered promiscuous mode [ 721.002288][T21773] syzkaller1: entered allmulticast mode [ 721.584302][T21794] Can't find ip_set type ha [ 721.664728][T21823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3999'. [ 722.033788][T21836] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4002'. [ 722.096766][T21836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4002'. [ 722.203152][T21841] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 722.205719][T21839] Cannot find del_set index 4 as target [ 722.227582][T21841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4005'. [ 722.263821][T21841] ip6gre2: entered promiscuous mode [ 722.270602][T21841] ip6gre2: entered allmulticast mode [ 722.443338][T21851] netlink: 'syz.4.4008': attribute type 1 has an invalid length. [ 722.526322][T21851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 722.999803][T21863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4011'. [ 723.020328][T21863] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 724.370193][T21872] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4014'. [ 724.389974][T21817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.430122][T21872] tipc: Enabling of bearer rejected, already enabled [ 724.488335][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 724.496142][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 724.623655][T21883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4019'. [ 724.650278][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4015'. [ 724.679779][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4016'. [ 724.689922][T21884] 8021q: VLANs not supported on ip6_vti0 [ 725.071151][T21910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4027'. [ 725.087363][T21902] mac80211_hwsim hwsim50 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 725.116917][T21909] sctp: [Deprecated]: syz.0.4028 (pid 21909) Use of int in max_burst socket option. [ 725.116917][T21909] Use struct sctp_assoc_value instead [ 725.126818][T21910] tipc: Enabling of bearer rejected, already enabled [ 725.306106][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4029'. [ 725.322847][T21919] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 725.342464][T21915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4029'. [ 725.409429][T21915] vxlan2: entered promiscuous mode [ 725.453875][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. [ 725.472195][ T8803] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.514570][ T8803] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.530000][ T8803] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.560648][ T8803] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.607150][T21931] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4034'. [ 725.631699][T21934] netlink: 'syz.4.4035': attribute type 5 has an invalid length. [ 725.661358][T21931] tipc: Enabling of bearer rejected, already enabled [ 725.756327][T21937] netlink: 'syz.1.4036': attribute type 21 has an invalid length. [ 725.778492][T21937] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4036'. [ 725.786821][T21940] x_tables: ip_tables: ah match: only valid for protocol 51 [ 726.000074][T21955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4043'. [ 726.021273][T21957] block nbd0: must specify backend [ 726.075574][T21950] netlink: 'syz.1.4041': attribute type 14 has an invalid length. [ 726.429152][T21974] tipc: Enabling of bearer rejected, already enabled [ 726.494345][T21970] bridge2: entered promiscuous mode [ 726.499756][T21970] bridge2: entered allmulticast mode [ 726.754811][T21980] hmó3)ó: entered promiscuous mode [ 727.204567][T22003] bridge0: port 3(bond4) entered blocking state [ 727.231491][T22003] bridge0: port 3(bond4) entered disabled state [ 727.267179][T22003] bond4: entered allmulticast mode [ 727.304343][T22003] bond4: entered promiscuous mode [ 727.631441][T22027] tipc: Enabling of bearer rejected, already enabled [ 727.758311][ T3312] wlan1: Trigger new scan to find an IBSS to join [ 727.829296][T22034] ip6_vti0: entered promiscuous mode [ 728.239736][ T6253] page_pool_release_retry() stalled pool shutdown: id 121, 1 inflight 362 sec [ 729.968112][T22067] __nla_validate_parse: 10 callbacks suppressed [ 729.968129][T22067] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4071'. [ 730.799459][ T8803] wlan1: Trigger new scan to find an IBSS to join [ 730.843292][T22069] openvswitch: netlink: IP tunnel dst address not specified [ 730.937804][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'. [ 730.968132][T22071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'. [ 731.011509][T22071] batadv1: entered promiscuous mode [ 731.028113][T22071] batadv1: entered allmulticast mode [ 731.041466][T22071] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 731.158783][T22080] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4075'. [ 731.392290][T22091] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 731.629014][T22091] bond1 (unregistering): Released all slaves [ 731.848752][T22097] netlink: 'syz.3.4079': attribute type 1 has an invalid length. [ 731.945489][T22097] netlink: 'syz.3.4079': attribute type 10 has an invalid length. [ 731.974904][T22097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4079'. [ 732.010927][T22097] dummy0: entered promiscuous mode [ 732.323956][T22129] geneve1: Caught tx_queue_len zero misconfig [ 732.398141][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 732.406000][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.641731][T22149] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4092'. [ 732.726818][T22156] netlink: 'syz.3.4092': attribute type 1 has an invalid length. [ 732.749954][T22156] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4092'. [ 732.781427][T22156] netlink: 'syz.3.4092': attribute type 1 has an invalid length. [ 732.817509][T22156] netlink: 638 bytes leftover after parsing attributes in process `syz.3.4092'. [ 732.841859][T22156] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4092'. [ 732.994917][T22170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 733.052697][T22170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 733.092977][T22175] netlink: 'syz.3.4102': attribute type 1 has an invalid length. [ 733.097793][T22179] vlan3: entered promiscuous mode [ 733.128165][T22175] nbd: error processing sock list [ 733.150921][T22175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4102'. [ 733.314614][T22175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 733.645958][T22232] bond2: option tlb_dynamic_lb: invalid value (115) [ 733.655222][T22232] bond2 (unregistering): Released all slaves [ 733.761134][ T1060] wlan1: Creating new IBSS network, BSSID 52:56:88:e4:ee:f4 [ 736.359035][T22216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.514641][T22269] __nla_validate_parse: 3 callbacks suppressed [ 736.514659][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4128'. [ 736.547346][T22268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4128'. [ 736.724999][T22276] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4129'. [ 736.746625][T22276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4129'. [ 737.367747][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4141'. [ 737.398828][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4141'. [ 737.441095][T22325] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4142'. [ 737.454056][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4142'. [ 737.640769][T22340] sch_tbf: burst 4392 is lower than device lo mtu (65550) ! [ 737.659965][T22340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4145'. [ 738.012004][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4153'. [ 738.024207][T22360] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 738.333930][T22375] tipc: Enabled bearer , priority 0 [ 738.539302][T22386] 0ªX¹¦À: renamed from batadv0 [ 738.557414][T22386] 0ªX¹¦À: entered allmulticast mode [ 738.568515][T22386] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 738.576090][T22386] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 738.601064][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.616084][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.624788][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.633927][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.642176][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.654549][T22392] sctp: [Deprecated]: syz.3.4162 (pid 22392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.654549][T22392] Use struct sctp_sack_info instead [ 738.673649][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.686307][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.701531][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.712717][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.736610][T22388] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 738.991371][T22414] syzkaller0: entered promiscuous mode [ 738.997884][T22414] syzkaller0: entered allmulticast mode [ 739.177126][T22426] sctp: [Deprecated]: syz.0.4170 (pid 22426) Use of int in max_burst socket option deprecated. [ 739.177126][T22426] Use struct sctp_assoc_value instead [ 739.386082][T22426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.518794][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 740.352918][T22471] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 740.366469][T22471] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 742.496660][T22435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.754781][T22490] ip6tnl0: Caught tx_queue_len zero misconfig [ 742.891559][T22499] __nla_validate_parse: 14 callbacks suppressed [ 742.891575][T22499] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4190'. [ 742.914397][T22500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4189'. [ 742.929086][T22499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4190'. [ 742.949147][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4190'. [ 742.966657][T22499] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4190'. [ 742.989780][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4190'. [ 743.084419][T22506] tipc: Enabling of bearer rejected, failed to enable media [ 743.158898][T22510] xt_hashlimit: size too large, truncated to 1048576 [ 743.454203][T22523] geneve2: entered promiscuous mode [ 743.484427][ T8791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.505105][ T8791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.514137][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4194'. [ 743.523057][ T8791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.523136][ T8796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.953330][T22537] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4198'. [ 744.187057][T22544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4200'. [ 744.313946][T22553] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3171875554/3171875556 [ 744.338952][T22553] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3171875554/3171875556 [ 744.545067][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4203'. [ 744.611889][T22559] validate_nla: 105 callbacks suppressed [ 744.611907][T22559] netlink: 'syz.4.4203': attribute type 10 has an invalid length. [ 744.641821][T22559] team0: Port device geneve1 added [ 744.832247][T22576] netlink: 'syz.0.4206': attribute type 1 has an invalid length. [ 744.854005][T22576] bond1: entered promiscuous mode [ 744.859693][T22576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 744.876184][T22576] vlan2: entered allmulticast mode [ 744.881951][T22576] bond1: entered allmulticast mode [ 744.902653][T22576] bond1: (slave bridge2): making interface the new active one [ 744.910632][T22576] bridge2: entered promiscuous mode [ 744.916012][T22576] bridge2: entered allmulticast mode [ 744.922902][T22576] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 747.119636][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 747.358231][T22555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.539679][T22585] netlink: 'syz.4.4209': attribute type 1 has an invalid length. [ 747.693758][T22595] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 747.721866][T22595] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 747.754704][T22595] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 747.764091][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.875739][T22612] xt_l2tp: invalid flags combination: 0 [ 748.506262][T22648] gretap1: entered promiscuous mode [ 748.681482][T22656] __nla_validate_parse: 3 callbacks suppressed [ 748.681500][T22656] netlink: 183540 bytes leftover after parsing attributes in process `syz.3.4227'. [ 749.731612][T22669] IPVS: length: 35 != 24 [ 749.994185][T22677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4231'. [ 750.117445][T22659] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 750.124894][T22659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.552833][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4239'. [ 750.689237][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4239'. [ 750.743623][T22727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.941138][T22731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4245'. [ 750.957528][T22741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4248'. [ 750.985379][T22741] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4248'. [ 751.015360][T22742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4247'. [ 751.017904][T22741] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4248'. [ 751.276763][T22754] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4251'. [ 754.000706][T22779] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 754.014709][T22790] dummy0: entered promiscuous mode [ 754.061863][T22790] erspan0: entered promiscuous mode [ 754.081736][T22790] hsr1: entered allmulticast mode [ 754.091120][T22790] dummy0: entered allmulticast mode [ 754.103142][T22790] erspan0: entered allmulticast mode [ 754.116558][T22792] __nla_validate_parse: 1 callbacks suppressed [ 754.116587][T22792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4263'. [ 754.148623][T22792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4263'. [ 754.175552][T22802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4264'. [ 754.217664][T22803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4264'. [ 754.503017][T22830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4270'. [ 754.551063][T22836] netlink: 'syz.1.4274': attribute type 15 has an invalid length. [ 754.671150][T22846] netlink: 'syz.4.4276': attribute type 8 has an invalid length. [ 755.185226][T22849] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4277'. [ 755.346937][T22861] bridge0: port 3(vlan3) entered blocking state [ 755.379715][T22861] bridge0: port 3(vlan3) entered disabled state [ 755.388955][T22861] vlan3: entered allmulticast mode [ 755.404522][T22861] bridge0: entered allmulticast mode [ 755.436980][T22861] vlan3: left allmulticast mode [ 755.460891][T22861] bridge0: left allmulticast mode [ 755.496254][T22863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.543785][T22864] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 756.070692][T22900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4291'. [ 756.206075][T22906] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4296'. [ 756.222858][T22906] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4296'. [ 756.293502][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 756.304007][T22910] netlink: 'syz.1.4298': attribute type 12 has an invalid length. [ 756.313343][T22910] netlink: 'syz.1.4298': attribute type 13 has an invalid length. [ 756.654775][T22926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 757.352183][T22968] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 757.573668][T22983] l2tp_ppp: sess 2/0: no socket in recv [ 760.955731][T23009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 760.976641][T23043] __nla_validate_parse: 6 callbacks suppressed [ 760.976656][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4334'. [ 761.327826][T23071] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 761.352437][T23066] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4341'. [ 762.321796][T23111] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 762.334483][T23112] team0: Port device bond0 removed [ 762.345683][T23112] bridge_slave_0: left allmulticast mode [ 762.352117][T23112] bridge_slave_0: left promiscuous mode [ 762.358536][T23112] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.368579][T23112] bridge_slave_1: left allmulticast mode [ 762.376326][T23112] bridge_slave_1: left promiscuous mode [ 762.382946][T23112] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.394842][T23112] bond0: (slave bond_slave_0): Releasing backup interface [ 762.413155][T23112] bond0: (slave bond_slave_1): Releasing backup interface [ 762.425547][T23112] team0: Port device team_slave_0 removed [ 762.453838][T23112] team0: Port device team_slave_1 removed [ 762.460388][T23112] batman_adv: batadv0: Removing interface: veth0_to_batadv [ 762.481495][T23112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.495311][T23112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.510751][T23112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 764.635909][T23091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 764.982161][T23138] sctp: [Deprecated]: syz.2.4358 (pid 23138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 764.982161][T23138] Use struct sctp_sack_info instead [ 765.403083][T23142] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4362'. [ 765.623352][T23158] syzkaller1: entered promiscuous mode [ 765.631948][T23165] netlink: 'syz.2.4366': attribute type 21 has an invalid length. [ 765.656452][T23158] syzkaller1: entered allmulticast mode [ 765.659968][T23167] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4367'. [ 765.670599][T23165] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4366'. [ 765.698888][T23166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4365'. [ 765.713327][T23165] netlink: 'syz.2.4366': attribute type 4 has an invalid length. [ 765.733483][T23165] netlink: 'syz.2.4366': attribute type 5 has an invalid length. [ 765.756698][T23165] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4366'. [ 765.847509][T23170] netlink: 'syz.2.4366': attribute type 4 has an invalid length. [ 765.978820][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4371'. [ 766.002128][T23177] mac80211_hwsim hwsim43 wlan1: Caught tx_queue_len zero misconfig [ 766.277983][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4373'. [ 766.326871][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 766.525240][T23210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4377'. [ 766.716501][T23214] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4379'. [ 766.759000][T23216] netlink: 'syz.2.4380': attribute type 1 has an invalid length. [ 766.782018][T23216] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4380'. [ 767.159008][T23230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4385'. [ 767.229838][T23232] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4386'. [ 767.635348][T23244] netlink: 'syz.0.4388': attribute type 1 has an invalid length. [ 767.667499][T23244] netlink: 'syz.0.4388': attribute type 2 has an invalid length. [ 767.687509][T23244] netlink: 'syz.0.4388': attribute type 1 has an invalid length. [ 767.714371][T23244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4388'. [ 767.720382][T23246] x_tables: duplicate underflow at hook 2 [ 768.015561][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4387'. [ 768.375075][T23271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.578560][T23271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.763171][T23271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.924274][T23271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.085759][T23305] syz.1.4408: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 769.120356][T23305] CPU: 1 UID: 0 PID: 23305 Comm: syz.1.4408 Not tainted syzkaller #0 PREEMPT(full) [ 769.120381][T23305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 769.120393][T23305] Call Trace: [ 769.120400][T23305] [ 769.120410][T23305] dump_stack_lvl+0xe8/0x150 [ 769.120444][T23305] warn_alloc+0x249/0x340 [ 769.120475][T23305] ? __pfx_stack_trace_save+0x10/0x10 [ 769.120510][T23305] ? __pfx_warn_alloc+0x10/0x10 [ 769.120542][T23305] ? __kasan_kmalloc+0x93/0xb0 [ 769.120566][T23305] ? __kmalloc_cache_noprof+0x318/0x660 [ 769.120591][T23305] ? xskq_create+0x56/0x170 [ 769.120611][T23305] ? xsk_init_queue+0x8a/0xe0 [ 769.120639][T23305] ? xsk_setsockopt+0x52a/0x960 [ 769.120664][T23305] ? do_sock_setsockopt+0x17c/0x1b0 [ 769.120684][T23305] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 769.120703][T23305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.120729][T23305] __vmalloc_node_range_noprof+0x12c/0x1730 [ 769.120780][T23305] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 769.120813][T23305] ? __kasan_kmalloc+0x93/0xb0 [ 769.120846][T23305] vmalloc_user_noprof+0xad/0xe0 [ 769.120873][T23305] ? xskq_create+0xbf/0x170 [ 769.120892][T23305] xskq_create+0xbf/0x170 [ 769.120922][T23305] xsk_init_queue+0x8a/0xe0 [ 769.120956][T23305] xsk_setsockopt+0x52a/0x960 [ 769.120985][T23305] ? __fget_files+0x2a/0x420 [ 769.121013][T23305] ? __pfx_xsk_setsockopt+0x10/0x10 [ 769.121043][T23305] ? __pfx_aa_sk_perm+0x10/0x10 [ 769.121076][T23305] ? aa_sock_opt_perm+0xff/0x1a0 [ 769.121109][T23305] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 769.121135][T23305] ? __pfx_xsk_setsockopt+0x10/0x10 [ 769.121166][T23305] do_sock_setsockopt+0x17c/0x1b0 [ 769.121192][T23305] __x64_sys_setsockopt+0x13d/0x1b0 [ 769.121214][T23305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.121236][T23305] do_syscall_64+0x174/0x580 [ 769.121259][T23305] ? trace_irq_disable+0x3b/0x140 [ 769.121290][T23305] ? clear_bhb_loop+0x40/0x90 [ 769.121315][T23305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.121334][T23305] RIP: 0033:0x7fa44bb9ce59 [ 769.121353][T23305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.121371][T23305] RSP: 002b:00007fa44ca28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 769.121391][T23305] RAX: ffffffffffffffda RBX: 00007fa44be15fa0 RCX: 00007fa44bb9ce59 [ 769.121406][T23305] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 769.121417][T23305] RBP: 00007fa44bc32d6f R08: 0000000000000004 R09: 0000000000000000 [ 769.121430][T23305] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.121443][T23305] R13: 00007fa44be16038 R14: 00007fa44be15fa0 R15: 00007fff6eba9278 [ 769.121476][T23305] [ 769.121510][T23305] Mem-Info: [ 769.276527][ T1132] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.303531][T23305] active_anon:7409 inactive_anon:0 isolated_anon:0 [ 769.303531][T23305] active_file:3510 inactive_file:40230 isolated_file:0 [ 769.303531][T23305] unevictable:3835 dirty:241 writeback:0 [ 769.303531][T23305] slab_reclaimable:12022 slab_unreclaimable:155158 [ 769.303531][T23305] mapped:32909 shmem:4357 pagetables:1351 [ 769.303531][T23305] sec_pagetables:0 bounce:0 [ 769.303531][T23305] kernel_misc_reclaimable:0 [ 769.303531][T23305] free:1246914 free_pcp:18745 free_cma:0 [ 769.427173][T23308] netlink: 'syz.1.4408': attribute type 10 has an invalid length. [ 769.498541][ T3312] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.517872][ T3312] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.550206][ T3312] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.571705][T23305] Node 0 active_anon:29536kB inactive_anon:0kB active_file:14040kB inactive_file:160712kB unevictable:13804kB isolated(anon):0kB isolated(file):0kB mapped:131636kB dirty:964kB writeback:0kB shmem:15892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14288kB pagetables:5432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 769.651649][T23305] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 769.691071][T23305] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 769.697791][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'. [ 769.730194][T23305] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 769.747977][T23305] Node 0 DMA32 free:1117928kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29636kB inactive_anon:0kB active_file:14040kB inactive_file:160712kB unevictable:13804kB writepending:964kB zspages:0kB present:3129332kB managed:2552916kB mlocked:12260kB bounce:0kB free_pcp:34388kB local_pcp:24280kB free_cma:0kB [ 769.763493][T23308] openvswitch: netlink: Message has 2 unknown bytes. [ 769.791422][T23320] netlink: 'syz.1.4408': attribute type 10 has an invalid length. [ 769.805621][T23320] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 769.835739][T23305] lowmem_reserve[]: 0 0 0 0 0 [ 769.849553][T23305] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 769.909487][T23305] lowmem_reserve[]: 0 0 0 0 0 [ 769.920257][T23305] Node 1 Normal free:3855296kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38024kB local_pcp:17908kB free_cma:0kB [ 770.018205][T23305] lowmem_reserve[]: 0 0 0 0 0 [ 770.022980][T23305] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 770.048103][T23305] Node 0 DMA32: 6574*4kB (U) 5862*8kB (UM) 3242*16kB (UME) 602*32kB (UME) 720*64kB (UME) 900*128kB (UME) 721*256kB (UME) 390*512kB (UME) 217*1024kB (UM) 64*2048kB (UME) 19*4096kB (U) = 1120968kB [ 770.088082][T23305] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 770.118050][T23305] Node 1 Normal: 3*4kB (U) 3*8kB (UM) 11*16kB (UM) 5*32kB (UM) 6*64kB (UM) 8*128kB (UM) 7*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 938*4096kB (UM) = 3855348kB [ 770.148106][T23305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 770.168795][T23305] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 770.188006][T23305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 770.207970][T23305] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 770.227976][T23305] 48101 total pagecache pages [ 770.232699][T23305] 0 pages in swap cache [ 770.238171][T23305] Free swap = 124996kB [ 770.247989][T23305] Total swap = 124996kB [ 770.258135][T23305] 2097051 pages RAM [ 770.262027][T23305] 0 pages HighMem/MovableOnly [ 770.278085][T23305] 427036 pages reserved [ 770.282245][T23305] 0 pages cma reserved [ 770.749289][T23333] bond4 (unregistering): Released all slaves [ 771.135082][T23366] __nla_validate_parse: 1 callbacks suppressed [ 771.135100][T23366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4424'. [ 771.153423][T23366] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4424'. [ 771.673071][T23380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4428'. [ 771.736089][T23382] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4430'. [ 771.855504][T23386] netlink: 8924 bytes leftover after parsing attributes in process `syz.1.4431'. [ 771.954307][T23392] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 771.967542][T23392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.195365][T23410] Bluetooth: MGMT ver 1.23 [ 772.394376][T23422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4443'. [ 772.397206][T23424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4444'. [ 772.648599][T23441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4448'. [ 772.729303][T23449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 772.952314][T23469] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4456'. [ 772.966411][T23469] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4456'. [ 772.990229][T23469] syzkaller0: entered promiscuous mode [ 772.995781][T23469] syzkaller0: entered allmulticast mode [ 773.006151][T23469] TC_ACT_REPEAT abuse ? [ 773.246814][T23484] syzkaller1: entered promiscuous mode [ 773.253904][T23484] syzkaller1: entered allmulticast mode [ 773.370762][T23485] syzkaller1: left promiscuous mode [ 773.375980][T23485] syzkaller1: left allmulticast mode [ 775.614372][T23439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.892960][T23497] netlink: 'syz.2.4465': attribute type 1 has an invalid length. [ 775.918472][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.948544][T23497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 776.001976][T23503] bond5: (slave veth3): Enslaving as an active interface with a down link [ 776.492209][T23530] __nla_validate_parse: 5 callbacks suppressed [ 776.492229][T23530] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4472'. [ 776.522174][T23532] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 776.558129][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.582982][T23532] syzkaller0: entered promiscuous mode [ 776.597333][T23532] syzkaller0: entered allmulticast mode [ 776.784080][T23548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4476'. [ 776.930946][T23551] lo speed is unknown, defaulting to 1000 [ 776.952089][T23551] lo speed is unknown, defaulting to 1000 [ 776.957362][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4482'. [ 776.971074][T23551] lo speed is unknown, defaulting to 1000 [ 776.992185][T23551] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 777.035593][T23551] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 777.037062][T23563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4479'. [ 777.077481][T23562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4484'. [ 777.096652][T23551] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 777.127685][T23551] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 777.171322][T23567] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4485'. [ 777.186853][T23567] netlink: 'syz.4.4485': attribute type 1 has an invalid length. [ 777.209071][T23551] lo speed is unknown, defaulting to 1000 [ 777.219577][T23551] lo speed is unknown, defaulting to 1000 [ 777.247257][T23551] lo speed is unknown, defaulting to 1000 [ 777.275925][T23551] lo speed is unknown, defaulting to 1000 [ 777.318476][T23551] lo speed is unknown, defaulting to 1000 [ 777.350167][T23551] lo speed is unknown, defaulting to 1000 [ 777.373748][T23551] lo speed is unknown, defaulting to 1000 [ 777.765566][T23595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4493'. [ 778.004460][T23615] netlink: 'syz.2.4500': attribute type 1 has an invalid length. [ 778.035143][T23620] netlink: 'syz.2.4500': attribute type 1 has an invalid length. [ 778.046486][T23618] netlink: 'syz.0.4497': attribute type 3 has an invalid length. [ 778.159720][T23615] 8021q: adding VLAN 0 to HW filter on device bond6 [ 778.178654][T23617] batadv_slave_1: entered promiscuous mode [ 778.206345][T23634] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4502'. [ 778.222849][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4502'. [ 778.260282][T23629] bond3 (unregistering): Released all slaves [ 778.536970][T23613] batadv_slave_1: left promiscuous mode [ 778.895064][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4510'. [ 780.571637][T23661] hsr_slave_0: left promiscuous mode [ 780.577559][T23661] hsr_slave_1: left promiscuous mode [ 781.263706][T23644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.647664][T23692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4518'. [ 781.755354][T23701] netlink: 'syz.0.4523': attribute type 1 has an invalid length. [ 781.814299][T23705] netlink: 'syz.3.4524': attribute type 1 has an invalid length. [ 781.822297][T23702] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 781.841993][T23702] bond3 (unregistering): Released all slaves [ 781.920918][T23701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 781.972552][T23705] 8021q: adding VLAN 0 to HW filter on device bond8 [ 782.016741][T23712] bond9: option lp_interval: invalid value (18446744073709551607) [ 782.024942][T23712] bond9: option lp_interval: allowed values 1 - 2147483647 [ 782.034347][T23712] bond9 (unregistering): Released all slaves [ 784.812408][T23716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.467803][T23777] vlan2: entered promiscuous mode [ 785.489429][T23777] bridge0: entered promiscuous mode [ 785.509128][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.532944][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.708197][T23788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4545'. [ 786.030403][T23785] netlink: 'syz.4.4544': attribute type 1 has an invalid length. [ 786.076490][T23785] gretap2: entered allmulticast mode [ 786.096268][T23785] bond4: (slave gretap2): making interface the new active one [ 786.105659][T23785] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 786.404876][T23805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.417617][T23805] x_tables: duplicate underflow at hook 2 [ 786.537050][T23808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4550'. [ 786.568659][T23808] openvswitch: netlink: Flow key attr not present in new flow. [ 786.785292][T23812] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 787.758774][ T1060] wlan1: Trigger new scan to find an IBSS to join [ 788.559044][ T9] page_pool_release_retry() stalled pool shutdown: id 121, 1 inflight 422 sec [ 788.660042][T23793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 789.363428][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4562'. [ 790.798639][ T3312] wlan1: Trigger new scan to find an IBSS to join [ 792.872409][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4575'. [ 793.117303][T23892] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 793.286066][T23917] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 793.514374][T23930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4586'. [ 793.890300][T23939] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4587'. [ 793.936930][T23917] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.279432][T23917] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.300320][ T3312] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.322104][ T3312] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.377720][ T3312] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.398087][ T3312] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.475196][T23917] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.624777][T23917] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.718107][ T48] wlan1: Trigger new scan to find an IBSS to join [ 794.738360][T23952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4589'. [ 794.777067][T23952] tap0: tun_chr_ioctl cmd 1074025677 [ 794.787185][T23952] tap0: linktype set to 776 [ 794.852810][ T3312] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.863658][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4593'. [ 794.910079][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.003161][ T3312] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.036157][ T3312] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.528659][T23979] nbd2: detected capacity change from 0 to 63 [ 795.539351][T23972] block nbd2: NBD_DISCONNECT [ 795.569574][T23972] block nbd2: Disconnected due to user request. [ 795.587331][T23972] block nbd2: shutting down sockets [ 795.587364][T22209] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 795.658271][ T8803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.680153][T22209] Buffer I/O error on dev nbd2, logical block 1, async page read [ 795.751012][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 795.760124][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 795.777768][ T1718] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 795.791401][ T1718] Buffer I/O error on dev nbd2, logical block 2, async page read [ 795.800085][ T1718] Buffer I/O error on dev nbd2, logical block 3, async page read [ 795.813398][T22209] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 795.862758][T22209] Buffer I/O error on dev nbd2, logical block 0, async page read [ 795.903048][T22209] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 795.944559][T22209] Buffer I/O error on dev nbd2, logical block 1, async page read [ 795.973102][T22209] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 795.988853][T24013] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 796.006218][T22209] Buffer I/O error on dev nbd2, logical block 2, async page read [ 796.026372][T24008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'. [ 796.027532][T22209] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.116293][T22209] Buffer I/O error on dev nbd2, logical block 3, async page read [ 796.160209][T22209] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.191160][T22209] Buffer I/O error on dev nbd2, logical block 0, async page read [ 796.217183][T22209] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.278418][T22209] Buffer I/O error on dev nbd2, logical block 1, async page read [ 796.301680][T22209] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.340488][T22209] ldm_validate_partition_table(): Disk read failed. [ 796.387507][T22209] Dev nbd2: unable to read RDB block 0 [ 796.412381][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4608'. [ 796.424208][T22209] nbd2: unable to read partition table [ 796.491017][T22209] ldm_validate_partition_table(): Disk read failed. [ 796.521393][T22209] Dev nbd2: unable to read RDB block 0 [ 796.549701][T22209] nbd2: unable to read partition table [ 796.612863][T24034] syzkaller0: entered promiscuous mode [ 796.643686][T24034] syzkaller0: entered allmulticast mode [ 796.724522][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4612'. [ 796.859091][T24056] netlink: 'syz.1.4612': attribute type 10 has an invalid length. [ 796.867161][T24056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4612'. [ 797.633060][T24065] netlink: 'syz.0.4615': attribute type 4 has an invalid length. [ 797.690027][T24066] netlink: 'syz.0.4615': attribute type 4 has an invalid length. [ 798.320399][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 801.764723][T24052] bond0: (slave dummy0): Releasing backup interface [ 801.772865][T24052] bridge3: port 1(dummy0) entered blocking state [ 801.782410][T24052] bridge3: port 1(dummy0) entered disabled state [ 801.790603][T24052] dummy0: entered allmulticast mode [ 801.797646][T24052] dummy0: entered promiscuous mode [ 801.822615][T24056] bridge3: port 1(dummy0) entered blocking state [ 801.830353][T24056] bridge3: port 1(dummy0) entered forwarding state [ 801.861453][T24056] dummy0: left allmulticast mode [ 801.867104][T24056] bridge3: port 1(dummy0) entered disabled state [ 801.892627][T24064] [ 801.894976][T24064] ====================================================== [ 801.902018][T24064] WARNING: possible circular locking dependency detected [ 801.909154][T24064] syzkaller #0 Not tainted [ 801.913595][T24064] ------------------------------------------------------ [ 801.920650][T24064] syz.0.4615/24064 is trying to acquire lock: [ 801.926715][T24064] ffffffff8ea80d80 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9d/0x750 [ 801.935608][T24064] [ 801.935608][T24064] but task is already holding lock: [ 801.942974][T24064] ffff8880515b8338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 801.952480][T24064] [ 801.952480][T24064] which lock already depends on the new lock. [ 801.952480][T24064] [ 801.962879][T24064] [ 801.962879][T24064] the existing dependency chain (in reverse order) is: [ 801.971877][T24064] [ 801.971877][T24064] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 801.979547][T24064] __might_fault+0xcb/0x130 [ 801.984568][T24064] _copy_from_user+0x28/0xb0 [ 801.989668][T24064] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 801.996204][T24064] ip_generic_getfrag+0x149/0x2d0 [ 802.001777][T24064] __ip6_append_data+0x3aef/0x4080 [ 802.007454][T24064] ip6_append_data+0x108/0x270 [ 802.012727][T24064] rawv6_sendmsg+0x1298/0x18c0 [ 802.018054][T24064] ____sys_sendmsg+0x853/0xa20 [ 802.023321][T24064] ___sys_sendmsg+0x2a5/0x360 [ 802.028501][T24064] __x64_sys_sendmsg+0x1bd/0x2a0 [ 802.033944][T24064] do_syscall_64+0x174/0x580 [ 802.039041][T24064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.045447][T24064] [ 802.045447][T24064] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 802.053162][T24064] lock_sock_nested+0x41/0x100 [ 802.058435][T24064] inet_shutdown+0x6a/0x390 [ 802.063458][T24064] nbd_mark_nsock_dead+0x2cb/0x550 [ 802.069168][T24064] recv_work+0x1cef/0x1e10 [ 802.074090][T24064] process_scheduled_works+0xa8e/0x14e0 [ 802.080149][T24064] worker_thread+0xa47/0xfb0 [ 802.085241][T24064] kthread+0x389/0x470 [ 802.089816][T24064] ret_from_fork+0x514/0xb70 [ 802.094927][T24064] ret_from_fork_asm+0x1a/0x30 [ 802.100197][T24064] [ 802.100197][T24064] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 802.107828][T24064] __mutex_lock+0x19d/0x1590 [ 802.112927][T24064] nbd_queue_rq+0x373/0x1150 [ 802.118026][T24064] blk_mq_dispatch_rq_list+0x499/0x1990 [ 802.124128][T24064] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 802.130992][T24064] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 802.137480][T24064] blk_mq_run_hw_queue+0x348/0x4f0 [ 802.143098][T24064] blk_mq_dispatch_list+0xd11/0xe10 [ 802.148804][T24064] blk_mq_flush_plug_list+0x45f/0x540 [ 802.154687][T24064] __blk_flush_plug+0x3ed/0x4d0 [ 802.160086][T24064] __submit_bio+0x465/0x560 [ 802.165097][T24064] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 802.171234][T24064] block_read_full_folio+0x599/0x830 [ 802.177031][T24064] filemap_read_folio+0x12c/0x3a0 [ 802.182577][T24064] do_read_cache_folio+0x354/0x590 [ 802.188195][T24064] read_part_sector+0xb6/0x2b0 [ 802.193505][T24064] adfspart_check_ICS+0xb1/0x960 [ 802.198948][T24064] bdev_disk_changed+0x82b/0x1780 [ 802.204484][T24064] blkdev_get_whole+0x372/0x510 [ 802.209880][T24064] bdev_open+0x324/0xd70 [ 802.214626][T24064] blkdev_open+0x461/0x600 [ 802.219547][T24064] do_dentry_open+0x816/0x1380 [ 802.224820][T24064] vfs_open+0x3b/0x340 [ 802.229395][T24064] path_openat+0x2e3b/0x3890 [ 802.234499][T24064] do_file_open+0x23e/0x4a0 [ 802.239510][T24064] do_sys_openat2+0x113/0x200 [ 802.244699][T24064] __x64_sys_openat+0x138/0x170 [ 802.250056][T24064] do_syscall_64+0x174/0x580 [ 802.255156][T24064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.261556][T24064] [ 802.261556][T24064] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 802.268748][T24064] __mutex_lock+0x19d/0x1590 [ 802.273843][T24064] nbd_queue_rq+0xc1/0x1150 [ 802.278857][T24064] blk_mq_dispatch_rq_list+0x499/0x1990 [ 802.284910][T24064] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 802.291744][T24064] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 802.298229][T24064] blk_mq_run_hw_queue+0x348/0x4f0 [ 802.303842][T24064] blk_mq_dispatch_list+0xd11/0xe10 [ 802.309543][T24064] blk_mq_flush_plug_list+0x45f/0x540 [ 802.315417][T24064] __blk_flush_plug+0x3ed/0x4d0 [ 802.320776][T24064] __submit_bio+0x465/0x560 [ 802.325786][T24064] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 802.331942][T24064] block_read_full_folio+0x599/0x830 [ 802.337743][T24064] filemap_read_folio+0x12c/0x3a0 [ 802.343278][T24064] do_read_cache_folio+0x354/0x590 [ 802.348900][T24064] read_part_sector+0xb6/0x2b0 [ 802.354178][T24064] adfspart_check_ICS+0xb1/0x960 [ 802.359618][T24064] bdev_disk_changed+0x82b/0x1780 [ 802.365147][T24064] blkdev_get_whole+0x372/0x510 [ 802.370501][T24064] bdev_open+0x324/0xd70 [ 802.375246][T24064] blkdev_open+0x461/0x600 [ 802.380166][T24064] do_dentry_open+0x816/0x1380 [ 802.385434][T24064] vfs_open+0x3b/0x340 [ 802.390005][T24064] path_openat+0x2e3b/0x3890 [ 802.395104][T24064] do_file_open+0x23e/0x4a0 [ 802.400115][T24064] do_sys_openat2+0x113/0x200 [ 802.405303][T24064] __x64_sys_openat+0x138/0x170 [ 802.410658][T24064] do_syscall_64+0x174/0x580 [ 802.415755][T24064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.422150][T24064] [ 802.422150][T24064] -> #3 (set->srcu){.+.+}-{0:0}: [ 802.429258][T24064] __synchronize_srcu+0xc9/0x2f0 [ 802.434696][T24064] elevator_switch+0x1e8/0x7b0 [ 802.440022][T24064] elevator_change+0x2fa/0x480 [ 802.445292][T24064] elevator_set_default+0x375/0x440 [ 802.450998][T24064] blk_register_queue+0x3f3/0x4e0 [ 802.456537][T24064] __add_disk+0x6cb/0xe30 [ 802.461372][T24064] add_disk_fwnode+0xfb/0x4b0 [ 802.466558][T24064] nbd_dev_add+0x733/0xb60 [ 802.471484][T24064] nbd_init+0x15f/0x1e0 [ 802.476225][T24064] do_one_initcall+0x250/0x870 [ 802.481493][T24064] do_initcall_level+0x10a/0x1a0 [ 802.486950][T24064] do_initcalls+0x59/0xa0 [ 802.491784][T24064] kernel_init_freeable+0x29d/0x3e0 [ 802.497484][T24064] kernel_init+0x1d/0x1d0 [ 802.502324][T24064] ret_from_fork+0x514/0xb70 [ 802.507417][T24064] ret_from_fork_asm+0x1a/0x30 [ 802.512682][T24064] [ 802.512682][T24064] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 802.520484][T24064] __mutex_lock+0x19d/0x1590 [ 802.525589][T24064] elevator_change+0x1af/0x480 [ 802.530869][T24064] elevator_set_none+0xb5/0x140 [ 802.536227][T24064] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 802.542538][T24064] nbd_start_device+0x189/0xb30 [ 802.547898][T24064] nbd_genl_connect+0x1597/0x1c10 [ 802.553450][T24064] genl_family_rcv_msg_doit+0x233/0x340 [ 802.559506][T24064] genl_rcv_msg+0x614/0x7a0 [ 802.564517][T24064] netlink_rcv_skb+0x226/0x4a0 [ 802.569781][T24064] genl_rcv+0x28/0x40 [ 802.574269][T24064] netlink_unicast+0x7bb/0x940 [ 802.579551][T24064] netlink_sendmsg+0x813/0xb40 [ 802.584816][T24064] ____sys_sendmsg+0x9b9/0xa20 [ 802.590081][T24064] ___sys_sendmsg+0x2a5/0x360 [ 802.595260][T24064] __x64_sys_sendmsg+0x1bd/0x2a0 [ 802.600698][T24064] do_syscall_64+0x174/0x580 [ 802.605797][T24064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.612195][T24064] [ 802.612195][T24064] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 802.620839][T24064] blk_alloc_queue+0x544/0x690 [ 802.626106][T24064] __blk_mq_alloc_disk+0x194/0x390 [ 802.631725][T24064] nbd_dev_add+0x494/0xb60 [ 802.636651][T24064] nbd_init+0x15f/0x1e0 [ 802.641316][T24064] do_one_initcall+0x250/0x870 [ 802.646585][T24064] do_initcall_level+0x10a/0x1a0 [ 802.652027][T24064] do_initcalls+0x59/0xa0 [ 802.656860][T24064] kernel_init_freeable+0x29d/0x3e0 [ 802.662571][T24064] kernel_init+0x1d/0x1d0 [ 802.667412][T24064] ret_from_fork+0x514/0xb70 [ 802.672502][T24064] ret_from_fork_asm+0x1a/0x30 [ 802.677771][T24064] [ 802.677771][T24064] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 802.684964][T24064] __lock_acquire+0x1520/0x2cd0 [ 802.690316][T24064] lock_acquire+0x106/0x350 [ 802.695321][T24064] fs_reclaim_acquire+0x71/0x100 [ 802.700768][T24064] __kmalloc_noprof+0x9d/0x750 [ 802.706039][T24064] task_numa_fault+0x33f4/0x3fc0 [ 802.711482][T24064] handle_mm_fault+0x2426/0x3080 [ 802.716926][T24064] do_user_addr_fault+0x744/0x1340 [ 802.722560][T24064] exc_page_fault+0x6a/0xc0 [ 802.727567][T24064] asm_exc_page_fault+0x26/0x30 [ 802.732920][T24064] rep_movs_alternative+0x30/0x90 [ 802.738449][T24064] _copy_from_user+0x7a/0xb0 [ 802.743542][T24064] copy_from_sockptr+0x5e/0x90 [ 802.748851][T24064] do_ip_setsockopt+0x1e4f/0x2e30 [ 802.754381][T24064] ip_setsockopt+0x66/0x110 [ 802.759395][T24064] do_sock_setsockopt+0x17c/0x1b0 [ 802.764925][T24064] __x64_sys_setsockopt+0x13d/0x1b0 [ 802.770624][T24064] do_syscall_64+0x174/0x580 [ 802.775722][T24064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.782117][T24064] [ 802.782117][T24064] other info that might help us debug this: [ 802.782117][T24064] [ 802.792324][T24064] Chain exists of: [ 802.792324][T24064] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 802.792324][T24064] [ 802.804957][T24064] Possible unsafe locking scenario: [ 802.804957][T24064] [ 802.812420][T24064] CPU0 CPU1 [ 802.817793][T24064] ---- ---- [ 802.823140][T24064] rlock(&mm->mmap_lock); [ 802.827540][T24064] lock(sk_lock-AF_INET6); [ 802.834542][T24064] lock(&mm->mmap_lock); [ 802.841373][T24064] lock(fs_reclaim); [ 802.845337][T24064] [ 802.845337][T24064] *** DEADLOCK *** [ 802.845337][T24064] [ 802.853492][T24064] 3 locks held by syz.0.4615/24064: [ 802.858671][T24064] #0: ffffffff8fdbd5c0 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 802.868068][T24064] #1: ffff888089804660 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_setsockopt+0x1556/0x2e30 [ 802.877968][T24064] #2: ffff8880515b8338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 802.887872][T24064] [ 802.887872][T24064] stack backtrace: [ 802.893745][T24064] CPU: 0 UID: 0 PID: 24064 Comm: syz.0.4615 Not tainted syzkaller #0 PREEMPT(full) [ 802.893762][T24064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 802.893771][T24064] Call Trace: [ 802.893777][T24064] [ 802.893784][T24064] dump_stack_lvl+0xe8/0x150 [ 802.893800][T24064] print_circular_bug+0x2e1/0x300 [ 802.893821][T24064] check_noncircular+0x12e/0x150 [ 802.893841][T24064] __lock_acquire+0x1520/0x2cd0 [ 802.893858][T24064] ? __lock_acquire+0x683/0x2cd0 [ 802.893873][T24064] ? check_path+0x21/0x40 [ 802.893894][T24064] ? check_noncircular+0xda/0x150 [ 802.893911][T24064] ? __bfs+0x153/0x290 [ 802.893925][T24064] ? __pfx_usage_match+0x10/0x10 [ 802.893943][T24064] ? __kmalloc_noprof+0x9d/0x750 [ 802.893962][T24064] lock_acquire+0x106/0x350 [ 802.893976][T24064] ? __kmalloc_noprof+0x9d/0x750 [ 802.893996][T24064] ? node_is_toptier+0x50/0x2b0 [ 802.894013][T24064] ? node_is_toptier+0x50/0x2b0 [ 802.894029][T24064] fs_reclaim_acquire+0x71/0x100 [ 802.894049][T24064] ? __kmalloc_noprof+0x9d/0x750 [ 802.894068][T24064] __kmalloc_noprof+0x9d/0x750 [ 802.894086][T24064] ? node_is_toptier+0x50/0x2b0 [ 802.894101][T24064] ? task_numa_fault+0x33f4/0x3fc0 [ 802.894118][T24064] task_numa_fault+0x33f4/0x3fc0 [ 802.894139][T24064] ? __lock_acquire+0x683/0x2cd0 [ 802.894156][T24064] ? __pfx_clockevents_program_event+0x10/0x10 [ 802.894188][T24064] ? pfn_valid+0xba/0x480 [ 802.894208][T24064] ? __pfx_task_numa_fault+0x10/0x10 [ 802.894223][T24064] ? page_table_check_set+0x126/0x510 [ 802.894242][T24064] ? lock_acquire+0x106/0x350 [ 802.894259][T24064] ? page_table_check_set+0x126/0x510 [ 802.894279][T24064] ? page_table_check_set+0x126/0x510 [ 802.894299][T24064] ? page_table_check_set+0x4b3/0x510 [ 802.894322][T24064] ? handle_mm_fault+0xec/0x3080 [ 802.894340][T24064] handle_mm_fault+0x2426/0x3080 [ 802.894362][T24064] ? handle_mm_fault+0xec/0x3080 [ 802.894382][T24064] ? __pfx_handle_mm_fault+0x10/0x10 [ 802.894404][T24064] ? __lock_acquire+0x683/0x2cd0 [ 802.894420][T24064] ? lock_mm_and_find_vma+0xa7/0x340 [ 802.894441][T24064] do_user_addr_fault+0x744/0x1340 [ 802.894461][T24064] exc_page_fault+0x6a/0xc0 [ 802.894478][T24064] asm_exc_page_fault+0x26/0x30 [ 802.894493][T24064] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 802.894515][T24064] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 802.894528][T24064] RSP: 0018:ffffc90003e6fc50 EFLAGS: 00050202 [ 802.894541][T24064] RAX: 00007ffffffff001 RBX: 000000000000000c RCX: 000000000000000c [ 802.894552][T24064] RDX: 0000000000000001 RSI: 0000200000000740 RDI: ffffc90003e6fd60 [ 802.894563][T24064] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 802.894571][T24064] R10: dffffc0000000000 R11: fffff520007cdfad R12: 1ffff920007cdf9c [ 802.894583][T24064] R13: 0000000000000023 R14: ffffc90003e6fd60 R15: 0000200000000740 [ 802.894600][T24064] _copy_from_user+0x7a/0xb0 [ 802.894617][T24064] copy_from_sockptr+0x5e/0x90 [ 802.894632][T24064] do_ip_setsockopt+0x1e4f/0x2e30 [ 802.894648][T24064] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 802.894662][T24064] ? aa_sk_perm+0x6d5/0x900 [ 802.894682][T24064] ? __fget_files+0x2a/0x420 [ 802.894701][T24064] ? __pfx_aa_sk_perm+0x10/0x10 [ 802.894720][T24064] ? __fget_files+0x2a/0x420 [ 802.894736][T24064] ? aa_sock_opt_perm+0xff/0x1a0 [ 802.894757][T24064] ip_setsockopt+0x66/0x110 [ 802.894771][T24064] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 802.894792][T24064] do_sock_setsockopt+0x17c/0x1b0 [ 802.894808][T24064] __x64_sys_setsockopt+0x13d/0x1b0 [ 802.894823][T24064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.894838][T24064] do_syscall_64+0x174/0x580 [ 802.894854][T24064] ? trace_irq_disable+0x3b/0x140 [ 802.894874][T24064] ? clear_bhb_loop+0x40/0x90 [ 802.894896][T24064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.894910][T24064] RIP: 0033:0x7f45ec99ce59 [ 802.894923][T24064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.894936][T24064] RSP: 002b:00007f45ed8dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 802.894951][T24064] RAX: ffffffffffffffda RBX: 00007f45ecc15fa0 RCX: 00007f45ec99ce59 [ 802.894962][T24064] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 802.894971][T24064] RBP: 00007f45eca32d6f R08: 000000000000000c R09: 0000000000000000 [ 802.894980][T24064] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000000 [ 802.894990][T24064] R13: 00007f45ecc16038 R14: 00007f45ecc15fa0 R15: 00007ffc21c61008 [ 802.895006][T24064] [ 803.366358][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'. [ 803.375778][T24078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.383746][T24078] batman_adv: batadv0: Removing interface: batadv_slave_0