last executing test programs: 7.332305425s ago: executing program 0 (id=3310): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x54, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r3, 0xfffc, 0x1, 0x1000000, 0xe, 0x8001}, 0x14) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) listen(r1, 0x7) (async) listen(r0, 0x7) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r4, 0x7) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c0000001000030425bd70000000200000000300", @ANYRES32=0x0, @ANYBLOB="032e0000030000004c0012800e0001006970366772657461700000003800028014000700feffffc7b9000000000000000000000108000c0000000000060011004e24000008000c0007000000080015000e1f030008000d000008000008000a00", @ANYRES32], 0x7c}}, 0x90) 6.843968519s ago: executing program 0 (id=3315): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'wg0\x00', &(0x7f0000000240)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000000) (async) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="c10e000018001f06b9409b0dffff110d0207be3f0205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060001040000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0xf14, 0x2c, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {0x2, 0x5}, {0x7, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x10}}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x39}]}}, @TCA_CHAIN={0x8, 0xb, 0x2ab6}, @filter_kind_options=@f_cgroup={{0xb}, {0x48c, 0x2, [@TCA_CGROUP_POLICE={0x488, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x9, 0x29, 0xffffff3b, {0x2, 0x0, 0x6, 0x5ee, 0x1112, 0x5}, {0xfb, 0x2, 0x0, 0x7, 0x80, 0x9}, 0xe64, 0x9, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5, 0x7fff, 0x5, 0x4, 0x5, 0x4, 0x3, 0xfff, 0xc5, 0x7, 0x7, 0x7, 0x1, 0x80000001, 0x5, 0x9, 0xff, 0x2, 0x1c1e4, 0x1, 0x5bcc, 0x5, 0x9, 0x80000001, 0xffffffff, 0x3b, 0x5b3e, 0xd8a, 0x8, 0x5, 0xfff, 0x8, 0xcd64, 0x9f, 0xfffff556, 0x3, 0x80000001, 0xfffffffd, 0x9082, 0x7, 0x0, 0x7, 0x7, 0x5c8e, 0x35b, 0x4, 0x65a4, 0x893c, 0xf, 0xeb, 0x5, 0x6, 0xff, 0x7fffffff, 0x8, 0x0, 0xfffffffa, 0xd, 0x1, 0x7, 0x4, 0x4, 0x3433, 0x80000000, 0x10, 0x5, 0x2, 0x84, 0x6, 0x4, 0x3, 0x2, 0x3, 0x9, 0x200, 0x149, 0x9, 0xfffffffe, 0x8, 0x2, 0x1a5, 0x4, 0x47ae2a78, 0x3, 0x4, 0x6, 0x5, 0x7, 0x9, 0xfffffffd, 0x6b661b4d, 0x5, 0xfff, 0x8001, 0x9, 0x5, 0x3, 0x5, 0x0, 0x2, 0x4, 0x6, 0x9, 0x5, 0x26aa, 0x9, 0x8, 0x81, 0x6, 0xffff, 0xd22, 0x81, 0x5, 0x5, 0x0, 0x3ff, 0x4396, 0x5, 0xe48, 0x2, 0xba8, 0x7, 0x6, 0xc, 0x3a8b, 0x10000, 0x7, 0x4, 0x4, 0x7, 0x8, 0x6, 0x8001, 0x10, 0x6, 0x7, 0x1, 0x7, 0x9, 0x9, 0x1, 0x7, 0xb9, 0x6, 0x0, 0xf, 0x9, 0x1ff, 0x6, 0x7ff, 0x5, 0x1000, 0x3, 0x8, 0x7, 0xffff, 0x8, 0x80000001, 0x6, 0x9027, 0x0, 0x1, 0x4, 0x8, 0x6, 0x1000, 0x5, 0xe, 0x7, 0xb, 0x2, 0x7, 0x0, 0x6, 0x80, 0x3, 0x400, 0xa, 0x6, 0x8000, 0x7, 0x4, 0x10f97843, 0xffffffff, 0x7, 0xfffffffd, 0x5, 0x2, 0x3c366f49, 0x80, 0xb0a, 0x9, 0x1, 0x4a, 0x7, 0xab34, 0x707, 0xfffffeff, 0x8a, 0x9, 0x3, 0x391c, 0x6, 0x9, 0xd70, 0x4, 0x8, 0x0, 0x4e3, 0x3, 0x5, 0x3, 0x7, 0x2, 0x7ff, 0x5f79, 0x4, 0xe, 0x8, 0x5, 0x101, 0x8, 0x0, 0x6, 0x1, 0x3, 0xab1, 0xc, 0x4, 0x7, 0x0, 0x1, 0x1, 0x8, 0x1000, 0x5, 0x5, 0xd46, 0x10, 0x1000, 0x5, 0x0, 0xffffff23, 0x8000, 0x0, 0x9, 0x6, 0xb227, 0x1000, 0x1, 0x10, 0x8000, 0x80000000, 0x200, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x0, 0x3, 0x7, {0x5, 0x0, 0x6, 0x8, 0x8717, 0x7}, {0x3, 0x7847f5b8d558f430, 0x401, 0x6, 0x81, 0x8}, 0x5, 0x6, 0x80000000}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xf3, 0x87}}, @filter_kind_options=@f_bpf={{0x8}, {0x9dc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x5b4, 0x1, [@m_csum={0x1a0, 0x17, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe7fc, 0x0, 0x4, 0xf, 0x5}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x5, 0x2fb, 0x40000000}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x8000, 0x0, 0x40, 0x7fffffff}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x80000000, 0x7, 0x9, 0x7fff}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0xfffffff7, 0x2, 0x80000000, 0x5}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x101, 0x20000000, 0x5, 0x10000}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x7, 0x6, 0xf62e}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x5, 0xff, 0x5}, 0x17}}]}, {0x93, 0x6, "6dbe2dc37455eadce7f01c49c6f3b0dfb0597809d2ba42539f46540ce70831efc3f32b01640e18cb4cc592b71b481f073c41902642bd2be8a7321ba454baa7857e5c0b8d13df3cbc75875ffd3d931d28df132b6f8365bdf4d5bcfa81297cb01e6ca1e85976d0bff318ba5baacfbf77dad81a00ed8a30703fcc1405764d81c34f9d344f84be28cf3767559df50d4714"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0xf69b41e529118f09}}}}, @m_connmark={0x1a4, 0x14, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x6, 0x6, 0x80000001}, 0xd2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0xf159, 0x2, 0xffff, 0xffffff4d}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x2, 0x20000000, 0x7, 0xffffffff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x20000008, 0x8, 0x7}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8000, 0x6, 0xd, 0x8aaf}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x400, 0x0, 0xffff, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x1b, 0xffffffffffffffff, 0x2, 0xffffffd5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x2, 0x7fff, 0x80000001}, 0x3800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfff, 0x1, 0x3, 0x9}, 0x9}}]}, {0x77, 0x6, "511eeb21c3e4d8c5b7cfeb8f8fce7d845df3ece51e393b2cbf3587e6f17f6ce9219739b23af737ad7074e096af3022c51156c2ee2415fbf1d5e64cc8e60659958903ab82c37304f36e2b253ea23b19abd7206534e6e4cc671768855e0d6894ccf40b2ea7ca2c330aeb2374180fa38eb984a33f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0xec, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0xbd, 0x6, "50f678471d32537dd86397982c2a0babd1970f4f7ed30932b8de54e6b0ff4cb75717d042ad9b5b09147055cbf30a9426c1137da78147b52e87cd202a0d846acd7729fe559aeccb2c8522cac5f5c3855b0ca06016bcb1666c79f9888ab9f619ff669db1685cf944568af584e1051019b2e31d9ae8e75d38932dbb81bb7e1d6a5292fe78792b8fd4d4c777c28cc1a54d2f9ca08caf3502802afbe28bd9c8b7188e152dbd4c19cacf84b6b51641437006880a7d96507c2035b8f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x108, 0x14, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x4, 0xce, 0xfffffcdd}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x100, 0xffffffffffffffff, 0x3, 0x7ff}, 0x4, r7}}]}, {0x9b, 0x6, "039a0e391a5ed0be301145350dcf1a412d593187c8af78c3a698d04300578c84202933d6048bb45255e5455710407d6ada5e4304c81e469aef5f31a0f7530d19eb56e3bda3aaaf01e02bd92a6b5e7ff25dde9397398682a8f26695d1bb8f80323ee9309a044f434c51494a49f21cd3d0e4e241dcf69d05be920c5469d18df6bcf5ac5739495bc2ca6b737e6531e3d177e0f82492ab75c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x78, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x8001, 0x0, 0x8, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x2e}, @TCA_IFE_DMAC={0xa, 0x3, @random="ba4127942ebe"}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x8d9, 0x8, 0x9, 0x2d, 0xb, 0x8c, 0x81, 0x2, 0x4, 0x80, 0x7, 0x4, 0x80000001, 0x9, 0x51f, 0x7, 0x0, 0xfffffffa, 0x8, 0x3, 0x6, 0x9, 0x2, 0xffffffff, 0x1, 0xb, 0x6, 0x4, 0xab, 0x10001, 0x1, 0x6, 0x4, 0x1200, 0x6, 0x46a2, 0x7fffffff, 0x6, 0x8, 0x656, 0x7ff, 0x0, 0x6, 0x0, 0x400, 0x7fff, 0x8, 0x5, 0xff, 0xffff7fff, 0xffffffff, 0x5, 0x7, 0x2, 0x5, 0x5, 0x2, 0x1ff, 0x4, 0x80000000, 0x37a, 0xffffffff, 0x6, 0x67, 0x9, 0x7f, 0x200, 0x8, 0xb72, 0xc1, 0x8, 0xffff, 0x1ff, 0x3, 0xfffffffc, 0x3, 0x1, 0x5, 0x7, 0xffffffae, 0x0, 0xc45, 0x5b, 0x8, 0x10, 0x0, 0x4, 0x3, 0xa7e, 0x9, 0x0, 0x0, 0x3, 0x3, 0x3, 0x7, 0x5, 0x8000, 0x1902, 0x7, 0x3, 0x5, 0x20000, 0x1, 0x7, 0x1, 0x97, 0xffffa0c7, 0x6f, 0x80, 0x3, 0x0, 0x3ff, 0xcf, 0x401, 0x6, 0x3, 0xab66, 0x5, 0x7fffffff, 0x7, 0x1, 0xffffffff, 0xfff, 0x2, 0xc7, 0xffffffff, 0x2, 0x7, 0x140, 0xe38, 0x3, 0x1, 0xffff, 0xc, 0xd, 0x6, 0x200, 0x3, 0xa, 0x5, 0x3, 0x0, 0x2, 0xe, 0x10000, 0x7, 0x1, 0x1, 0x9, 0x4, 0x9, 0xe, 0x712, 0x6, 0x2, 0xfeee, 0x7ff, 0x6, 0x0, 0x9, 0x1, 0xfffffffc, 0x0, 0xd, 0x2, 0xb5d, 0xff, 0x6, 0x9, 0x3, 0x1, 0x8, 0xffff, 0x6, 0x9, 0x3ff, 0x5, 0x3ff, 0x3, 0x8, 0x6, 0x3056, 0x0, 0xfffffff8, 0x6, 0x0, 0xec8, 0x2, 0x6, 0xa3, 0xfffffffa, 0xb, 0x3, 0x5340964e, 0x3, 0x2, 0x2, 0xb, 0x6, 0x1, 0x3, 0x9, 0x62c8, 0x1000, 0x1, 0x9, 0xc85, 0x3, 0x6, 0x3, 0x5, 0x8, 0xf53a, 0x9b, 0x6, 0x7, 0x0, 0x5, 0x100, 0xaba2900, 0x860, 0x9, 0x6, 0x62, 0x2, 0xffffffff, 0xf, 0xb7d, 0x0, 0x8, 0x3, 0xa5, 0x3, 0x7, 0xbd2, 0x2, 0x8, 0x10000, 0x5c, 0x0, 0x11a8, 0x3, 0x3ff, 0x100, 0x9e0, 0x7, 0x80000001, 0x8, 0xffffffff, 0x2, 0x2, 0xfffffff7, 0x20000000]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x24}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0xc, 0x81}}]}, 0xf14}, 0x1, 0x0, 0x0, 0x40005}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x12}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x67}]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000001600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000015c0)={&(0x7f0000001400)={0x1a0, r10, 0x110, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x16}, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd174}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4}, 0x40044) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@newtaction={0x78, 0x30, 0xb, 0x70bd27, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe9de, 0x7, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "39e718863d4fdd1ef40ef06d7ec4da31"}, @TCA_CT_MARK={0x8, 0x5, 0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44890}, 0x8050) setsockopt$sock_int(r0, 0x1, 0x4d, &(0x7f0000001800)=0x1, 0x4) (async) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x20008060}, 0x4000802) (async) write(r0, &(0x7f0000000040)="45ac2e23f100e5301b00febc00000000ffffff", 0x13) 6.543584833s ago: executing program 0 (id=3317): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x8, 0xc, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4f}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) 5.971705842s ago: executing program 0 (id=3324): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth0_macvtap\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000740)=""/222, 0x0, 0x8}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000046000901fefffffffeffffff017c00000c0003804e2d"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.276728348s ago: executing program 3 (id=3329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r2, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1c, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x5, 0x1, [{0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}]}}}}}}, 0x0) write(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) close(r5) 5.102985802s ago: executing program 3 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b700000000000000950000000000000079200000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x100000, &(0x7f0000000500)=""/1048576, 0x0, 0xf9, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000100500)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x20a3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000100540)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000100580)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00001005c0)={0x1, [0x0]}, &(0x7f0000100600)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000100640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000100680)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r3, 0x84, 0x81, &(0x7f00001006c0)={r6, 0x8}, &(0x7f0000100700)=0x8) 4.88178458s ago: executing program 3 (id=3335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x2, 0xf}, {0x3, 0xffe0}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000740)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r8, 0x0, 0x3, 0x0, &(0x7f0000000040)) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000000080)=0x25, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/cgroup\x00') (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0200050000000000000000000000001a000000060900020073797a310000000002000100070000000c000780080013005607497419000400010000000d000300686173683a6d61630000000005000500000000003c88c83959cc8c1563b1a160467b8d815834f1770d6df17bb8fc2622f4b6c569eb4981d8dba242b681a25de2d529358ae3d324c4db60b61b4d62d4a1adba23380d6335230abd9fa61bffcb7cde1f42cbe0f403258e9711eeca4be57c1a2ee3f5da2870cbf35d5c29a96015a45255868ada204d8dcfdbdb3ae7335f116cbdec99ef0a67f59aa48b79c18894670987e70f4c8c9a4bb4f1c67ad99845724225"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24040004) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYRES8=r10, @ANYRES16=r6, @ANYRES16=r10, @ANYBLOB="e17fef071f567992cdee72ae0d4bcff2bdb061820dfc6a285a1e4ae4f93fd7c9553c15cdcdb36deda1bb5779b966a976373c1e65a54c6747905ea7118879ecdfa8974390c45e05c151c1e03a40b438a7c016f1188cccb7dca428123e2a5475c0fa02b3835c1f41d4f2b37967acdbdbec64015cb51d45bbf50da9336ca2ad0b96be7cf664b522af6006742f5d327391d4d509849d31347ada43578d8e7d305da767b791a1e7b936e3fb29194f1655cb99347f7c740e9a38f6b191804ae3f618cd13e5738ea593e307a526299c9a6c05b568f7644e778b9f1cc124a4631455938603dcdccc52afec760d46"], 0xa8}, 0x1, 0x0, 0x0, 0x40844}, 0x20000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.733891537s ago: executing program 0 (id=3336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\n>\x00\x00\x00'], 0x50) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async) r2 = epoll_create(0x3ff) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0xe373, &(0x7f0000000240)={[0x800]}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000005348fb77a5c2d60700000000000000000100000085200000cc4f0300"], &(0x7f0000000f40)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0xc, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000d00)) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x2, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000009508ffff070000000000000000000044a9f56483c819a1e19917b4273f0ae762d6e1b20f2a000a987c13371ef894c2d8215a3ad96295d6d4118cec4e87a720016a9a3db76ef54ba3b84ec58e6c176a470105d14a01acdc6d50bee394651ebf21e360f79bacb2d1e4da36e7c88411eb8346a4e1ac0442c3a070d2e96862f3e0be0c47be155b6237a4e1ea36fa8d525284e8c41bdb451182ffb3b8739a9744356a7085fd5351c3450d71e6f3f04a8223ef98aebe7f81b3efb738542599b5cba128164fb0a1972f621e83ab5e72948457bdb065f7ec6bc62894dfa4a46eeb1f6d12169ebd813a16b4e1f11792f022"], &(0x7f0000001080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000010c0)={r9, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b20, &(0x7f0000000380)={'wlan1\x00', @random="001a3a804e0a"}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000e00)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r12 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000001580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x320, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r12, 0x40106e8c, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x81}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1a1d}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x40840) r13 = socket(0x40000000015, 0x2, 0x0) getsockopt(r13, 0x114, 0x5, 0x0, 0x0) (async) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d80), 0x40241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000001dc0)={'vlan0\x00', 0x1000}) 4.577998792s ago: executing program 3 (id=3338): r0 = socket(0xa, 0x3, 0xff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pwrite64(r2, &(0x7f0000000440)="801ad0205a4686504ef5ba38150e0c5d18032e53f4f457d791aad49f361a68178861da6ea9d4eb45e35e76055a2fe6f6c9904f9fba84d21f53e99d3c6340b546c55bedfb99cd70aea245b2df7c9f9c4d65469f95d482614fb4b4c27710c1b3a6", 0x60, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x20000800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'lo\x00'}) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x2140) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000300)={@multicast2, @loopback}, 0x64) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) close(r1) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x10}, {&(0x7f0000000200)="9efe80000000000000dfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) 4.375391357s ago: executing program 1 (id=3341): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1001}, 0x6c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f00000002c0)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) unshare(0x2020600) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x19, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) 4.187316067s ago: executing program 4 (id=3344): socketpair(0x22, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000feb7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baa00fe00000000b5090800000000007baaf0ff00000000bf8720000000000036070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004602010076000000bf98000000000000be08f8ff000000008500000007000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000240)={@loopback, 0x75, r1}) 4.006718564s ago: executing program 2 (id=3345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRESHEX=r0, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 3.821343679s ago: executing program 2 (id=3346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x9102}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095", @ANYRES8=r3], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000b40)=0x5, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x24}}, 0x0) bind$inet6(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0x14, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f0000000e40)) (async) getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, 0x0, &(0x7f0000000e40)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="050005000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x148b83, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000980)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r8, 0x400454c9, 0x1) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000b80550d9d4e3b2bfb985f773ede61dbe07ca4f79aee306894070de9e57dc2935321d22335f910d862a0001c9b96977ca67023f6b76d2b0fc253715d86be87e4fe8226cdca5328dce7e0580"]) (async) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000b80550d9d4e3b2bfb985f773ede61dbe07ca4f79aee306894070de9e57dc2935321d22335f910d862a0001c9b96977ca67023f6b76d2b0fc253715d86be87e4fe8226cdca5328dce7e0580"]) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'syzkaller0\x00'}) 3.725851858s ago: executing program 0 (id=3347): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x2, 0x2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000240)={r3, 0x9}, 0x8) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000efd3f160f77ae28d965b796e555496a62a1fb993309d05b5236f79c711fcbed0332a63545c2b077d88c9141e1094d53237376dd58a89cef76dcb925f9b10da6fdb4d439365a727b3847059161b07945e92bb39cf1b10c16f64163b044744b4f69209c34d963f785919899f57384bdd91f28f724962e31d60ce4b"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.539973706s ago: executing program 2 (id=3348): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000e80)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x0, 0x5a, 0x0, 0x2}, 0x28) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010405000000000000000000000000000a00020000a200000600000000"], 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@gettfilter={0x5c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x9, 0xffe0}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000414010029bf7000ffdbff2508000180"], 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x5) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001a"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendto$inet(0xffffffffffffffff, &(0x7f0000001740)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001900)='westwood', 0x8) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001940), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x3, 0x6, &(0x7f0000001a40)=ANY=[@ANYBLOB="050000000000000073112f00000000008510000002000000720000007600000095000000000000009500a50500"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000001ac0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 3.277039575s ago: executing program 1 (id=3349): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140c, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000300)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.147320887s ago: executing program 4 (id=3350): r0 = socket$inet6(0xa, 0x80000, 0x1c7) connect$inet6(r0, &(0x7f0000000e80)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="84", 0x1}, {&(0x7f0000000f80)="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", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) pipe(&(0x7f0000000000)) socket$inet6(0xa, 0x80000, 0x1c7) (async) connect$inet6(r0, &(0x7f0000000e80)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async) sendmsg(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="84", 0x1}, {&(0x7f0000000f80)="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", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) (async) pipe(&(0x7f0000000000)) (async) 3.111144151s ago: executing program 2 (id=3351): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d6ff169010011fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101009078ee373935ef0f8da10b47000507b0025a9001"], 0x128) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000580)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000003c0)={r2, &(0x7f0000000080)='):\'{/\x00', 0xa0182, &(0x7f00000000c0)={@align=0xa, {0x100, 0x7fff, 0x45f, 0x8000000000000001}}, 0xff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000380)=0x3}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'ip_vti0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) (async) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d6ff169010011fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101009078ee373935ef0f8da10b47000507b0025a9001"], 0x128) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000580)='cgroup.freeze\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000003c0)={r2, &(0x7f0000000080)='):\'{/\x00', 0xa0182, &(0x7f00000000c0)={@align=0xa, {0x100, 0x7fff, 0x45f, 0x8000000000000001}}, 0xff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000380)=0x3}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'ip_vti0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 2.928602806s ago: executing program 4 (id=3352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x150, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x11c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb860}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x462c0618}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xac71}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7055}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x506d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3e}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc4af}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x221}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x801}, 0x20000c08) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000310009002abd700000000000040000002c001180e796bd6dd42541affae91169c6e278e03f5af8cb5fbde186986f77bec4ba7c0f34743b0c36c87c2f"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000001000000183a0035030000000000000000000000950000000000000060505db5fa44b120a477d616d97d3f84d470fcafb94747c7251978fabbc04ca60398f6c9b4b62dc60fd10a602a75bdc62e0e4384870316750269799b5fccd9c03a4a36bfb1272783715e29620e1238e6d7eb5ff8117e8b2269ca6671dcb96af7ec571cc8bd6b6f3490b4c76ddf5a388fcbc52df3510c96f0776c125db3f1b68cc53134990ed30c7dea2e16569c8624ea8201ba1c0091a9fd00"/202], &(0x7f0000000700)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.92789964s ago: executing program 1 (id=3353): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000140)="07000300010000", 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write(r0, &(0x7f0000000140)="07000300010000", 0x7) (async) 2.894541835s ago: executing program 2 (id=3354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x24, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe587}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x4, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ec0)={r1}, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000f00)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001080)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r0, 0x0, 0xe, 0x0, &(0x7f0000001180)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004001000180095000000400000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'bond0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b70000000000000095"], &(0x7f0000000a40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r8, 0x0, 0xe, 0x0, &(0x7f0000000b00)="001122334455667788ae8aa0c100", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000440)=0x3da, 0x4) sendto$packet(r6, &(0x7f0000000700)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000780)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000300)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x9, &(0x7f0000000380)=ANY=[@ANYRESDEC=r9, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'ipvlan0\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r11, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r12}, 0xc) r13 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r13, 0x0, 0xf, &(0x7f0000000000)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) 2.86259468s ago: executing program 3 (id=3355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x116, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x28000600) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000002e80)=@assoc_value, &(0x7f0000002ec0)=0xfffffffffffffdae) connect$bt_l2cap(r2, &(0x7f0000002f00)={0x1f, 0x0, @any, 0x3}, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x18, 0x0, 0x0, &(0x7f0000003000)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001c00010029b57000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="11e54735baecefcbbd01f30cd0ff3a22648e4b28a01b13a94201194b61ea43fe1e4699c0ae06adfe85165f2802c26acb3440af782e756c6b1b6410654fea54e592fd71dd15349870e30a6f677f104c82b3a3dcbc031b5ba7f2d9c9a08001843dfd34f5b53cf21e8ca8607574ba4242318257fd2ac90f918f53c3f3497ee866696dd9153bde701959f022e496b81ce322d810b4c4c4a09d468fb2c9130489fd66e9730b6fd319c447c10377ae00dfbf535c57a8be868266eb95e7e1b44e8c92db4ed0e7ef2302f9a0456985d92690c01d14e9da3bd0d06eb8132c08e6be6ca166768bd3c21c2d070c6a9f"], 0x1c}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003040)={r3, 0x0, 0x0, 0x0, &(0x7f00000030c0), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x7, 0x17, &(0x7f0000003300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003400)=@generic={&(0x7f0000003440)='./file0\x00', r5}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f0000003480)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r7, &(0x7f00000034c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, 0x0, 0x0) writev(r2, &(0x7f0000003500)=[{&(0x7f0000003540)="3d7edcfae8b253779261304e596fde5f5e16132cafa93dad2d9b950786ed8ddfd26d29f2327fa1b33fc52809c680eea91f25f8714cccf113c46ab0a423ad850caa1960931d2f5134283d853ac41f6a36739705ef9a507689426e1675d19167928c88527e48d0a4fca074dc44aab5a95318b5c689e540528accdfdfafbedbaff4b50a88012eb3283dabe28e05096620bccfeffa78fe3f598f447732afb0b8f8ee51c855156b60773b1f8f888092774fc2fea560ee62622fe67b13332ceaba038e9ec1582495f6db81babafd17c93f8ea3fd8729336cd228b7ba4b483ad9c2253a0a1ce755438f1b449024a95f640fa253e5f1e962776bc0d140fe2e36d2c8e84eaebb08d3aa3920673d777425e307ba2c1c9e1e0a7e68ede997d445897b859db5c6ca622fab5fa742d70130f3e823906506e22d964735041c07d607e28721c213055eef3c16d730d0da820aad2cbe8bc32e79c66a2686c268166f868b9cf48713802d0ce7403f5bf56e6743d724f0758d0717eb48b15e376bae3b6695a2c8ad94e44b5ac6d5003c3feff5e3cee2ebd64597e2eecf3c5cf08838e0fa8c2571c2be80990e17d67225ec7b9d10f2e1bded0591fd5a85e74610a9db8daf3215fb56af632b567b7beb6af86e2f53d76dfa2f3edd4575a1353b99d6d1e2c357ff7602042fcb96bb1dc4912b09d8336df256ccc4969b95e84c82d6c13d7ba8ddcaa788cc103d11d1f33f6fc847fc41e05109d3dee2f40045854137251cd6774910f65cfa4f38e72b10a777d2728bb4060e6f25945f1434b303909c1f005c394c801b6ad468511039c8f733c734f0afa90d6770624c52d82246e0147b596f14ca41ef13c8410b74af1c7afe54c947bde0fa7b53e6299359bc917dec8991046fcac4b1cf47fa30091dc852117630d6452c159172cdbaddbda793c61401a9a099067b67f7805ff8760bff8d9019c5be1abfab90a735558588a9684cfb685b9212e1834950798de47ba3558c43b11db7d15ae7bf4e6f642ab53cbccd7637d84edf11b21cefe5496647a3545d7944b95fe7ccbe2033d2f4294394fa7654d5a33b88e426eb441d8cebb00149c3bdf550c5fc3a54196a8772702c74332225ebdb7b292b9a549772a03b19963c61c2f1e019ee40899e995a82796c54fd385e321ebbc68dc833a92fb1466a77431ed42c43aabc9e5b226f4fc652b488a588c974c562278172f5b51e1e5426825b664751f2ce95f7d1fc1b2f676016f2170a6395290fd0386697311ab08cc2041c38c0c48ac2f857ee5417d62a28c75153cd6e184d37b9cd4ed8a5772ca919d47fc496ee83b44dc6c4062b26fa26629c92c1f5a7884c49b7b433a32863626dc8e8c3426acf9e6937d1f8d65791782c2c018df7f1ed834d7422955332bbbff18a3cf90d662cbb1cc2fc896286c7383583ff45e6b2", 0xfdef}], 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r9 = socket$inet(0x2, 0x3, 0xd) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x3, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000d40], 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, 0x2a8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000f4ff00"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000008000000000008000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1013, &(0x7f0000003940)=""/4115, 0x0, 0xc}, 0x94) 2.652609626s ago: executing program 1 (id=3356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x18, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100, @val=0x80}}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) r2 = epoll_create1(0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79e63}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000500)={0xf0000003}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000040000004804000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000ead9b4c911ba7c3b32f0b15080ba18676d3e319950db31090042009873a2dc0d1dccb3dd824e22b5115bab09f4d3dde096a07b28a61d6f6432ad9ae76d07625f722a24205379315c2ddf8f502d"], 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x40040) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, 0x0, &(0x7f00000001c0)=""/193}, 0x20) r8 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 2.58494592s ago: executing program 4 (id=3357): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f, 0x401, 0x1, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000700), 0x56) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000740)={&(0x7f0000000780)=@in6={0xa, 0x4e20, 0x300, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)=""/78, 0x4e}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 1.492423606s ago: executing program 1 (id=3358): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x54, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x18, 0x0, 0x0, [0x1, 0x63a3, 0x0]}, @generic={0x82, 0xe, "ffeb39a4359076fab79f2492"}, @timestamp_prespec={0x44, 0x24, 0x1b, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x22}}, {@private=0xa010101, 0x6}]}]}}}], 0x58}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0x7}, 0x6) write(r2, &(0x7f00000000c0)="4c00000011000005002000"/23, 0x17) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bind$bt_hci(r3, &(0x7f0000000480), 0x6) 1.438544828s ago: executing program 2 (id=3359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb53000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x85181a9a98afeb75}, 0x0) (async) r4 = socket(0x2d, 0x2, 0x0) setsockopt(r4, 0x11d, 0x1, &(0x7f00000002c0)="01000000", 0x4) (async) sendmsg(r4, &(0x7f0000000300)={&(0x7f0000000340)=@generic={0x2d, "000000001b0008011800020000000400860000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff00"}, 0x80, 0x0}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f00000004c0)=0x8, 0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) (async) epoll_create1(0x80000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB="08000000000000000000428b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000640)={0xb, 0x81, 0x5, 0x2, 0x4, 0x8}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge_slave_0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x2000800) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xd, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="14000000000000000100", @ANYRES32, @ANYRES32=r10, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x90, 0x8800}}], 0x1, 0x4) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 1.340020689s ago: executing program 4 (id=3360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000200), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="580000006900ba85669fccc5fb63ad4291e9be7dc4bf10024ff8c628bd7000fedbdf259d4f752a32a592a1080001000000000008000100000000000800010000000000080001000200000008000100020000000800010001"], 0x58}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000c80)={@val={0x0, 0xfbfb}, @val={0x1, 0x4, 0x1ff, 0x1000, 0x8, 0x6}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="ad6a256fd93b", @remote, @random="2c8055c1fba7", @rand_addr=0x64010100}}, 0x2a) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r2, 0x301}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d40)={0xd, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x8, 0xd, 0x6, 0x5, 0xb}, @alu={0x7, 0x1, 0x3, 0xa, 0x5, 0x10, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000740)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000780)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0), 0x0) close(r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001280)=@newtaction={0xa5c, 0x30, 0x1, 0x0, 0x0, {}, [{0xa48, 0x1, [@m_police={0x498, 0x1e, 0x0, 0x0, {{0xb}, {0x424, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xf, 0x5343, 0x0, 0x541756c3, 0x1, 0x80000001, 0x8, 0x0, 0x400, 0xa1, 0x8, 0x3, 0x0, 0x0, 0x2, 0x780f, 0x2, 0x7, 0x6, 0x6, 0x0, 0x0, 0x9, 0x80000001, 0x3, 0x3, 0x7, 0x1, 0x0, 0x68, 0xb634, 0x7fff, 0x2, 0x0, 0x5, 0x0, 0xbcd2, 0x8, 0x9, 0x0, 0x61f, 0xff, 0xf14, 0x80000000, 0x6, 0x4dd9, 0x4, 0x4, 0xc, 0x2, 0x3, 0x80, 0x9, 0x45, 0x1ff0, 0xbc, 0x3, 0x5, 0x10001, 0x8000, 0x0, 0xfffffc00, 0x5, 0x8001, 0xfa, 0x1, 0xfffff801, 0x5, 0x5, 0x9, 0xf37c, 0x131, 0x1, 0xd36c, 0x692, 0x8, 0x0, 0xe2ff, 0x3, 0x1, 0x7a4, 0x7, 0x63, 0x8, 0xfffffff5, 0x2, 0x7e, 0x2, 0x1, 0x1, 0x188a4d6d, 0x0, 0xe, 0x0, 0x0, 0x5840, 0xe7c6b1, 0x4, 0x7, 0x7, 0x86de, 0x9, 0xffffffff, 0x204000, 0x3, 0x3, 0x38d3, 0x9, 0x9, 0x5, 0x800, 0x5, 0x2, 0x200, 0x6f1, 0x6, 0x5e, 0x4, 0x1, 0x1, 0x1, 0x7, 0x1f3fc00, 0x3, 0xf4d1, 0x0, 0x5, 0x10, 0x3, 0x7ff, 0x4, 0xc, 0x8, 0x6, 0x0, 0x8, 0x0, 0x20fa, 0x5, 0x400, 0x31c1, 0x4, 0x8, 0xd357, 0x5, 0x0, 0x4, 0x5, 0x4, 0x4, 0x4, 0x200, 0x8001, 0x10, 0x31, 0x7, 0x2, 0x5, 0x6, 0x2, 0x3ff, 0xf65, 0x0, 0xff, 0x4, 0x7fff, 0x4bb62602, 0x80000000, 0x919, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x3, 0x8, 0xe, 0x3, 0xe, 0x7, 0x3, 0x4, 0xff5a, 0x51d6, 0x9, 0xf82f, 0x3, 0x9, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x6, 0x6, 0x10001, 0x6, 0xff, 0x2, 0x10001, 0x200, 0x2, 0xe0cc, 0x1, 0x3, 0x2, 0x1, 0x401, 0x2, 0x101, 0x3, 0x400, 0xfffffffb, 0x5, 0x7, 0x3, 0x81, 0x7, 0x4, 0x3, 0x10001, 0x380000, 0x1ff, 0x8d8, 0x2, 0x2, 0x8, 0x7, 0x5, 0xc1, 0x8, 0x5, 0xffc00000, 0x6c58, 0x7, 0xdbe4, 0x6, 0x6, 0x5, 0x4, 0xfffffae3, 0x9, 0xdc, 0x8db, 0x4, 0xfffffa09, 0x0, 0x0, 0x2, 0xff, 0x4, 0x60000000, 0x10001, 0x3]}]]}, {0x4a, 0x6, "45d67faba5afc6dd606a1fb66f2a697df773a08702e41491a728b3784fa58833c4ac22bb19b11d3d78aace2d4dfbeda1e44275943fa6e7549c503adbdc2601556878e9509e20"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x10c, 0x1e, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x6, 0x2, 0x1}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x3, 0xa1d, 0x4}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8000, 0x20000003, 0x4, 0xb6e}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x10000, 0x5, 0x5, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x9, 0x20000000, 0xe, 0x8}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x2, 0xe, 0x1}, 0x3}}]}, {0x34, 0x6, "94d988129e4097fc844c9c52145f89133b9761f2100c18c1a71153eca81e23a660d1ffde73720e388f8eaf83242f3752"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x74, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x3d, 0x6, "8d8bfae9fa91e959d32bab20a997a5cdab2692f301d27051937528eb9d8178549724e0159c060689609246deae0207f50e95594f5037b72f84"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x70, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe3d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x29, 0x6, "0c56e7e40c282e9ad205431e3f664d7051d834e169e45ddfb2f05b373c50fad4fcbb74e13b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x180, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x900, 0x4fe2, 0x8, 0xd, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7b21}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc3b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x101, 0x3, 0x0, 0xb}}]}, {0xf2, 0x6, "ffc7233df1228c2b4beceed0ee9ba66ac1a0a7b3081e7de6a4fa3e2f339084e330698bf5f8f828bb712177156d2bf2fff2f2269e4f00677308c8ef052084634cf28725001e0c2f9d505e4fa0a412bf18c371c05640c407881e72aa5959c3bc3228ec7a60ba15801a04e87d85e73ccab9b9bbe02d921012ad20c476a7fd7dbe1fa850948228098cc8b8f5a30c342df3ece36eae8885d8ae4a299b45bc12b8d233d9d2832f3a26cba4006fb68ecbed133cb2fbdc4bc163e348ed676b7baecd1aad1fde3628c83c83072d712beb0e04b68b0ba01bd7a7b5f47745f1de1d0b88e11d5c5d9c7ad6612074797b5a2049bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x1d8, 0xa, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfff, 0x6, 0x80000, 0x4}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xa0, 0x10000000, 0x7, 0x6}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x6, 0x4, 0x8}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb32, 0x40, 0x7, 0x400, 0x853}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7b07, 0x9, 0x10000005, 0x5}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x4, 0x7, 0x0, 0xff}, 0x1f}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x64, 0x1d, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff2}}]}, {0x27, 0x6, "c06878d51e9cb6ead2ea3621c1acb0b2081a99f7806ddba845b5ad113cd3a7ecaea0c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}]}]}, 0xa5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b00)={r6, r6, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000000001497c5a500140002"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004005100000095"], &(0x7f0000000c40)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000cc0)={'veth0_to_bond\x00', @ifru_hwaddr=@remote}) sendmsg$nl_xfrm(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@local, 0x104d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x5, 0x0, 0x800, 0xe91, 0xffffffff00000001, 0x10000000, 0x80000001, 0x543}, {0x1000000000004, 0x7fffffffffffffff, 0x100, 0xc}, {}, 0x70bd26, 0x3505, 0xa, 0x4, 0x40, 0x54}, [@algo_aead={0x60}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 123.618045ms ago: executing program 1 (id=3361): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000380)=ANY=[@ANYBLOB="6eff0000010405000000000000000600000a000200000000020010000000ac8c0b00c2288ebf13b604898c1b76bd5041dc7e5d7785373e615f090000000000190000000000004012a6a171be6356713c856d72675aa9769f50aef0c97f8e3c832925f1a88067bef581e438a386c16a77d5573067953b376dbe0e1710de3aab86275a502bdbbbc16de06cd2b2384bc29422dbfb999bf4"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@gettfilter={0x5c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x9, 0xffe0}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001240), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001280)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) sendto$inet(r0, &(0x7f0000000980)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000b40)='westwood', 0x8) recvfrom$inet(r0, &(0x7f0000000b80), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r0, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000073112f00000000008510000002000000720000007600000095000000000000009500a50500"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x14, 0x3b, 0x100, 0x70bd26, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 1.035625ms ago: executing program 3 (id=3362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000300)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async, rerun: 64) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x320, 0x12, 0x8, 0x70bd26, 0x25dfdbfd, {0x18, 0x74, 0x7, 0x80, {0x4e20, 0x4e23, [0x8, 0x1ff, 0x1, 0xffffffff], [0x1, 0x8, 0xfffffff8, 0xc], 0x0, [0xe, 0x4000]}, 0x5, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "102a35870a30e58ea1f1e6a1e89dac7b9a18f3f3de3a138848c2587ba1226f96e618049f7023962048ef7d77f0d7ae180b87e38ea9665a329f84e08c59814974d07839da28"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "84e709a4a52a4e14c4b0effb3f34707a78a27b28c4141c3219b1b2816565f129c80d7a1830b84520e59ccd9d8a04066503284f8733b910cee675ef3c01cfe56c8ad0a5aeaea13eadb79e6f4d493ae92362fa6aa8d0a0c6a289e9a9862dc038edc9a97fb6bef7624be8fc31f96b21e08d44efa32a19e187603ee26cb6df91f908be4f20c7026c106033b8eb27ce838f40ae3cf4d1eb1ac3d41840140ade4114927d41c16d2fdbd715687094e99995d6f5b4b84b6d6721a57f8fd7989d21cb35ae86cb1d3c78f37330032caa744fcc6dc33a28d604d01444d758150e8856be3d25311095df"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "abbc3c68d473897e56591a442f02e8935bdf2ea9bf96aabfbf4eae63f95145c73feb8fe999d9993aa6242ae9555a637db06a20261166c6b8b9ff5d9739b40220f3abd9eec69ab12711e52adb6d80299f551c31e1952057043b811e2b49191fca61f7b4e3bd2a53be4cc0"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "acfcd775c66d7d27eb0c98e50a1c18dcb875ba68b4b63c27d73294dceb5fe88535fb5ee3032cf4393f58bfadaef335c87b108ba6172bfc9e09cffb125fdd109ff1a87108f981ea4bb0953310"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "a3149678147199bdb1a14a17e99028bcc6a5e2d0a230c732fd7f29d4a500ece643baf8e1b01916762ddbd0b491a3e4d9a944f3d09257d269499e6ee902f14f7c297c427def34eb7aeed6c2d3afaf58ad1e727e61"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "9b5c23648dd7f48c52b64b1403045fd999805b75adcd8d81d03ac237e721be42dc49389e9139b2e27e8d07e92750e5769cd92425b713f3c86b3d8a88d529f0b2befc2990f987bcb5c22179d84daf5296652341139e49d9fdc841125d63f2eba8c6b8968647eb3047ef3f0ff850b021b51824cdcb5d1ddbab927cc3b64007ebdafdd0"}]}, 0x320}, 0x1, 0x0, 0x0, 0x240000d4}, 0x20004000) 0s ago: executing program 4 (id=3363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x2, 0x30, &(0x7f0000000280)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000b00)=0x10) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r1, 0x84, 0x80, &(0x7f0000000b40)={r2, 0x6}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000b80)=0xa, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x3, 0x8, 0x8, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x4, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', r4, 0x80, 0x80, 0x2, 0x6, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x64, 0x0, 0x23, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x4, 0xfd90, &(0x7f00000008c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x366, 0x10, &(0x7f0000000a00), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@map=r6, r5, 0x26}, 0x10) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="a5", 0x1}], 0x1}}], 0x1, 0x20048040) kernel console output (not intermixed with test programs): 3.167824][T15695] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2373'. [ 363.167879][T15695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2373'. [ 363.188059][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 363.309437][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2376'. [ 363.311908][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2376'. [ 363.358453][T15695] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.788921][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 364.064760][T15738] geneve3: entered promiscuous mode [ 364.077887][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 60848 - 0 [ 364.077933][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 60848 - 0 [ 364.077963][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 60848 - 0 [ 364.078206][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 60848 - 0 [ 364.269300][T15749] IPVS: length: 36 != 24 [ 364.733309][T15775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2395'. [ 364.756780][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'. [ 364.995232][T15789] syzkaller1: entered promiscuous mode [ 364.995256][T15789] syzkaller1: entered allmulticast mode [ 365.958788][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 365.963386][T15839] ip_tables: iptables: counters copy to user failed while replacing table [ 366.543279][T15852] netlink: 'syz.3.2409': attribute type 8 has an invalid length. [ 366.906181][T15874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 367.083779][T15882] __nla_validate_parse: 1 callbacks suppressed [ 367.083800][T15882] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2416'. [ 367.141984][T15887] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 367.234086][T15887] bond14: entered promiscuous mode [ 367.260385][T15887] 8021q: adding VLAN 0 to HW filter on device bond14 [ 367.310186][T15887] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 367.310664][T15896] 8021q: adding VLAN 0 to HW filter on device bond14 [ 367.312596][T15896] bond14: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 367.313090][T15896] bond14: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 367.345913][T15896] bond14: (slave ip6gre4): making interface the new active one [ 367.345959][T15896] ip6gre4: entered promiscuous mode [ 367.366976][T15896] bond14: (slave ip6gre4): Enslaving as an active interface with an up link [ 367.604092][T15895] tipc: Enabled bearer , priority 0 [ 367.724073][T15895] tipc: Resetting bearer [ 367.787034][ T62] tipc: Disabling bearer [ 367.941946][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 367.946720][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 368.953499][T15954] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 368.953522][T15954] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2432'. [ 368.960438][T15950] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 368.960460][T15950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2430'. [ 368.977900][T15950] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 368.977923][T15950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2430'. [ 368.980615][T15950] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 368.980639][T15950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2430'. [ 368.985047][T15950] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 368.985067][T15950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2430'. [ 368.986579][T15955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.992178][T15950] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 368.992199][T15950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2430'. [ 368.995271][T15950] netlink: 'syz.1.2430': attribute type 4 has an invalid length. [ 368.995290][T15950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2430'. [ 369.134621][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.134977][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.137086][T15958] xt_IDLETIMER: timeout value is zero [ 369.144541][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.144908][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.159977][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.160704][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.161057][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.166962][T15965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.293870][T15963] nbd: illegal input index -2130444284 [ 369.536154][T15973] udevd[15973]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 369.542426][T15973] udevd[15973]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 369.885757][T15984] ip6tnl2: entered promiscuous mode [ 369.885782][T15984] ip6tnl2: entered allmulticast mode [ 369.948588][T15986] bridge0: port 4(gretap0) entered blocking state [ 369.948832][T15986] bridge0: port 4(gretap0) entered listening state [ 369.949115][T15986] bridge0: port 3(syz_tun) entered blocking state [ 369.949242][T15986] bridge0: port 3(syz_tun) entered listening state [ 369.955800][T15986] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.082315][T15986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.082340][T15986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.144876][ T6575] bridge0: port 1(5¬0Ù) entered blocking state [ 370.144962][ T6575] bridge0: port 1(5¬0Ù) entered listening state [ 370.153701][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.153819][ T6575] bridge0: port 2(bridge_slave_1) entered listening state [ 371.146039][T16015] bond14: entered promiscuous mode [ 371.152390][T16015] 8021q: adding VLAN 0 to HW filter on device bond14 [ 371.682705][T16058] validate_nla: 28 callbacks suppressed [ 371.682725][T16058] netlink: 'syz.2.2457': attribute type 10 has an invalid length. [ 371.842882][T16070] Bluetooth: hci0: unsupported parameter 5134 [ 371.842900][T16070] Bluetooth: hci0: unsupported parameter 8192 [ 371.842906][T16070] Bluetooth: hci0: unsupported parameter 5134 [ 371.842912][T16070] Bluetooth: hci0: unsupported parameter 8192 [ 372.401428][T16088] net_ratelimit: 59 callbacks suppressed [ 372.401452][T16088] ip_tables: iptables: counters copy to user failed while replacing table [ 372.600934][T16098] __nla_validate_parse: 32 callbacks suppressed [ 372.600957][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2467'. [ 372.650733][T16098] erspan0: entered promiscuous mode [ 372.666166][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 373.143274][T16124] xt_hashlimit: size too large, truncated to 1048576 [ 373.194206][T16128] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2471'. [ 373.194327][T16128] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» [ 373.256430][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 373.411274][T16128] 1ªX¹¦Dö»: entered allmulticast mode [ 373.497103][ T30] audit: type=1800 audit(1794314154.652:77): pid=16138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2476" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2337 res=0 errno=-22 [ 373.531333][ T30] audit: type=1800 audit(1794314154.692:78): pid=16145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2476" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2337 res=0 errno=-22 [ 373.933631][T16158] netlink: 'syz.0.2482': attribute type 2 has an invalid length. [ 374.021977][T16158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2482'. [ 374.113081][T16166] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 374.213564][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 374.824098][T16213] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2492'. [ 374.999147][T16228] netlink: 'syz.1.2495': attribute type 11 has an invalid length. [ 375.094270][T16232] syzkaller0: entered promiscuous mode [ 375.094292][T16232] syzkaller0: entered allmulticast mode [ 375.302808][T16241] IPVS: Error connecting to the multicast addr [ 375.319789][T16241] netlink: 'syz.3.2497': attribute type 12 has an invalid length. [ 375.342714][T16242] batman_adv: batadv0: Adding interface: syzkaller0 [ 375.342735][T16242] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.342775][T16242] batman_adv: batadv0: Interface activated: syzkaller0 [ 375.686308][T16253] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 376.204120][T16242] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 376.253748][T16242] batman_adv: batadv0: Removing interface: syzkaller0 [ 376.395967][T16261] @ÿ: renamed from veth0_vlan [ 376.607866][T16276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.148941][T16299] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2515'. [ 377.323609][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'. [ 377.522005][T16319] veth1_macvtap: left promiscuous mode [ 377.555073][T16321] syzkaller1: entered promiscuous mode [ 377.555096][T16321] syzkaller1: entered allmulticast mode [ 377.574267][T16321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2523'. [ 377.624862][T16321] vxcan1: entered promiscuous mode [ 378.124643][ T30] audit: type=1800 audit(1794314159.282:79): pid=16345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2525" name="blkio.bfq.group_wait_time" dev="tmpfs" ino=2736 res=0 errno=-22 [ 378.408404][T16356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 378.515023][T16361] tipc: Resetting bearer [ 378.515435][T16361] tipc: Resetting bearer [ 378.548911][T16361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 378.606779][T16361] netlink: 'syz.3.2530': attribute type 1 has an invalid length. [ 378.690937][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.719433][T16365] netlink: 'syz.2.2532': attribute type 4 has an invalid length. [ 378.720569][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 378.720634][T16365] netlink: 'syz.2.2532': attribute type 4 has an invalid length. [ 379.341391][T16382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.345919][T16382] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 379.699505][T16410] netlink: set zone limit has 4 unknown bytes [ 379.718486][T16412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2548'. [ 380.032176][T16429] x_tables: duplicate underflow at hook 1 [ 380.055214][T16429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2554'. [ 380.055312][T16429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.055324][T16429] IPv6: NLM_F_CREATE should be set when creating new route [ 380.103457][T16433] netlink: 'syz.3.2557': attribute type 1 has an invalid length. [ 380.103479][T16433] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.2557'. [ 380.103493][T16433] netlink: 'syz.3.2557': attribute type 1 has an invalid length. [ 380.201240][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 380.201287][T16440] netlink: 'syz.0.2558': attribute type 1 has an invalid length. [ 380.311628][T16447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2560'. [ 380.359466][T16449] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2561'. [ 380.359498][T16449] openvswitch: netlink: Missing key (keys=40, expected=100) [ 380.396480][T16447] netlink: 'syz.0.2560': attribute type 21 has an invalid length. [ 380.396516][T16447] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2560'. [ 380.396635][T16447] netlink: 'syz.0.2560': attribute type 4 has an invalid length. [ 380.396655][T16447] netlink: 'syz.0.2560': attribute type 3 has an invalid length. [ 380.396665][T16447] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2560'. [ 380.476140][T16450] syzkaller1: entered promiscuous mode [ 380.476166][T16450] syzkaller1: entered allmulticast mode [ 380.618310][T16458] netlink: 1944 bytes leftover after parsing attributes in process `syz.1.2562'. [ 381.053057][T16479] Ù: renamed from bond_slave_1 (while UP) [ 381.446704][ T30] audit: type=1800 audit(1794314162.602:80): pid=16474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2564" name="memory.events" dev="tmpfs" ino=2405 res=0 errno=-22 [ 381.504788][T16502] FAULT_INJECTION: forcing a failure. [ 381.504788][T16502] name failslab, interval 1, probability 0, space 0, times 0 [ 381.504996][T16502] CPU: 1 UID: 0 PID: 16502 Comm: syz.1.2576 Not tainted syzkaller #0 PREEMPT(full) [ 381.505050][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 381.505134][T16502] Call Trace: [ 381.505148][T16502] [ 381.505155][T16502] dump_stack_lvl+0xe8/0x150 [ 381.505179][T16502] should_fail_ex+0x3eb/0x540 [ 381.505195][T16502] should_failslab+0xa8/0x100 [ 381.505205][T16502] ? skb_clone+0x212/0x3a0 [ 381.505218][T16502] kmem_cache_alloc_noprof+0x9c/0x600 [ 381.505232][T16502] ? skb_clone+0x212/0x3a0 [ 381.505247][T16502] skb_clone+0x212/0x3a0 [ 381.505260][T16502] __netlink_deliver_tap+0x355/0x6e0 [ 381.505282][T16502] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.505297][T16502] netlink_deliver_tap+0x19c/0x1b0 [ 381.505312][T16502] netlink_unicast+0x8c1/0xa80 [ 381.505335][T16502] netlink_sendmsg+0x7f0/0xb20 [ 381.505347][T16502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.505359][T16502] ? aa_sock_msg_perm+0x144/0x210 [ 381.505374][T16502] ? apparmor_socket_sendmsg+0x98/0x360 [ 381.505502][T16502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.505541][T16502] sock_sendmsg_nosec+0x14e/0x190 [ 381.505569][T16502] __sys_sendto+0x408/0x5a0 [ 381.505589][T16502] ? __pfx___sys_sendto+0x10/0x10 [ 381.505625][T16502] ? do_user_addr_fault+0xd3f/0x1480 [ 381.505651][T16502] __x64_sys_sendto+0xde/0x100 [ 381.505667][T16502] do_syscall_64+0x166/0x520 [ 381.505686][T16502] ? trace_irq_disable+0x3b/0x140 [ 381.505706][T16502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.505722][T16502] ? clear_bhb_loop+0x70/0xc0 [ 381.505743][T16502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.505770][T16502] RIP: 0033:0x7f1e1a76974e [ 381.505787][T16502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.505803][T16502] RSP: 002b:00007f1e189ece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 381.505815][T16502] RAX: ffffffffffffffda RBX: 00007f1e189ee6c0 RCX: 00007f1e1a76974e [ 381.505822][T16502] RDX: 000000000000001c RSI: 00007f1e189ed000 RDI: 0000000000000003 [ 381.505833][T16502] RBP: 0000000000000000 R08: 00007f1e189ecf04 R09: 000000000000000c [ 381.505839][T16502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 381.505846][T16502] R13: 00007f1e189ecf58 R14: 00007f1e189ed000 R15: 0000000000000000 [ 381.505865][T16502] [ 381.945790][T16508] syzkaller0: left promiscuous mode [ 381.945827][T16508] syzkaller0: left allmulticast mode [ 382.029490][T16510] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 382.030492][T16510] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 382.044968][T16510] netlink: 'syz.2.2579': attribute type 2 has an invalid length. [ 382.372677][T16526] –: renamed from virt_wifi0 [ 382.579708][T16540] FAULT_INJECTION: forcing a failure. [ 382.579708][T16540] name failslab, interval 1, probability 0, space 0, times 0 [ 382.579737][T16540] CPU: 1 UID: 0 PID: 16540 Comm: syz.3.2587 Not tainted syzkaller #0 PREEMPT(full) [ 382.579757][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 382.579785][T16540] Call Trace: [ 382.579792][T16540] [ 382.579803][T16540] dump_stack_lvl+0xe8/0x150 [ 382.579844][T16540] should_fail_ex+0x3eb/0x540 [ 382.579872][T16540] should_failslab+0xa8/0x100 [ 382.579892][T16540] __kmalloc_noprof+0xf9/0x710 [ 382.579915][T16540] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 382.579937][T16540] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 382.579967][T16540] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 382.579998][T16540] genl_family_rcv_msg_doit+0xda/0x340 [ 382.580028][T16540] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.580054][T16540] ? __pfx_genl_get_cmd+0x10/0x10 [ 382.580072][T16540] ? __dev_queue_xmit+0x29b/0x3920 [ 382.580112][T16540] genl_rcv_msg+0x614/0x7a0 [ 382.580140][T16540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.580159][T16540] ? __pfx_ctrl_getfamily+0x10/0x10 [ 382.580192][T16540] netlink_rcv_skb+0x226/0x4a0 [ 382.580219][T16540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.580242][T16540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.580286][T16540] ? down_read+0x2b9/0x320 [ 382.580315][T16540] genl_rcv+0x28/0x40 [ 382.580333][T16540] netlink_unicast+0x8ef/0xa80 [ 382.580377][T16540] netlink_sendmsg+0x7f0/0xb20 [ 382.580402][T16540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.580420][T16540] ? aa_sock_msg_perm+0x144/0x210 [ 382.580443][T16540] ? apparmor_socket_sendmsg+0x98/0x360 [ 382.580470][T16540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.580487][T16540] sock_sendmsg_nosec+0x14e/0x190 [ 382.580516][T16540] __sys_sendto+0x408/0x5a0 [ 382.580541][T16540] ? __pfx___sys_sendto+0x10/0x10 [ 382.580592][T16540] ? do_user_addr_fault+0xd3f/0x1480 [ 382.580620][T16540] __x64_sys_sendto+0xde/0x100 [ 382.580652][T16540] do_syscall_64+0x166/0x520 [ 382.580678][T16540] ? trace_irq_disable+0x3b/0x140 [ 382.580701][T16540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.580720][T16540] ? clear_bhb_loop+0x70/0xc0 [ 382.580742][T16540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.580760][T16540] RIP: 0033:0x7f623336974e [ 382.580779][T16540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.580793][T16540] RSP: 002b:00007f623417de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 382.580813][T16540] RAX: ffffffffffffffda RBX: 00007f623417f6c0 RCX: 00007f623336974e [ 382.580832][T16540] RDX: 000000000000001c RSI: 00007f623417e000 RDI: 0000000000000003 [ 382.580843][T16540] RBP: 0000000000000000 R08: 00007f623417df04 R09: 000000000000000c [ 382.580854][T16540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 382.580865][T16540] R13: 00007f623417df58 R14: 00007f623417e000 R15: 0000000000000000 [ 382.580898][T16540] [ 383.368405][T16570] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 383.641101][T16586] openvswitch: netlink: Unknown key attributes 2 [ 383.709832][T16586] openvswitch: netlink: Unknown key attributes 2 [ 383.746424][T16587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.955860][T16615] sctp: [Deprecated]: syz.2.2607 (pid 16615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.955860][T16615] Use struct sctp_sack_info instead [ 383.983036][T16615] __nla_validate_parse: 19 callbacks suppressed [ 383.983061][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2607'. [ 384.186968][T16630] tipc: Failed to remove unknown binding: 66,0,2/9480874:40814283/40814284 [ 384.197714][T16630] tipc: Failed to remove unknown binding: 66,0,2/9480874:40814283/40814284 [ 384.348357][T16636] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2614'. [ 384.528163][T16651] netlink: 'syz.2.2617': attribute type 11 has an invalid length. [ 384.545059][T16652] syzkaller1: entered promiscuous mode [ 384.545080][T16652] syzkaller1: entered allmulticast mode [ 384.809660][T16663] validate_nla: 1 callbacks suppressed [ 384.809680][T16663] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 384.929873][T16663] 8021q: adding VLAN 0 to HW filter on device bond6 [ 385.037065][T16667] bond13: entered allmulticast mode [ 385.087452][ C1] bridge0: port 3(syz_tun) entered learning state [ 385.087684][ C1] bridge0: port 4(gretap0) entered learning state [ 385.737420][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 385.737575][ C0] bridge0: port 1(5¬0Ù) entered learning state [ 394.047573][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.447361][ C1] bridge0: port 4(gretap0) entered forwarding state [ 400.447385][ C1] bridge0: topology change detected, propagating [ 400.447691][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 400.447706][ C1] bridge0: topology change detected, propagating [ 401.097411][ C0] bridge0: port 1(5¬0Ù) entered forwarding state [ 401.097435][ C0] bridge0: topology change detected, propagating [ 401.097601][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.097610][ C0] bridge0: topology change detected, propagating [ 413.964353][T16741] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 413.966061][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2640'. [ 414.024526][T16741] bond15: entered promiscuous mode [ 414.024860][T16741] 8021q: adding VLAN 0 to HW filter on device bond15 [ 414.049183][T16742] 8021q: adding VLAN 0 to HW filter on device bond15 [ 414.049504][T16742] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 414.050042][T16742] bond15: (slave xfrm1): Error -95 calling set_mac_address [ 414.212512][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2643'. [ 414.258938][T16742] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 414.259070][T16742] bond15: (slave xfrm1): Error -95 calling set_mac_address [ 414.319613][T16765] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 414.355998][T16742] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 414.356127][T16742] bond15: (slave xfrm1): Error -95 calling set_mac_address [ 414.439534][T16742] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 414.439665][T16742] bond15: (slave xfrm1): Error -95 calling set_mac_address [ 414.511023][T16769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 414.547672][T16742] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 414.547790][T16742] bond15: (slave xfrm1): Error -95 calling set_mac_address [ 414.563415][T16770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2647'. [ 414.563685][T16770] unsupported nlmsg_type 40 [ 414.632622][T16742] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 414.632745][T16742] bond15: (slave xfrm1): Error -95 calling set_mac_address [ 414.698796][T16742] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 414.698943][T16742] bond15: (slave xfrm1): Error -95 calling set_mac_address [ 414.754777][T16773] batadv_slave_0: entered promiscuous mode [ 414.757547][T16773] macsec0: entered promiscuous mode [ 414.766214][T16773] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2648'. [ 414.788476][T16742] bond15: (slave xfrm1): The slave device specified does not support setting the MAC address [ 414.788651][T16742] bond15: (slave xfrm1): Error -95 calling set_mac_address [ 414.820561][T16775] FAULT_INJECTION: forcing a failure. [ 414.820561][T16775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.820589][T16775] CPU: 1 UID: 0 PID: 16775 Comm: syz.3.2649 Not tainted syzkaller #0 PREEMPT(full) [ 414.820607][T16775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 414.820617][T16775] Call Trace: [ 414.820623][T16775] [ 414.820631][T16775] dump_stack_lvl+0xe8/0x150 [ 414.820674][T16775] should_fail_ex+0x3eb/0x540 [ 414.820697][T16775] _copy_to_iter+0x1e4/0x17e0 [ 414.820733][T16775] ? __pfx__copy_to_iter+0x10/0x10 [ 414.820758][T16775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 414.820783][T16775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 414.820808][T16775] __skb_datagram_iter+0xf8/0x980 [ 414.820829][T16775] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 414.820891][T16775] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 414.820924][T16775] skb_copy_datagram_iter+0xb5/0x240 [ 414.820949][T16775] netlink_recvmsg+0x2c8/0xa70 [ 414.820976][T16775] ? __pfx_netlink_recvmsg+0x10/0x10 [ 414.820998][T16775] ? aa_sock_msg_perm+0x144/0x210 [ 414.821021][T16775] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 414.821043][T16775] ? security_socket_recvmsg+0x7e/0x2c0 [ 414.821063][T16775] ? __pfx_netlink_recvmsg+0x10/0x10 [ 414.821080][T16775] sock_recvmsg+0x196/0x1e0 [ 414.821109][T16775] __sys_recvfrom+0x231/0x3a0 [ 414.821133][T16775] ? __pfx___sys_recvfrom+0x10/0x10 [ 414.821181][T16775] ? do_user_addr_fault+0xd3f/0x1480 [ 414.821209][T16775] __x64_sys_recvfrom+0xde/0x100 [ 414.821232][T16775] do_syscall_64+0x166/0x520 [ 414.821254][T16775] ? trace_irq_disable+0x3b/0x140 [ 414.821278][T16775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.821295][T16775] ? clear_bhb_loop+0x70/0xc0 [ 414.821317][T16775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.821335][T16775] RIP: 0033:0x7f623336974e [ 414.821352][T16775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 414.821367][T16775] RSP: 002b:00007f623417de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 414.821387][T16775] RAX: ffffffffffffffda RBX: 00007f623417f6c0 RCX: 00007f623336974e [ 414.821400][T16775] RDX: 0000000000001000 RSI: 00007f623417e000 RDI: 0000000000000003 [ 414.821411][T16775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.821422][T16775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 414.821433][T16775] R13: 00007f623417df58 R14: 00007f623417e000 R15: 0000000000000000 [ 414.821471][T16775] [ 415.058353][T16780] ip6erspan1: entered allmulticast mode [ 415.251565][T16788] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 415.261203][T16791] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2654'. [ 416.369623][T16849] bond13: entered promiscuous mode [ 416.369688][T16849] bond13: entered allmulticast mode [ 416.370104][T16849] 8021q: adding VLAN 0 to HW filter on device bond13 [ 416.883123][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 416.953500][T16881] x_tables: duplicate underflow at hook 3 [ 417.196706][T16897] netlink: 'syz.4.2672': attribute type 4 has an invalid length. [ 417.196757][T16897] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2672'. [ 417.274704][T16897] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 417.739291][T16919] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2682'. [ 417.739322][T16919] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2682'. [ 417.826665][T16919] netlink: 'syz.2.2682': attribute type 3 has an invalid length. [ 417.834638][T16926] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2684'. [ 417.901083][T16926] pimreg0: tun_chr_ioctl cmd 1074025677 [ 417.901200][T16926] pimreg0: linktype set to 774 [ 417.906803][T16926] pimreg0: tun_chr_ioctl cmd 2148038145 [ 417.938507][T16926] ipvlan1: entered promiscuous mode [ 417.942902][T16926] ipvlan1: left promiscuous mode [ 418.052260][T16936] bond1: option mode: unable to set because the bond device is up [ 418.056645][T16935] tap0: tun_chr_ioctl cmd 1074025681 [ 418.056988][T16935] tap0: tun_chr_ioctl cmd 1074025681 [ 418.229812][T16936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.232841][T16936] bond0: entered allmulticast mode [ 418.233735][T16936] bond1: (slave bond0): Enslaving as a backup interface with an up link [ 419.108912][T16992] netlink: 'syz.1.2711': attribute type 1 has an invalid length. [ 419.166976][T16992] 8021q: adding VLAN 0 to HW filter on device bond14 [ 419.249033][T17003] __nla_validate_parse: 8 callbacks suppressed [ 419.249056][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'. [ 419.277999][T16996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2712'. [ 419.781681][T17015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2717'. [ 419.865016][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 420.057631][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 420.172627][T17034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2718'. [ 420.172662][T17034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2718'. [ 420.172681][T17034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2718'. [ 420.872855][T17034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2718'. [ 420.872889][T17034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2718'. [ 420.921541][T17034] bridge0: port 4(gretap0) entered disabled state [ 420.996103][T17034] bridge0: port 3(syz_tun) entered disabled state [ 421.010575][T17034] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.010884][T17034] bridge0: port 1(5¬0Ù) entered disabled state [ 421.730279][T17072] bond15: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 421.746447][T17072] bond15 (unregistering): Released all slaves [ 423.279652][T17150] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 423.323898][T17150] 8021q: adding VLAN 0 to HW filter on device bond14 [ 423.362643][T17150] bond12: (slave veth0_to_bond): Releasing active interface [ 423.391819][T17150] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 424.237068][T17194] 8021q: adding VLAN 0 to HW filter on device bond16 [ 424.261408][T17206] lo: entered promiscuous mode [ 424.343897][T17206] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.392829][T17206] 8021q: adding VLAN 0 to HW filter on device bond16 [ 424.419632][T17206] bond16: (slave lo): Enslaving as an active interface with an up link [ 424.682165][T17246] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.682571][T17244] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 425.122123][ T30] audit: type=1804 audit(1794314206.282:81): pid=17259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2767" name="/newroot/498/cgroup.controllers" dev="tmpfs" ino=2564 res=1 errno=0 [ 425.122692][ T30] audit: type=1800 audit(1794314206.282:82): pid=17259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2767" name="cgroup.controllers" dev="tmpfs" ino=2564 res=0 errno=-22 [ 425.125967][T17257] __nla_validate_parse: 168 callbacks suppressed [ 425.125986][T17257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2766'. [ 425.129702][T17259] netlink: 'syz.4.2767': attribute type 34 has an invalid length. [ 425.129719][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 425.616870][T17273] macvlan0: entered promiscuous mode [ 426.031459][T17285] netlink: 279 bytes leftover after parsing attributes in process `syz.3.2774'. [ 426.031484][T17285] veth0_to_bond: default FDB implementation only supports local addresses [ 426.308485][T17290] netlink: 'syz.0.2777': attribute type 10 has an invalid length. [ 426.408135][T17299] netlink: 'syz.3.2776': attribute type 1 has an invalid length. [ 426.412896][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2780'. [ 426.412918][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2780'. [ 426.537889][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2781'. [ 426.606826][T17299] 8021q: adding VLAN 0 to HW filter on device bond17 [ 426.663689][T17314] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 426.693219][T17303] bond17: (slave geneve3): making interface the new active one [ 426.696140][T17303] bond17: (slave geneve3): Enslaving as an active interface with an up link [ 427.031570][T17330] syzkaller0: entered promiscuous mode [ 427.031592][T17330] syzkaller0: entered allmulticast mode [ 427.145927][T17330] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 427.178816][T17338] ip6tnl3: entered promiscuous mode [ 427.661833][T17377] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2797'. [ 430.749379][T17389] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 431.051437][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2806'. [ 431.051464][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2806'. [ 431.051671][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2806'. [ 431.089673][T17418] pim6reg: entered allmulticast mode [ 431.282928][T17426] xt_CONNSECMARK: invalid mode: 254 [ 431.407903][T17436] FAULT_INJECTION: forcing a failure. [ 431.407903][T17436] name failslab, interval 1, probability 0, space 0, times 0 [ 431.407938][T17436] CPU: 0 UID: 0 PID: 17436 Comm: syz.3.2813 Not tainted syzkaller #0 PREEMPT(full) [ 431.407959][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 431.407969][T17436] Call Trace: [ 431.407985][T17436] [ 431.407993][T17436] dump_stack_lvl+0xe8/0x150 [ 431.408025][T17436] should_fail_ex+0x3eb/0x540 [ 431.408056][T17436] should_failslab+0xa8/0x100 [ 431.408072][T17436] ? vm_area_alloc+0x24/0x140 [ 431.408091][T17436] kmem_cache_alloc_noprof+0x9c/0x600 [ 431.408116][T17436] ? vma_merge_new_range+0x556/0x810 [ 431.408136][T17436] ? vm_area_alloc+0x24/0x140 [ 431.408160][T17436] vm_area_alloc+0x24/0x140 [ 431.408181][T17436] mmap_region+0x18c5/0x2800 [ 431.408215][T17436] ? __page_table_check_zero+0x6c/0x430 [ 431.408245][T17436] ? __pfx_mmap_region+0x10/0x10 [ 431.408274][T17436] ? __page_table_check_zero+0x3c3/0x430 [ 431.408297][T17436] ? __page_table_check_zero+0x6c/0x430 [ 431.408330][T17436] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 431.408378][T17436] ? mas_prev_slot+0xb76/0xbf0 [ 431.408460][T17436] ? vm_unmapped_area+0xde/0x230 [ 431.408493][T17436] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 431.408535][T17436] ? thp_get_unmapped_area_vmaflags+0x25b/0x2d0 [ 431.408561][T17436] ? cap_mmap_addr+0xaa/0xf0 [ 431.408584][T17436] ? bpf_lsm_mmap_addr+0x9/0x50 [ 431.408606][T17436] ? security_mmap_addr+0x71/0x240 [ 431.408639][T17436] do_mmap+0xe0a/0x1300 [ 431.408666][T17436] ? __pfx_do_mmap+0x10/0x10 [ 431.408696][T17436] ? vm_mmap_pgoff+0x1ed/0x520 [ 431.408717][T17436] ? down_write_killable+0x179/0x230 [ 431.408745][T17436] ? __pfx_down_write_killable+0x10/0x10 [ 431.408768][T17436] ? lock_vma_under_rcu+0x45a/0x500 [ 431.408785][T17436] ? apparmor_mmap_file+0x1cc/0x390 [ 431.408806][T17436] ? security_mmap_file+0x4df/0xa20 [ 431.408831][T17436] vm_mmap_pgoff+0x27a/0x520 [ 431.408862][T17436] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 431.408886][T17436] ? rcu_is_watching+0x16/0xb0 [ 431.408916][T17436] ? ksys_mmap_pgoff+0xf3/0x760 [ 431.408934][T17436] ? __x64_sys_mmap+0x7f/0x140 [ 431.408958][T17436] do_syscall_64+0x166/0x520 [ 431.408987][T17436] ? trace_irq_disable+0x3b/0x140 [ 431.409009][T17436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.409027][T17436] ? clear_bhb_loop+0x70/0xc0 [ 431.409049][T17436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.409067][T17436] RIP: 0033:0x7f62333a8c82 [ 431.409084][T17436] Code: 81 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 431.409100][T17436] RSP: 002b:00007f623417dd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 431.409119][T17436] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f62333a8c82 [ 431.409131][T17436] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 431.409141][T17436] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 431.409153][T17436] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 431.409164][T17436] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f6233455f1f [ 431.409195][T17436] [ 431.416072][T17431] bond7: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 431.419162][T17431] bond7 (unregistering): Released all slaves [ 431.844923][T17440] netlink: 'syz.2.2815': attribute type 4 has an invalid length. [ 431.844944][T17440] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2815'. [ 431.874834][T17448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.875650][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2814'. [ 431.907016][T17441] netlink: 'syz.3.2814': attribute type 11 has an invalid length. [ 432.108326][T17459] netlink: 279 bytes leftover after parsing attributes in process `syz.2.2819'. [ 432.150974][T17463] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 432.150998][T17463] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2823'. [ 432.151017][T17463] nbd: couldn't find a device at index 767 [ 432.322185][T17475] syzkaller1: entered promiscuous mode [ 432.322209][T17475] syzkaller1: entered allmulticast mode [ 432.437392][T17479] netlink: 'syz.3.2826': attribute type 1 has an invalid length. [ 432.638647][T17488] sctp: [Deprecated]: syz.2.2828 (pid 17488) Use of int in max_burst socket option. [ 432.638647][T17488] Use struct sctp_assoc_value instead [ 433.307085][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2835'. [ 433.466172][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2837'. [ 433.552387][T17526] 8021q: adding VLAN 0 to HW filter on device bond16 [ 433.553256][T17531] lo: entered promiscuous mode [ 433.574868][T17531] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 433.589179][T17534] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 433.605494][T17531] 8021q: adding VLAN 0 to HW filter on device bond16 [ 433.641276][T17531] bond16: (slave lo): Enslaving as an active interface with an up link [ 434.024763][T17549] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2842'. [ 434.582834][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.615844][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.627819][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.656492][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.658388][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.750744][ T5649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.751118][ T5649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.751434][ T5649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.752668][ T5649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.753569][ T5649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.008116][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.745153][T17585] syzkaller0: entered promiscuous mode [ 435.745178][T17585] syzkaller0: entered allmulticast mode [ 435.998384][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.019890][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.020833][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.330232][T17617] ip6t_rt: unknown flags 1F [ 436.358090][T17555] infiniband rxe0: set active [ 436.358147][T12319] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.358205][T17555] infiniband rxe0: added rxe_eth0 [ 436.411308][T17555] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 436.411342][T17555] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 436.411372][T17555] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 436.479667][T17555] RDS/IB: rxe0: added [ 436.479756][T17555] smc: adding ib device rxe0 with port count 1 [ 436.479783][T17555] smc: ib device rxe0 port 1 has no pnetid [ 436.483472][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.484526][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.515353][T17621] netlink: 'syz.4.2863': attribute type 1 has an invalid length. [ 436.738092][T17631] __nla_validate_parse: 4 callbacks suppressed [ 436.738117][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 436.847795][ T5649] Bluetooth: hci5: command tx timeout [ 436.856576][T17634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2866'. [ 436.929177][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.462949][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 437.595095][T17653] netlink: 'syz.1.2874': attribute type 1 has an invalid length. [ 437.609236][T17653] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2874'. [ 437.609270][T17653] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 437.840801][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.266186][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 438.266211][T17670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2877'. [ 438.266227][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 438.358340][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.416408][T17672] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2878'. [ 438.684254][T17684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2880'. [ 438.706298][T17683] netlink: 'syz.4.2881': attribute type 70 has an invalid length. [ 438.928561][ T5649] Bluetooth: hci5: command tx timeout [ 439.024653][T17555] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.501985][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 439.739394][T17717] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2890'. [ 440.132236][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.134359][T17729] ip_tables: iptables: counters copy to user failed while replacing table [ 440.374064][T17555] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.379147][T17555] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.379326][T17555] bridge_slave_0: entered allmulticast mode [ 440.385750][T17555] bridge_slave_0: entered promiscuous mode [ 440.430282][T17555] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.430487][T17555] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.430637][T17555] bridge_slave_1: entered allmulticast mode [ 440.436537][T17555] bridge_slave_1: entered promiscuous mode [ 440.577795][T17555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.588512][T17555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.645114][T17555] team0: Port device team_slave_0 added [ 440.656153][T17555] team0: Port device team_slave_1 added [ 440.804089][T17555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.804112][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.804133][T17555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.814948][T17555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.814966][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.814988][T17555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.940406][T17555] hsr_slave_0: entered promiscuous mode [ 440.941481][T17555] hsr_slave_1: entered promiscuous mode [ 440.942285][T17555] debugfs: 'hsr0' already exists in 'hsr' [ 440.942317][T17555] Cannot create hsr debugfs directory [ 441.007924][ T5649] Bluetooth: hci5: command tx timeout [ 441.366170][T17555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.366193][T17555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.401948][T17774] bond16: (slave lo): Releasing backup interface [ 441.402755][T17774] bond16: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 441.435404][T17774] bridge_slave_1: left allmulticast mode [ 441.435436][T17774] bridge_slave_1: left promiscuous mode [ 441.435693][T17774] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.458712][ T1943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.483310][T17774] bond14: (slave veth0_to_bond): Releasing active interface [ 441.502431][T17774] bond0: (slave bond_slave_0): Releasing backup interface [ 441.513789][T17782] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.529364][T17774] bond0: (slave bond_slave_1): Releasing backup interface [ 441.535483][T17774] team0: Port device team_slave_0 removed [ 441.553526][T17774] team0: Port device team_slave_1 removed [ 441.554159][T17774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.569461][T17782] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 441.569488][T17782] NCSI netlink: No device for ifindex 0 [ 441.737076][T17555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.737109][T17555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.825161][ T5759] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.853823][T17790] __nla_validate_parse: 3 callbacks suppressed [ 441.853843][T17790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2909'. [ 441.853855][T17790] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2909'. [ 441.980082][T17555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.985240][T17555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.158828][T17555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.158863][T17555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.203324][T17800] tipc: Enabling of bearer rejected, already enabled [ 442.203493][T17801] geneve1: entered promiscuous mode [ 442.372222][T17806] syzkaller1: entered promiscuous mode [ 442.372244][T17806] syzkaller1: entered allmulticast mode [ 442.421266][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2912'. [ 442.448653][T17814] xt_hl: Unknown Hop Limit match mode: 4 [ 442.713148][T17828] netlink: 'syz.0.2917': attribute type 2 has an invalid length. [ 442.833449][T17555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 442.848631][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.851292][T17555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 442.857105][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.864073][T17555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 442.876424][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.883278][T17555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 442.919852][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.088224][ T5649] Bluetooth: hci5: command tx timeout [ 443.139188][T17844] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.281272][T17844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.448599][T17826] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 443.969297][ T1172] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.008763][ T6573] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.008816][ T6573] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.008853][ T6573] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.150205][T17555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.175336][T17863] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 444.203265][T17555] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.220891][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.220993][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.269581][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.269696][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.200506][T17906] nbd: must specify a device to reconfigure [ 445.420964][T17917] ip_tables: iptables: counters copy to user failed while replacing table [ 445.444151][T17924] xt_hashlimit: size too large, truncated to 1048576 [ 445.537829][T17928] ¬0Ù (unregistering): left allmulticast mode [ 445.537861][T17928] ¬0Ù (unregistering): left promiscuous mode [ 445.537939][T17928] bridge0: port 1(5¬0Ù) entered disabled state [ 445.768586][T17929] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 445.768613][T17929] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 445.838446][T17555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.922646][T17555] veth0_vlan: entered promiscuous mode [ 445.940878][T17555] veth1_vlan: entered promiscuous mode [ 446.002713][T17555] veth0_macvtap: entered promiscuous mode [ 446.009442][T17555] veth1_macvtap: entered promiscuous mode [ 446.032845][T17555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.065678][T17555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.149137][T11622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.149448][T11622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.149522][T11622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.149551][T11622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.264187][T17948] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2945'. [ 446.327839][T17946] openvswitch: netlink: IPv6 tunnel dst address is zero [ 446.380906][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 446.436795][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.436818][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.519354][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 446.565629][T17950] veth13: entered allmulticast mode [ 446.581176][T17950] bond16: (slave veth13): Enslaving as an active interface with an up link [ 446.597948][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.597968][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.620257][T18003] lo: entered allmulticast mode [ 447.729457][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.734795][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.735708][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.736630][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.739977][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.199487][T18007] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.537725][ T5639] syz_tun (unregistering): left allmulticast mode [ 448.570573][ T5639] bond0: (slave syz_tun): Releasing backup interface [ 448.629237][T18001] lo: left allmulticast mode [ 449.120561][T18039] netlink: 'syz.3.2965': attribute type 4 has an invalid length. [ 449.144897][T18039] netlink: 'syz.3.2965': attribute type 4 has an invalid length. [ 449.661630][T18062] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.807814][ T5637] Bluetooth: hci4: command tx timeout [ 450.206802][T18007] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.207090][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.242446][T18007] bridge_slave_0: entered allmulticast mode [ 450.253731][T18007] bridge_slave_0: entered promiscuous mode [ 450.267721][T18007] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.268870][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.269067][T18007] bridge_slave_1: entered allmulticast mode [ 450.280033][T18007] bridge_slave_1: entered promiscuous mode [ 450.472704][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2974'. [ 450.472799][T18078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 450.472827][T18078] netlink: 'syz.3.2974': attribute type 7 has an invalid length. [ 450.587347][T15033] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.587397][T15033] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.593438][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2974'. [ 450.593462][T18078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 450.593485][T18078] netlink: 'syz.3.2974': attribute type 7 has an invalid length. [ 450.611728][T18007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.621472][ T4286] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.621516][ T4286] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.649367][T18007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.730437][T18084] netlink: 'syz.4.2975': attribute type 1 has an invalid length. [ 450.902607][T18007] team0: Port device team_slave_0 added [ 450.934969][T18007] team0: Port device team_slave_1 added [ 451.150488][T18086] bond17: (slave bridge8): Enslaving as a backup interface with an up link [ 451.194829][T18092] macvlan1: entered promiscuous mode [ 451.194853][T18092] macvlan1: entered allmulticast mode [ 451.212908][T18092] bond17: entered promiscuous mode [ 451.212930][T18092] bridge8: entered promiscuous mode [ 451.215085][T18092] bond17: entered allmulticast mode [ 451.215105][T18092] bridge8: entered allmulticast mode [ 451.215684][T18092] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 451.256994][T18092] bond17: left allmulticast mode [ 451.257018][T18092] bridge8: left allmulticast mode [ 451.257111][T18092] bond17: left promiscuous mode [ 451.257124][T18092] bridge8: left promiscuous mode [ 451.313287][T18007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.313305][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.313326][T18007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.395134][T18007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.395149][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.395168][T18007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.670399][T18007] hsr_slave_0: entered promiscuous mode [ 451.675178][T18007] hsr_slave_1: entered promiscuous mode [ 451.678729][T18007] debugfs: 'hsr0' already exists in 'hsr' [ 451.678751][T18007] Cannot create hsr debugfs directory [ 451.887831][ T5637] Bluetooth: hci4: command tx timeout [ 452.309837][T18115] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2984'. [ 452.408904][T18120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.871261][T18130] x_tables: duplicate underflow at hook 3 [ 453.045770][T18136] syzkaller0: left promiscuous mode [ 453.045829][T18136] syzkaller0: left allmulticast mode [ 453.068408][T18136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2990'. [ 453.181136][T18007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 453.204056][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.204923][T18007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 453.216133][T18139] netlink: 'syz.4.2991': attribute type 1 has an invalid length. [ 453.216157][T18139] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2991'. [ 453.243049][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.252339][T18007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.284604][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.290791][T18007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 453.312242][T18007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.589919][T18157] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 453.740597][T18161] netlink: 'syz.3.2997': attribute type 4 has an invalid length. [ 453.740619][T18161] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.2997'. [ 453.843164][T18007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.910495][T18177] ip_tables: iptables: counters copy to user failed while replacing table [ 453.944646][T18007] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.968505][ T5637] Bluetooth: hci4: command tx timeout [ 454.002215][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.002331][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.070373][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.070483][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.496040][T18193] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 454.597076][T18196] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 455.104002][T18213] netlink: 'syz.4.3006': attribute type 29 has an invalid length. [ 455.104522][T18214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3006'. [ 455.229172][T18222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3005'. [ 455.238594][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 455.292637][T18189] netlink: 'syz.3.3001': attribute type 12 has an invalid length. [ 455.467324][T18189] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 455.792350][T18007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.837890][T18238] __nla_validate_parse: 2 callbacks suppressed [ 455.837909][T18238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3010'. [ 455.842783][T18237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3010'. [ 456.048308][ T5637] Bluetooth: hci4: command tx timeout [ 456.074908][T18007] veth0_vlan: entered promiscuous mode [ 456.126809][T18007] veth1_vlan: entered promiscuous mode [ 456.207529][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.398186][T18247] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3011'. [ 456.398583][T18246] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3011'. [ 456.399552][T18007] veth0_macvtap: entered promiscuous mode [ 456.421564][T18007] veth1_macvtap: entered promiscuous mode [ 456.515298][T18007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.534487][T18007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.623455][T11623] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.639937][T11623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.640819][T11623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.651262][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.839587][T18257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3015'. [ 456.915549][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3016'. [ 456.963815][T18259] bond18: option broadcast_neighbor: invalid value (4) [ 456.973365][T18259] bond18 (unregistering): Released all slaves [ 457.147104][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.147126][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.368454][T11623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.368476][T11623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.715791][T18299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 457.715831][T18299] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2953'. [ 458.331441][T18318] syzkaller0: entered promiscuous mode [ 458.331463][T18318] syzkaller0: entered allmulticast mode [ 458.401745][ T5649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.410778][ T5649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.416882][ T5649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.425513][ T5649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.441214][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.724413][T18336] ip6erspan0: entered allmulticast mode [ 458.773492][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 458.844800][T18333] vlan2: entered allmulticast mode [ 458.844827][T18333] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 459.043945][T18321] rxe_eth0 speed is unknown, defaulting to 1000 [ 459.249514][ T4286] IPVS: starting estimator thread 0... [ 459.347459][T18354] IPVS: using max 36 ests per chain, 86400 per kthread [ 459.680791][T18366] erspan0: entered promiscuous mode [ 459.745248][T18371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3040'. [ 459.981253][T18385] NFSD: Failed to start, no listeners configured. [ 460.529697][ T5649] Bluetooth: hci1: command tx timeout [ 460.589441][T18321] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.589648][T18321] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.590093][T18321] bridge_slave_0: entered allmulticast mode [ 460.597766][T18321] bridge_slave_0: entered promiscuous mode [ 460.613337][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 460.661195][T18321] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.661310][T18321] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.663272][T18321] bridge_slave_1: entered allmulticast mode [ 460.693270][T18321] bridge_slave_1: entered promiscuous mode [ 460.744427][T18321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.761245][T18321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.816355][T18321] team0: Port device team_slave_0 added [ 460.827672][T18321] team0: Port device team_slave_1 added [ 460.879019][T18321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.879047][T18321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.879068][T18321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.882638][T18321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.882654][T18321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.882676][T18321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.035906][T18321] hsr_slave_0: entered promiscuous mode [ 461.036994][T18321] hsr_slave_1: entered promiscuous mode [ 461.051380][T18321] debugfs: 'hsr0' already exists in 'hsr' [ 461.051400][T18321] Cannot create hsr debugfs directory [ 462.607735][ T5649] Bluetooth: hci1: command tx timeout [ 463.442766][T18413] __nla_validate_parse: 3 callbacks suppressed [ 463.442787][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3047'. [ 463.536441][T18415] FAULT_INJECTION: forcing a failure. [ 463.536441][T18415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.536469][T18415] CPU: 1 UID: 0 PID: 18415 Comm: syz.0.3048 Not tainted syzkaller #0 PREEMPT(full) [ 463.536489][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 463.536498][T18415] Call Trace: [ 463.536505][T18415] [ 463.536513][T18415] dump_stack_lvl+0xe8/0x150 [ 463.536546][T18415] should_fail_ex+0x3eb/0x540 [ 463.536573][T18415] _copy_to_user+0x31/0xb0 [ 463.536598][T18415] simple_read_from_buffer+0xe1/0x170 [ 463.536626][T18415] proc_fail_nth_read+0x1bb/0x230 [ 463.536648][T18415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.536669][T18415] ? rw_verify_area+0x24a/0x4c0 [ 463.536693][T18415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.536711][T18415] vfs_read+0x213/0xa80 [ 463.536739][T18415] ? __pfx___mutex_lock+0x10/0x10 [ 463.536767][T18415] ? __pfx_vfs_read+0x10/0x10 [ 463.536791][T18415] ? __fget_files+0x2a/0x420 [ 463.536812][T18415] ? __fget_files+0x3a2/0x420 [ 463.536840][T18415] ? __fget_files+0x2a/0x420 [ 463.536866][T18415] ? fdget+0x1ac/0x250 [ 463.536895][T18415] ksys_read+0x150/0x270 [ 463.536921][T18415] ? __pfx_ksys_read+0x10/0x10 [ 463.536941][T18415] ? fput+0xa0/0xd0 [ 463.536973][T18415] do_syscall_64+0x166/0x520 [ 463.536993][T18415] ? trace_irq_disable+0x3b/0x140 [ 463.537015][T18415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.537031][T18415] ? clear_bhb_loop+0x70/0xc0 [ 463.537052][T18415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.537068][T18415] RIP: 0033:0x7fdcc796974e [ 463.537084][T18415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.537098][T18415] RSP: 002b:00007fdcc87bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.537118][T18415] RAX: ffffffffffffffda RBX: 00007fdcc87bd6c0 RCX: 00007fdcc796974e [ 463.537132][T18415] RDX: 000000000000000f RSI: 00007fdcc87bd0a0 RDI: 0000000000000004 [ 463.537143][T18415] RBP: 00007fdcc87bd090 R08: 0000000000000000 R09: 0000000000000000 [ 463.537154][T18415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.537165][T18415] R13: 00007fdcc7c26038 R14: 00007fdcc7c25fa0 R15: 00007ffe8803f498 [ 463.537201][T18415] [ 463.864652][ T30] audit: type=1804 audit(1794314245.022:83): pid=18422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3052" name="/newroot/613/cgroup.controllers" dev="tmpfs" ino=3160 res=1 errno=0 [ 463.864875][ T30] audit: type=1800 audit(1794314245.022:84): pid=18422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3052" name="cgroup.controllers" dev="tmpfs" ino=3160 res=0 errno=-22 [ 464.023063][T18321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.023098][T18321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.122841][T18434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3052'. [ 464.193875][T18321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.193910][T18321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.310547][T18321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.310581][T18321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.356315][T18440] netlink: 'syz.2.3056': attribute type 1 has an invalid length. [ 464.443107][T18321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.443137][T18321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.689877][ T5649] Bluetooth: hci1: command tx timeout [ 464.777639][T18463] IPv6: addrconf: prefix option has invalid lifetime [ 464.810932][T18321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 464.829320][T18321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.855623][T18321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.870107][T18321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.871035][T18321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 464.884106][T18321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.887594][T18321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.920383][T18321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.961939][T18470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 464.961969][T18470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.056069][T18478] Cannot find add_set index 2 as target [ 465.137888][T18321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.179013][T18321] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.203670][T11623] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.203781][T11623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.243400][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.243508][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.727742][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.779556][T18500] netlink: 'syz.4.3072': attribute type 2 has an invalid length. [ 465.823471][T18500] !: entered promiscuous mode [ 465.865138][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3072'. [ 465.881902][T18500] !: left promiscuous mode [ 465.956484][T18502] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 466.046428][T18508] bridge0: port 3(veth0) entered blocking state [ 466.046611][T18508] bridge0: port 3(veth0) entered disabled state [ 466.046793][T18508] veth0: entered allmulticast mode [ 466.071537][T18508] veth0: entered promiscuous mode [ 466.072263][T18508] bridge0: port 3(veth0) entered blocking state [ 466.072380][T18508] bridge0: port 3(veth0) entered forwarding state [ 466.209571][T18519] netlink: 964 bytes leftover after parsing attributes in process `syz.2.3070'. [ 466.271041][T18525] netlink: 'syz.4.3077': attribute type 7 has an invalid length. [ 466.768291][ T5649] Bluetooth: hci1: command tx timeout [ 466.787907][T18321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.904923][T18550] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 467.030959][T18548] netlink: 'syz.2.3080': attribute type 1 has an invalid length. [ 467.211277][T18548] bond1: entered promiscuous mode [ 467.233666][T18548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.235628][T18321] veth0_vlan: entered promiscuous mode [ 467.236219][T18551] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 467.245601][T18550] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 467.310808][T18321] veth1_vlan: entered promiscuous mode [ 467.446983][T18572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3083'. [ 467.584077][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 467.717422][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 468.235001][T18321] veth0_macvtap: entered promiscuous mode [ 468.267338][T18321] veth1_macvtap: entered promiscuous mode [ 468.356342][T18321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.395897][T18321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.497576][ T4286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.498674][T11629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.176108][T18610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3088'. [ 470.177803][ T1123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.266561][T11629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.506972][T11624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.506995][T11624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.669149][T11629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.669171][T11629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.773380][T18636] xt_hashlimit: size too large, truncated to 1048576 [ 470.855433][T18642] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.944510][T18642] bridge_slave_0 (unregistering): left allmulticast mode [ 470.944538][T18642] bridge_slave_0 (unregistering): left promiscuous mode [ 470.944630][T18642] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.161818][T18652] IPv6: sit2: Disabled Multicast RS [ 471.399670][T18671] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 471.474383][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3098'. [ 471.644855][T18672] rxe_eth0 speed is unknown, defaulting to 1000 [ 471.806748][T18689] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 471.843204][T18691] syzkaller0: entered promiscuous mode [ 471.845165][T18691] syzkaller0: entered allmulticast mode [ 471.872603][T18691] tipc: Started in network mode [ 471.872634][T18691] tipc: Node identity f629c60426fa, cluster identity 2 [ 471.877066][T18691] tipc: Enabled bearer , priority 0 [ 472.080765][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.085475][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.105424][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.116228][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.126020][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.454953][T18670] tipc: Resetting bearer [ 472.532401][T18670] tipc: Disabling bearer [ 472.793922][ T5635] syz_tun (unregistering): left allmulticast mode [ 472.793948][ T5635] syz_tun (unregistering): left promiscuous mode [ 472.794041][ T5635] bridge0: port 3(syz_tun) entered disabled state [ 473.626016][T18694] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.705518][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 473.815350][T18746] netlink: 'syz.4.3107': attribute type 1 has an invalid length. [ 473.949248][T18734] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 473.949273][T18734] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 474.092587][T18759] x_tables: unsorted underflow at hook 3 [ 474.093424][T18759] x_tables: duplicate underflow at hook 2 [ 474.208095][ T5637] Bluetooth: hci3: command tx timeout [ 474.489348][T18772] netlink: 'syz.3.3113': attribute type 1 has an invalid length. [ 474.492113][T18773] netlink: 'syz.4.3114': attribute type 1 has an invalid length. [ 474.659478][T11629] IPVS: starting estimator thread 0... [ 474.699781][T18779] bond2: (slave veth3): Enslaving as an active interface with a down link [ 474.761879][T18789] IPVS: using max 40 ests per chain, 96000 per kthread [ 474.995875][T18801] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.424305][ T5637] block nbd3: Receive control failed (result -22) [ 475.432047][T18823] nbd3: detected capacity change from 0 to 32 [ 475.449169][ T4970] block nbd3: Dead connection, failed to find a fallback [ 475.449192][ T4970] block nbd3: shutting down sockets [ 475.449205][ T4970] blk_print_req_error: 80 callbacks suppressed [ 475.449216][ T4970] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.449238][ T4970] buffer_io_error: 138 callbacks suppressed [ 475.449248][ T4970] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.452772][ T4970] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.452801][ T4970] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.485568][ T4970] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.485601][ T4970] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.495952][ T4970] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.495981][ T4970] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.496113][ T4970] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.496133][ T4970] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.499064][ T2000] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.499093][ T2000] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.499225][ T2000] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.499247][ T2000] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.499350][ T2000] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.499370][ T2000] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.499664][T18451] ldm_validate_partition_table(): Disk read failed. [ 475.499758][ T2000] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.499778][ T2000] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.503596][ T2000] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 475.503623][ T2000] Buffer I/O error on dev nbd3, logical block 0, async page read [ 475.503865][T18451] Dev nbd3: unable to read RDB block 0 [ 475.504733][T18451] nbd3: unable to read partition table [ 475.651527][T18451] ldm_validate_partition_table(): Disk read failed. [ 475.652125][T18451] Dev nbd3: unable to read RDB block 0 [ 475.652598][T18451] nbd3: unable to read partition table [ 475.834229][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3122'. [ 475.834264][T18837] netlink: 'syz.3.3122': attribute type 5 has an invalid length. [ 475.834278][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3122'. [ 475.889008][T18840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3123'. [ 475.944617][T18837] geneve2: entered promiscuous mode [ 475.944640][T18837] geneve2: entered allmulticast mode [ 475.975483][T18694] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.975570][T18694] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.975689][T18694] bridge_slave_0: entered allmulticast mode [ 475.976740][T18694] bridge_slave_0: entered promiscuous mode [ 475.997578][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 475.997674][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 475.997704][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 475.997731][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 476.004571][T18694] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.004676][T18694] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.004817][T18694] bridge_slave_1: entered allmulticast mode [ 476.019737][T18694] bridge_slave_1: entered promiscuous mode [ 476.040549][T18838] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3123'. [ 476.266604][T18694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.289132][ T5637] Bluetooth: hci3: command tx timeout [ 476.296520][T18694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.302645][T18826] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 476.302667][T18826] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 476.497165][T18858] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 476.523736][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3126'. [ 476.523767][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3126'. [ 476.558522][T18826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 476.558548][T18826] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 476.632875][T18694] team0: Port device team_slave_0 added [ 476.692324][T18694] team0: Port device team_slave_1 added [ 476.711056][T18867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3129'. [ 476.742723][T18826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.742747][T18826] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 476.992503][T18694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.992522][T18694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.992545][T18694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.072191][T18694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.072208][T18694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.072230][T18694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.091895][T18872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3129'. [ 477.168863][T18826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.168887][T18826] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 477.320643][T18694] hsr_slave_0: entered promiscuous mode [ 477.321720][T18694] hsr_slave_1: entered promiscuous mode [ 477.322513][T18694] debugfs: 'hsr0' already exists in 'hsr' [ 477.322529][T18694] Cannot create hsr debugfs directory [ 477.513181][T18887] tipc: Failed to remove unknown binding: 66,0,2/0:2647706366/2647706367 [ 477.513938][T18887] tipc: Failed to remove unknown binding: 66,0,2/0:2647706366/2647706367 [ 478.010281][T18694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 60848 - 0 [ 478.019524][ T5637] block nbd4: Receive control failed (result -32) [ 478.022929][ T5649] block nbd4: Receive control failed (result -32) [ 478.222358][T18694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 60848 - 0 [ 478.295747][T18913] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 478.458755][T18917] veth3: entered allmulticast mode [ 478.470399][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3133'. [ 478.486666][T18917] bond1: (slave veth3): Enslaving as an active interface with a down link [ 478.535866][T18921] bond1: (slave veth0_to_bond): making interface the new active one [ 478.536777][T18921] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 478.604104][T18694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 60848 - 0 [ 478.639378][T18913] bond1: entered allmulticast mode [ 478.639403][T18913] veth0_to_bond: entered allmulticast mode [ 478.669111][T18926] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 478.719970][T18917] macvlan2: entered promiscuous mode [ 478.719986][T18917] macvlan2: entered allmulticast mode [ 478.720407][T18917] bond1: entered promiscuous mode [ 478.720418][T18917] veth0_to_bond: entered promiscuous mode [ 478.720870][T18917] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 478.721348][T18917] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 478.721404][T18917] bond1: left promiscuous mode [ 478.721412][T18917] veth0_to_bond: left promiscuous mode [ 478.732307][T18937] IPVS: length: 117 != 74378727768 [ 478.732348][T18937] IPVS: length: 117 != 74378727768 [ 478.732369][T18937] IPVS: length: 117 != 74378727768 [ 478.732389][T18937] IPVS: length: 117 != 74378727768 [ 478.732409][T18937] IPVS: length: 117 != 74378727768 [ 478.732428][T18937] IPVS: length: 117 != 74378727768 [ 478.732448][T18937] IPVS: length: 117 != 74378727768 [ 478.732468][T18937] IPVS: length: 117 != 74378727768 [ 478.732487][T18937] IPVS: length: 117 != 74378727768 [ 478.732511][T18937] IPVS: length: 117 != 74378727768 [ 478.732531][T18937] IPVS: length: 117 != 74378727768 [ 478.732551][T18937] IPVS: length: 117 != 74378727768 [ 478.732570][T18937] IPVS: length: 117 != 74378727768 [ 478.732590][T18937] IPVS: length: 117 != 74378727768 [ 478.732610][T18937] IPVS: length: 117 != 74378727768 [ 478.732629][T18937] IPVS: length: 117 != 74378727768 [ 478.732648][T18937] IPVS: length: 117 != 74378727768 [ 478.732668][T18937] IPVS: length: 117 != 74378727768 [ 478.732688][T18937] IPVS: length: 117 != 74378727768 [ 478.732707][T18937] IPVS: length: 117 != 74378727768 [ 478.732727][T18937] IPVS: length: 117 != 74378727768 [ 478.732747][T18937] IPVS: length: 117 != 74378727768 [ 478.732784][T18937] IPVS: length: 117 != 74378727768 [ 478.732805][T18937] IPVS: length: 117 != 74378727768 [ 478.732824][T18937] IPVS: length: 117 != 74378727768 [ 478.732844][T18937] IPVS: length: 117 != 74378727768 [ 478.732864][T18937] IPVS: length: 117 != 74378727768 [ 478.732884][T18937] IPVS: length: 117 != 74378727768 [ 478.732903][T18937] IPVS: length: 117 != 74378727768 [ 478.732923][T18937] IPVS: length: 117 != 74378727768 [ 478.732943][T18937] IPVS: length: 117 != 74378727768 [ 478.732962][T18937] IPVS: length: 117 != 74378727768 [ 478.732982][T18937] IPVS: length: 117 != 74378727768 [ 478.733002][T18937] IPVS: length: 117 != 74378727768 [ 478.733021][T18937] IPVS: length: 117 != 74378727768 [ 478.733042][T18937] IPVS: length: 117 != 74378727768 [ 478.733061][T18937] IPVS: length: 117 != 74378727768 [ 478.733080][T18937] IPVS: length: 117 != 74378727768 [ 478.733099][T18937] IPVS: length: 117 != 74378727768 [ 478.733119][T18937] IPVS: length: 117 != 74378727768 [ 478.733139][T18937] IPVS: length: 117 != 74378727768 [ 478.733158][T18937] IPVS: length: 117 != 74378727768 [ 478.733177][T18937] IPVS: length: 117 != 74378727768 [ 478.733195][T18937] IPVS: length: 117 != 74378727768 [ 478.733212][T18937] IPVS: length: 117 != 74378727768 [ 478.733231][T18937] IPVS: length: 117 != 74378727768 [ 478.733252][T18937] IPVS: length: 117 != 74378727768 [ 478.733270][T18937] IPVS: length: 117 != 74378727768 [ 478.733289][T18937] IPVS: length: 117 != 74378727768 [ 478.733308][T18937] IPVS: length: 117 != 74378727768 [ 478.733336][T18937] IPVS: length: 117 != 74378727768 [ 478.733356][T18937] IPVS: length: 117 != 74378727768 [ 478.733376][T18937] IPVS: length: 117 != 74378727768 [ 478.733396][T18937] IPVS: length: 117 != 74378727768 [ 478.733415][T18937] IPVS: length: 117 != 74378727768 [ 478.733435][T18937] IPVS: length: 117 != 74378727768 [ 478.733455][T18937] IPVS: length: 117 != 74378727768 [ 478.733475][T18937] IPVS: length: 117 != 74378727768 [ 478.733494][T18937] IPVS: length: 117 != 74378727768 [ 478.733514][T18937] IPVS: length: 117 != 74378727768 [ 478.733533][T18937] IPVS: length: 117 != 74378727768 [ 478.733553][T18937] IPVS: length: 117 != 74378727768 [ 478.733573][T18937] IPVS: length: 117 != 74378727768 [ 478.733592][T18937] IPVS: length: 117 != 74378727768 [ 478.733612][T18937] IPVS: length: 117 != 74378727768 [ 478.954481][T18938] pim6reg: entered allmulticast mode [ 479.001930][T18940] pim6reg: left allmulticast mode [ 479.187498][T18947] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 479.263097][T18694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 60848 - 0 [ 479.441564][T18951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.865853][T18694] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 479.875651][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.878415][T18694] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 479.902983][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.903903][T18694] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 479.918188][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.921683][T18694] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 479.958176][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.145907][T18694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.185426][T18694] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.206483][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.206594][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.260840][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.260934][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.262370][T18986] netlink: 'syz.1.3148': attribute type 4 has an invalid length. [ 480.262388][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 480.392070][T18694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.407009][T18987] tc_dump_action: action bad kind [ 480.520805][T18997] x_tables: duplicate underflow at hook 2 [ 481.073748][T19020] netlink: 'syz.3.3154': attribute type 1 has an invalid length. [ 481.087778][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 481.409665][T18694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.417097][T19038] syz.1.3158: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 481.417182][T19038] CPU: 1 UID: 0 PID: 19038 Comm: syz.1.3158 Not tainted syzkaller #0 PREEMPT(full) [ 481.417202][T19038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 481.417215][T19038] Call Trace: [ 481.417222][T19038] [ 481.417231][T19038] dump_stack_lvl+0xe8/0x150 [ 481.417267][T19038] warn_alloc+0x24d/0x270 [ 481.417289][T19038] ? stack_depot_save_flags+0x33/0x810 [ 481.417425][T19038] ? __pfx_warn_alloc+0x10/0x10 [ 481.417445][T19038] ? kasan_save_track+0x4f/0x80 [ 481.417470][T19038] ? __kasan_kmalloc+0x93/0xb0 [ 481.417506][T19038] ? xsk_init_queue+0x8a/0xe0 [ 481.417567][T19038] ? xsk_setsockopt+0x52a/0x960 [ 481.417586][T19038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.417617][T19038] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 481.417670][T19038] ? rcu_is_watching+0x16/0xb0 [ 481.417699][T19038] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 481.417719][T19038] ? __kmalloc_cache_noprof+0x31c/0x600 [ 481.417743][T19038] ? __kmalloc_cache_noprof+0x148/0x600 [ 481.417765][T19038] ? xskq_create+0x56/0x220 [ 481.417791][T19038] xskq_create+0x148/0x220 [ 481.417814][T19038] ? xsk_init_queue+0x8a/0xe0 [ 481.417837][T19038] xsk_init_queue+0x8a/0xe0 [ 481.417870][T19038] xsk_setsockopt+0x52a/0x960 [ 481.417893][T19038] ? __pfx_xsk_setsockopt+0x10/0x10 [ 481.417914][T19038] ? __pfx_aa_sk_perm+0x10/0x10 [ 481.418011][T19038] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 481.418036][T19038] ? __pfx_xsk_setsockopt+0x10/0x10 [ 481.418059][T19038] do_sock_setsockopt+0x17c/0x1b0 [ 481.418114][T19038] __x64_sys_setsockopt+0x13d/0x1b0 [ 481.418139][T19038] do_syscall_64+0x166/0x520 [ 481.418218][T19038] ? trace_irq_disable+0x3b/0x140 [ 481.418243][T19038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.418262][T19038] ? clear_bhb_loop+0x70/0xc0 [ 481.418285][T19038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.418303][T19038] RIP: 0033:0x7f4fc61a8f19 [ 481.418321][T19038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.418335][T19038] RSP: 002b:00007f4fc6f9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 481.418355][T19038] RAX: ffffffffffffffda RBX: 00007f4fc6425fa0 RCX: 00007f4fc61a8f19 [ 481.418369][T19038] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 481.418380][T19038] RBP: 00007f4fc6237f6d R08: 0000000000000004 R09: 0000000000000000 [ 481.418391][T19038] R10: 0000200000000d00 R11: 0000000000000246 R12: 0000000000000000 [ 481.418402][T19038] R13: 00007f4fc6426038 R14: 00007f4fc6425fa0 R15: 00007ffdeda49a98 [ 481.418435][T19038] [ 481.431199][T19038] Mem-Info: [ 481.431216][T19038] active_anon:6122 inactive_anon:0 isolated_anon:0 [ 481.431216][T19038] active_file:1 inactive_file:43613 isolated_file:0 [ 481.431216][T19038] unevictable:0 dirty:119 writeback:0 [ 481.431216][T19038] slab_reclaimable:12669 slab_unreclaimable:126486 [ 481.431216][T19038] mapped:29701 shmem:534 pagetables:1364 [ 481.431216][T19038] sec_pagetables:0 bounce:0 [ 481.431216][T19038] kernel_misc_reclaimable:0 [ 481.431216][T19038] free:1277762 free_pcp:15420 free_cma:0 [ 481.431273][T19038] Node 0 active_anon:24488kB inactive_anon:0kB active_file:4kB inactive_file:174252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118804kB dirty:476kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17780kB pagetables:5280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 481.431837][T19038] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 481.431888][T19038] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.431941][T19038] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 481.431974][T19038] Node 0 DMA32 free:1162048kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24488kB inactive_anon:0kB active_file:4kB inactive_file:174252kB unevictable:0kB writepending:476kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:53876kB local_pcp:25716kB free_cma:0kB [ 481.432026][T19038] lowmem_reserve[]: 0 0 1 1 1 [ 481.432059][T19038] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 481.432111][T19038] lowmem_reserve[]: 0 0 0 0 0 [ 481.432139][T19038] Node 1 Normal free:3933640kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:7800kB local_pcp:6296kB free_cma:0kB [ 481.432188][T19038] lowmem_reserve[]: 0 0 0 0 0 [ 481.432219][T19038] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 481.432331][T19038] Node 0 DMA32: 1288*4kB (UM) 304*8kB (UME) 488*16kB (UME) 118*32kB (UME) 108*64kB (UM) 75*128kB (UM) 46*256kB (UME) 15*512kB (UME) 7*1024kB (UM) 3*2048kB (UM) 267*4096kB (UM) = 1162080kB [ 481.436619][T19038] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.436722][T19038] Node 1 Normal: 4*4kB (UM) 1*8kB (M) 1*16kB (M) 3*32kB (UM) 3*64kB (UM) 5*128kB (UM) 8*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3933640kB [ 481.436852][T19038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.436868][T19038] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 481.436882][T19038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.436895][T19038] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 481.436905][T19038] 44144 total pagecache pages [ 481.436923][T19038] 0 pages in swap cache [ 481.436930][T19038] Free swap = 124996kB [ 481.436935][T19038] Total swap = 124996kB [ 481.436943][T19038] 2097051 pages RAM [ 481.436949][T19038] 0 pages HighMem/MovableOnly [ 481.436956][T19038] 434380 pages reserved [ 481.436962][T19038] 0 pages cma reserved [ 481.596326][T19042] __nla_validate_parse: 4 callbacks suppressed [ 481.596344][T19042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3158'. [ 481.612660][T19038] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 481.836935][T18694] veth0_vlan: entered promiscuous mode [ 481.906213][T18694] veth1_vlan: entered promiscuous mode [ 482.139486][T18694] veth0_macvtap: entered promiscuous mode [ 482.164622][T18694] veth1_macvtap: entered promiscuous mode [ 482.182769][T19050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3161'. [ 482.223165][T19050] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 482.225294][T19050] bond2 (unregistering): Released all slaves [ 482.264655][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'. [ 482.264689][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3162'. [ 482.380197][T18694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.426775][T18694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.497507][T15028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.497550][T15028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.497579][T15028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.497608][T15028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.769692][T19076] netlink: 'syz.3.3167': attribute type 1 has an invalid length. [ 482.771085][T11620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.771102][T11620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.828450][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 482.853113][T19076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.987156][T19083] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 482.992492][ T6573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.992511][ T6573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.254468][T19098] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 483.288372][T19098] Cannot find set identified by id 65534 to match [ 483.291254][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3171'. [ 483.606472][T19117] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3177'. [ 483.693105][T19112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 483.835752][T19126] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3178'. [ 483.835777][T19126] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3178'. [ 484.313005][T19162] netlink: 'syz.0.3185': attribute type 1 has an invalid length. [ 485.008089][T19186] netlink: 'syz.2.3189': attribute type 1 has an invalid length. [ 485.128152][T19188] netlink: 'syz.2.3189': attribute type 4 has an invalid length. [ 485.185132][T19189] netlink: 'syz.2.3189': attribute type 4 has an invalid length. [ 487.172219][T19169] bridge1: entered promiscuous mode [ 487.184628][T19186] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 487.261540][T19191] veth5: entered allmulticast mode [ 487.395450][T19192] bond1: (slave veth0_to_bond): Releasing active interface [ 487.395484][T19192] veth0_to_bond: left allmulticast mode [ 487.427257][T19199] __nla_validate_parse: 2 callbacks suppressed [ 487.427277][T19199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3191'. [ 487.503022][ T5649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.508522][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.530694][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.543726][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.555945][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.687785][T19209] netlink: 'syz.1.3194': attribute type 3 has an invalid length. [ 487.711651][T19212] netlink: 'syz.2.3196': attribute type 3 has an invalid length. [ 488.489153][T19233] bond1: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 488.498222][T19233] bond1 (unregistering): Released all slaves [ 488.511920][T19245] netlink: 'syz.0.3202': attribute type 1 has an invalid length. [ 488.615423][T11620] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.656275][T19203] rxe_eth0 speed is unknown, defaulting to 1000 [ 488.853199][T11620] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.101931][T11620] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.649160][ T5637] Bluetooth: hci0: command tx timeout [ 491.728263][ T5637] Bluetooth: hci0: command tx timeout [ 491.914913][T19267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.978468][ T1153] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 491.978526][ T1153] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 492.179684][T15028] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 492.453102][T19203] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.453250][T19203] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.454442][T19203] bridge_slave_0: entered allmulticast mode [ 492.484776][T19203] bridge_slave_0: entered promiscuous mode [ 492.852783][T11620] bond11 (unregistering): (slave ip6gre3): Releasing backup interface [ 492.852845][T11620] ip6gre3 (unregistering): left promiscuous mode [ 493.170732][T11620] bond5 (unregistering): (slave bridge3): Releasing active interface [ 493.213612][T11620] bond17 (unregistering): (slave bridge8): Releasing backup interface [ 493.229672][T11620] bond0 (unregistering): Released all slaves [ 493.234453][T11620] bond1 (unregistering): Released all slaves [ 493.245397][T11620] bond2 (unregistering): Released all slaves [ 493.260540][T11620] bond3 (unregistering): Released all slaves [ 493.274868][T11620] bond4 (unregistering): Released all slaves [ 493.313912][T11620] bond5 (unregistering): Released all slaves [ 493.330900][T11620] bond6 (unregistering): Released all slaves [ 493.346818][T11620] bond7 (unregistering): Released all slaves [ 493.370220][T11620] bond8 (unregistering): Released all slaves [ 493.385300][T11620] bond9 (unregistering): Released all slaves [ 493.401285][T11620] bond10 (unregistering): Released all slaves [ 493.430626][T11620] bond11 (unregistering): Released all slaves [ 493.446193][T11620] bond12 (unregistering): Released all slaves [ 493.463478][T11620] bond13 (unregistering): Released all slaves [ 493.489711][T11620] bond14 (unregistering): Released all slaves [ 493.505566][T11620] bond15 (unregistering): Released all slaves [ 493.521381][T11620] bond16 (unregistering): Released all slaves [ 493.549420][T11620] bond17 (unregistering): Released all slaves [ 493.557846][ T12] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 493.558130][T19203] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.558227][T19203] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.558428][T19203] bridge_slave_1: entered allmulticast mode [ 493.560790][T19203] bridge_slave_1: entered promiscuous mode [ 493.615825][T19333] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 493.710283][T19203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.742851][T19203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.810464][ T5637] Bluetooth: hci0: command tx timeout [ 493.951404][T19203] team0: Port device team_slave_0 added [ 493.973971][T19203] team0: Port device team_slave_1 added [ 494.043731][T19203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.043748][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.043768][T19203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.045077][T11620] tipc: Left network mode [ 494.045605][T19203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.045615][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.045632][T19203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.246027][T19203] hsr_slave_0: entered promiscuous mode [ 494.249594][T19203] hsr_slave_1: entered promiscuous mode [ 494.257129][T19203] debugfs: 'hsr0' already exists in 'hsr' [ 494.257149][T19203] Cannot create hsr debugfs directory [ 494.814612][T19382] sctp: [Deprecated]: syz.1.3227 (pid 19382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.814612][T19382] Use struct sctp_sack_info instead [ 494.814853][T19382] sctp: [Deprecated]: syz.1.3227 (pid 19382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.814853][T19382] Use struct sctp_sack_info instead [ 495.501858][ T5301] 8021q: adding VLAN 0 to HW filter on device eth1 [ 495.865073][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3229'. [ 495.876677][T19404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3229'. [ 495.887908][ T5637] Bluetooth: hci0: command tx timeout [ 496.211676][T19421] IPv6: addrconf: prefix option has invalid lifetime [ 496.319797][T19412] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 496.326485][T19416] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 496.335311][T19420] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 496.387049][T19418] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 496.458747][T19203] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 496.704187][T19203] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 496.896256][T19203] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 497.026900][T19446] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3235'. [ 497.065619][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3236'. [ 497.198499][T19437] syzkaller1: entered promiscuous mode [ 497.198524][T19437] syzkaller1: entered allmulticast mode [ 497.261413][T19203] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 497.617149][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3241'. [ 497.668903][T19473] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3240'. [ 497.790846][T19461] syzkaller1: entered promiscuous mode [ 497.790873][T19461] syzkaller1: entered allmulticast mode [ 498.045649][T19203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.060540][T19203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.089964][T19203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.100180][T19203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.101052][T19203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.143875][T19203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.195910][T19203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.214882][T19203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.240273][T19492] xt_TPROXY: Can be used only with -p tcp or -p udp [ 498.376739][T19508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3245'. [ 498.421365][T19498] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 498.651483][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 498.681623][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'. [ 498.815048][T19523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3249'. [ 499.062217][T19203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.169430][T19535] rxe_eth0 speed is unknown, defaulting to 1000 [ 499.182560][T19527] netlink: 'syz.2.3251': attribute type 8 has an invalid length. [ 499.471877][T19527] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 499.471901][T19527] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 499.484035][T19530] rxe_eth0 speed is unknown, defaulting to 1000 [ 499.663382][T11620] hsr_slave_0: left promiscuous mode [ 499.671327][T11620] hsr_slave_1: left promiscuous mode [ 499.990278][T19552] sctp: [Deprecated]: syz.0.3252 (pid 19552) Use of int in max_burst socket option. [ 499.990278][T19552] Use struct sctp_assoc_value instead [ 500.057112][T19554] openvswitch: netlink: Tunnel attr 65 out of range max 16 [ 501.795373][T19203] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.945145][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.945279][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.031907][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.032014][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.208989][T19597] __nla_validate_parse: 2 callbacks suppressed [ 502.209010][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'. [ 504.641509][T19591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3259'. [ 504.641536][T19591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3259'. [ 504.641550][T19591] netlink: 'syz.1.3259': attribute type 4 has an invalid length. [ 505.474274][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 505.501584][T19660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3263'. [ 505.595764][T11620] IPVS: stop unused estimator thread 0... [ 505.920296][T19652] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 505.923090][T11620] IPVS: starting estimator thread 0... [ 506.007315][T19672] IPVS: using max 26 ests per chain, 62400 per kthread [ 506.137619][T19680] ip_tables: iptables: counters copy to user failed while replacing table [ 506.432314][T19689] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3269'. [ 506.634247][T19203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.398135][T19203] veth0_vlan: entered promiscuous mode [ 507.401281][T19727] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 507.420278][T19203] veth1_vlan: entered promiscuous mode [ 507.518290][T19736] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 507.640966][T19203] veth0_macvtap: entered promiscuous mode [ 507.674193][T19203] veth1_macvtap: entered promiscuous mode [ 507.770371][T19203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.841312][T19203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.907640][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.908038][ T1155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.908106][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.908136][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.254009][T19752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3283'. [ 508.273271][T15030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.273295][T15030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.432833][T11620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.432852][T11620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.473841][T19762] netlink: 'syz.2.3286': attribute type 1 has an invalid length. [ 508.704604][T19766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3283'. [ 508.986003][T19786] gretap0: entered promiscuous mode [ 508.986029][T19786] gretap0: entered allmulticast mode [ 508.993292][T19786] ip_tables: iptables: counters copy to user failed while replacing table [ 509.043719][T19788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'. [ 509.062048][T19785] netlink: 'syz.4.3193': attribute type 3 has an invalid length. [ 509.062076][T19785] netlink: 'syz.4.3193': attribute type 1 has an invalid length. [ 509.062087][T19785] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3193'. [ 509.062104][T19785] NCSI netlink: No device for ifindex 0 [ 509.129998][T19785] gtp0: entered promiscuous mode [ 509.184183][T19795] openvswitch: netlink: Message has -3 unknown bytes. [ 509.211373][T19795] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 509.445091][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 509.445116][T19808] netlink: 580 bytes leftover after parsing attributes in process `syz.1.3293'. [ 510.029964][T19827] ipt_REJECT: TCP_RESET invalid for non-tcp [ 510.283558][T19833] syzkaller1: entered promiscuous mode [ 510.283614][T19833] syzkaller1: entered allmulticast mode [ 510.383680][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3304'. [ 510.383956][T19840] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3304'. [ 510.383972][T19840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3304'. [ 510.400553][T19829] IPVS: Scheduler module ip_vs_sip not found [ 510.871107][T19857] netlink: 'syz.2.3308': attribute type 8 has an invalid length. [ 510.871151][T19857] netlink: 'syz.2.3308': attribute type 4 has an invalid length. [ 510.871179][T19857] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3308'. [ 511.196770][T19870] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 511.258149][T19880] netlink: 'syz.0.3315': attribute type 4 has an invalid length. [ 511.482611][T19897] raw_sendmsg: syz.2.3316 forgot to set AF_INET. Fix it! [ 511.776313][T19909] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 511.803508][T19909] bond1: (slave lo): Enslaving as an active interface with an up link [ 511.813099][T19909] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 512.218507][T19932] xt_hashlimit: size too large, truncated to 1048576 [ 512.286473][T19935] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.339056][T19935] bridge_slave_0 (unregistering): left allmulticast mode [ 512.339083][T19935] bridge_slave_0 (unregistering): left promiscuous mode [ 512.339161][T19935] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.376547][T19903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.609852][T19942] macsec1: entered promiscuous mode [ 512.635555][T19947] netlink: 'syz.4.3328': attribute type 1 has an invalid length. [ 512.641023][T19947] wg2: entered promiscuous mode [ 512.641044][T19947] wg2: entered allmulticast mode [ 512.647545][T19947] netlink: 'syz.4.3328': attribute type 10 has an invalid length. [ 512.647726][T19947] dummy0: entered promiscuous mode [ 512.823164][T19954] netlink: 'syz.1.3331': attribute type 4 has an invalid length. [ 512.834785][T19954] netlink: 'syz.1.3331': attribute type 4 has an invalid length. [ 512.834948][T19955] netlink: 'syz.1.3331': attribute type 4 has an invalid length. [ 513.082356][T19962] netlink: 'syz.1.3334': attribute type 10 has an invalid length. [ 513.139639][T19962] team0: Port device veth1_to_hsr added [ 513.260704][T19974] tipc: Started in network mode [ 513.260724][T19974] tipc: Node identity 862c5b351154, cluster identity 4711 [ 513.273431][T19974] tipc: Enabled bearer , priority 0 [ 513.277352][T19974] syzkaller0: entered promiscuous mode [ 513.277375][T19974] syzkaller0: entered allmulticast mode [ 513.297779][T19974] tipc: Resetting bearer [ 513.414669][T19984] syzkaller1: entered allmulticast mode [ 513.459190][T19986] x_tables: unsorted underflow at hook 3 [ 513.722313][T20000] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 513.902574][T20003] __nla_validate_parse: 5 callbacks suppressed [ 513.902607][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3343'. [ 513.902636][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3343'. [ 514.066907][T20011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3345'. [ 514.278764][ T1943] tipc: Node number set to 2541247285 [ 514.299501][T20014] tap0: tun_chr_ioctl cmd 1074025681 [ 514.299654][T20013] tap0: tun_chr_ioctl cmd 1074025681 [ 514.548318][T20017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.550928][T20021] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3348'. [ 514.564132][T20021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3348'. [ 515.064666][T20024] udevd[20024]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.077228][T20024] udevd[20024]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 515.192413][T20017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.566281][T20065] block nbd0: reconnected socket [ 516.066723][T20017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.250758][T20048] block nbd0: Receive control failed (result -32) [ 516.442066][T20056] syzkaller1: entered promiscuous mode [ 516.442091][T20056] syzkaller1: entered allmulticast mode [ 516.598637][T20081] Bluetooth: MGMT ver 1.23 [ 516.598673][T20081] Bluetooth: hci0: unsupported parameter 1280 [ 516.598685][T20081] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 516.599938][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 516.599957][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'. [ 516.599979][T20081] validate_nla: 1 callbacks suppressed [ 516.599988][T20081] netlink: 'syz.1.3358': attribute type 14 has an invalid length. [ 516.599999][T20081] netlink: 'syz.1.3358': attribute type 13 has an invalid length. [ 516.606120][ T6564] veth0: left allmulticast mode [ 516.606149][ T6564] veth0: left promiscuous mode [ 516.612535][ T6564] bridge0: port 1(veth0) entered disabled state [ 516.676534][ T6564] pim6reg: left allmulticast mode [ 516.702398][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3359'. [ 516.728292][ T6564] pimreg9: left allmulticast mode [ 516.739348][ T6564] batman_adv: batadv0: Interface deactivated: gretap1 [ 516.791736][T20091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3360'. [ 517.067045][ T6564] bond14 (unregistering): (slave ip6gre4): Releasing backup interface [ 517.067098][ T6564] ip6gre4 (unregistering): left promiscuous mode [ 517.236909][ T6564] batman_adv: batadv0: Removing interface: gretap1 [ 517.271637][ T6564] bond17 (unregistering): (slave geneve3): Releasing active interface [ 517.336508][ T6564] bond8 (unregistering): (slave bridge0): Releasing backup interface [ 517.336536][ T6564] bridge0 (unregistering): left promiscuous mode [ 517.336555][ T6564] bridge0 (unregistering): left allmulticast mode [ 517.365214][ T6564] bond10 (unregistering): (slave bridge2): Releasing active interface [ 517.376939][ T6564] bond13 (unregistering): (slave bridge3): Releasing backup interface [ 517.376965][ T6564] bridge3 (unregistering): left promiscuous mode [ 517.376984][ T6564] bridge3 (unregistering): left allmulticast mode [ 517.432327][ T6564] bond1 (unregistering): (slave bond0): Removing an active aggregator [ 517.432673][ T6564] bond1 (unregistering): (slave bond0): Releasing backup interface [ 517.433130][ T6564] bond0 (unregistering): left allmulticast mode [ 517.433554][ T6564] bond1 (unregistering): Released all slaves [ 517.463110][ T6564] bond0 (unregistering): (slave veth3): Releasing active interface [ 517.463135][ T6564] veth3: left promiscuous mode [ 517.501690][ T6564] bond0 (unregistering): Released all slaves [ 517.519044][ T6564] bond2 (unregistering): (slave veth5): Releasing active interface [ 517.521091][ T6564] bond2 (unregistering): Released all slaves [ 517.552697][ T6564] bond3 (unregistering): Released all slaves [ 517.570698][ T6564] bond4 (unregistering): Released all slaves [ 517.594954][ T6564] bond5 (unregistering): Released all slaves [ 517.616647][ T6564] bond6 (unregistering): Released all slaves [ 517.632905][ T6564] bond7 (unregistering): Released all slaves [ 517.646319][ T6564] bond8 (unregistering): Released all slaves [ 517.661679][ T6564] bond9 (unregistering): (slave wireguard0): Releasing backup interface [ 517.661699][ T6564] wireguard0: left promiscuous mode [ 517.663111][ T6564] bond9 (unregistering): Released all slaves [ 517.704162][ T6564] bond10 (unregistering): Released all slaves [ 517.715446][ T6564] bond11 (unregistering): Released all slaves [ 517.728710][ T6564] bond12 (unregistering): Released all slaves [ 517.754974][ T6564] bond13 (unregistering): Released all slaves [ 517.765903][ T6564] bond14 (unregistering): Released all slaves [ 517.779469][ T6564] bond15 (unregistering): Released all slaves [ 517.794300][ T6564] bond16 (unregistering): (slave lo): Releasing backup interface [ 517.794706][ T6564] bond16 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 517.795726][ T6564] bond16 (unregistering): Released all slaves [ 517.815536][ T6564] bond17 (unregistering): Released all slaves [ 518.039969][T20017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.135856][T20017] [ 518.138264][T20017] ====================================================== [ 518.145908][T20017] WARNING: possible circular locking dependency detected [ 518.153184][T20017] syzkaller #0 Not tainted [ 518.157613][T20017] ------------------------------------------------------ [ 518.164658][T20017] syz.0.3347/20017 is trying to acquire lock: [ 518.170736][T20017] ffff88801d28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 518.180609][T20017] [ 518.180609][T20017] but task is already holding lock: [ 518.187976][T20017] ffffffff90c20c20 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 518.197323][T20017] [ 518.197323][T20017] which lock already depends on the new lock. [ 518.197323][T20017] [ 518.207827][T20017] [ 518.207827][T20017] the existing dependency chain (in reverse order) is: [ 518.216913][T20017] [ 518.216913][T20017] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 518.224155][T20017] __mutex_lock+0x197/0x15a0 [ 518.229349][T20017] get_device_parent+0x16f/0x3a0 [ 518.234804][T20017] device_add+0x2d4/0xb80 [ 518.239647][T20017] device_create+0x269/0x300 [ 518.244794][T20017] msr_device_create+0x33/0x50 [ 518.250092][T20017] cpuhp_invoke_callback+0x434/0x810 [ 518.255928][T20017] cpuhp_thread_fun+0x362/0x780 [ 518.261338][T20017] smpboot_thread_fn+0x5f8/0xb30 [ 518.267016][T20017] kthread+0x38b/0x480 [ 518.271620][T20017] ret_from_fork+0x514/0xb70 [ 518.277174][T20017] ret_from_fork_asm+0x1a/0x30 [ 518.282546][T20017] [ 518.282546][T20017] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 518.289778][T20103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3361'. [ 518.299708][T20017] cpuhp_thread_fun+0x127/0x780 [ 518.305122][T20017] smpboot_thread_fn+0x5f8/0xb30 [ 518.310660][T20017] kthread+0x38b/0x480 [ 518.315336][T20017] ret_from_fork+0x514/0xb70 [ 518.320537][T20017] ret_from_fork_asm+0x1a/0x30 [ 518.326133][T20017] [ 518.326133][T20017] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 518.333852][T20017] cpus_read_lock+0x3d/0x160 [ 518.338977][T20017] static_key_slow_inc+0x12/0x30 [ 518.344628][T20017] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 518.350981][T20017] nbd_genl_foreach_sock+0x265/0x450 [ 518.356801][T20017] nbd_genl_reconfigure+0xbbb/0x1040 [ 518.362614][T20017] genl_family_rcv_msg_doit+0x233/0x340 [ 518.368793][T20017] genl_rcv_msg+0x614/0x7a0 [ 518.373814][T20017] netlink_rcv_skb+0x226/0x4a0 [ 518.379144][T20017] genl_rcv+0x28/0x40 [ 518.383760][T20017] netlink_unicast+0x8ef/0xa80 [ 518.389067][T20017] netlink_sendmsg+0x7f0/0xb20 [ 518.394375][T20017] sock_sendmsg_nosec+0x14e/0x190 [ 518.401077][T20017] ____sys_sendmsg+0x54e/0x850 [ 518.406368][T20017] ___sys_sendmsg+0x2a5/0x360 [ 518.411563][T20017] __x64_sys_sendmsg+0x1b1/0x290 [ 518.417047][T20017] do_syscall_64+0x166/0x520 [ 518.422533][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.428988][T20017] [ 518.428988][T20017] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 518.437598][T20017] __mutex_lock+0x197/0x15a0 [ 518.442736][T20017] nbd_queue_rq+0x373/0xff0 [ 518.447791][T20017] blk_mq_dispatch_rq_list+0x499/0x1990 [ 518.453996][T20017] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 518.461815][T20017] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 518.468694][T20017] blk_mq_run_work_fn+0x167/0x2f0 [ 518.474461][T20017] process_scheduled_works+0xc3d/0x1630 [ 518.480829][T20017] worker_thread+0xa47/0xfb0 [ 518.485950][T20017] kthread+0x38b/0x480 [ 518.490543][T20017] ret_from_fork+0x514/0xb70 [ 518.495755][T20017] ret_from_fork_asm+0x1a/0x30 [ 518.501061][T20017] [ 518.501061][T20017] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 518.508300][T20017] __mutex_lock+0x197/0x15a0 [ 518.513877][T20017] nbd_queue_rq+0xc1/0xff0 [ 518.518934][T20017] blk_mq_dispatch_rq_list+0x499/0x1990 [ 518.525968][T20017] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 518.533697][T20017] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 518.540203][T20017] blk_mq_run_work_fn+0x167/0x2f0 [ 518.546012][T20017] process_scheduled_works+0xc3d/0x1630 [ 518.552957][T20017] worker_thread+0xa47/0xfb0 [ 518.558099][T20017] kthread+0x38b/0x480 [ 518.564287][T20017] ret_from_fork+0x514/0xb70 [ 518.569699][T20017] ret_from_fork_asm+0x1a/0x30 [ 518.575352][T20017] [ 518.575352][T20017] -> #5 (set->srcu){.+.+}-{0:0}: [ 518.584531][T20017] __synchronize_srcu+0xca/0x2f0 [ 518.590012][T20017] elevator_switch+0x1e8/0x7b0 [ 518.595604][T20017] elevator_change+0x2fa/0x480 [ 518.601566][T20017] elevator_set_default+0x375/0x440 [ 518.607395][T20017] blk_register_queue+0x404/0x4f0 [ 518.613027][T20017] __add_disk+0x6b8/0xdb0 [ 518.617886][T20017] add_disk_fwnode+0x100/0x3a0 [ 518.625970][T20017] nbd_dev_add+0x733/0xb60 [ 518.630922][T20017] nbd_init+0x168/0x1f0 [ 518.635695][T20017] do_one_initcall+0x250/0x870 [ 518.640991][T20017] do_initcall_level+0x10a/0x1a0 [ 518.646535][T20017] do_initcalls+0x59/0xa0 [ 518.651386][T20017] kernel_init_freeable+0x29d/0x3e0 [ 518.657186][T20017] kernel_init+0x22/0x1d0 [ 518.662034][T20017] ret_from_fork+0x514/0xb70 [ 518.667419][T20017] ret_from_fork_asm+0x1a/0x30 [ 518.672800][T20017] [ 518.672800][T20017] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 518.680622][T20017] __mutex_lock+0x197/0x15a0 [ 518.685744][T20017] elevator_change+0x1af/0x480 [ 518.691120][T20017] elevator_set_none+0xb5/0x140 [ 518.696526][T20017] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 518.702860][T20017] nbd_start_device+0x189/0xb30 [ 518.708751][T20017] nbd_genl_connect+0x167d/0x1cd0 [ 518.714297][T20017] genl_family_rcv_msg_doit+0x233/0x340 [ 518.720447][T20017] genl_rcv_msg+0x614/0x7a0 [ 518.725801][T20017] netlink_rcv_skb+0x226/0x4a0 [ 518.732262][T20017] genl_rcv+0x28/0x40 [ 518.736811][T20017] netlink_unicast+0x8ef/0xa80 [ 518.742114][T20017] netlink_sendmsg+0x7f0/0xb20 [ 518.747982][T20017] sock_sendmsg_nosec+0x14e/0x190 [ 518.753739][T20017] ____sys_sendmsg+0x54e/0x850 [ 518.759399][T20017] ___sys_sendmsg+0x2a5/0x360 [ 518.764619][T20017] __x64_sys_sendmsg+0x1b1/0x290 [ 518.770795][T20017] do_syscall_64+0x166/0x520 [ 518.776171][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.782621][T20017] [ 518.782621][T20017] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 518.791229][T20017] blk_alloc_queue+0x544/0x690 [ 518.796705][T20017] __blk_mq_alloc_disk+0x194/0x390 [ 518.802446][T20017] nbd_dev_add+0x494/0xb60 [ 518.807396][T20017] nbd_init+0x168/0x1f0 [ 518.812386][T20017] do_one_initcall+0x250/0x870 [ 518.817950][T20017] do_initcall_level+0x10a/0x1a0 [ 518.823506][T20017] do_initcalls+0x59/0xa0 [ 518.828369][T20017] kernel_init_freeable+0x29d/0x3e0 [ 518.834123][T20017] kernel_init+0x22/0x1d0 [ 518.838988][T20017] ret_from_fork+0x514/0xb70 [ 518.845497][T20017] ret_from_fork_asm+0x1a/0x30 [ 518.850882][T20017] [ 518.850882][T20017] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 518.858141][T20017] fs_reclaim_acquire+0x71/0x100 [ 518.863609][T20017] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 518.871242][T20017] alloc_inode+0xb8/0x1b0 [ 518.876318][T20017] iget_locked+0x12c/0x690 [ 518.881681][T20017] kernfs_get_inode+0x4f/0x770 [ 518.887148][T20017] kernfs_get_tree+0x5dc/0x9a0 [ 518.893709][T20017] vfs_get_tree+0x92/0x2a0 [ 518.899545][T20017] do_new_mount+0x325/0xb00 [ 518.905385][T20017] __se_sys_mount+0x31d/0x420 [ 518.910881][T20017] do_syscall_64+0x166/0x520 [ 518.916320][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.923532][T20017] [ 518.923532][T20017] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 518.932303][T20017] down_write+0x91/0x200 [ 518.937084][T20017] kernfs_remove_by_name_ns+0x4e/0x140 [ 518.943197][T20017] device_links_driver_bound+0x4ab/0x1440 [ 518.949669][T20017] driver_bound+0xd8/0x2e0 [ 518.954662][T20017] really_probe+0x774/0xae0 [ 518.959676][T20017] __driver_probe_device+0x1e8/0x360 [ 518.965475][T20017] driver_probe_device+0x4f/0x240 [ 518.971455][T20017] __device_attach_driver+0x270/0x410 [ 518.979407][T20017] bus_for_each_drv+0x258/0x2f0 [ 518.985476][T20017] __device_attach+0x2bd/0x430 [ 518.990997][T20017] device_initial_probe+0x9c/0x100 [ 518.996642][T20017] __bus_probe_device+0x126/0x220 [ 519.002284][T20017] device_add+0x7d7/0xb80 [ 519.007233][T20017] faux_device_create_with_groups+0x1a5/0x2b0 [ 519.013999][T20017] regulator_dummy_init+0x19/0x40 [ 519.020945][T20017] regulator_init+0xca/0x110 [ 519.026433][T20017] do_one_initcall+0x250/0x870 [ 519.032495][T20017] do_initcall_level+0x10a/0x1a0 [ 519.037992][T20017] do_initcalls+0x59/0xa0 [ 519.042852][T20017] kernel_init_freeable+0x29d/0x3e0 [ 519.054951][T20017] kernel_init+0x22/0x1d0 [ 519.060271][T20017] ret_from_fork+0x514/0xb70 [ 519.066185][T20017] ret_from_fork_asm+0x1a/0x30 [ 519.071861][T20017] [ 519.071861][T20017] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 519.081253][T20017] __lock_acquire+0x164c/0x2de0 [ 519.087069][T20017] lock_acquire+0x115/0x350 [ 519.092312][T20017] down_read+0x45/0x320 [ 519.097699][T20017] kernfs_remove+0x35/0x80 [ 519.104228][T20017] __kobject_del+0xe0/0x310 [ 519.109749][T20017] kobject_del+0x45/0x60 [ 519.115301][T20017] cleanup_glue_dir+0x1a3/0x220 [ 519.121038][T20017] device_del+0x77d/0x8f0 [ 519.126398][T20017] unregister_netdevice_many_notify+0x181a/0x1d80 [ 519.133447][T20017] unregister_netdevice_queue+0x2f5/0x340 [ 519.140096][T20017] nsim_destroy+0x275/0x800 [ 519.145498][T20017] __nsim_dev_port_del+0x14e/0x200 [ 519.151496][T20017] nsim_dev_reload_destroy+0x2e6/0x4e0 [ 519.157966][T20017] nsim_dev_reload_down+0x8a/0xc0 [ 519.166231][T20017] devlink_reload+0x1ed/0x7f0 [ 519.171950][T20017] devlink_nl_reload_doit+0xa96/0xc80 [ 519.178029][T20017] genl_family_rcv_msg_doit+0x233/0x340 [ 519.184461][T20017] genl_rcv_msg+0x614/0x7a0 [ 519.190282][T20017] netlink_rcv_skb+0x226/0x4a0 [ 519.196751][T20017] genl_rcv+0x28/0x40 [ 519.201460][T20017] netlink_unicast+0x8ef/0xa80 [ 519.207101][T20017] netlink_sendmsg+0x7f0/0xb20 [ 519.212668][T20017] sock_sendmsg_nosec+0x14e/0x190 [ 519.218595][T20017] ____sys_sendmsg+0x54e/0x850 [ 519.223894][T20017] ___sys_sendmsg+0x2a5/0x360 [ 519.229106][T20017] __x64_sys_sendmsg+0x1b1/0x290 [ 519.235144][T20017] do_syscall_64+0x166/0x520 [ 519.240367][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.247052][T20017] [ 519.247052][T20017] other info that might help us debug this: [ 519.247052][T20017] [ 519.257929][T20017] Chain exists of: [ 519.257929][T20017] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 519.257929][T20017] [ 519.271838][T20017] Possible unsafe locking scenario: [ 519.271838][T20017] [ 519.279983][T20017] CPU0 CPU1 [ 519.285434][T20017] ---- ---- [ 519.290797][T20017] lock(gdp_mutex); [ 519.294692][T20017] lock(cpuhp_state-up); [ 519.301826][T20017] lock(gdp_mutex); [ 519.308252][T20017] rlock(&root->kernfs_supers_rwsem); [ 519.313818][T20017] [ 519.313818][T20017] *** DEADLOCK *** [ 519.313818][T20017] [ 519.322053][T20017] locks held by syz.0.3347/20017: 5, last CPU#1: [ 519.328820][T20017] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.338229][T20017] #1: ffff888033aeb128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 519.349181][T20017] #2: ffff888033aec258 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 519.361475][T20017] #3: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 519.371157][T20017] #4: ffffffff90c20c20 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 519.383224][T20017] [ 519.383224][T20017] stack backtrace: [ 519.389482][T20017] CPU: 1 UID: 0 PID: 20017 Comm: syz.0.3347 Not tainted syzkaller #0 PREEMPT(full) [ 519.400918][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 519.413193][T20017] Call Trace: [ 519.417359][T20017] [ 519.420485][T20017] dump_stack_lvl+0xe8/0x150 [ 519.425315][T20017] print_circular_bug+0x2e2/0x300 [ 519.431267][T20017] check_noncircular+0x12f/0x150 [ 519.438293][T20017] __lock_acquire+0x164c/0x2de0 [ 519.444257][T20017] ? lockdep_hardirqs_on+0x7b/0x110 [ 519.450352][T20017] ? __pfx___schedule+0x10/0x10 [ 519.457586][T20017] lock_acquire+0x115/0x350 [ 519.462778][T20017] ? kernfs_remove+0x35/0x80 [ 519.467482][T20017] down_read+0x45/0x320 [ 519.471904][T20017] ? kernfs_remove+0x35/0x80 [ 519.476524][T20017] kernfs_remove+0x35/0x80 [ 519.481470][T20017] __kobject_del+0xe0/0x310 [ 519.487045][T20017] kobject_del+0x45/0x60 [ 519.491475][T20017] cleanup_glue_dir+0x1a3/0x220 [ 519.496816][T20017] device_del+0x77d/0x8f0 [ 519.501413][T20017] ? __pfx_device_del+0x10/0x10 [ 519.507065][T20017] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 519.513500][T20017] ? netdev_unregister_kobject+0x347/0x450 [ 519.519599][T20017] unregister_netdevice_many_notify+0x181a/0x1d80 [ 519.526080][T20017] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 519.532844][T20017] ? __mutex_lock+0x10de/0x15a0 [ 519.539463][T20017] ? __mutex_lock+0x5cd/0x15a0 [ 519.544978][T20017] unregister_netdevice_queue+0x2f5/0x340 [ 519.551359][T20017] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 519.558001][T20017] nsim_destroy+0x275/0x800 [ 519.563686][T20017] __nsim_dev_port_del+0x14e/0x200 [ 519.568810][T20017] nsim_dev_reload_destroy+0x2e6/0x4e0 [ 519.574574][T20017] nsim_dev_reload_down+0x8a/0xc0 [ 519.579961][T20017] devlink_reload+0x1ed/0x7f0 [ 519.584752][T20017] ? __pfx_devlink_reload+0x10/0x10 [ 519.589965][T20017] ? devlink_resources_validate+0xa7/0xd0 [ 519.595809][T20017] ? devlink_resources_validate+0xa7/0xd0 [ 519.601719][T20017] devlink_nl_reload_doit+0xa96/0xc80 [ 519.607102][T20017] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 519.613093][T20017] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 519.619704][T20017] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 519.626097][T20017] genl_family_rcv_msg_doit+0x233/0x340 [ 519.631760][T20017] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 519.637927][T20017] ? bpf_lsm_capable+0x9/0x20 [ 519.643735][T20017] ? security_capable+0x7e/0x2c0 [ 519.648954][T20017] genl_rcv_msg+0x614/0x7a0 [ 519.653752][T20017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.659305][T20017] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 519.666281][T20017] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 519.672459][T20017] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 519.679116][T20017] netlink_rcv_skb+0x226/0x4a0 [ 519.684091][T20017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.689437][T20017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.695138][T20017] ? down_read+0x2b9/0x320 [ 519.700198][T20017] genl_rcv+0x28/0x40 [ 519.705239][T20017] netlink_unicast+0x8ef/0xa80 [ 519.710133][T20017] netlink_sendmsg+0x7f0/0xb20 [ 519.715008][T20017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.720395][T20017] ? aa_sock_msg_perm+0x144/0x210 [ 519.725644][T20017] ? apparmor_socket_sendmsg+0x98/0x360 [ 519.731910][T20017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.737290][T20017] sock_sendmsg_nosec+0x14e/0x190 [ 519.742342][T20017] ____sys_sendmsg+0x54e/0x850 [ 519.747392][T20017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.754001][T20017] ? ___sys_sendmsg+0x28a/0x360 [ 519.759305][T20017] ___sys_sendmsg+0x2a5/0x360 [ 519.764200][T20017] ? __lock_acquire+0x747/0x2de0 [ 519.769845][T20017] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.775321][T20017] ? futex_wait+0x2a2/0x390 [ 519.780261][T20017] ? __fget_files+0x3a2/0x420 [ 519.785143][T20017] ? __fget_files+0x2a/0x420 [ 519.789763][T20017] __x64_sys_sendmsg+0x1b1/0x290 [ 519.794811][T20017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.800472][T20017] do_syscall_64+0x166/0x520 [ 519.805084][T20017] ? trace_irq_disable+0x3b/0x140 [ 519.810376][T20017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.817383][T20017] ? clear_bhb_loop+0x70/0xc0 [ 519.822686][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.828595][T20017] RIP: 0033:0x7f20099a8f19 [ 519.833384][T20017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.858029][T20017] RSP: 002b:00007f200a87b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.867491][T20017] RAX: ffffffffffffffda RBX: 00007f2009c25fa0 RCX: 00007f20099a8f19 [ 519.876178][T20017] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 519.885906][T20017] RBP: 00007f2009a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 519.894321][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.902471][T20017] R13: 00007f2009c26038 R14: 00007f2009c25fa0 R15: 00007ffe6631b358 [ 519.911427][T20017] [ 519.956724][T20107] xt_IDLETIMER: timeout value is zero [ 520.013246][ T6564] tipc: Disabling bearer [ 520.027776][ T6564] tipc: Disabling bearer [ 520.027854][ T6564] tipc: Disabling bearer [ 520.041623][ T6564] tipc: Left network mode [ 520.156465][ T96] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.237398][ T43] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.237437][ T43] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.237463][ T43] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.295294][T20118] udevd[20118]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 520.299626][T20117] udevd[20117]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 520.457607][ T6564] hsr_slave_0: left promiscuous mode [ 520.458132][ T6564] hsr_slave_1: left promiscuous mode [ 520.462319][ T6564] batadv_slave_0: left promiscuous mode [ 520.462489][ T6564] veth0_macvtap: left promiscuous mode [ 520.462565][ T6564] veth1_vlan: left promiscuous mode [ 521.174500][ T6564] IPVS: stop unused estimator thread 0...