last executing test programs: 2.656145132s ago: executing program 4 (id=5025): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x878, 0x9, 0x5}) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r3], 0x34}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000009500000000000000000000000000000013835661c2b771142af9cb0000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(r1, 0x0, 0x7a05, 0x1700) r5 = socket(0x10, 0x80002, 0x0) socketpair(0x2c, 0x803, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffe3000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x201, 0x3, 0x0, 0x0, {0xa, 0x4e21, 0x4000000, @remote, 0xffe}}}, 0x32) sendmmsg(r7, &(0x7f0000000180), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0xaa83e6559588492b, 0x800, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000000000a000000000000000200000d00000000000000000213b44100070000000000000000000000000001000005000000000200000002000000000000000008612e2e2e61"], &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1, 0xfffffffd}, 0x28) 2.602879138s ago: executing program 2 (id=5026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.468518506s ago: executing program 2 (id=5028): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) 2.451145311s ago: executing program 4 (id=5029): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @broadcast}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0xffffffffffffff2a, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r3], 0x34}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000009500000000000000000000000000000013835661c2b771142af9cb0000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000000100"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014002b8008000800", @ANYRES32=r4, @ANYBLOB="0800e900ff724728"], 0x34}}, 0x0) unshare(0x20000400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x2, 0x40109, 0xffffffffffffffff, 0x5, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000100), 0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9}) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e1406027fffffff0e000a0010000000", 0x28}, {&(0x7f0000000640)="ff1850830af1", 0x6}], 0x2}, 0x84) (async) write$cgroup_int(r6, &(0x7f0000000200)=0xf, 0x12) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x15, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map, r6, 0x2d, 0x18, 0x0, @void, @value=r4, @void, @void, r8}, 0x20) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1b, 0x0, 0x4000, @void, @value, @void, @void, r8}, 0x20) (rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) 2.087694461s ago: executing program 4 (id=5032): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003580)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x1, 0x1, 0x80000000, 0x4a8, {{0x7, 0x4, 0x0, 0x6, 0x1c, 0x66, 0x0, 0x8, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@rr={0x7, 0x7, 0x17, [@multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000040c0)={'gre0\x00', &(0x7f0000004040)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x81, 0x1, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x65, 0x0, 0x80, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}, {[@ra={0x94, 0x4}, @rr={0x7, 0x23, 0x97, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @local, @remote, @multicast1, @rand_addr=0x64010102]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000004100)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000004100)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000059c0)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000059c0)={'wg1\x00'}) socketpair(0x1, 0x20000000000001, 0x94, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x94, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1f, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000f4490000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000000000000000000004606000018010000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000400185700000100000000000000000000009aabffff01000000850000000000000047881000fcffffff7370ffffffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500"/224], 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005a80)={'ip6tnl0\x00', &(0x7f0000005a00)={'syztnl1\x00', 0x0, 0x4, 0xe3, 0x3, 0x400, 0x69, @empty, @remote, 0x80, 0x7800, 0xb, 0xfffffffe}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005a80)={'ip6tnl0\x00', &(0x7f0000005a00)={'syztnl1\x00', 0x0, 0x4, 0xe3, 0x3, 0x400, 0x69, @empty, @remote, 0x80, 0x7800, 0xb, 0xfffffffe}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000009480)={'syztnl0\x00', &(0x7f0000009400)={'gretap0\x00', 0x0, 0x10, 0x40, 0x0, 0x81, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x68, 0x0, 0x9, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ssrr={0x89, 0xb, 0x9a, [@empty, @broadcast]}, @ssrr={0x89, 0xf, 0x73, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0xf61b2e195138cfd1, 0x3, "e6"}]}}}}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000009b40)={'syztnl0\x00', &(0x7f0000009ac0)={'ip6gre0\x00', 0x0, 0x0, 0x4, 0xd, 0x879, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x8000, 0x1, 0x6, 0x4351}}) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000580)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0xf9, 0x2, "10c1e22c90a26775c383c4c691d40a43f821fbe53b6fb545831b983b38d44420278d40c547857f18dcd4dd73f0f63b107b39c650ea0f4b4fee5d7a36dcf3f5", 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) (async) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0xf9, 0x2, "10c1e22c90a26775c383c4c691d40a43f821fbe53b6fb545831b983b38d44420278d40c547857f18dcd4dd73f0f63b107b39c650ea0f4b4fee5d7a36dcf3f5", 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.070477047s ago: executing program 2 (id=5033): syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2110, 0x0, 0x8}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x86) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2110, 0x0, 0x8}}}}}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x86) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (async) 1.850318619s ago: executing program 2 (id=5035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.775666052s ago: executing program 0 (id=5036): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r1, r0}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 1.667466048s ago: executing program 1 (id=5038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.539791091s ago: executing program 4 (id=5039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) ioctl$int_out(r1, 0x5460, &(0x7f0000000600)) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8f", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000040), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r5 = accept$inet6(r3, &(0x7f0000000580)={0xa, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x1c) ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000640)={0x3, 0x2, 0x7, 0x6, 0xf, 0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={r0, 0x2, 0x8000, 0xfaa}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$tun(r7, &(0x7f0000000000)={@void, @void, @llc={@llc={0x1, 0xfc, '~'}}}, 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0xa, 0x3, 0x9, 0x18, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000240)='GPL\x00', 0x1ff, 0x76, &(0x7f0000000340)=""/118, 0x41000, 0x20, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, r4, r6, r7, r8], 0x0, 0x10, 0x3}, 0x94) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.53847872s ago: executing program 0 (id=5040): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)}, 0x20000010) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000680)=ANY=[@ANYRESOCT], 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r1, 0x100000000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) r4 = socket(0x400000000010, 0x6, 0x3ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB, @ANYBLOB="050053000100000008000500f1b9e300"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, @rc={0x1f, @none}, @hci={0x1f, 0x2, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x10001, 0xbed, 0x8}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) writev(r8, 0x0, 0x0) epoll_create1(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 1.534451625s ago: executing program 1 (id=5041): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000140)=0x7, 0x4) (async) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x11700}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.489893385s ago: executing program 2 (id=5042): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000021000100fffffffdfeffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fe8000000200000000000000000000aae0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b010000043500000a00"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.471240824s ago: executing program 3 (id=5043): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 1.29645233s ago: executing program 2 (id=5044): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f0000000340)={@void, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4066, 0xfe2}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12], 0x40}}, 0x0) 1.296323191s ago: executing program 3 (id=5045): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) shutdown(r0, 0x2) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) 1.21655382s ago: executing program 1 (id=5046): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e2e"], 0x0, 0x44}, 0x20) 1.117927413s ago: executing program 3 (id=5047): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/143, 0x8f}, 0x20) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/213, &(0x7f0000000000)=0xd5) 1.028411986s ago: executing program 1 (id=5048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_USERDATA={0x4}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="20000280", @ANYRES32=r5, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x4) openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) shutdown(r3, 0x0) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r9 = accept(r7, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000100)="ee5ed8e6", 0x4, 0x4400c06d, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x409}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}], 0x4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000031c0)={&(0x7f0000006180)=ANY=[], 0x2e04}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 874.417068ms ago: executing program 0 (id=5049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000effffff00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xe0c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fd00000700000000060015000100000014001680100008000c0003800800020000000006ee971301874f4b9fe9382ac53bc7ebeb95693417405f128780c208b1f76022bca33ecd927f67421373146f28b2c8cb43c94c084f5773ca973dd984846f77cb0684fc72b3e0c15c0bdc35f4bdcecb5b95b3bf9f44e705c2902d71b761e3169c54d3673ff5432f098d83cd3cbe8fb2f54f50d9d588c20bc0d59be2e820f15af27da59b535d3805b9c687edd669679bcc2f464a6e02eb"], 0x38}}, 0x0) 807.691797ms ago: executing program 0 (id=5050): connect(0xffffffffffffffff, &(0x7f0000000000)=@caif=@util={0x25, "0ad73a77080bff2f2755e69f887aa949"}, 0x80) (async) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x80) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x1}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xcc, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x5, @loopback, 0x80000000}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x755e945a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x2}, @in6={0xa, 0x4e21, 0xd, @empty, 0xf}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x2}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={r1, 0x3, 0x53d77380, 0xf2}, 0x10) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x36, 0xda, &(0x7f0000000400)="2fd7addcd2d15e6647b193b3f800633ddb317c9ae3fa4a58b8f6e1d7996113a4b5080609394e53eab0b00b9cbf2bbc2f10b477bc5c0c", &(0x7f0000000440)=""/218, 0x1, 0x0, 0xfa, 0x92, &(0x7f0000000540)="0a2528713edaaf8325eb797c76fee577736b417945d46bf22031406cf42790b7a5c85ff78b2daa1fd052544e7726e60ee97b177e8388782416e0b170a4a072216dbcba18a75122efd86a5e85aefbd53db40170a4d3f859412f8840cea9cf5d8b459dfc9779a57726e56db71f56e5f8b4fee8e2725114b8446075e351094fee5d4e3a0c9b318490d9c03dd86de4d1028bbfd822af0c5a45604af384ed7cecc20c7f65a3c1bc5bb6db4efecd019ec4ae49a578aaa6b739543bdca0946c34a08da797fda3b13f4b83f4d9f31dfdbfb8b7d89cfc9fc3abc036bc9c385f6cfa03eb99c022fb73dd9b40988cd37104b72b8dd0e848b27d654d5632cb9a", &(0x7f0000000640)="a197aa6e052ebe31feaab61918520d1d918c92cb5f436e3d90d289a8790fb1ca0aa0a0be7e427bf14de06b224787270b7ca139012a3ccabce1afcbb3af6c35709247d50258fc174d9106f38846b737afab7723c11ae3c7c28f61e07cd4dd2fcc650948793aa578a60742da38c067e6f8b64cc9ee89eb024f76764559756ca73ca363253bcb49ab5a40f69c7623b7ecc0cb8b", 0x0, 0x0, 0x8}, 0x50) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000780)) (async) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000007c0)=0xe, 0x4) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000800)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000840)=0x28) (async) connect$netlink(r0, &(0x7f0000000880)=@unspec, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000008c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r3, 0x0, {0x0, 0xf0, 0x3}, 0x1}, 0x18) recvmmsg$unix(r0, &(0x7f00000014c0)=[{{&(0x7f0000000940), 0x6e, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/26, 0x1a}], 0x1, &(0x7f0000000a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/136, 0x88}, {&(0x7f0000000c80)=""/86, 0x56}, {&(0x7f0000000d00)=""/52, 0x34}, {&(0x7f0000000d40)=""/16, 0x10}], 0x4, &(0x7f0000000dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000f00)=""/224, 0xe0}, {&(0x7f0000001000)=""/53, 0x35}, {&(0x7f0000001040)=""/82, 0x52}, {&(0x7f00000010c0)=""/72, 0x48}, {&(0x7f0000001140)=""/34, 0x22}, {&(0x7f0000001180)=""/18, 0x12}], 0x6, &(0x7f0000001240)}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)=""/186, 0xba}, {&(0x7f00000013c0)=""/76, 0x4c}], 0x2, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x2022, &(0x7f00000015c0)={0x0, 0x989680}) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000001600)={'macvlan1\x00', {0x2, 0x0, @dev}}) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000001640)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000001680)={0x0, 0x2, 0x2}) (async) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001a80)={0x0, "f8b4a59d6a965d3ac5ed53345f430704"}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000002a80)={0x1a, 0x1, {0x5, @usage, r11, 0x2, 0x8, 0x10001, 0x7, 0x7fffffffffffffff, 0x4, @struct={0x1, 0x3ff}, 0x5, 0x6, [0x2, 0x5, 0x5, 0x2, 0xd, 0x8]}, {0x7f, @usage=0x559a, r12, 0x1, 0xffffffff, 0x9, 0x4, 0x8000000000000001, 0x5, @usage=0x2, 0xf, 0x2, [0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffffffffffff]}, {0xfffffffffffffffd, @usage=0x7, 0x0, 0x10001, 0x1, 0x0, 0x1800, 0x4, 0x88, @struct={0x2, 0x7ec}, 0xb, 0xf3, [0xffffffffffffff0e, 0x2, 0x7, 0x3, 0x2, 0x7]}, {0xf6, 0xff8, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002f00)={'syztnl0\x00', &(0x7f0000002e80)={'ip6tnl0\x00', r3, 0x29, 0x9, 0x5, 0x40, 0x33, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0xca3878de29084c54, 0x8, 0x6, 0xb}}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002f80)=@o_path={&(0x7f0000002f40)='./file0\x00', 0x0, 0x10, r10}, 0x18) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003000), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000003040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x28, r14, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x40) (async) bind$bt_hci(r9, &(0x7f0000003140)={0x1f, 0x2}, 0x6) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003180)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x9, '\x00', r3, r4, 0x3, 0x3, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003200)={0x2, 0x4, 0x8, 0x1, 0x80, r16, 0x7, '\x00', r13, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) 692.988561ms ago: executing program 1 (id=5051): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 692.591013ms ago: executing program 3 (id=5052): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r2, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x72, 0x80, [@mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0xd, 0x18}}, @measure_req={0x26, 0x57, {0x5, 0x2, 0xb5, "d1ae7bd17c8cfd111e6209452a6464ce4ab85356dc802f8088154636cd174bfb0c36671924a7f2a24c3093d585e6956a24874c518ddb4ca5ab2dd282e5de5d2523b95c660efd0d35274d0ac53f9c9f22bfc4178c"}}]}]}, 0x88}}, 0x40004) 599.932893ms ago: executing program 0 (id=5053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 486.713844ms ago: executing program 4 (id=5054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000021000100fdfffffffeffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fe8000000200000000000000000000aae0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b010000043500000a00"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 480.906254ms ago: executing program 1 (id=5055): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fc"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003c00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a'], 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) 299.819976ms ago: executing program 4 (id=5056): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000f80)={{r0, &(0x7f0000000880)=',.]\\\x00', 0x2200, &(0x7f00000000c0)={@_ha_fsid={[0xffff, 0x8001]}, {0x3, 0x2, 0x6, 0xfff}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xfff}, 0x7, &(0x7f0000000e80)=[{0x1, 0x3, &(0x7f0000000180)='%.\x00', &(0x7f00000001c0)="82ac63166f2a7c96365ef1109dd15941f2cf809c197635f3641011252cefd7dc8258be4e4426371246162ab87309d37b674643c59b4e7cf974d6b9637950b8b4a2f2a14ba98494347417ef798cc046384068ae710672d01067cd52f7f6c65ec3f466f0ea89c699a115b4317b854718a6c96579966a2271685ea5edc0bfe124c9cb79594c85c008351f0a4df541946cfd854da9afce0ba03055c059d5e147868b95106f5cfdb821dd387f07f7f0b33b1ff37ab82a9cdb37550b91ced701", 0xbd, 0x8}, {0x1, 0xfffffffe, &(0x7f0000000280)='u[\\%\x00', &(0x7f0000000380)="eb9aee2e860ad7c4ef7c1f607146effdb921347ae41e8f74daeae841b63d8ec9132753a24823cd6fc4cb050fd8c58169e78003a9a7dba5029a8e1eb824903a4a9908709c85717fa16e5952a2ba3622973144fc0cfec791449c995fc08fa7a3e0577fa667708d3105a299a5ed9c40a2207d1fbc394c65d0248d3d2a943303ceb0b5", 0x81, 0xa}, {0x2, 0x1c00, &(0x7f0000000440)='^!\x00', &(0x7f0000000480)="2de75cd97f00b2a34a6281dbbb0adad75b40038f51ac3963484f0872bc2e285c3666f1af22a079d7e21a5ff84334642174665080a32c9774b7fa5863f41bc7493191b0eaafda550b1b6265fc0969115455779baf65c87d63e26c91aef3867e7d0f217df3e945024b121b2a35882c5177de631e387c5c63f5d9e94038dda7b6c5a6e89be6b70b31cab68e1c6b88392d09afe14bc31b8f6fc02978701f7c394501df8b31b03abd69c782027f88c390578963821996cd59d824651f2be506fcaaff16f3eade6b51", 0xc6, 0x38}, {0x1, 0x10000, &(0x7f0000000580)='$}\xa2b@\x88\'\x00', &(0x7f00000005c0)="77f391f26d5f215df03a6cae2006abf0fd68a76128fda2043fa53b2dcf0062c41fc2c54ef1c75cf6b1756d532714f5a682f3f8e3e7dd837d89aca7b41c7d9f3218d111804ab32bc6c5962b5ae8d32945e69416203a509b6e1725964c914a37794f2971bf2d8dcbc3a2", 0x69}, {0x1, 0x8, &(0x7f0000000640)='\x00', &(0x7f0000000780)="417cbf127b1f034193f5d057b34c7ff5e10132bf64eeb348ebb961aefac778b8e49fa779e1088f606f36cea5eee328fd56112fe341850c1912627252de6f71a6aca4266dfb00d39210b24cfed7fb5d8376b9d974fe70481dd8309d13e13e8c574deca8b9372764c289e1fe70181a7c0d8bd64d55d575bcbdb9c5fdcd8978a2fee89a3a7795a4e3494442656e89bfdd9918c08e3aa77a93efe8723261c7b2c318275d04df6402b7eec5f9ecfec25d6293e6491c854ea6c934", 0xb8, 0x3a}, {0x1, 0x1000, &(0x7f0000000840)='--\x00', &(0x7f0000000d00)="5a295578d49e0397ddb0f87916f0d1ebc334ed23b67902ccbc21af6986ce7cce8511390a911463215d522c5d5edfe09db226042b41a3ba6bd7ebb6ab8fb45a0376980fe492e0e05f705b075dbb947f2dd13829ccb769b57b52300bebed910eaa67a67ff1ead5977645dee38c63f7252ab348eaeeea19945cc567280c838ad4ee973c9237eca481ce0a86531a1c330e139391551ede70f454978d8d83a3b53b95862fa198914b2d79ee763ea9f4db44e979c5a846dea1b20bc568ee11836df0a22311533e48ecc7", 0xc7, 0xa}, {0x2, 0x6, &(0x7f0000000e00)='-\x00', &(0x7f0000000e40)="f63e9fc33cc1c2b6b23d83b28f6364822d300be93acb55bbbebe969a909df42d1a6160fd9c05b9e336", 0x29, 0xa}]}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) splice(r1, &(0x7f0000000b80)=0xf, r1, &(0x7f0000000bc0)=0x7, 0x9, 0xd) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="000000c5fc8e3097", @ANYRES16=r4, @ANYBLOB="010026bd300000dcdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000560000001400040073797a6b616c6c657230000000000000080005000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x55, 0x6d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r1, 0x58, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x9, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x6, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x3, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000012c0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x98, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r14, @ANYBLOB="00001700000000001c0037"], 0x44}}, 0x0) r15 = socket(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 265.067039ms ago: executing program 3 (id=5057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff086dd1fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x9b3, [{0x7, 0x1, 0xb}, {0x8, 0x1, 0x1}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x5}, @restrict={0xb, 0x0, 0x0, 0xb, 0x1}, @float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000cc0)=""/4096, 0x74, 0x1000, 0x0, 0xffc000}, 0x28) 258.395983ms ago: executing program 0 (id=5058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x7044}, 0x20004800) 0s ago: executing program 3 (id=5059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1801}, 0x1001) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044893}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x5, 0x3, 0x1000000}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61]}}, 0x0, 0x4f}, 0x28) r3 = gettid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r4 = socket(0x2, 0x80805, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x2, 0x104, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000504cab50422894b8b01e4cb400bfa200000000000007020000f8ffffffb7030000080000010000009500"/77], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffa, 0x1fd, 0x42000}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES16=r7], 0x28}}, 0x0) r8 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$SIOCGETSGCNT(r8, 0x89e1, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000029"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000200), 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): sim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.448890][T12367] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.553041][T19236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.578909][T19236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.594097][T12367] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.615433][T12367] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.726149][T19236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.852387][T19593] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3389'. [ 467.082287][T19236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.098310][T19236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 467.145547][T19236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.172624][T19236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.194461][T19236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.221438][T19598] ipip0: entered promiscuous mode [ 467.432204][T19624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3392'. [ 467.641001][T12371] team0 (unregistering): Port device veth1_to_hsr removed [ 467.885653][T12363] smbdirect: ib_dev[syz2] removed [ 468.293201][T19236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.339752][T19659] netlink: 'syz.0.3397': attribute type 1 has an invalid length. [ 468.358047][T19236] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.456421][T19659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.570505][T19661] bond3: (slave gretap1): making interface the new active one [ 468.601057][T19661] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 468.638419][T12371] IPVS: stop unused estimator thread 0... [ 468.649686][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.656891][T12363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.718178][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3400'. [ 468.730239][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.737525][T12363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.862110][T19674] netlink: 'syz.4.3400': attribute type 5 has an invalid length. [ 468.889011][T19681] netlink: 'syz.3.3402': attribute type 10 has an invalid length. [ 468.899659][T19674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 468.912991][T19681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3402'. [ 468.957997][T19681] team0: Port device geneve1 added [ 469.229107][T19696] netlink: zone id is out of range [ 469.251263][T19696] netlink: zone id is out of range [ 469.270721][T19696] netlink: zone id is out of range [ 469.289770][T19696] netlink: zone id is out of range [ 469.321372][T19696] netlink: zone id is out of range [ 469.340272][T19696] netlink: zone id is out of range [ 469.353677][T19696] netlink: zone id is out of range [ 469.379030][T19696] netlink: zone id is out of range [ 469.404355][T19696] netlink: zone id is out of range [ 469.426164][T19696] netlink: zone id is out of range [ 469.942495][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 469.969768][T19715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3406'. [ 470.065708][T19236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.085975][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3407'. [ 470.227417][T19236] veth0_vlan: entered promiscuous mode [ 470.234782][T19721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3408'. [ 470.256550][T19236] veth1_vlan: entered promiscuous mode [ 470.372316][T19236] veth0_macvtap: entered promiscuous mode [ 470.411310][T19236] veth1_macvtap: entered promiscuous mode [ 470.468934][T19236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.512578][T19236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.571466][T12372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.606049][T12372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.631594][T12372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.651761][T12372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.737174][T19736] syzkaller0: entered promiscuous mode [ 470.754675][T19736] syzkaller0: entered allmulticast mode [ 470.772477][T19736] batadv_slave_1: entered promiscuous mode [ 470.892375][T19735] batadv_slave_1: left promiscuous mode [ 470.912698][T12364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.928716][T12364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.022450][T12378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.042861][T12378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.175121][T19748] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3418'. [ 471.230247][T19753] bridge0: port 3(erspan0) entered blocking state [ 471.253992][T19753] bridge0: port 3(erspan0) entered disabled state [ 471.267423][T19753] erspan0: entered allmulticast mode [ 471.299191][T19753] erspan0: entered promiscuous mode [ 471.317109][T19753] bridge0: port 3(erspan0) entered blocking state [ 471.325060][T19753] bridge0: port 3(erspan0) entered forwarding state [ 471.408353][T19756] erspan0: left allmulticast mode [ 471.422575][T19756] erspan0: left promiscuous mode [ 471.440541][T19756] bridge0: port 3(erspan0) entered disabled state [ 471.450345][T19753] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3419'. [ 471.480948][T19753] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3419'. [ 471.510174][T19763] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 471.642642][T19755] syzkaller1: entered promiscuous mode [ 471.655766][T19755] syzkaller1: entered allmulticast mode [ 471.686896][T19775] netlink: 'syz.2.3425': attribute type 32 has an invalid length. [ 471.696529][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 471.771528][T19775] bond1: option coupled_control: invalid value (12) [ 471.786802][T19775] bond1 (unregistering): Released all slaves [ 471.959731][T19782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3427'. [ 472.039558][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 472.132468][T19794] netlink: 'syz.0.3431': attribute type 10 has an invalid length. [ 472.196995][T19794] team0: Port device geneve1 added [ 472.458765][T12371] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 475.342247][T19806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.151844][T19872] __nla_validate_parse: 5 callbacks suppressed [ 494.151929][T19872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3449'. [ 494.212794][T19856] lo speed is unknown, defaulting to 1000 [ 494.593346][T19892] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 494.618428][T19892] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 494.810511][T19906] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 494.892787][T19909] xt_addrtype: ipv6 does not support BROADCAST matching [ 495.166259][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'. [ 495.188522][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'. [ 495.421480][T19940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 495.831127][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'. [ 496.963064][T19988] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3478'. [ 496.972291][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3478'. [ 496.982612][T19988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'. [ 498.128452][T19919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.365507][T19995] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3482'. [ 498.370451][T19996] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3480'. [ 498.399810][T19995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3482'. [ 498.432695][T20002] ipip0: entered promiscuous mode [ 498.627029][T20014] tipc: Enabling of bearer rejected, failed to enable media [ 498.681405][T20020] netlink: 'syz.1.3490': attribute type 7 has an invalid length. [ 498.710370][T20020] : entered promiscuous mode [ 499.005737][T12378] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.023726][T12378] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.044291][T12378] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.063168][T12378] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.487015][T20052] __nla_validate_parse: 4 callbacks suppressed [ 499.487031][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3499'. [ 499.579179][T20058] bond0: entered promiscuous mode [ 499.602513][T20058] bond_slave_0: entered promiscuous mode [ 499.624260][T20058] bond_slave_1: entered promiscuous mode [ 499.861901][T20078] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3508'. [ 499.959610][T20075] bond4: entered promiscuous mode [ 499.986059][T20075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 500.137410][T20099] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3514'. [ 500.235656][T20104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3516'. [ 500.270111][T20104] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3516'. [ 500.289220][T20106] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 500.306905][T20106] netlink: 'syz.4.3517': attribute type 2 has an invalid length. [ 500.315775][T20106] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 500.323684][T20094] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3515'. [ 500.531492][T20125] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3522'. [ 500.651869][T20122] IPVS: Scheduler module ip_vs_ not found [ 500.839744][T20139] net_ratelimit: 169 callbacks suppressed [ 500.839761][T20139] netlink: zone id is out of range [ 500.871272][T20139] netlink: zone id is out of range [ 500.885143][T20139] netlink: zone id is out of range [ 500.906555][T20139] netlink: zone id is out of range [ 500.925726][T20139] netlink: zone id is out of range [ 500.954692][T20139] netlink: zone id is out of range [ 500.977050][T20139] netlink: zone id is out of range [ 501.001317][T20139] netlink: zone id is out of range [ 501.023964][T20139] netlink: zone id is out of range [ 501.046791][T20139] netlink: zone id is out of range [ 501.066163][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3530'. [ 501.078709][T20150] netlink: 'syz.4.3531': attribute type 1 has an invalid length. [ 501.290346][T20165] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3535'. [ 501.517736][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'. [ 501.677228][T20174] vlan2: entered promiscuous mode [ 501.685707][T20174] bond0: entered promiscuous mode [ 501.703201][T20174] bond_slave_0: entered promiscuous mode [ 501.710741][T20174] bond_slave_1: entered promiscuous mode [ 501.777707][T20177] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 502.153980][T20210] xt_hashlimit: size too large, truncated to 1048576 [ 502.689728][T20225] ip6gre1: entered promiscuous mode [ 502.717753][T20225] ip6gre1: entered allmulticast mode [ 502.800634][T20230] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 502.864285][T20230] batman_adv: batadv0: Adding interface: gretap1 [ 502.902604][T20230] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.960295][T20230] batman_adv: batadv0: Interface activated: gretap1 [ 503.188447][T20253] netlink: 'syz.4.3566': attribute type 1 has an invalid length. [ 503.250721][T20253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.258752][T12378] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.279344][T12378] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.290423][ T7424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.336744][T20253] bond1: (slave gretap1): making interface the new active one [ 503.353365][T20262] netlink: 'syz.1.3570': attribute type 1 has an invalid length. [ 503.361559][T20262] netlink: 'syz.1.3570': attribute type 1 has an invalid length. [ 503.372164][T20262] netlink: 'syz.1.3570': attribute type 2 has an invalid length. [ 503.373195][T20253] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 503.380501][T20262] netlink: 'syz.1.3570': attribute type 2 has an invalid length. [ 503.380525][T20262] netlink: 'syz.1.3570': attribute type 2 has an invalid length. [ 503.424226][T20264] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 503.464558][ T7424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.805327][ T7424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.916331][T20287] xt_hashlimit: size too large, truncated to 1048576 [ 503.937660][T20284] sctp: [Deprecated]: syz.4.3577 (pid 20284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.937660][T20284] Use struct sctp_sack_info instead [ 504.749926][T20320] Bluetooth: MGMT ver 1.23 [ 504.764156][T20320] Bluetooth: hci1: too big key_count value 29096 [ 505.990620][T20363] __nla_validate_parse: 14 callbacks suppressed [ 505.990640][T20363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3602'. [ 506.166511][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3606'. [ 506.384866][T20380] syzkaller0: entered promiscuous mode [ 506.390407][T20380] syzkaller0: entered allmulticast mode [ 506.479731][T20387] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3609'. [ 506.939153][T20399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.979471][T20399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 507.005820][T20399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 507.026076][T20399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 507.046518][T20399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 507.073071][T20399] ipip0: left promiscuous mode [ 507.096411][T20399] bond4: left promiscuous mode [ 507.696953][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.113581][T20408] tipc: Cannot configure node identity twice [ 509.150275][T12371] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 509.260356][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 509.308912][T20431] validate_nla: 7 callbacks suppressed [ 509.308926][T20431] netlink: 'syz.0.3622': attribute type 30 has an invalid length. [ 509.332645][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 509.344936][T20433] netlink: 'syz.0.3622': attribute type 30 has an invalid length. [ 509.399067][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 509.399518][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 509.413060][T12378] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.423770][T20435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3623'. [ 509.441383][T12378] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.451559][T20431] netlink: 'syz.0.3622': attribute type 30 has an invalid length. [ 509.471753][T20433] netlink: 'syz.0.3622': attribute type 30 has an invalid length. [ 509.487586][T12378] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.515536][T12378] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.753287][T20456] netlink: 'syz.2.3630': attribute type 10 has an invalid length. [ 509.837478][T20470] debugfs: '1ùà^!‚Y‡°”õËí [ 509.837478][T20470] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 509.893358][T20475] tap0: tun_chr_ioctl cmd 1074025677 [ 509.900239][T20475] tap0: linktype set to 773 [ 509.998034][T20479] pimreg: entered allmulticast mode [ 510.025651][T20475] : entered promiscuous mode [ 510.047971][T20477] syzkaller0: entered promiscuous mode [ 510.056769][T20477] syzkaller0: entered allmulticast mode [ 510.777147][T20511] netlink: 'syz.2.3642': attribute type 1 has an invalid length. [ 510.813107][T20514] sctp: [Deprecated]: syz.4.3643 (pid 20514) Use of int in maxseg socket option. [ 510.813107][T20514] Use struct sctp_assoc_value instead [ 510.966232][T20521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3642'. [ 511.296563][T20541] netlink: 'syz.3.3650': attribute type 1 has an invalid length. [ 511.309986][T20542] netlink: 'syz.3.3650': attribute type 1 has an invalid length. [ 511.322189][T20541] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.3650'. [ 511.336232][T20542] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.3650'. [ 511.346324][T20541] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3650'. [ 511.446763][T20548] FAULT_INJECTION: forcing a failure. [ 511.446763][T20548] name failslab, interval 1, probability 0, space 0, times 0 [ 511.462204][T20548] CPU: 0 UID: 0 PID: 20548 Comm: syz.2.3652 Not tainted syzkaller #0 PREEMPT(full) [ 511.462227][T20548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.462237][T20548] Call Trace: [ 511.462244][T20548] [ 511.462251][T20548] dump_stack_lvl+0xe8/0x150 [ 511.462275][T20548] should_fail_ex+0x412/0x560 [ 511.462298][T20548] should_failslab+0xa8/0x100 [ 511.462314][T20548] ? skb_clone+0x212/0x3a0 [ 511.462333][T20548] kmem_cache_alloc_noprof+0x87/0x650 [ 511.462355][T20548] ? __netlink_lookup+0xc6/0x8b0 [ 511.462379][T20548] skb_clone+0x212/0x3a0 [ 511.462399][T20548] __netlink_deliver_tap+0x404/0x850 [ 511.462429][T20548] ? netlink_deliver_tap+0x2e/0x1b0 [ 511.462449][T20548] netlink_deliver_tap+0x19c/0x1b0 [ 511.462470][T20548] netlink_unicast+0x730/0x8e0 [ 511.462496][T20548] netlink_sendmsg+0x813/0xb40 [ 511.462523][T20548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.462543][T20548] ? aa_sock_msg_perm+0xf1/0x1b0 [ 511.462567][T20548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.462592][T20548] ____sys_sendmsg+0x972/0x9f0 [ 511.462610][T20548] ? __might_fault+0xaf/0x130 [ 511.462636][T20548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.462662][T20548] ? import_iovec+0x73/0xa0 [ 511.462684][T20548] ___sys_sendmsg+0x2a5/0x360 [ 511.462702][T20548] ? __lock_acquire+0x6b5/0x2cf0 [ 511.462722][T20548] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.462776][T20548] ? __fget_files+0x2a/0x420 [ 511.462793][T20548] ? __fget_files+0x3a0/0x420 [ 511.462820][T20548] __x64_sys_sendmsg+0x1bd/0x2a0 [ 511.462843][T20548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.462869][T20548] ? __pfx_ksys_write+0x10/0x10 [ 511.462907][T20548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.462924][T20548] do_syscall_64+0x174/0x580 [ 511.462940][T20548] ? trace_irq_disable+0x3b/0x140 [ 511.462962][T20548] ? clear_bhb_loop+0x40/0x90 [ 511.462982][T20548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.462998][T20548] RIP: 0033:0x7fc619b9ce59 [ 511.463014][T20548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.463029][T20548] RSP: 002b:00007fc617df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.463047][T20548] RAX: ffffffffffffffda RBX: 00007fc619e15fa0 RCX: 00007fc619b9ce59 [ 511.463059][T20548] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 511.463069][T20548] RBP: 00007fc617df6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.463079][T20548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.463088][T20548] R13: 00007fc619e16038 R14: 00007fc619e15fa0 R15: 00007ffde691e008 [ 511.463117][T20548] [ 511.918077][T20564] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3656'. [ 512.023002][T20563] lo speed is unknown, defaulting to 1000 [ 512.600086][T20595] lo speed is unknown, defaulting to 1000 [ 512.717945][T20600] syzkaller0: entered promiscuous mode [ 512.734732][T20600] syzkaller0: entered allmulticast mode [ 513.416019][T20628] mac80211_hwsim hwsim57 ªªªªª;: renamed from wlan0 [ 513.437951][T20629] syz.3.3671: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 513.463710][T20629] CPU: 1 UID: 0 PID: 20629 Comm: syz.3.3671 Not tainted syzkaller #0 PREEMPT(full) [ 513.463732][T20629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 513.463742][T20629] Call Trace: [ 513.463749][T20629] [ 513.463757][T20629] dump_stack_lvl+0xe8/0x150 [ 513.463781][T20629] warn_alloc+0x249/0x340 [ 513.463805][T20629] ? stack_trace_save+0xa9/0x100 [ 513.463830][T20629] ? __pfx_warn_alloc+0x10/0x10 [ 513.463858][T20629] ? kasan_save_track+0x4f/0x80 [ 513.463877][T20629] ? kasan_save_track+0x3e/0x80 [ 513.463894][T20629] ? __kasan_kmalloc+0x93/0xb0 [ 513.463913][T20629] ? __kmalloc_cache_noprof+0x31c/0x660 [ 513.463932][T20629] ? xskq_create+0x56/0x170 [ 513.463953][T20629] ? xsk_setsockopt+0x54c/0x990 [ 513.463970][T20629] ? do_sock_setsockopt+0x17c/0x1b0 [ 513.463985][T20629] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 513.463999][T20629] ? do_syscall_64+0x174/0x580 [ 513.464020][T20629] __vmalloc_node_range_noprof+0x132/0x1750 [ 513.464066][T20629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 513.464092][T20629] ? __kasan_kmalloc+0x93/0xb0 [ 513.464115][T20629] vmalloc_user_noprof+0xad/0xe0 [ 513.464135][T20629] ? xskq_create+0xbf/0x170 [ 513.464155][T20629] xskq_create+0xbf/0x170 [ 513.464175][T20629] xsk_init_queue+0x8a/0xe0 [ 513.464197][T20629] xsk_setsockopt+0x54c/0x990 [ 513.464219][T20629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 513.464248][T20629] ? __pfx_aa_sk_perm+0x10/0x10 [ 513.464272][T20629] ? aa_sock_opt_perm+0xff/0x1a0 [ 513.464303][T20629] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 513.464323][T20629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 513.464342][T20629] do_sock_setsockopt+0x17c/0x1b0 [ 513.464363][T20629] __x64_sys_setsockopt+0x13d/0x1b0 [ 513.464382][T20629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.464399][T20629] do_syscall_64+0x174/0x580 [ 513.464414][T20629] ? trace_irq_disable+0x3b/0x140 [ 513.464435][T20629] ? clear_bhb_loop+0x40/0x90 [ 513.464455][T20629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.464470][T20629] RIP: 0033:0x7f16ae79ce59 [ 513.464486][T20629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.464499][T20629] RSP: 002b:00007f16af5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 513.464516][T20629] RAX: ffffffffffffffda RBX: 00007f16aea16090 RCX: 00007f16ae79ce59 [ 513.464527][T20629] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 513.464537][T20629] RBP: 00007f16ae832d6f R08: 0000000000000004 R09: 0000000000000000 [ 513.464546][T20629] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.464556][T20629] R13: 00007f16aea16128 R14: 00007f16aea16090 R15: 00007fff111318c8 [ 513.464584][T20629] [ 513.464638][T20629] Mem-Info: [ 513.763556][T20629] active_anon:6096 inactive_anon:0 isolated_anon:0 [ 513.763556][T20629] active_file:3025 inactive_file:40458 isolated_file:0 [ 513.763556][T20629] unevictable:768 dirty:215 writeback:0 [ 513.763556][T20629] slab_reclaimable:12125 slab_unreclaimable:174304 [ 513.763556][T20629] mapped:29534 shmem:1344 pagetables:3456 [ 513.763556][T20629] sec_pagetables:0 bounce:0 [ 513.763556][T20629] kernel_misc_reclaimable:0 [ 513.763556][T20629] free:1222245 free_pcp:22368 free_cma:0 [ 513.826023][T20629] Node 0 active_anon:24384kB inactive_anon:0kB active_file:12100kB inactive_file:161632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97756kB dirty:860kB writeback:0kB shmem:3840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14980kB pagetables:13476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 513.861784][T20629] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 513.915774][T20629] Node 0 DMA free:15336kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:16kB free_cma:0kB [ 513.952919][T20629] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 513.960098][T20629] Node 0 DMA32 free:1025932kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24284kB inactive_anon:0kB active_file:12100kB inactive_file:161632kB unevictable:1536kB writepending:860kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:38892kB local_pcp:21328kB free_cma:0kB [ 513.980165][T20646] syzkaller0: entered promiscuous mode [ 514.053856][T20629] lowmem_reserve[]: 0 0 0 0 0 [ 514.068044][T20629] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 514.075429][T20646] syzkaller0: entered allmulticast mode [ 514.108994][T20629] lowmem_reserve[]: 0 0 0 0 0 [ 514.155455][T20656] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3676'. [ 514.165148][T20656] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3676'. [ 514.175615][T20629] Node 1 Normal free:3846584kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:50336kB local_pcp:31436kB free_cma:0kB [ 514.213809][T20629] lowmem_reserve[]: 0 0 0 0 0 [ 514.218627][T20629] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15336kB [ 514.250028][T20629] Node 0 DMA32: 5165*4kB (UME) 5812*8kB (UME) 2764*16kB (UME) 595*32kB (UME) 462*64kB (UME) 1154*128kB (UME) 787*256kB (UME) 426*512kB (UME) 178*1024kB (UM) 57*2048kB (UME) 1*4096kB (U) = 1030388kB [ 514.290080][T20629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 514.313623][T20629] Node 1 Normal: 0*4kB 8*8kB (UM) 14*16kB (UM) 10*32kB (UM) 11*64kB (UM) 10*128kB (UM) 8*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 934*4096kB (UM) = 3846688kB [ 514.353714][T20629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.366861][T20629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 514.390975][T20629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.400840][T20629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 514.410217][T20629] 44823 total pagecache pages [ 514.416651][T20629] 0 pages in swap cache [ 514.421636][T20629] Free swap = 124996kB [ 514.425863][T20629] Total swap = 124996kB [ 514.430021][T20629] 2097051 pages RAM [ 514.434157][T20658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3676'. [ 514.443541][T20629] 0 pages HighMem/MovableOnly [ 514.448257][T20629] 427116 pages reserved [ 514.452462][T20629] 0 pages cma reserved [ 514.457077][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3676'. [ 514.548334][T20667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3682'. [ 514.567206][T20667] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3682'. [ 514.606354][T20670] netlink: 'syz.0.3679': attribute type 1 has an invalid length. [ 514.675914][T20670] bond5: entered promiscuous mode [ 514.681654][T20670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.706937][T20671] tipc: Enabling of bearer rejected, failed to enable media [ 514.741257][T20667] netlink: 'syz.4.3682': attribute type 8 has an invalid length. [ 514.754820][T20670] macvtap1: entered allmulticast mode [ 514.852059][T20670] bond5: (slave bridge2): making interface the new active one [ 514.861938][T20670] bridge2: entered promiscuous mode [ 514.869898][T20670] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 515.076772][T20706] gretap0: entered promiscuous mode [ 515.093557][T20706] vlan0: entered promiscuous mode [ 515.648588][T20738] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 515.942421][T20755] geneve2: entered promiscuous mode [ 515.954211][T20755] geneve2: entered allmulticast mode [ 516.013640][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.019896][T20765] syzkaller0: entered promiscuous mode [ 516.078221][T20765] syzkaller0: entered allmulticast mode [ 516.397901][T20784] __nla_validate_parse: 6 callbacks suppressed [ 516.397917][T20784] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3714'. [ 516.433475][T20789] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3712'. [ 516.473196][T20791] net_ratelimit: 45 callbacks suppressed [ 516.473212][T20791] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 516.793973][T12363] vlan4: left allmulticast mode [ 516.825698][T12363] dummy0: left allmulticast mode [ 516.877062][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 516.886075][T12363] vlan4: left promiscuous mode [ 516.900950][T12363] dummy0: left promiscuous mode [ 516.917622][T12363] bridge0: port 4(vlan4) entered disabled state [ 516.940326][T12363] batadv1: left allmulticast mode [ 516.954882][T20817] netlink: 712 bytes leftover after parsing attributes in process `syz.3.3721'. [ 516.982722][T12363] batadv1: left promiscuous mode [ 516.989211][T12363] bridge0: port 3(batadv1) entered disabled state [ 516.996343][T20817] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.3721'. [ 517.008804][T20817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3721'. [ 517.028435][T12363] bridge_slave_1: left allmulticast mode [ 517.048102][T12363] bridge_slave_1: left promiscuous mode [ 517.072716][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.106488][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 517.119259][T12363] bridge_slave_0: left allmulticast mode [ 517.136806][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 517.140069][T12363] bridge_slave_0: left promiscuous mode [ 517.167307][T20826] netlink: 'syz.1.3725': attribute type 30 has an invalid length. [ 517.172037][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.217043][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 517.238109][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 517.267588][T12363] gretap2: left allmulticast mode [ 517.279701][T12363] gretap2: left promiscuous mode [ 517.291587][T12363] bridge9: port 1(gretap2) entered disabled state [ 518.288288][T12363] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 518.300616][T12363] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 518.377834][T12363]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.388140][T12363]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.397434][T12363]  (unregistering): Released all slaves [ 518.407144][T12363] bond1 (unregistering): Released all slaves [ 518.428051][T12363] bond2 (unregistering): Released all slaves [ 518.440861][T12363] bond3 (unregistering): Released all slaves [ 518.458386][T12363] bond4 (unregistering): Released all slaves [ 518.475755][T12363] bond5 (unregistering): Released all slaves [ 518.490101][T12363] bond6 (unregistering): Released all slaves [ 518.503612][T12363] bond7 (unregistering): Released all slaves [ 518.519964][T12363] bond8 (unregistering): (slave veth3): Releasing active interface [ 518.529644][T12363] bond8 (unregistering): Released all slaves [ 518.547151][T12363] bond9 (unregistering): Released all slaves [ 518.567692][T12363] bond10 (unregistering): Released all slaves [ 518.588570][T12363] bond11 (unregistering): (slave veth9): Releasing active interface [ 518.597248][T12363] bond11 (unregistering): Released all slaves [ 518.610777][T12363] bond0 (unregistering): Released all slaves [ 518.734104][T20805] Bluetooth: hci5: command 0x0406 tx timeout [ 518.850112][T12363] : left promiscuous mode [ 518.951852][T12363] amó3)óÿ: left promiscuous mode [ 519.136427][T12363] tipc: Disabling bearer [ 519.150658][T12363] tipc: Left network mode [ 519.165211][T20874] netlink: 'syz.2.3736': attribute type 12 has an invalid length. [ 519.216349][T20881] tap0: tun_chr_ioctl cmd 2147767520 [ 519.705658][T20892] syzkaller0: entered promiscuous mode [ 519.713007][T20892] syzkaller0: entered allmulticast mode [ 521.831127][T20920] batman_adv: batadv0: Adding interface: macvtap1 [ 521.844000][T20920] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.875341][T20920] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 522.119036][ T7424] IPVS: starting estimator thread 0... [ 522.254474][T20937] IPVS: using max 34 ests per chain, 81600 per kthread [ 522.295020][T20947] __nla_validate_parse: 2 callbacks suppressed [ 522.295036][T20947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3749'. [ 522.325040][T20945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3749'. [ 522.578219][T20952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.709753][T20961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3753'. [ 522.760104][T20962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3753'. [ 522.765974][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3753'. [ 522.814638][T20966] netlink: 508 bytes leftover after parsing attributes in process `syz.1.3754'. [ 522.833513][T20966] openvswitch: netlink: Flow key attr not present in new flow. [ 522.993094][T20974] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3757'. [ 523.023347][T20974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 523.066126][T20974] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3757'. [ 523.109380][T20974] netlink: 'syz.2.3757': attribute type 2 has an invalid length. [ 523.117921][T20974] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3757'. [ 523.286101][T12363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.337917][T12363] batman_adv: batadv0: Removing interface: dummy0 [ 523.957226][T12363] team0 (unregistering): Port device team_slave_1 removed [ 524.115487][T12366] smbdirect: ib_dev[syú2] removed [ 524.460363][T21032] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1508 [ 524.567843][T21032] lo: Caught tx_queue_len zero misconfig [ 524.782107][T12363] IPVS: stop unused estimator thread 0... [ 525.191548][T21056] netlink: 'syz.1.3778': attribute type 7 has an invalid length. [ 525.226945][T21056] netlink: 'syz.1.3778': attribute type 8 has an invalid length. [ 527.317435][T21181] netlink: 'syz.0.3802': attribute type 1 has an invalid length. [ 527.339870][T21181] netlink: 'syz.0.3802': attribute type 2 has an invalid length. [ 527.391941][T21181] __nla_validate_parse: 24 callbacks suppressed [ 527.391957][T21181] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3802'. [ 527.439006][T21181] bond0 (unregistering): Released all slaves [ 527.581012][T21191] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3803'. [ 527.608214][T21190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 527.771438][T21198] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 527.856468][T21206] netlink: 'syz.1.3806': attribute type 1 has an invalid length. [ 527.868830][T21207] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3807'. [ 527.908436][T21210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3806'. [ 527.928988][T21207] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 528.077636][T21206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.097418][T21213] bond3: entered promiscuous mode [ 528.115311][T21213] bond3: entered allmulticast mode [ 528.141921][ T7602] syzkaller1: tun_net_xmit 76 [ 528.158921][ T7602] syzkaller1: tun_net_xmit 48 [ 528.167272][ T807] syzkaller1: tun_net_xmit 76 [ 528.345360][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3812'. [ 530.815840][T21229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.858877][T21229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.993198][T21242] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3817'. [ 531.089679][T21247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3819'. [ 531.114207][T21249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3820'. [ 531.126205][T21256] x_tables: ip_tables: ah match: only valid for protocol 51 [ 531.254487][T21264] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3822'. [ 531.290158][T21261] tipc: Started in network mode [ 531.300380][T21261] tipc: Node identity eed2c2579b86, cluster identity 4711 [ 531.310458][T21261] tipc: Enabled bearer , priority 0 [ 531.334195][T21261] syzkaller0: entered promiscuous mode [ 531.351744][T21261] syzkaller0: entered allmulticast mode [ 531.396508][T21261] tipc: Resetting bearer [ 531.440497][T21258] tipc: Resetting bearer [ 531.485431][T21258] tipc: Disabling bearer [ 531.884165][T21290] block nbd0: Unsupported socket: should be TCP or UNIX. [ 532.025017][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.128673][T21306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3834'. [ 532.143192][T21302] erspan0: entered promiscuous mode [ 532.193035][T21306] netlink: 'syz.4.3834': attribute type 3 has an invalid length. [ 532.450344][T21309] team0: Port device geneve1 removed [ 532.476507][T21309] bond2: (slave veth3): Releasing active interface [ 532.490977][T21309] bond2: (slave veth3): the permanent HWaddr of slave - da:f6:1d:a2:3f:8d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 532.529315][T21309] batadv1: entered promiscuous mode [ 532.553441][T21309] bond2: (slave batadv1): Releasing active interface [ 532.570332][T21309] batadv1: left promiscuous mode [ 532.628018][T21309] bond3: (slave gretap1): Releasing active interface [ 532.702404][T21317] x_tables: duplicate underflow at hook 2 [ 532.824598][T21309] bond5: (slave bridge2): Releasing backup interface [ 532.851558][T21309] bridge2: left promiscuous mode [ 532.879961][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 532.901943][T21321] netlink: 'syz.3.3838': attribute type 40 has an invalid length. [ 532.936772][T21313] bridge0: port 3(vlan0) entered blocking state [ 532.943649][T21313] bridge0: port 3(vlan0) entered disabled state [ 532.961761][T21313] vlan0: entered allmulticast mode [ 532.988807][T21313] dummy0: entered allmulticast mode [ 532.997374][T21313] vlan0: entered promiscuous mode [ 533.002549][T21313] dummy0: entered promiscuous mode [ 533.504796][T21345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'. [ 534.035175][T21372] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 534.052223][T21372] CPU: 0 UID: 0 PID: 21372 Comm: syz.0.3853 Not tainted syzkaller #0 PREEMPT(full) [ 534.052245][T21372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.052256][T21372] Call Trace: [ 534.052263][T21372] [ 534.052271][T21372] dump_stack_lvl+0xe8/0x150 [ 534.052297][T21372] sysfs_warn_dup+0x8e/0xa0 [ 534.052321][T21372] sysfs_do_create_link_sd+0xc0/0x110 [ 534.052345][T21372] device_add_class_symlinks+0x1cf/0x240 [ 534.052375][T21372] device_add+0x475/0xbb0 [ 534.052404][T21372] wiphy_register+0x1fb1/0x2fe0 [ 534.052444][T21372] ? __pfx_wiphy_register+0x10/0x10 [ 534.052469][T21372] ? __pfx_netdev_run_todo+0x10/0x10 [ 534.052490][T21372] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 534.052519][T21372] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 534.052548][T21372] ieee80211_register_hw+0x3c53/0x4910 [ 534.052578][T21372] ? ieee80211_register_hw+0x19b1/0x4910 [ 534.052621][T21372] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 534.052644][T21372] ? __asan_memset+0x22/0x50 [ 534.052675][T21372] ? __hrtimer_setup+0x1b7/0x260 [ 534.052696][T21372] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 534.052719][T21372] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 534.052767][T21372] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 534.052788][T21372] ? __asan_memcpy+0x40/0x70 [ 534.052816][T21372] hwsim_new_radio_nl+0xd96/0xfa0 [ 534.052850][T21372] genl_family_rcv_msg_doit+0x22a/0x330 [ 534.052879][T21372] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 534.052917][T21372] ? bpf_lsm_capable+0x9/0x20 [ 534.052934][T21372] ? security_capable+0x7e/0x2c0 [ 534.052963][T21372] genl_rcv_msg+0x61c/0x7a0 [ 534.052993][T21372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.053014][T21372] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 534.053047][T21372] netlink_rcv_skb+0x232/0x4b0 [ 534.053067][T21372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.053092][T21372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.053125][T21372] ? down_read+0x270/0x2e0 [ 534.053142][T21372] ? genl_rcv+0xd/0x40 [ 534.053163][T21372] genl_rcv+0x28/0x40 [ 534.053183][T21372] netlink_unicast+0x75c/0x8e0 [ 534.053212][T21372] netlink_sendmsg+0x813/0xb40 [ 534.053240][T21372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.053262][T21372] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.053286][T21372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.053310][T21372] ____sys_sendmsg+0x972/0x9f0 [ 534.053328][T21372] ? __might_fault+0xaf/0x130 [ 534.053356][T21372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.053385][T21372] ? import_iovec+0x73/0xa0 [ 534.053407][T21372] ___sys_sendmsg+0x2a5/0x360 [ 534.053423][T21372] ? __lock_acquire+0x6b5/0x2cf0 [ 534.053447][T21372] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.053473][T21372] ? futex_wake+0x4ac/0x580 [ 534.053522][T21372] ? __fget_files+0x2a/0x420 [ 534.053541][T21372] ? __fget_files+0x3a0/0x420 [ 534.053572][T21372] __x64_sys_sendmsg+0x1bd/0x2a0 [ 534.053594][T21372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.053623][T21372] ? rcu_is_watching+0x15/0xb0 [ 534.053654][T21372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.053682][T21372] do_syscall_64+0x174/0x580 [ 534.053699][T21372] ? trace_irq_disable+0x3b/0x140 [ 534.053723][T21372] ? clear_bhb_loop+0x40/0x90 [ 534.053745][T21372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.053762][T21372] RIP: 0033:0x7fce7479ce59 [ 534.053780][T21372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.053794][T21372] RSP: 002b:00007fce75653028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.053812][T21372] RAX: ffffffffffffffda RBX: 00007fce74a15fa0 RCX: 00007fce7479ce59 [ 534.053823][T21372] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 534.053832][T21372] RBP: 00007fce74832d6f R08: 0000000000000000 R09: 0000000000000000 [ 534.053842][T21372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.053851][T21372] R13: 00007fce74a16038 R14: 00007fce74a15fa0 R15: 00007ffd93e980a8 [ 534.053883][T21372] [ 534.240566][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3855'. [ 534.522638][T21388] netlink: 'syz.2.3858': attribute type 1 has an invalid length. [ 534.537721][T21388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3858'. [ 534.992555][T21419] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 535.067290][T21427] netlink: 'syz.4.3864': attribute type 11 has an invalid length. [ 535.111540][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3864'. [ 535.158284][T21427] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 535.197348][T21427] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 535.821960][T21484] netlink: 'syz.1.3880': attribute type 1 has an invalid length. [ 535.865894][T21484] bond5: entered promiscuous mode [ 535.871505][T21484] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.607608][T21484] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.629483][T21484] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 536.654961][T21484] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 536.680709][T21506] netlink: 'syz.2.3885': attribute type 32 has an invalid length. [ 536.690150][T21484] bond5: (slave ip6gre1): making interface the new active one [ 536.694585][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3885'. [ 536.706808][T21484] ip6gre1: entered promiscuous mode [ 536.715156][T21484] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 536.849105][T21506] bond1: option coupled_control: invalid value (12) [ 536.877527][T21506] bond1 (unregistering): Released all slaves [ 536.920888][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 537.000651][T21517] vlan1: entered allmulticast mode [ 537.024522][T21517] macvtap0: entered allmulticast mode [ 537.031438][T21517] veth0_macvtap: entered allmulticast mode [ 537.120645][T21525] netlink: 'syz.2.3892': attribute type 11 has an invalid length. [ 537.166577][T21525] netlink: 'syz.2.3892': attribute type 4 has an invalid length. [ 537.191518][T21525] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.3892'. [ 537.220542][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3892'. [ 537.237268][T21528] netlink: 'syz.2.3892': attribute type 1 has an invalid length. [ 537.752771][T21548] xt_hashlimit: size too large, truncated to 1048576 [ 537.828033][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3900'. [ 538.013132][T21555] : entered promiscuous mode [ 538.536507][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'. [ 538.830664][T21595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3912'. [ 539.157711][T21614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.213102][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3920'. [ 539.364807][T21625] syzkaller1: entered promiscuous mode [ 539.393961][T21625] syzkaller1: entered allmulticast mode [ 539.557635][T21636] netlink: 'syz.1.3926': attribute type 1 has an invalid length. [ 539.614925][T21639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3926'. [ 539.688440][T21647] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3930'. [ 539.721752][T21639] bond6: entered promiscuous mode [ 539.741426][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 539.758975][T21639] bond6: entered allmulticast mode [ 539.795045][T21646] bond6: (slave geneve3): making interface the new active one [ 539.802609][T21646] geneve3: entered promiscuous mode [ 539.809584][T21646] geneve3: entered allmulticast mode [ 539.821908][T21646] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 539.979246][T12363] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 539.990582][T12363] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 540.019250][T12363] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 540.065964][T12363] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 540.346580][T21667] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 540.423851][T21667] bond1 (unregistering): Released all slaves [ 540.558085][T21687] pim6reg: entered allmulticast mode [ 540.801627][T21708] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20003 [ 541.168499][ T5642] Bluetooth: hci1: link tx timeout [ 541.174457][ T5642] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 541.187447][ T5642] Bluetooth: hci1: link tx timeout [ 541.193174][ T5642] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 541.201066][ T5642] Bluetooth: hci1: link tx timeout [ 541.208501][ T5642] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 541.877845][T21772] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 541.905124][T21772] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 541.937789][T21772] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 541.957348][T21772] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 542.046558][T21779] tipc: Started in network mode [ 542.065085][T21779] tipc: Node identity 2220a65c7bc7, cluster identity 4711 [ 542.113363][T21779] tipc: Enabled bearer , priority 0 [ 542.126395][T21782] syzkaller0: entered promiscuous mode [ 542.150780][T21783] netlink: 'syz.1.3964': attribute type 13 has an invalid length. [ 542.167069][T21782] syzkaller0: entered allmulticast mode [ 542.175029][T21784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3965'. [ 542.184198][T21784] tipc: Invalid UDP bearer configuration [ 542.184242][T21784] tipc: Enabling of bearer rejected, failed to enable media [ 542.200986][T21784] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3965'. [ 542.336051][T21792] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 542.433972][T21798] tipc: Resetting bearer [ 542.447508][T21798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.456677][T21798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.584136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.593830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.605682][T21778] tipc: Resetting bearer [ 542.661053][T21778] tipc: Disabling bearer [ 542.981057][T21838] netlink: 'syz.4.3977': attribute type 5 has an invalid length. [ 543.215025][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 543.582752][T21864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3984'. [ 543.752976][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'. [ 543.765676][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'. [ 544.023011][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3990'. [ 544.129977][T21895] bond1: option updelay: invalid value (18446744073709518847) [ 544.138114][T21895] bond1: option updelay: allowed values 0 - 2147483647 [ 544.148970][T21895] bond1 (unregistering): Released all slaves [ 544.211852][T20805] block nbd3: Receive control failed (result -32) [ 544.338695][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'. [ 544.454175][T21912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3993'. [ 544.522019][T21917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3995'. [ 544.599569][T21912] bridge_slave_0: left allmulticast mode [ 544.605499][T21912] bridge_slave_0: left promiscuous mode [ 544.614007][T21912] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.637082][T21912] bridge_slave_1: left allmulticast mode [ 544.655085][T21912] bridge_slave_1: left promiscuous mode [ 544.681161][T21912] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.735048][T21925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3999'. [ 544.753801][T21912] bond0: (slave bond_slave_0): Releasing backup interface [ 544.796900][T21912] bond0: (slave bond_slave_1): Releasing backup interface [ 544.857490][T21912] team0: Port device team_slave_0 removed [ 544.886435][T21912] team0: Port device team_slave_1 removed [ 544.900376][T21912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.926143][T21912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.950229][T21912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.968017][T21912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.992744][T21912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.113633][T21926] syzkaller0: entered promiscuous mode [ 545.121567][T21926] syzkaller0: entered allmulticast mode [ 547.479113][T21965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4007'. [ 547.508947][T21965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4007'. [ 548.034768][T12373] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.046000][T12373] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.070262][T12373] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.081013][T12373] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.184935][T22009] ip6t_srh: unknown srh invflags BA61 [ 548.270318][T22015] netlink: 'syz.4.4018': attribute type 2 has an invalid length. [ 548.288823][T22015] netlink: 'syz.4.4018': attribute type 8 has an invalid length. [ 548.322762][T22015] netlink: 'syz.4.4018': attribute type 2 has an invalid length. [ 548.344137][T22015] netlink: 'syz.4.4018': attribute type 8 has an invalid length. [ 548.745732][T22047] __nla_validate_parse: 4 callbacks suppressed [ 548.745749][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4025'. [ 549.010297][T22058] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 549.375805][T22073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4032'. [ 549.736951][T22085] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4035'. [ 550.657655][T22151] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 551.064473][T22169] netlink: 'syz.2.4059': attribute type 3 has an invalid length. [ 551.083468][T22169] netlink: 'syz.2.4059': attribute type 3 has an invalid length. [ 551.096490][T22169] netlink: 452 bytes leftover after parsing attributes in process `syz.2.4059'. [ 552.886229][T22230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.395074][T12366] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.429532][T12366] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.449917][T12366] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 34903 - 0 [ 553.469403][T12366] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 33777 - 0 [ 553.515531][T22278] bridge_slave_0: left allmulticast mode [ 553.521213][T22278] bridge_slave_0: left promiscuous mode [ 553.535187][T22278] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.553315][T22278] bridge_slave_1: left allmulticast mode [ 553.561548][T22278] bridge_slave_1: left promiscuous mode [ 553.568223][T22278] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.594869][T22278] bond0: (slave bond_slave_0): Releasing backup interface [ 553.610822][T22278] bond0: (slave bond_slave_1): Releasing backup interface [ 553.631905][T22278] team0: Port device team_slave_0 removed [ 553.640449][T22278] team0: Port device team_slave_1 removed [ 553.648337][T22278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.658040][T22278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.666980][T22278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.675030][T22278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.684199][T22278] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 553.733307][T22294] ip6gre2: entered allmulticast mode [ 553.741139][T22294] team0: Device ip6gre2 is of different type [ 553.799988][T22268] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4080'. [ 554.556488][T22322] lo speed is unknown, defaulting to 1000 [ 554.591018][T22322] lo speed is unknown, defaulting to 1000 [ 554.622669][T22322] lo speed is unknown, defaulting to 1000 [ 554.684525][T22322] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 554.724002][T22322] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 554.801157][T22322] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 554.892435][T22322] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 555.035957][T22322] lo speed is unknown, defaulting to 1000 [ 555.064276][T22357] Cannot find del_set index 3 as target [ 555.070325][T22322] lo speed is unknown, defaulting to 1000 [ 555.082440][T22358] xt_hashlimit: size too large, truncated to 1048576 [ 555.085627][T22322] lo speed is unknown, defaulting to 1000 [ 555.115828][T22322] lo speed is unknown, defaulting to 1000 [ 555.141395][T22322] lo speed is unknown, defaulting to 1000 [ 555.181719][T22322] lo speed is unknown, defaulting to 1000 [ 555.207382][T22322] lo speed is unknown, defaulting to 1000 [ 555.255020][T22363] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4104'. [ 555.285795][T22363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.353992][T22363] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 555.715856][T22386] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 555.757866][T22386] netlink: 'syz.0.4111': attribute type 2 has an invalid length. [ 556.151338][T22413] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4117'. [ 556.408716][T22406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.427716][T22406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.511799][T22428] syzkaller0: entered promiscuous mode [ 556.544751][T22428] syzkaller0: entered allmulticast mode [ 556.636114][T22438] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 556.661405][T22440] netlink: 'syz.0.4122': attribute type 3 has an invalid length. [ 556.711342][T22406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.742139][T22406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.800292][T22435] lo speed is unknown, defaulting to 1000 [ 556.901622][T22406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.906143][T22448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4125'. [ 556.914254][T22406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.004382][T22406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.016141][T22406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.196739][T22457] sctp: [Deprecated]: syz.2.4127 (pid 22457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.196739][T22457] Use struct sctp_sack_info instead [ 557.261381][T22457] netlink: 320 bytes leftover after parsing attributes in process `syz.2.4127'. [ 557.270570][T22457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4127'. [ 557.280465][T22457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4127'. [ 557.289943][T22457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4127'. [ 557.302772][T22457] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4127'. [ 557.369711][T22461] netlink: 'syz.1.4128': attribute type 1 has an invalid length. [ 557.395663][T12371] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.405088][T12371] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.451762][T12371] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.484034][T12371] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.523130][T12371] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.533149][T12371] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.667998][T12364] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.684959][T22469] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4131'. [ 557.699063][T12364] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.774507][T22469] veth0_to_team: entered allmulticast mode [ 557.878639][T22478] netlink: 'syz.2.4133': attribute type 1 has an invalid length. [ 558.028858][T22488] pim6reg0: tun_chr_ioctl cmd 35111 [ 558.058488][T22490] netlink: 'syz.0.4135': attribute type 10 has an invalid length. [ 558.112904][T22494] xt_bpf: check failed: parse error [ 558.258938][T22478] lo speed is unknown, defaulting to 1000 [ 558.267979][T22498] syzkaller1: entered promiscuous mode [ 558.283681][T22498] syzkaller1: entered allmulticast mode [ 558.879953][T22524] syzkaller0: entered promiscuous mode [ 558.886182][T22524] syzkaller0: entered allmulticast mode [ 559.341734][T22547] __nla_validate_parse: 6 callbacks suppressed [ 559.341753][T22547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4150'. [ 559.694380][ T5652] Bluetooth: hci2: command 0x0406 tx timeout [ 561.527981][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4150'. [ 561.910633][T22581] netlink: ct family unspecified [ 561.942248][T22581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.141668][T22591] netlink: 'syz.0.4159': attribute type 39 has an invalid length. [ 562.158103][T22587] mac80211_hwsim hwsim58 wlan0: left allmulticast mode [ 562.425874][T22603] netlink: 'syz.1.4163': attribute type 1 has an invalid length. [ 562.498478][T22612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4164'. [ 562.565229][T22612] veth1_to_team: entered promiscuous mode [ 562.572373][T22612] veth1_to_team: left promiscuous mode [ 562.590295][T22608] syzkaller0: entered promiscuous mode [ 562.612036][T22608] syzkaller0: entered allmulticast mode [ 562.648122][T22615] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 562.682598][T22613] tipc: Enabled bearer , priority 0 [ 562.743025][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 562.764394][T22596] lo speed is unknown, defaulting to 1000 [ 562.798139][T22613] tipc: Resetting bearer [ 562.818073][T22613] tipc: Disabling bearer [ 562.957896][T22624] syzkaller0: entered promiscuous mode [ 562.968635][T22630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4171'. [ 562.993065][T22624] syzkaller0: entered allmulticast mode [ 563.011053][T22635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'. [ 563.156004][T22671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4173'. [ 563.373648][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.462215][T22689] Bluetooth: MGMT ver 1.23 [ 564.382402][T22750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4192'. [ 564.430570][T22751] netlink: 'syz.0.4193': attribute type 9 has an invalid length. [ 564.457697][T22751] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4193'. [ 564.569756][T22751] netlink: 'syz.0.4193': attribute type 1 has an invalid length. [ 564.706308][T22763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4194'. [ 564.742971][T22717] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 564.770261][T22717] bond1 (unregistering): Released all slaves [ 564.844491][T22765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4185'. [ 565.071786][T22775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4197'. [ 565.121932][T22778] netlink: 'syz.3.4198': attribute type 2 has an invalid length. [ 565.155561][T22778] netlink: 'syz.3.4198': attribute type 1 has an invalid length. [ 565.184788][T22778] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4198'. [ 565.274906][T22786] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 565.293639][T22786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 565.344955][T22645] nci: nci_ntf_packet: unknown ntf opcode 0xb20 [ 565.460234][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 565.483279][T22803] team1: entered promiscuous mode [ 565.488747][T22803] team1: entered allmulticast mode [ 565.495464][T22803] 8021q: adding VLAN 0 to HW filter on device team1 [ 565.752718][T22813] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4206'. [ 565.862568][T22823] lo speed is unknown, defaulting to 1000 [ 565.904845][T22824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4209'. [ 565.928302][T22824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4209'. [ 565.942801][T22778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.282381][T22831] lo speed is unknown, defaulting to 1000 [ 566.452703][ T30] audit: type=1804 audit(1780339839.666:18): pid=22843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4214" name="/newroot/152/cgroup.controllers" dev="tmpfs" ino=795 res=1 errno=0 [ 566.528405][ T30] audit: type=1800 audit(1780339839.666:19): pid=22843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4214" name="cgroup.controllers" dev="tmpfs" ino=795 res=0 errno=0 [ 567.807328][T22886] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20002 [ 568.376589][T22913] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 568.778144][T22936] syzkaller0: entered promiscuous mode [ 568.832230][T22936] syzkaller0: entered allmulticast mode [ 569.235359][T22941] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 569.280537][T22941] bond3 (unregistering): Released all slaves [ 569.472924][T22961] IPv6: NLM_F_CREATE should be specified when creating new route [ 569.770308][T22968] __nla_validate_parse: 4 callbacks suppressed [ 569.770325][T22968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4240'. [ 571.965123][T22996] tipc: Enabled bearer , priority 0 [ 571.999192][T22996] syzkaller0: entered promiscuous mode [ 572.012823][T22996] syzkaller0: entered allmulticast mode [ 572.068886][T22996] tipc: Resetting bearer [ 572.090714][T23000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4248'. [ 572.102013][T22996] tipc: Resetting bearer [ 572.162214][T22996] tipc: Disabling bearer [ 572.220434][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4249'. [ 572.246416][ T807] IPVS: starting estimator thread 0... [ 572.345776][T23015] IPVS: using max 42 ests per chain, 100800 per kthread [ 572.426344][T23022] netlink: 'syz.1.4252': attribute type 32 has an invalid length. [ 572.490441][T23022] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4252'. [ 573.188414][T23056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4259'. [ 573.245532][T23062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4261'. [ 573.399098][T23062] syzkaller1: entered promiscuous mode [ 573.405858][T23062] syzkaller1: entered allmulticast mode [ 573.416910][T23062] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 573.677006][T23080] syzkaller0: entered promiscuous mode [ 573.704105][T23080] syzkaller0: entered allmulticast mode [ 574.071468][T23096] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4271'. [ 574.775559][T23142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.941771][T23149] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4285'. [ 574.971793][T23150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4286'. [ 575.004297][T23150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4286'. [ 575.056468][T23155] netlink: 'syz.2.4287': attribute type 21 has an invalid length. [ 575.056834][T20805] Bluetooth: hci4: command 0x0406 tx timeout [ 575.068821][T23155] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4287'. [ 575.320089][T23166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4291'. [ 575.448116][T23159] lo speed is unknown, defaulting to 1000 [ 575.578243][T23182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4292'. [ 575.611502][T23178] lo speed is unknown, defaulting to 1000 [ 575.657496][T23185] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4293'. [ 575.669421][T23182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 575.688329][T23186] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4293'. [ 575.922118][T23194] ip6t_rpfilter: unknown options [ 576.401042][T23211] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 576.415769][ T5652] Bluetooth: hci1: command 0x0406 tx timeout [ 576.723418][T23220] nbd: socks must be embedded in a SOCK_ITEM attr [ 576.805923][T23223] netlink: 'syz.1.4298': attribute type 1 has an invalid length. [ 577.138237][ T5642] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 577.191614][T23242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4308'. [ 577.201980][T23243] netlink: 'syz.1.4307': attribute type 12 has an invalid length. [ 577.226900][T23243] netlink: 'syz.1.4307': attribute type 29 has an invalid length. [ 577.255221][T23243] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4307'. [ 577.482186][T23253] lo speed is unknown, defaulting to 1000 [ 577.718229][T23259] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 577.737658][ T7424] lo speed is unknown, defaulting to 1000 [ 577.927187][T23270] C: renamed from veth1_to_team (while UP) [ 577.957309][T23270] netlink: 'syz.2.4318': attribute type 1 has an invalid length. [ 577.970178][T23270] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 578.187306][T23275] veth0_macvtap: left allmulticast mode [ 578.295781][T12380] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.305765][T12380] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.314509][T12380] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.325861][T12380] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.392457][T12380] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.402728][T12380] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.421170][T12380] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.430339][T12380] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.446938][T23291] syzkaller1: entered promiscuous mode [ 578.452555][T23291] syzkaller1: entered allmulticast mode [ 578.751854][T23308] netlink: 'syz.1.4327': attribute type 32 has an invalid length. [ 578.791470][T23310] netlink: 'syz.2.4329': attribute type 5 has an invalid length. [ 578.881342][T23308] bond8: Setting coupled_control to off (0) [ 579.383239][ T5642] block nbd4: Receive control failed (result -32) [ 579.512207][T23355] netlink: 'syz.3.4340': attribute type 3 has an invalid length. [ 579.545126][T23356] netlink: 'syz.3.4340': attribute type 3 has an invalid length. [ 579.750891][T23370] syzkaller0: entered promiscuous mode [ 579.759764][T23370] syzkaller0: entered allmulticast mode [ 579.879015][T23379] syzkaller0: entered promiscuous mode [ 579.884653][T23379] syzkaller0: entered allmulticast mode [ 581.035879][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880557cc800: rx timeout, send abort [ 581.546459][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880557cc800: abort rx timeout. Force session deactivation [ 582.453178][T23355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.754321][T23417] __nla_validate_parse: 17 callbacks suppressed [ 582.754337][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4359'. [ 583.128612][T23442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4366'. [ 583.262709][T23447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4368'. [ 583.262709][T23450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4368'. [ 583.262743][T23450] netlink: 'syz.3.4368': attribute type 7 has an invalid length. [ 583.272114][T23447] netlink: 'syz.3.4368': attribute type 7 has an invalid length. [ 583.284900][T23450] netlink: 'syz.3.4368': attribute type 8 has an invalid length. [ 583.305238][T23447] netlink: 'syz.3.4368': attribute type 8 has an invalid length. [ 583.313143][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 583.327723][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 583.334537][T23447] bridge0: entered promiscuous mode [ 583.344236][T23447] syz_tun: entered promiscuous mode [ 583.350104][T23447] bridge0: left promiscuous mode [ 583.356193][T23447] syz_tun: left promiscuous mode [ 583.370160][T23450] bridge0: entered promiscuous mode [ 583.377548][T23450] syz_tun: entered promiscuous mode [ 583.384036][T23450] bridge0: left promiscuous mode [ 583.390301][T23450] syz_tun: left promiscuous mode [ 583.957764][T23483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4378'. [ 584.251201][T17891] IPVS: starting estimator thread 0... [ 584.291454][T23501] syzkaller0: entered promiscuous mode [ 584.303508][T23501] syzkaller0: entered allmulticast mode [ 584.350666][T23501] tipc: Enabled bearer , priority 0 [ 584.360263][T23502] IPVS: using max 30 ests per chain, 72000 per kthread [ 584.397356][T23508] bond0: option arp_validate: invalid value (55553) [ 584.435346][T23501] tipc: Resetting bearer [ 584.450017][T23510] netlink: 'syz.2.4389': attribute type 11 has an invalid length. [ 584.474583][T23501] tipc: Disabling bearer [ 584.505723][T23508] ip6gre2: entered promiscuous mode [ 584.511118][T23508] ip6gre2: entered allmulticast mode [ 584.651503][T23512] IPVS: Scheduler module ip_vs_sip not found [ 584.740462][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4392'. [ 584.871516][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4397'. [ 584.917103][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4397'. [ 584.943982][T23537] netlink: 'syz.3.4397': attribute type 12 has an invalid length. [ 584.952204][T23537] netlink: 'syz.3.4397': attribute type 14 has an invalid length. [ 585.425039][T23574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 585.739482][T23599] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 134217731, id = 0 [ 585.988635][T23609] ieee80211 phy70: Failed to add default virtual iface [ 586.484647][T23653] openvswitch: netlink: Message has 4 unknown bytes. [ 586.681735][T23663] netlink: 'syz.2.4428': attribute type 11 has an invalid length. [ 586.776409][T23680] ksmbd: Daemon and kernel module version mismatch. ksmbd: 110, kernel module: 1. User-space ksmbd should terminate. [ 586.900407][T23659] xt_CT: No such helper "snmp_trap" [ 586.999252][ T30] audit: type=1804 audit(1780339860.216:20): pid=23688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4434" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1040 res=1 errno=0 [ 587.040770][ T30] audit: type=1800 audit(1780339860.216:21): pid=23688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4434" name="cgroup.controllers" dev="tmpfs" ino=1040 res=0 errno=0 [ 587.525217][T23713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.669964][ T5766] IPVS: starting estimator thread 0... [ 587.783625][T23717] IPVS: using max 29 ests per chain, 69600 per kthread [ 587.830745][T23720] siw: device registration error -23 [ 588.655911][T22644] wlan0: Trigger new scan to find an IBSS to join [ 588.779856][T23754] bridge0: port 3(erspan0) entered blocking state [ 588.796588][T23754] bridge0: port 3(erspan0) entered disabled state [ 588.826519][T23754] erspan0: entered allmulticast mode [ 588.838751][T23754] erspan0: entered promiscuous mode [ 588.845492][T23754] bridge0: port 3(erspan0) entered blocking state [ 588.852072][T23754] bridge0: port 3(erspan0) entered forwarding state [ 589.014815][T23765] ipvlan1: entered promiscuous mode [ 589.032024][T23765] ipvlan1: entered allmulticast mode [ 589.050816][T23765] veth0_vlan: entered allmulticast mode [ 589.906345][T23800] __nla_validate_parse: 20 callbacks suppressed [ 589.906362][T23800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4467'. [ 589.955525][T23800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4467'. [ 590.114226][T23820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4471'. [ 590.167640][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4471'. [ 590.639830][T23843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4480'. [ 590.640095][T23844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.377782][T23871] vlan5: entered promiscuous mode [ 591.390066][T23871] bridge0: entered promiscuous mode [ 592.099774][T23902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4498'. [ 592.263095][T23919] netlink: 'syz.0.4502': attribute type 8 has an invalid length. [ 592.427456][T23897] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4496'. [ 592.807397][T23932] netlink: 'syz.2.4507': attribute type 5 has an invalid length. [ 592.833930][T23932] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4507'. [ 592.848953][T23932] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4507'. [ 593.169692][T23944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4509'. [ 593.377513][T23964] sctp: [Deprecated]: syz.4.4513 (pid 23964) Use of int in maxseg socket option. [ 593.377513][T23964] Use struct sctp_assoc_value instead [ 593.560983][T23980] netlink: 'syz.0.4519': attribute type 10 has an invalid length. [ 593.783995][T23987] hsr0: entered promiscuous mode [ 593.910049][T24001] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 594.020747][T24003] netlink: 'syz.1.4524': attribute type 3 has an invalid length. [ 594.451786][T24036] openvswitch: netlink: Missing valid actions attribute. [ 594.478278][T24036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.690833][T24052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.976512][T24062] netlink: 'syz.2.4535': attribute type 1 has an invalid length. [ 594.987572][T24062] __nla_validate_parse: 4 callbacks suppressed [ 594.987588][T24062] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4535'. [ 595.009338][T24062] netlink: 'syz.2.4535': attribute type 15 has an invalid length. [ 595.017618][T24062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4535'. [ 595.368586][T24077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.522254][T24086] ip6gretap2: entered allmulticast mode [ 595.941356][T24108] openvswitch: : Dropping previously announced user features [ 596.008769][T24112] geneve2: entered promiscuous mode [ 596.030274][T24112] geneve2: entered allmulticast mode [ 596.158169][T24114] openvswitch: : Dropping previously announced user features [ 596.364648][T24132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4549'. [ 597.275333][T24169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.294904][T24169] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4558'. [ 597.304413][T24169] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4558'. [ 599.295683][T24128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.476749][T24173] netlink: 'syz.4.4559': attribute type 5 has an invalid length. [ 599.682314][T24181] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 599.709722][T24181] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 599.755575][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 599.801341][T24187] syzkaller1: entered promiscuous mode [ 599.809922][T24187] syzkaller1: entered allmulticast mode [ 599.858079][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4569'. [ 600.199558][T24217] netlink: 'syz.3.4572': attribute type 11 has an invalid length. [ 600.222138][T24217] netlink: 'syz.3.4572': attribute type 11 has an invalid length. [ 600.235389][T24217] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4572'. [ 600.489207][T24222] bond4 (unregistering): Released all slaves [ 601.728600][T24295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4592'. [ 601.760058][T24295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4592'. [ 601.787575][T24295] netlink: 'syz.1.4592': attribute type 18 has an invalid length. [ 601.837617][T24298] openvswitch: netlink: IP tunnel dst address not specified [ 601.879303][T24307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.887620][T24298] gretap2: entered promiscuous mode [ 601.934678][T24310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4596'. [ 602.088735][T24320] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4598'. [ 602.110653][T24310] netlink: 840 bytes leftover after parsing attributes in process `syz.3.4596'. [ 602.122018][T24320] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4598'. [ 602.268522][T24328] syzkaller1: entered promiscuous mode [ 602.284737][T24328] syzkaller1: entered allmulticast mode [ 602.761097][T24364] netlink: 'syz.0.4607': attribute type 1 has an invalid length. [ 602.777872][T24364] netlink: 'syz.0.4607': attribute type 4 has an invalid length. [ 602.794553][T24364] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4607'. [ 602.826929][T24367] netlink: 'syz.0.4607': attribute type 1 has an invalid length. [ 602.850186][T24367] netlink: 'syz.0.4607': attribute type 4 has an invalid length. [ 602.864981][T24367] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4607'. [ 603.294693][T24376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4609'. [ 603.717183][T24395] netlink: 'syz.2.4614': attribute type 1 has an invalid length. [ 603.729233][T24391] bond1: entered promiscuous mode [ 603.734586][T24391] bond1: entered allmulticast mode [ 603.740652][T24391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 603.750866][T24395] netlink: 'syz.2.4614': attribute type 2 has an invalid length. [ 603.752103][T24394] syzkaller0: left promiscuous mode [ 603.816164][T24394] syzkaller0: left allmulticast mode [ 603.878185][T24405] netlink: 'syz.3.4617': attribute type 16 has an invalid length. [ 604.158441][T24420] netlink: 'syz.0.4619': attribute type 2 has an invalid length. [ 605.841178][T24442] team0: Port device syz_tun added [ 605.850143][T24442] team0: Port device syz_tun removed [ 605.856341][T24442] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 606.842921][T24405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 606.856906][T24418] tipc: Enabled bearer , priority 0 [ 607.059598][T24448] tipc: Enabled bearer , priority 0 [ 607.081921][T24448] syzkaller0: entered promiscuous mode [ 607.106622][T24448] syzkaller0: entered allmulticast mode [ 607.127047][T24454] netlink: 'syz.2.4630': attribute type 5 has an invalid length. [ 607.152067][T24448] block nbd5: Unsupported socket: should be TCP or UNIX. [ 607.278895][T24448] tipc: Resetting bearer [ 607.320791][T24446] tipc: Resetting bearer [ 607.427999][T24471] vcan0: tx drop: invalid sa for name 0x0000000000010000 [ 607.435839][T24446] tipc: Disabling bearer [ 607.572785][T24465] __nla_validate_parse: 7 callbacks suppressed [ 607.572802][T24465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4633'. [ 608.072530][T24491] syzkaller0: entered promiscuous mode [ 608.085097][T24491] syzkaller0: entered allmulticast mode [ 608.101625][ T7424] tipc: Node number set to 1968489047 [ 608.169700][T24489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4633'. [ 608.250160][T24489] nbd: device at index 64 is going down [ 608.475186][T19873] udevd[19873]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 608.749785][T24513] sctp: [Deprecated]: syz.4.4645 (pid 24513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.749785][T24513] Use struct sctp_sack_info instead [ 609.014635][T24517] xfrm0: entered allmulticast mode [ 609.121830][T24531] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4651'. [ 609.209164][T24535] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4653'. [ 609.339525][T24533] lo speed is unknown, defaulting to 1000 [ 609.346447][T24542] syzkaller0: entered promiscuous mode [ 609.364804][T24542] syzkaller0: entered allmulticast mode [ 609.497776][T24549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4656'. [ 609.623060][T24557] xt_l2tp: missing protocol rule (udp|l2tpip) [ 609.838679][T24563] xt_hashlimit: size too large, truncated to 1048576 [ 609.851024][T24561] tipc: Started in network mode [ 609.868766][T24561] tipc: Node identity fe6c8800b409, cluster identity 4711 [ 609.877014][T24561] tipc: Enabled bearer , priority 0 [ 609.886508][T24561] syzkaller0: entered promiscuous mode [ 609.892853][T24561] syzkaller0: entered allmulticast mode [ 610.112657][T24561] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.123057][T24561] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.222062][T24561] tipc: Resetting bearer [ 610.229100][T24561] tipc: Resetting bearer [ 610.269762][T24580] tipc: Resetting bearer [ 610.433238][T24560] tipc: Resetting bearer [ 610.481709][T24560] tipc: Disabling bearer [ 610.513336][T24589] openvswitch: : Dropping previously announced user features [ 610.643109][T24597] netlink: 'syz.0.4670': attribute type 1 has an invalid length. [ 610.776978][ T30] audit: type=1804 audit(1780339883.996:22): pid=24603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4672" name="/newroot/282/cgroup.controllers" dev="tmpfs" ino=1457 res=1 errno=0 [ 610.787086][T24597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.820439][ T30] audit: type=1800 audit(1780339883.996:23): pid=24603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4672" name="cgroup.controllers" dev="tmpfs" ino=1457 res=0 errno=0 [ 610.844095][ T30] audit: type=1804 audit(1780339883.996:24): pid=24603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4672" name="/newroot/282/cgroup.controllers" dev="tmpfs" ino=1457 res=1 errno=0 [ 611.168631][T24632] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4677'. [ 611.288779][T24619] ip6erspan0: entered allmulticast mode [ 611.295576][T24619] ip6erspan0: left allmulticast mode [ 611.301016][T24619] pim6reg: left allmulticast mode [ 611.340122][T24644] lo: Caught tx_queue_len zero misconfig [ 611.566274][T24654] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4687'. [ 611.862054][T24676] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4694'. [ 612.080731][T24687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4696'. [ 612.106327][T24687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4696'. [ 613.311137][T24764] __nla_validate_parse: 2 callbacks suppressed [ 613.311153][T24764] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4716'. [ 613.550236][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4720'. [ 613.612944][T24777] dvmrp0: entered allmulticast mode [ 613.664775][T24781] 8021q: VLANs not supported on ip_vti0 [ 614.104318][T24807] netlink: 'syz.2.4728': attribute type 2 has an invalid length. [ 614.410222][T24829] sit0: Caught tx_queue_len zero misconfig [ 614.417506][T24829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4731'. [ 614.450555][T24829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4731'. [ 614.486153][T24831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4731'. [ 614.551912][T24834] syzkaller0: entered promiscuous mode [ 614.563651][T24834] syzkaller0: entered allmulticast mode [ 614.665857][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4733'. [ 614.911324][T24855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4736'. [ 614.989647][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4738'. [ 615.022809][T24855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4736'. [ 615.246699][T24874] netlink: 'syz.4.4744': attribute type 1 has an invalid length. [ 615.284855][T17891] IPVS: starting estimator thread 0... [ 615.295854][T24874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 615.317490][T24874] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 615.337888][T24879] netlink: 'syz.2.4745': attribute type 1 has an invalid length. [ 615.355298][T24879] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4745'. [ 615.365741][T24879] netlink: 'syz.2.4745': attribute type 1 has an invalid length. [ 615.374356][T24879] netlink: 'syz.2.4745': attribute type 1 has an invalid length. [ 615.382380][T24879] netlink: 'syz.2.4745': attribute type 1 has an invalid length. [ 615.394176][T24880] IPVS: using max 41 ests per chain, 98400 per kthread [ 615.401420][T24879] netlink: 'syz.2.4745': attribute type 1 has an invalid length. [ 615.652057][T24894] ip6gre3: entered promiscuous mode [ 615.667366][T24894] ip6gre3: entered allmulticast mode [ 615.706175][T24894] netlink: 'syz.2.4748': attribute type 6 has an invalid length. [ 616.003570][T24904] tipc: Started in network mode [ 616.015604][T24904] tipc: Node identity 36a99ea35107, cluster identity 4711 [ 616.043137][T24904] tipc: Enabled bearer , priority 0 [ 616.118711][T24904] netlink: 'syz.1.4752': attribute type 3 has an invalid length. [ 616.278713][T24914] team0: Port device syz_tun added [ 616.294976][T24919] netlink: 'syz.2.4755': attribute type 10 has an invalid length. [ 616.372930][T24924] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.446520][T24924] bridge_slave_1 (unregistering): left allmulticast mode [ 616.483278][T24924] bridge_slave_1 (unregistering): left promiscuous mode [ 616.503663][T24924] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.600056][T24932] tunl0: Caught tx_queue_len zero misconfig [ 616.938997][T24938] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 617.012071][T24939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.053320][T17891] tipc: Node number set to 1739497123 [ 617.232682][T24942] xt_hashlimit: size too large, truncated to 1048576 [ 617.290532][T24942] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 617.477348][T24946] openvswitch: : Dropping previously announced user features [ 617.990487][T24969] x_tables: duplicate underflow at hook 3 [ 618.028456][T24964] can: request_module (can-proto-0) failed. [ 618.329213][T24978] __nla_validate_parse: 14 callbacks suppressed [ 618.329231][T24978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4778'. [ 618.354259][T24982] openvswitch: : Dropping previously announced user features [ 618.660366][T25000] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 618.676023][T25000] batman_adv: batadv0: Adding interface: gretap3 [ 618.682519][T25000] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.708939][T25000] batman_adv: batadv0: Interface activated: gretap3 [ 619.388996][T25029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4794'. [ 619.441225][T25025] openvswitch: : Dropping previously announced user features [ 619.738353][T25050] validate_nla: 2 callbacks suppressed [ 619.738371][T25050] netlink: 'syz.0.4799': attribute type 1 has an invalid length. [ 619.806350][T25050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4799'. [ 619.822127][T25050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 619.847681][T25050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 619.872049][T25050] bond6: (slave geneve2): making interface the new active one [ 619.882964][T25050] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 619.891872][ T48] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 619.914941][ T48] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 619.981069][ T48] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 620.008068][ T48] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 620.137135][T25063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4803'. [ 620.223770][T25063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4803'. [ 620.420155][T25081] openvswitch: : Dropping previously announced user features [ 620.656575][T25095] batman_adv: batadv0: Adding interface: macvtap1 [ 620.684063][T25095] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 620.736376][T25098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4810'. [ 621.949840][T25155] syzkaller0: entered promiscuous mode [ 621.962800][T25155] syzkaller0: entered allmulticast mode [ 622.149273][T25164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4831'. [ 622.173761][T25164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4831'. [ 622.202949][T25164] tipc: Can't bind to reserved service type 0 [ 622.249401][T25164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4831'. [ 622.508244][T25169] openvswitch: : Dropping previously announced user features [ 622.645684][T25175] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 622.688190][T25175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4835'. [ 622.741723][T25175] veth1_to_team: entered promiscuous mode [ 622.779216][T25175] veth1_to_team: left promiscuous mode [ 623.574970][T25220] team0: Port device syz_tun removed [ 623.615523][T25220] bridge_slave_0: left allmulticast mode [ 623.628606][T25220] bridge_slave_0: left promiscuous mode [ 623.638941][T25220] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.677931][T25220] bridge_slave_1: left allmulticast mode [ 623.690123][T25220] bridge_slave_1: left promiscuous mode [ 623.704661][T25233] __nla_validate_parse: 8 callbacks suppressed [ 623.704677][T25233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4856'. [ 623.704835][T25220] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.748449][T25237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4857'. [ 623.761366][T25240] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4857'. [ 623.771657][T25240] netlink: 'syz.0.4857': attribute type 2 has an invalid length. [ 623.785088][T25237] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4857'. [ 623.789282][T25220] bond0: (slave bond_slave_0): Releasing backup interface [ 623.799506][T25240] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4857'. [ 623.812105][T25237] netlink: 'syz.0.4857': attribute type 2 has an invalid length. [ 623.812138][T25220] bond_slave_0: left promiscuous mode [ 623.835568][T25220] bond0: (slave bond_slave_1): Releasing backup interface [ 623.844774][T25220] bond_slave_1: left promiscuous mode [ 623.867981][T25220] team0: Port device team_slave_0 removed [ 623.902007][T25220] team0: Port device team_slave_1 removed [ 623.918011][T25220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.925787][T25220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.958022][T25220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 624.159888][T25251] netlink: 'syz.0.4859': attribute type 1 has an invalid length. [ 624.179935][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.224191][T25256] IPVS: set_ctl: invalid protocol: 50 172.30.1.3:20002 [ 624.316742][T25264] block nbd0: NBD_DISCONNECT [ 624.321932][T25264] block nbd0: Send disconnect failed -32 [ 624.330078][T25264] block nbd0: shutting down sockets [ 624.462051][T25269] netlink: 'syz.0.4865': attribute type 1 has an invalid length. [ 624.477092][T25267] bridge1: entered promiscuous mode [ 624.482485][T25267] bridge1: entered allmulticast mode [ 624.492009][T25267] team0: Port device bridge1 added [ 624.544343][T25269] 8021q: adding VLAN 0 to HW filter on device bond8 [ 624.605803][T25273] bond8: (slave veth0_to_bond): making interface the new active one [ 624.667150][T25273] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 624.717861][T25275] bridge2: entered promiscuous mode [ 624.731831][T25275] bridge2: entered allmulticast mode [ 624.755028][T25275] team0: Port device bridge2 added [ 624.779174][T25269] bond8: entered promiscuous mode [ 624.793872][T25269] veth0_to_bond: entered promiscuous mode [ 624.804098][T25269] bond8: entered allmulticast mode [ 624.821964][T25269] veth0_to_bond: entered allmulticast mode [ 624.843264][T25276] bridge0: port 2(team0) entered blocking state [ 624.854639][T25276] bridge0: port 2(team0) entered disabled state [ 624.861122][T25276] team0: entered allmulticast mode [ 624.898639][T25276] team_slave_0: entered allmulticast mode [ 624.912459][T25276] team_slave_1: entered allmulticast mode [ 624.930720][T25276] team0: entered promiscuous mode [ 624.939130][T25276] team_slave_0: entered promiscuous mode [ 624.953103][T25276] team_slave_1: entered promiscuous mode [ 624.964817][T25276] bridge0: port 2(team0) entered blocking state [ 624.971201][T25276] bridge0: port 2(team0) entered forwarding state [ 625.046581][T25288] mac80211_hwsim hwsim52 syzkaller0: left promiscuous mode [ 625.073533][T25288] mac80211_hwsim hwsim52 syzkaller0: left allmulticast mode [ 625.318490][T25311] netlink: 'syz.0.4872': attribute type 3 has an invalid length. [ 625.347709][T25311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4872'. [ 625.590329][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 625.647929][T25307] syzkaller1: entered promiscuous mode [ 625.657333][T25328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4881'. [ 625.666455][T25307] syzkaller1: entered allmulticast mode [ 625.679304][T25328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.818773][T25337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4884'. [ 626.112432][T25352] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 626.168639][T25350] netlink: 'syz.2.4887': attribute type 16 has an invalid length. [ 626.183612][T25350] netlink: 'syz.2.4887': attribute type 17 has an invalid length. [ 626.201147][T25350] lo: entered promiscuous mode [ 626.218147][T25350] lo: entered allmulticast mode [ 626.239006][T25350] tunl0: entered promiscuous mode [ 626.258737][T25350] tunl0: entered allmulticast mode [ 626.276274][T25350] gre0: entered promiscuous mode [ 626.288397][T25350] gre0: entered allmulticast mode [ 626.310083][T25357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4890'. [ 626.313814][T25350] gretap0: entered promiscuous mode [ 626.324626][T25350] gretap0: entered allmulticast mode [ 626.344173][T25350] erspan0: entered promiscuous mode [ 626.353111][T25350] erspan0: entered allmulticast mode [ 626.374300][T25350] ip_vti0: entered promiscuous mode [ 626.381009][T25350] ip_vti0: entered allmulticast mode [ 626.393286][T25350] ip6_vti0: entered promiscuous mode [ 626.398863][T25350] ip6_vti0: entered allmulticast mode [ 626.416694][T25350] sit0: entered promiscuous mode [ 626.429100][T25350] sit0: entered allmulticast mode [ 626.451017][T25350] ip6tnl0: entered promiscuous mode [ 626.466864][T25350] ip6tnl0: entered allmulticast mode [ 626.478467][T25350] ip6gre0: entered promiscuous mode [ 626.493461][T25350] ip6gre0: entered allmulticast mode [ 626.501935][T25350] syz_tun: entered promiscuous mode [ 626.520693][T25350] syz_tun: entered allmulticast mode [ 626.536521][T25350] ip6gretap0: entered promiscuous mode [ 626.542232][T25350] ip6gretap0: entered allmulticast mode [ 626.557477][T25350] bridge0: entered promiscuous mode [ 626.570556][T25350] bridge0: entered allmulticast mode [ 626.590560][T25350] vcan0: entered promiscuous mode [ 626.612679][T25350] vcan0: entered allmulticast mode [ 626.625398][T25350] bond0: entered allmulticast mode [ 626.651990][T25350] team0: entered promiscuous mode [ 626.667107][T25350] team0: entered allmulticast mode [ 626.686567][T25350] dummy0: entered promiscuous mode [ 626.703933][T25350] dummy0: entered allmulticast mode [ 626.709717][T25350] nlmon0: entered promiscuous mode [ 626.715500][T25350] nlmon0: entered allmulticast mode [ 626.724869][T25350] batadv0: entered promiscuous mode [ 626.741474][T25350] batadv0: entered allmulticast mode [ 626.756916][T25350] vxcan0: entered promiscuous mode [ 626.762180][T25350] vxcan0: entered allmulticast mode [ 626.771399][T25350] vxcan1: entered promiscuous mode [ 626.780332][T25350] vxcan1: entered allmulticast mode [ 626.790030][T25350] veth0: entered promiscuous mode [ 626.796425][T25350] veth0: entered allmulticast mode [ 626.809119][T25350] veth1: entered promiscuous mode [ 626.819630][T25350] veth1: entered allmulticast mode [ 626.831627][T25350] wg0: entered promiscuous mode [ 626.841352][T25350] wg0: entered allmulticast mode [ 626.858982][T25350] wg2: entered promiscuous mode [ 626.865724][T25350] wg2: entered allmulticast mode [ 626.877149][T25350] veth0_to_bridge: entered promiscuous mode [ 626.889325][T25350] veth0_to_bridge: entered allmulticast mode [ 626.902436][T25350] bridge_slave_0: entered promiscuous mode [ 626.917076][T25350] bridge_slave_0: entered allmulticast mode [ 626.926646][T25350] veth1_to_bridge: entered promiscuous mode [ 626.939883][T25350] veth1_to_bridge: entered allmulticast mode [ 626.951289][T25350] bridge_slave_1: entered promiscuous mode [ 626.964561][T25350] bridge_slave_1: entered allmulticast mode [ 626.980152][T25350] veth0_to_bond: entered promiscuous mode [ 626.988975][T25350] veth0_to_bond: entered allmulticast mode [ 627.004419][T25350] bond_slave_0: entered promiscuous mode [ 627.013179][T25350] bond_slave_0: entered allmulticast mode [ 627.019851][T25350] veth1_to_bond: entered promiscuous mode [ 627.025783][T25350] veth1_to_bond: entered allmulticast mode [ 627.038588][T25350] bond_slave_1: entered promiscuous mode [ 627.050599][T25350] bond_slave_1: entered allmulticast mode [ 627.057372][T25350] veth0_to_team: entered promiscuous mode [ 627.063148][T25350] veth0_to_team: entered allmulticast mode [ 627.074977][T25350] team_slave_0: entered promiscuous mode [ 627.087755][T25350] team_slave_0: entered allmulticast mode [ 627.094779][T25350] C: entered promiscuous mode [ 627.099505][T25350] C: entered allmulticast mode [ 627.108839][T25350] team_slave_1: entered promiscuous mode [ 627.124002][T25350] team_slave_1: entered allmulticast mode [ 627.130040][T25350] veth0_to_batadv: entered promiscuous mode [ 627.139300][T25350] veth0_to_batadv: entered allmulticast mode [ 627.151992][T25350] batadv_slave_0: entered promiscuous mode [ 627.162726][T25350] batadv_slave_0: entered allmulticast mode [ 627.172591][T25350] veth0_to_hsr: entered promiscuous mode [ 627.186717][T25350] veth0_to_hsr: entered allmulticast mode [ 627.196468][T25350] hsr_slave_0: entered allmulticast mode [ 627.211901][T25350] veth1_to_hsr: entered promiscuous mode [ 627.221765][T25350] veth1_to_hsr: entered allmulticast mode [ 627.240215][T25350] hsr_slave_1: entered allmulticast mode [ 627.248959][T25350] veth1_virt_wifi: entered promiscuous mode [ 627.259888][T25350] veth1_virt_wifi: entered allmulticast mode [ 627.271191][T25350] veth0_virt_wifi: entered promiscuous mode [ 627.284356][T25350] veth0_virt_wifi: entered allmulticast mode [ 627.299219][T25350] virt_wifi0: entered promiscuous mode [ 627.308352][T25350] virt_wifi0: entered allmulticast mode [ 627.314715][T25350] veth1_vlan: entered allmulticast mode [ 627.325814][T25350] veth0_vlan: entered allmulticast mode [ 627.362559][T25350] vlan0: entered promiscuous mode [ 627.375969][T25350] vlan0: entered allmulticast mode [ 627.387465][T25350] vlan1: entered promiscuous mode [ 627.392961][T25350] vlan1: entered allmulticast mode [ 627.398958][T25350] macvlan0: entered promiscuous mode [ 627.405177][T25350] macvlan0: entered allmulticast mode [ 627.419064][T25350] macvlan1: entered promiscuous mode [ 627.427883][T25350] macvlan1: entered allmulticast mode [ 627.439881][T25350] ipvlan0: entered promiscuous mode [ 627.449731][T25350] ipvlan0: entered allmulticast mode [ 627.456376][T25350] ipvlan1: entered promiscuous mode [ 627.461588][T25350] ipvlan1: entered allmulticast mode [ 627.468377][T25350] veth1_macvtap: entered allmulticast mode [ 627.484176][T25350] veth0_macvtap: entered allmulticast mode [ 627.503881][T25350] macvtap0: entered promiscuous mode [ 627.510814][T25350] macvtap0: entered allmulticast mode [ 627.523237][T25350] macsec0: entered promiscuous mode [ 627.534533][T25350] macsec0: entered allmulticast mode [ 627.542770][T25350] geneve0: entered promiscuous mode [ 627.549338][T25350] geneve0: entered allmulticast mode [ 627.561345][T25350] geneve1: entered promiscuous mode [ 627.568759][T25350] geneve1: entered allmulticast mode [ 627.580109][T25350] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 627.588464][T25350] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 627.605527][T25350] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 627.612930][T25350] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 627.629659][T25350] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 627.637372][T25350] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 627.654103][T25350] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 627.663585][T25350] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 627.672303][T25350] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 627.679679][T25350] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 627.688694][T25350] mac80211_hwsim hwsim56 wlan1: entered promiscuous mode [ 627.696257][T25350] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 627.704220][T25350] vxlan0: entered promiscuous mode [ 627.709382][T25350] vxlan0: entered allmulticast mode [ 627.715264][T25350] geneve2: entered promiscuous mode [ 627.720485][T25350] geneve2: entered allmulticast mode [ 627.726665][T25350] ipip0: entered allmulticast mode [ 627.734341][T25350] ip6tnl1: entered promiscuous mode [ 627.739784][T25350] ip6tnl1: entered allmulticast mode [ 627.745785][T25350] : entered promiscuous mode [ 627.750515][T25350] : entered allmulticast mode [ 627.758500][T25350] sit1: entered promiscuous mode [ 627.764045][T25350] sit1: entered allmulticast mode [ 627.800502][T25350] syztnl1: entered promiscuous mode [ 627.808069][T25350] syztnl1: entered allmulticast mode [ 627.817641][T25350] batman_adv: batadv0: Interface deactivated: gretap1 [ 627.832137][T25350] gretap1: entered promiscuous mode [ 627.838177][T25350] gretap1: entered allmulticast mode [ 627.848770][T25350] ipip1: entered promiscuous mode [ 627.854069][T25350] ipip1: entered allmulticast mode [ 627.861982][T25350] : entered allmulticast mode [ 627.867700][T25350] gtp0: entered promiscuous mode [ 627.872782][T25350] gtp0: entered allmulticast mode [ 627.882976][T25350] ip6gre2: entered promiscuous mode [ 627.888954][T25350] ip6gre2: entered allmulticast mode [ 627.894826][T25350] vlan2: entered promiscuous mode [ 627.900057][T25350] vlan2: entered allmulticast mode [ 627.906841][T25350] bridge1: entered promiscuous mode [ 627.912092][T25350] bridge1: entered allmulticast mode [ 627.927546][T25350] mac80211_hwsim hwsim55 veth1_to_bod: entered promiscuous mode [ 627.942416][T25350] mac80211_hwsim hwsim55 veth1_to_bod: entered allmulticast mode [ 627.951228][T25350] mac80211_hwsim hwsim70 wlan2: entered promiscuous mode [ 627.959174][T25350] mac80211_hwsim hwsim70 wlan2: entered allmulticast mode [ 627.967123][T25350] veth2: entered promiscuous mode [ 627.972161][T25350] veth2: entered allmulticast mode [ 627.978040][T25350] veth3: entered promiscuous mode [ 627.984595][T25350] veth3: entered allmulticast mode [ 627.989862][T25350] mac80211_hwsim hwsim72 wlan3: entered promiscuous mode [ 627.997410][T25350] mac80211_hwsim hwsim72 wlan3: entered allmulticast mode [ 628.007613][T25350] sit2: entered promiscuous mode [ 628.012589][T25350] sit2: entered allmulticast mode [ 628.035339][T25350] syztnl0: entered promiscuous mode [ 628.040559][T25350] syztnl0: entered allmulticast mode [ 628.051925][T25350] macvlan2: entered promiscuous mode [ 628.065563][T25350] macvlan2: entered allmulticast mode [ 628.074684][T25350] macvlan3: entered promiscuous mode [ 628.080239][T25350] macvlan3: entered allmulticast mode [ 628.086872][T25350] bridge2: entered promiscuous mode [ 628.092526][T25350] bridge2: entered allmulticast mode [ 628.104188][T25350] veth4: entered promiscuous mode [ 628.109860][T25350] veth4: entered allmulticast mode [ 628.117492][T25350] veth5: entered promiscuous mode [ 628.123566][T25350] veth5: entered allmulticast mode [ 628.129446][T25350] macvtap1: entered promiscuous mode [ 628.135038][T25350] macvtap1: entered allmulticast mode [ 628.140663][T25350] mac80211_hwsim hwsim77 wlan4: entered promiscuous mode [ 628.148234][T25350] mac80211_hwsim hwsim77 wlan4: entered allmulticast mode [ 628.155910][T25350] ip6erspan0: entered promiscuous mode [ 628.161424][T25350] ip6erspan0: entered allmulticast mode [ 628.186493][T25372] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 628.216187][T25372] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 628.244923][T12380] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.281539][T12380] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.322077][T12380] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.340284][T12380] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.371233][T12380] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.388552][T25396] netlink: 'syz.2.4895': attribute type 8 has an invalid length. [ 628.407518][T12380] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.427216][T12380] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.437124][T12380] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.502388][T25395] netlink: 'syz.1.4894': attribute type 16 has an invalid length. [ 628.542549][T25395] netlink: 'syz.1.4894': attribute type 17 has an invalid length. [ 628.840937][T25395] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 628.933894][T25415] tipc: Enabling of bearer rejected, already enabled [ 629.061335][T25430] IPv6: NLM_F_CREATE should be specified when creating new route [ 629.091857][T25430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.099169][T25430] IPv6: NLM_F_CREATE should be set when creating new route [ 629.165374][T25433] netlink: 'syz.4.4903': attribute type 1 has an invalid length. [ 629.186106][T25417] syzkaller0: entered promiscuous mode [ 629.196589][T25417] syzkaller0: entered allmulticast mode [ 629.405600][T25444] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 631.785407][T25440] tipc: Enabling of bearer rejected, already enabled [ 632.313110][T25486] ip6gre1: entered promiscuous mode [ 632.330952][T25486] ip6gre1: entered allmulticast mode [ 632.377501][T25478] lo speed is unknown, defaulting to 1000 [ 632.592502][T25499] syzkaller1: entered promiscuous mode [ 632.599281][T25499] syzkaller1: entered allmulticast mode [ 633.096562][T25528] __nla_validate_parse: 2 callbacks suppressed [ 633.096580][T25528] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4925'. [ 633.241189][T25534] netlink: 173 bytes leftover after parsing attributes in process `syz.0.4928'. [ 633.268869][T25532] syzkaller1: entered promiscuous mode [ 633.296830][T25532] syzkaller1: entered allmulticast mode [ 633.530077][T25545] batadv_slave_0: Caught tx_queue_len zero misconfig [ 633.550194][T25548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4932'. [ 633.609319][T25548] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4932'. [ 633.698459][T25554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4933'. [ 633.763291][T25565] nbd: nbd3 already in use [ 633.812061][T25567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4934'. [ 633.860460][T25567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4934'. [ 634.123093][T25580] 5Ò: entered promiscuous mode [ 634.131423][T25585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4944'. [ 634.163169][T25580] netlink: 'syz.0.4941': attribute type 5 has an invalid length. [ 634.274603][T25596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4946'. [ 634.320829][T25598] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 634.435052][T25602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4946'. [ 634.507480][T25608] bond9: option primary_reselect: invalid value (6) [ 634.518466][T25608] bond9 (unregistering): Released all slaves [ 634.932286][T25638] netlink: 'syz.1.4959': attribute type 10 has an invalid length. [ 634.964144][T25638] geneve1: entered promiscuous mode [ 634.971766][T25638] geneve1: entered allmulticast mode [ 634.979673][T25638] team0: Port device geneve1 added [ 635.026024][T25640] tipc: Enabled bearer , priority 0 [ 635.121363][T25640] syzkaller0: entered promiscuous mode [ 635.130606][T25640] syzkaller0: entered allmulticast mode [ 635.144500][T25640] tipc: Resetting bearer [ 635.158281][T25647] netlink: 'syz.0.4960': attribute type 11 has an invalid length. [ 635.188302][T25637] netlink: 'syz.0.4960': attribute type 11 has an invalid length. [ 635.285382][T25639] tipc: Resetting bearer [ 637.579320][T25639] tipc: Disabling bearer [ 637.609637][T25659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.629170][T25380] tipc: Node number set to 1105348269 [ 637.751823][T25676] tipc: Enabling of bearer rejected, already enabled [ 637.799469][T25678] tipc: Enabling of bearer rejected, already enabled [ 637.925750][T25684] netlink: 'syz.4.4974': attribute type 2 has an invalid length. [ 638.252864][T25714] geneve3: entered promiscuous mode [ 638.291084][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.322224][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.370683][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.397885][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.409852][T25721] __nla_validate_parse: 14 callbacks suppressed [ 638.409869][T25721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4985'. [ 638.582856][T25731] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.4988'. [ 638.606583][T25732] gtp1: entered promiscuous mode [ 638.612661][T25732] gtp1: entered allmulticast mode [ 639.220690][T25747] netlink: 'syz.1.4994': attribute type 11 has an invalid length. [ 639.279426][T23960] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.305056][T23960] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.317163][T23960] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 639.350698][T25752] syzkaller1: entered promiscuous mode [ 639.364056][T25752] syzkaller1: entered allmulticast mode [ 639.382388][T23960] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.412321][T23960] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.434105][T23960] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 639.460310][T23960] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.482061][T23960] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.495496][T23960] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 639.505705][T25757] ip6tnl0: Caught tx_queue_len zero misconfig [ 639.554148][T23960] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.564044][T23960] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.575006][T23960] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 639.783157][T25777] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5001'. [ 639.873835][T25785] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 639.920122][T25785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.932239][T25794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5006'. [ 639.950433][T25785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.976438][T25795] IPv6: NLM_F_CREATE should be specified when creating new route [ 639.999937][T25785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5003'. [ 640.058551][T25799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5007'. [ 640.084601][T25799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'. [ 640.160041][T25806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5008'. [ 640.233224][T25810] batadv_slave_1: entered promiscuous mode [ 640.302971][T25804] batadv_slave_1: left promiscuous mode [ 640.668070][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5017'. [ 640.708570][T25836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5017'. [ 641.754156][T25889] tipc: Failed to remove unknown binding: 66,0,0/1739497123:757044965/757044967 [ 641.805859][T25889] tipc: Failed to remove unknown binding: 66,0,0/1739497123:757044965/757044966 [ 642.180688][T25919] tipc: New replicast peer: 172.30.0.2 [ 642.221427][T25919] tipc: Enabled bearer , priority 10 [ 642.252619][T25920] tipc: Disabling bearer [ 642.510076][T25945] netlink: 'syz.0.5036': attribute type 10 has an invalid length. [ 642.736252][T25956] netlink: 'syz.1.5041': attribute type 1 has an invalid length. [ 642.816311][T25956] bond9: entered promiscuous mode [ 642.830610][T25956] 8021q: adding VLAN 0 to HW filter on device bond9 [ 643.204316][ T30] audit: type=1800 audit(1780339916.416:25): pid=25967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5040" name="memory.events" dev="tmpfs" ino=2103 res=0 errno=0 [ 643.248070][T25989] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 643.304058][T25974] nbd2: detected capacity change from 0 to 63 [ 643.315017][T25981] block nbd2: NBD_DISCONNECT [ 643.345186][T25981] block nbd2: Disconnected due to user request. [ 643.352721][T25981] block nbd2: shutting down sockets [ 643.361549][T19873] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.382091][T19873] Buffer I/O error on dev nbd2, logical block 0, async page read [ 643.408654][ T2508] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 643.418465][ T2508] Buffer I/O error on dev nbd2, logical block 1, async page read [ 643.429584][ T2508] Buffer I/O error on dev nbd2, logical block 2, async page read [ 643.437477][ T2508] Buffer I/O error on dev nbd2, logical block 3, async page read [ 643.447182][T19873] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.466936][T19873] Buffer I/O error on dev nbd2, logical block 0, async page read [ 643.475976][T19873] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.487066][T19873] Buffer I/O error on dev nbd2, logical block 1, async page read [ 643.496570][T19873] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.506495][T19873] Buffer I/O error on dev nbd2, logical block 2, async page read [ 643.514752][T19873] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.524162][T19873] Buffer I/O error on dev nbd2, logical block 3, async page read [ 643.534457][T19873] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.543760][T19873] Buffer I/O error on dev nbd2, logical block 0, async page read [ 643.551720][T19873] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.560950][T19873] Buffer I/O error on dev nbd2, logical block 1, async page read [ 643.568946][T19873] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.578404][T19873] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.590149][T19873] ldm_validate_partition_table(): Disk read failed. [ 643.602136][T19873] Dev nbd2: unable to read RDB block 0 [ 643.609993][T19873] nbd2: unable to read partition table [ 643.673060][T19873] ldm_validate_partition_table(): Disk read failed. [ 643.707722][T19873] Dev nbd2: unable to read RDB block 0 [ 643.738878][T19873] nbd2: unable to read partition table [ 644.251236][T26031] __nla_validate_parse: 10 callbacks suppressed [ 644.251322][T26031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5056'. [ 644.268590][T26027] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5059'. [ 644.298595][T26027] [ 644.300950][T26027] ====================================================== [ 644.307965][T26027] WARNING: possible circular locking dependency detected [ 644.315004][T26027] syzkaller #0 Not tainted [ 644.319415][T26027] ------------------------------------------------------ [ 644.326422][T26027] syz.3.5059/26027 is trying to acquire lock: [ 644.332465][T26027] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 644.341765][T26027] [ 644.341765][T26027] but task is already holding lock: [ 644.349108][T26027] ffff888032712530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 644.358310][T26027] [ 644.358310][T26027] which lock already depends on the new lock. [ 644.358310][T26027] [ 644.368690][T26027] [ 644.368690][T26027] the existing dependency chain (in reverse order) is: [ 644.377681][T26027] [ 644.377681][T26027] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 644.385217][T26027] __mutex_lock+0x1a3/0x1550 [ 644.390315][T26027] __ipv6_dev_mc_inc+0x4e/0xa50 [ 644.395666][T26027] addrconf_join_solict+0x104/0x190 [ 644.401363][T26027] __ipv6_dev_ac_inc+0x87b/0xaf0 [ 644.406805][T26027] ipv6_sock_ac_join+0x6a8/0x880 [ 644.412246][T26027] do_ipv6_setsockopt+0x203a/0x3150 [ 644.417946][T26027] ipv6_setsockopt+0x59/0x170 [ 644.423127][T26027] do_sock_setsockopt+0x17c/0x1b0 [ 644.428651][T26027] __x64_sys_setsockopt+0x13d/0x1b0 [ 644.434350][T26027] do_syscall_64+0x174/0x580 [ 644.439442][T26027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.445836][T26027] [ 644.445836][T26027] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 644.453547][T26027] lock_sock_nested+0x41/0x100 [ 644.458822][T26027] inet_shutdown+0x6a/0x390 [ 644.463830][T26027] nbd_mark_nsock_dead+0x2e9/0x560 [ 644.469531][T26027] recv_work+0x1c2e/0x1d40 [ 644.474445][T26027] process_scheduled_works+0xb5d/0x1860 [ 644.480492][T26027] worker_thread+0xa53/0xfc0 [ 644.485585][T26027] kthread+0x389/0x470 [ 644.490155][T26027] ret_from_fork+0x514/0xb70 [ 644.495245][T26027] ret_from_fork_asm+0x1a/0x30 [ 644.500509][T26027] [ 644.500509][T26027] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 644.508135][T26027] __mutex_lock+0x1a3/0x1550 [ 644.513226][T26027] nbd_queue_rq+0x37b/0x1100 [ 644.518316][T26027] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 644.524362][T26027] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 644.531189][T26027] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 644.537670][T26027] blk_mq_run_hw_queue+0x348/0x4f0 [ 644.543282][T26027] blk_mq_dispatch_list+0xd16/0xe10 [ 644.548987][T26027] blk_mq_flush_plug_list+0x48d/0x570 [ 644.554877][T26027] __blk_flush_plug+0x3ed/0x4d0 [ 644.560235][T26027] __submit_bio+0x28d/0x580 [ 644.565240][T26027] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 644.571378][T26027] block_read_full_folio+0x599/0x830 [ 644.577171][T26027] filemap_read_folio+0x137/0x3b0 [ 644.582706][T26027] do_read_cache_folio+0x358/0x590 [ 644.588332][T26027] read_part_sector+0xb6/0x2b0 [ 644.593599][T26027] adfspart_check_ICS+0xb1/0x960 [ 644.599038][T26027] bdev_disk_changed+0x817/0x1770 [ 644.604565][T26027] blkdev_get_whole+0x380/0x510 [ 644.609920][T26027] bdev_open+0x31e/0xd30 [ 644.614668][T26027] blkdev_open+0x470/0x610 [ 644.619588][T26027] do_dentry_open+0x822/0x13a0 [ 644.624854][T26027] vfs_open+0x3b/0x340 [ 644.629423][T26027] path_openat+0x2e08/0x3860 [ 644.634521][T26027] do_file_open+0x23e/0x4a0 [ 644.639525][T26027] do_sys_openat2+0x113/0x200 [ 644.644703][T26027] __x64_sys_openat+0x138/0x170 [ 644.650054][T26027] do_syscall_64+0x174/0x580 [ 644.655142][T26027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.661536][T26027] [ 644.661536][T26027] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 644.668722][T26027] __mutex_lock+0x1a3/0x1550 [ 644.673814][T26027] nbd_queue_rq+0xc6/0x1100 [ 644.678821][T26027] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 644.684866][T26027] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 644.691695][T26027] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 644.698176][T26027] blk_mq_run_hw_queue+0x348/0x4f0 [ 644.703789][T26027] blk_mq_dispatch_list+0xd16/0xe10 [ 644.709491][T26027] blk_mq_flush_plug_list+0x48d/0x570 [ 644.715362][T26027] __blk_flush_plug+0x3ed/0x4d0 [ 644.720711][T26027] __submit_bio+0x28d/0x580 [ 644.725713][T26027] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 644.731853][T26027] block_read_full_folio+0x599/0x830 [ 644.737639][T26027] filemap_read_folio+0x137/0x3b0 [ 644.743169][T26027] do_read_cache_folio+0x358/0x590 [ 644.748785][T26027] read_part_sector+0xb6/0x2b0 [ 644.754049][T26027] adfspart_check_ICS+0xb1/0x960 [ 644.759488][T26027] bdev_disk_changed+0x817/0x1770 [ 644.765011][T26027] blkdev_get_whole+0x380/0x510 [ 644.770363][T26027] bdev_open+0x31e/0xd30 [ 644.775103][T26027] blkdev_open+0x470/0x610 [ 644.780024][T26027] do_dentry_open+0x822/0x13a0 [ 644.785287][T26027] vfs_open+0x3b/0x340 [ 644.789857][T26027] path_openat+0x2e08/0x3860 [ 644.794950][T26027] do_file_open+0x23e/0x4a0 [ 644.799954][T26027] do_sys_openat2+0x113/0x200 [ 644.805130][T26027] __x64_sys_openat+0x138/0x170 [ 644.810487][T26027] do_syscall_64+0x174/0x580 [ 644.815577][T26027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.821971][T26027] [ 644.821971][T26027] -> #3 (set->srcu){.+.+}-{0:0}: [ 644.829075][T26027] __synchronize_srcu+0xca/0x300 [ 644.834514][T26027] elevator_switch+0x1e8/0x7a0 [ 644.839777][T26027] elevator_change+0x2cc/0x450 [ 644.845040][T26027] elevator_set_default+0x36c/0x430 [ 644.850736][T26027] blk_register_queue+0x3e9/0x4e0 [ 644.856261][T26027] __add_disk+0x677/0xd50 [ 644.861093][T26027] add_disk_fwnode+0xfb/0x480 [ 644.866269][T26027] nbd_dev_add+0x72c/0xb50 [ 644.871188][T26027] nbd_init+0x168/0x1f0 [ 644.875847][T26027] do_one_initcall+0x250/0x870 [ 644.881110][T26027] do_initcall_level+0x104/0x190 [ 644.886550][T26027] do_initcalls+0x59/0xa0 [ 644.891380][T26027] kernel_init_freeable+0x2a6/0x3e0 [ 644.897167][T26027] kernel_init+0x1d/0x1d0 [ 644.902004][T26027] ret_from_fork+0x514/0xb70 [ 644.907095][T26027] ret_from_fork_asm+0x1a/0x30 [ 644.912359][T26027] [ 644.912359][T26027] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 644.920154][T26027] __mutex_lock+0x1a3/0x1550 [ 644.925244][T26027] elevator_change+0x1b3/0x450 [ 644.930508][T26027] elevator_set_none+0xb5/0x140 [ 644.935859][T26027] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 644.942167][T26027] nbd_start_device+0x17f/0xb10 [ 644.947517][T26027] nbd_genl_connect+0x165b/0x1cf0 [ 644.953044][T26027] genl_family_rcv_msg_doit+0x22a/0x330 [ 644.959094][T26027] genl_rcv_msg+0x61c/0x7a0 [ 644.964100][T26027] netlink_rcv_skb+0x232/0x4b0 [ 644.969362][T26027] genl_rcv+0x28/0x40 [ 644.973846][T26027] netlink_unicast+0x75c/0x8e0 [ 644.979105][T26027] netlink_sendmsg+0x813/0xb40 [ 644.984368][T26027] ____sys_sendmsg+0x972/0x9f0 [ 644.989633][T26027] ___sys_sendmsg+0x2a5/0x360 [ 644.994809][T26027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 645.000244][T26027] do_syscall_64+0x174/0x580 [ 645.005332][T26027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.011816][T26027] [ 645.011816][T26027] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 645.020398][T26027] blk_alloc_queue+0x546/0x680 [ 645.025667][T26027] __blk_mq_alloc_disk+0x197/0x390 [ 645.031280][T26027] nbd_dev_add+0x499/0xb50 [ 645.036200][T26027] nbd_init+0x168/0x1f0 [ 645.040858][T26027] do_one_initcall+0x250/0x870 [ 645.046122][T26027] do_initcall_level+0x104/0x190 [ 645.051564][T26027] do_initcalls+0x59/0xa0 [ 645.056397][T26027] kernel_init_freeable+0x2a6/0x3e0 [ 645.062107][T26027] kernel_init+0x1d/0x1d0 [ 645.066940][T26027] ret_from_fork+0x514/0xb70 [ 645.072034][T26027] ret_from_fork_asm+0x1a/0x30 [ 645.077302][T26027] [ 645.077302][T26027] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 645.084489][T26027] __lock_acquire+0x15a5/0x2cf0 [ 645.089837][T26027] lock_acquire+0x106/0x350 [ 645.094838][T26027] fs_reclaim_acquire+0x71/0x100 [ 645.100279][T26027] __kmalloc_cache_noprof+0x40/0x660 [ 645.106065][T26027] __ipv6_dev_mc_inc+0x44f/0xa50 [ 645.111508][T26027] pndisc_constructor+0xe0/0x150 [ 645.116954][T26027] pneigh_create+0x246/0x4b0 [ 645.122045][T26027] neigh_add+0x6ea/0xf70 [ 645.126787][T26027] rtnetlink_rcv_msg+0x77e/0xbe0 [ 645.132246][T26027] netlink_rcv_skb+0x232/0x4b0 [ 645.137508][T26027] netlink_unicast+0x75c/0x8e0 [ 645.142770][T26027] netlink_sendmsg+0x813/0xb40 [ 645.148034][T26027] ____sys_sendmsg+0x972/0x9f0 [ 645.153301][T26027] ___sys_sendmsg+0x2a5/0x360 [ 645.158479][T26027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 645.163916][T26027] do_syscall_64+0x174/0x580 [ 645.169008][T26027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.175402][T26027] [ 645.175402][T26027] other info that might help us debug this: [ 645.175402][T26027] [ 645.185610][T26027] Chain exists of: [ 645.185610][T26027] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 645.185610][T26027] [ 645.198187][T26027] Possible unsafe locking scenario: [ 645.198187][T26027] [ 645.205613][T26027] CPU0 CPU1 [ 645.210957][T26027] ---- ---- [ 645.216296][T26027] lock(&idev->mc_lock); [ 645.220605][T26027] lock(sk_lock-AF_INET6); [ 645.227606][T26027] lock(&idev->mc_lock); [ 645.234431][T26027] lock(fs_reclaim); [ 645.238391][T26027] [ 645.238391][T26027] *** DEADLOCK *** [ 645.238391][T26027] [ 645.246520][T26027] 3 locks held by syz.3.5059/26027: [ 645.251701][T26027] #0: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 645.261100][T26027] #1: ffffffff8fef79b8 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4b0 [ 645.270574][T26027] #2: ffff888032712530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 645.280218][T26027] [ 645.280218][T26027] stack backtrace: [ 645.286093][T26027] CPU: 1 UID: 0 PID: 26027 Comm: syz.3.5059 Not tainted syzkaller #0 PREEMPT(full) [ 645.286109][T26027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.286118][T26027] Call Trace: [ 645.286124][T26027] [ 645.286131][T26027] dump_stack_lvl+0xe8/0x150 [ 645.286147][T26027] print_circular_bug+0x2e1/0x300 [ 645.286164][T26027] check_noncircular+0x12e/0x150 [ 645.286181][T26027] __lock_acquire+0x15a5/0x2cf0 [ 645.286195][T26027] ? preempt_schedule_thunk+0x16/0x30 [ 645.286213][T26027] ? __mutex_lock+0x32d/0x1550 [ 645.286228][T26027] ? kernel_text_address+0xa5/0xe0 [ 645.286246][T26027] ? __kmalloc_cache_noprof+0x40/0x660 [ 645.286262][T26027] lock_acquire+0x106/0x350 [ 645.286274][T26027] ? __kmalloc_cache_noprof+0x40/0x660 [ 645.286291][T26027] ? __pfx___mutex_lock+0x10/0x10 [ 645.286303][T26027] ? in6_dev_get+0x1a/0x290 [ 645.286317][T26027] fs_reclaim_acquire+0x71/0x100 [ 645.286333][T26027] ? __kmalloc_cache_noprof+0x40/0x660 [ 645.286348][T26027] __kmalloc_cache_noprof+0x40/0x660 [ 645.286364][T26027] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 645.286378][T26027] __ipv6_dev_mc_inc+0x44f/0xa50 [ 645.286395][T26027] pndisc_constructor+0xe0/0x150 [ 645.286412][T26027] ? __pfx_pndisc_constructor+0x10/0x10 [ 645.286430][T26027] ? pneigh_create+0x15b/0x4b0 [ 645.286447][T26027] pneigh_create+0x246/0x4b0 [ 645.286465][T26027] neigh_add+0x6ea/0xf70 [ 645.286481][T26027] ? __pfx_neigh_add+0x10/0x10 [ 645.286504][T26027] ? __pfx_neigh_add+0x10/0x10 [ 645.286515][T26027] rtnetlink_rcv_msg+0x77e/0xbe0 [ 645.286528][T26027] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 645.286539][T26027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.286549][T26027] ? ref_tracker_free+0x693/0x840 [ 645.286564][T26027] ? __pfx_ref_tracker_free+0x10/0x10 [ 645.286580][T26027] netlink_rcv_skb+0x232/0x4b0 [ 645.286594][T26027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.286606][T26027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.286623][T26027] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.286635][T26027] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.286649][T26027] netlink_unicast+0x75c/0x8e0 [ 645.286664][T26027] netlink_sendmsg+0x813/0xb40 [ 645.286681][T26027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.286695][T26027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 645.286712][T26027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.286736][T26027] ____sys_sendmsg+0x972/0x9f0 [ 645.286749][T26027] ? __might_fault+0xaf/0x130 [ 645.286766][T26027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.286782][T26027] ? import_iovec+0x73/0xa0 [ 645.286797][T26027] ___sys_sendmsg+0x2a5/0x360 [ 645.286809][T26027] ? __lock_acquire+0x6b5/0x2cf0 [ 645.286822][T26027] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.286837][T26027] ? futex_wait+0x2a2/0x390 [ 645.286863][T26027] ? __fget_files+0x2a/0x420 [ 645.286877][T26027] ? __fget_files+0x3a0/0x420 [ 645.286893][T26027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 645.286907][T26027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.286923][T26027] ? rcu_is_watching+0x15/0xb0 [ 645.286941][T26027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.286953][T26027] do_syscall_64+0x174/0x580 [ 645.286965][T26027] ? trace_irq_disable+0x3b/0x140 [ 645.286982][T26027] ? clear_bhb_loop+0x40/0x90 [ 645.286996][T26027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.287007][T26027] RIP: 0033:0x7f16ae79ce59 [ 645.287021][T26027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.287031][T26027] RSP: 002b:00007f16af61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.287044][T26027] RAX: ffffffffffffffda RBX: 00007f16aea15fa0 RCX: 00007f16ae79ce59 [ 645.287053][T26027] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000004 [ 645.287061][T26027] RBP: 00007f16ae832d6f R08: 0000000000000000 R09: 0000000000000000 [ 645.287069][T26027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.287076][T26027] R13: 00007f16aea16038 R14: 00007f16aea15fa0 R15: 00007fff111318c8 [ 645.287091][T26027]