last executing test programs: 3.470024054s ago: executing program 0 (id=752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c000100", @ANYRES64], 0x114}], 0x1}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040881}, 0x40040) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d40), 0x1000000000000159, &(0x7f0000000e00)=""/179, 0xb7}, 0x60) bind$bt_l2cap(r3, &(0x7f0000000ac0)={0x1f, 0x8000, @any, 0x6, 0x2}, 0xe) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r4, 0x3f38e000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40140}, 0x200080c1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x45, 0x0, 0x81, 0x4}, {0xc, 0x90, 0x2, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) shutdown(r7, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYRES16=r9], 0x290) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="090000000000000002004e26e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055afc83a434ddc5e424a8e15db0000000000004d3e5fabb5151a3857c2f07c2fd1e425915613e68873b149cea4f9f80a606dc8bec9228831e20b5cfe16e851715e9486c26c509cc074778ebe"], 0x90) 3.133414288s ago: executing program 1 (id=755): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x1a, 0xa, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 2.9154435s ago: executing program 1 (id=758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local, r3}, 0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x68, 0x49, 0x0, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r3, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2.778647492s ago: executing program 1 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a01010000000000000000050000000900010073797a30000000004c000000030a01080000000000000000050000000900010073797a30000000000900030073797a320000000014000480080002400000001408000140000000020b000700e6696c746572"], 0x94}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57", 0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf250800010000000000080007"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0xac}}, 0x40) 2.656446344s ago: executing program 3 (id=762): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x20, 0x20, 0xdbcd, 0x9f0, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x66, 0x0, 0x17, 0x2f, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0xf, 0xba, [@broadcast, @broadcast, @broadcast]}, @timestamp={0x44, 0x24, 0x30, 0x0, 0x4, [0x3, 0x3, 0x151, 0x4, 0x8, 0x4, 0x4d5, 0x4e39cf82]}, @timestamp_prespec={0x44, 0x24, 0xe9, 0x3, 0xe, [{@private=0xa010101}, {@rand_addr=0x64010102, 0x7b67b682}, {@empty, 0xfffffffe}, {@empty, 0x10000}]}, @timestamp_prespec={0x44, 0x14, 0x37, 0x3, 0x3, [{@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0x8}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x2, 0x6, 0x4, 0x6, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x91, 0x62, &(0x7f00000000c0)=""/98, 0x41000, 0x21, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r1], &(0x7f00000003c0)=[{0x5, 0x3, 0x3, 0xb}, {0x1, 0x5, 0xb, 0x5}], 0x10, 0x3}, 0x94) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) socket(0x28, 0x4, 0x5) socket$igmp(0x2, 0x3, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x20, 0x20, 0xdbcd, 0x9f0, {{0x20, 0x4, 0x3, 0x0, 0x80, 0x66, 0x0, 0x17, 0x2f, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0xf, 0xba, [@broadcast, @broadcast, @broadcast]}, @timestamp={0x44, 0x24, 0x30, 0x0, 0x4, [0x3, 0x3, 0x151, 0x4, 0x8, 0x4, 0x4d5, 0x4e39cf82]}, @timestamp_prespec={0x44, 0x24, 0xe9, 0x3, 0xe, [{@private=0xa010101}, {@rand_addr=0x64010102, 0x7b67b682}, {@empty, 0xfffffffe}, {@empty, 0x10000}]}, @timestamp_prespec={0x44, 0x14, 0x37, 0x3, 0x3, [{@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0x8}]}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x2, 0x6, 0x4, 0x6, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x91, 0x62, &(0x7f00000000c0)=""/98, 0x41000, 0x21, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r1], &(0x7f00000003c0)=[{0x5, 0x3, 0x3, 0xb}, {0x1, 0x5, 0xb, 0x5}], 0x10, 0x3}, 0x94) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) (async) socket(0x28, 0x4, 0x5) (async) 2.26525492s ago: executing program 3 (id=763): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e24, @broadcast}], 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@getneigh={0x14, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x0) getpeername(r0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="07802c5788df5b591a1334f1e3311400000048001dce58fc8bd2ab4093474f55d75360d628de8b6676cfb5e135b36defdd31dc0c71f9f0061513f17f3f54d72bc3be85e8393ac0139d68282dbf2c162eac58d4cd3c14fb0d06fb5e403db26fbd27a5e663dea7092282d24c7b5aedc1dddf"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20048800) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x38) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) (async) unshare(0x400) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e24, @broadcast}], 0x58) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@getneigh={0x14, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x0) (async) getpeername(r0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="07802c5788df5b591a1334f1e3311400000048001dce58fc8bd2ab4093474f55d75360d628de8b6676cfb5e135b36defdd31dc0c71f9f0061513f17f3f54d72bc3be85e8393ac0139d68282dbf2c162eac58d4cd3c14fb0d06fb5e403db26fbd27a5e663dea7092282d24c7b5aedc1dddf"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20048800) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) (async) sendfile(r3, r5, 0x0, 0x38) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) 2.197875494s ago: executing program 3 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@deltclass={0x38, 0x29, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x6, 0x7}, {0xe4c7364d247e4c66}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c40d4) 2.116554809s ago: executing program 4 (id=765): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x28, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb11001800000000dfc082047d46"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040), 0x4) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.929209877s ago: executing program 1 (id=766): r0 = socket(0x23, 0x80805, 0x0) unshare(0x26020480) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4) r2 = socket(0x40000000015, 0x5, 0x4007f) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r3 = socket(0xa, 0x5, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="02", 0x1, 0x4000805, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc5f}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0x0, 0xffff4585, 0x7, 0xffe, 0xd}, &(0x7f0000000180)=0x98) getsockname$unix(r3, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x140e, 0x801, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000000)=[{r0, 0x9081}], 0x1, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000440)={r4, 0x7}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000004c0)={r9, 0x22, 0x9}, 0x8) 1.604932533s ago: executing program 4 (id=769): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002b000b000000000000000000070a1303010003000c0001800600000088480000130002006661756c745f696e6a65635b696f6e00"], 0x38}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000005c0)={0x7, 'bridge0\x00', {0x5}, 0x480}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x89}, @generic={0x0, 0x0, 0x5, 0x4, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x35, &(0x7f0000000440)=""/53, 0x41100, 0x7, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0xe, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)=[{0x1, 0x2, 0x6}, {0x5, 0x1, 0xc, 0x5}], 0x10, 0x5}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0) write$nci(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, 0x0, &(0x7f0000000500)) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) close(0x3) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000006d00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r12}, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r9, @ANYBLOB="b4f50bddce80b95eb3de1048c66b10328da97e7a86f804f564c4a306e2f228f9df8478f3427363e9e1b7de0d327ea54ab3080000000000000093f60df16342de108b1cc79a0a5dba39ffeb188d7b823a1a946124f7862df54ed1bdfbb60ad8d3288e360d283d25e3cd03e1ea2616ff30fd2416d49f1df3287e299bd7b53ddafcf51e9bc7e3a006daa4cd95c14a06ee81bef08ce6be344b423396ae8b866ee8a33606a7cbd44e50327bcecb0b7c47a9ea72a72c717bac59fe1391521521ebc52d1a0c15345305f38ec38dcd3d00b65a92d539d1b74cc2ca92"], 0x1c}}, 0x0) write$nci(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="520101011388f1417274d4a045e81d7c3eb8007d4f827e1304e9c131def9405909dd2e72a5ada5b66e7b61e9fd047581b9d2d5fba037fd7119ed200fc405415147"], 0x4) 1.603522541s ago: executing program 3 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x44) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000000000000100000105"], 0x0, 0x5a}, 0x28) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bfa00000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000210400000000fcdbdf25000000006aef6be294bcdd62a799d72fd01cc2777d20c9dded8a45d5abca902e2037f8a2f9bf7fbf6e5d384083465d8fff9577099fa4d8b33c30e1f8030552162dd7e53c6e15b974da4137d650a647684dcb295827be0e94339c19c3da8f0ecfc639fbfa707a7a0e24da49eb79f9df7ee2", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000"], 0x44}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x7) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 1.513841388s ago: executing program 3 (id=771): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) write(r0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$MRT6(r2, 0x29, 0xd0, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)="3a368c0164df28ca80568342b50dc7a456b26f611074e0289e5687fc5c74c9d5ec48e962bfad1ad69f5434579942ede976a7ffde1faf75a911a9c771070565f96275f2b82a03dca9967a74c46ffae6d28061f6609ac44f03769be69f03bd32d202a96783d0c5c265c3598a36fa70f5c6778f61fbb2344bcc2bd14ca6104fbaa9a2e5ad7d069e72683a41ec0227a83b5946676207b8a68e23a438c9568c405fbf", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) 1.424307891s ago: executing program 0 (id=772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xc, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x40}}, 0x20040054) 1.202449756s ago: executing program 4 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@default, @bcast, @remote, @netrom, @null, @rose, @bcast, @rose]}, &(0x7f0000000140)=0x48, 0x80800) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000002c0)={0x200, 0x4, 0x6, 0x0, 0x0, [{{r1}, 0x3}, {{}, 0x6}, {{r0}, 0x10001}, {{r0}}, {{r1}, 0x4}, {{r2}, 0xd228}]}) r3 = socket(0x22, 0x2, 0x4) bind$bt_hci(r3, &(0x7f0000001200)={0x1f, 0x3}, 0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x70b78, 0x823}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x64}}, 0x24000800) 1.202093481s ago: executing program 0 (id=775): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xfc, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xb0, 0x8, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1.153258525s ago: executing program 4 (id=776): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffff3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @ldst={0x1, 0x1, 0x3, 0x7, 0x9, 0xc, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x28, &(0x7f0000000200)=""/40, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xe, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x1, 0x4, 0xb, 0x4}, {0x4, 0x4, 0xe, 0x3}, {0x0, 0x5, 0xd, 0x4}], 0x10, 0xe053}, 0x94) close(r0) 1.145113623s ago: executing program 2 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x0, 0xe4}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) 1.075830432s ago: executing program 0 (id=778): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, 0x0, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) write$nci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6109012f1016e3366badfca6b0d548012705dc6668c760784fe4"], 0xb) close(0x4) 905.200089ms ago: executing program 2 (id=779): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xa2ec9000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r3 = bpf$MAP_CREATE(0x300000000000000, &(0x7f00000001c0)=@base={0x20, 0x1, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x6}, 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x58, 0xa, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x84) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) read$alg(r4, 0x0, 0x0) write$cgroup_devices(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x8, 0x6, 0x7, 0x40, 0x10000}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff}, @generic={0x4, 0x2, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf54}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x44}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa55, 0x0, 0x0, 0x0, 0xb24}, @generic={0x9, 0xc, 0x1, 0xd5a6, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x59, &(0x7f00000003c0)=""/89, 0x41000, 0x1, '\x00', r7, 0x1a, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e4a6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 903.8796ms ago: executing program 1 (id=780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xafe7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63a4fb33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42127534}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6f1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68396e52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ce7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb61f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39757c95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1965}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64c4cf97}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xee6558b}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62ec8dd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe365}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3436}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x526a872e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d22e246}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71e5d89c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x453b6892}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1aae1026}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f00000014c0)=""/137, &(0x7f0000000080)=0x89) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)={{0x0, 0xfffffffffffffffc, 0x2, 0x81, 0xf476, 0x7, 0x8, 0xffffff4b, 0x7, 0x1, 0x2, 0x1, 0xb, 0x9, 0x1}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x402c0d5}, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0xb4807000) 798.863257ms ago: executing program 1 (id=781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4}, @ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0xa1}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0xc04}, 0x8080) recvmmsg$unix(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000a00)=""/55, 0x2}, {&(0x7f0000000100)=""/38, 0x22}, {&(0x7f0000000b40)=""/167, 0xa7}], 0x3}}], 0x1, 0x12040, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0xfffffffffffffe6d}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x252ca}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1080, 0x300}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x100}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 771.369677ms ago: executing program 4 (id=782): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x31863}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44040) 537.219876ms ago: executing program 4 (id=783): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x80, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @netrom, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) recvfrom$netrom(r2, &(0x7f0000000300)=""/67, 0x43, 0x20, &(0x7f0000000380)={{0x3, @bcast, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x2, @dev}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e000000", 0x55}], 0x1) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c00000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000100"/28], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xd8efb076b3815638, 0xffffffffffffffff, 0x4000) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x0, 0xf0, 0x3}}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x21dfdbfb, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xffff, 0xb}, {0xc}}}, 0x24}}, 0x40) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 519.539592ms ago: executing program 2 (id=784): r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) 463.106579ms ago: executing program 3 (id=785): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) (async) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x401, @mcast1, 0x5}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x122801, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000300)=@get={0x1, &(0x7f0000000280)=""/90}) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'wlan0\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x80000001, 0x10001, "b2098cac2185"}}) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000400)=@raw=[@jmp={0x5, 0x0, 0x7, 0xb, 0xc, 0x20, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000500)=""/165, 0x40f00, 0x25, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xa, 0x5, 0xd}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000640)=[{0x2, 0x5, 0x1, 0x8}, {0x1, 0x5, 0x0, 0x8}, {0x1, 0x1, 0x9, 0x9}], 0x10, 0x800}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000740)=@generic={&(0x7f00000003c0)='./file0\x00', r6}, 0x18) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='syzkaller\x00', 0x6, 0x1a, &(0x7f00000008c0)=""/26, 0x0, 0x0, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x7, 0xff, 0x1}, 0x10, 0x15059, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000009c0)=[{0x1, 0x2, 0xe, 0xa}, {0x2, 0x2, 0x0, 0x3}, {0x4, 0x5, 0x10}, {0x1, 0x1, 0xa}, {0x4, 0x1, 0xf, 0x5}], 0x10, 0xffffffff}, 0x94) (async) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback=r0, 0xc, 0x1, 0x3, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x12, 0x2e, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1b}, [@alu={0x7, 0x0, 0x4, 0x2, 0xa, 0xfffffffffffffffc, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x2, 0x16f31d6ee66e2a70, 0x5, 0x0, 0xfffffffffffffffa, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x7, 0x8, 0x6, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x4, 0xa0, &(0x7f0000000ec0)=""/160, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000fc0)={0x5, 0xa, 0x7ff}, 0x10, 0xffffffffffffffff, r6, 0xa, 0x0, &(0x7f0000001000)=[{0x4, 0x4, 0x9, 0x7}, {0x2, 0x3, 0xc, 0xa}, {0x0, 0x2, 0xf, 0x9}, {0x5, 0x3, 0x7, 0x4}, {0x5, 0x5, 0x10, 0xf}, {0x5, 0x5, 0xc, 0x6}, {0x2, 0x5, 0xe, 0xa}, {0x1, 0x2, 0x5, 0x8}, {0x4, 0x3, 0x6, 0x9}, {0x5, 0x3, 0xf}], 0x10, 0xfffffc01}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000cc0)={@fallback=r0, r7, 0x18, 0x0, r8, @void, @value=r11, @void, @void, r10}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001180)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f00000012c0)={&(0x7f00000011c0)={0x1d, r12}, 0x10, &(0x7f0000001280)={&(0x7f0000001200)={0x6, 0x809, 0x7, {0x77359400}, {0x0, 0xea60}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{}, 0x1, 0x0, 0x0, 0x0, "beb9e142fc1642c4"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x100008d1) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000001300)={0x3c, 0x2, 0x2, 0x1, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, 0x18) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000001340)=0x20e00, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000001380)={@empty, @broadcast, 0x0}, &(0x7f00000013c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001400)={r11, r13, 0x25, 0x10, @void}, 0x10) (async) setsockopt$CAIFSO_REQ_PARAM(r9, 0x116, 0x80, &(0x7f0000001440)="274ab5897c850a3dffcad64e8c49ccacf3856139d1c56691c412bc79b30a11dbd18a93b078cab1a900755eb03fb087aa9d89a599bd5f87fefc7fc0dce1c98059f8ba8407244e5583f3dec912f1cfdc096d8911a2e035bb4a", 0x58) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x8) 333.266265ms ago: executing program 2 (id=786): unshare(0x2c060000) unshare(0x24020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x52}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x9}, 0x8) unshare(0x6a040000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 189.028551ms ago: executing program 2 (id=787): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@multicast2, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="00082bbd7000ffdbdf251200000028000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f6272696467650008000900240000000800070001000100840001801400020069705f76746930000000000000000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="0800030000004509000007000000000000007c79cf96100bc0ea2ebbee66ac2a402a97d1da50f23369b115d2676899738f0000000000006bff7713937d0eb800444ed3329cdb273d8633ab4aaf3d33d5b2ab6c55617404bd27d3e038fcd34e9605b8dd7c35e05c18b02b10f87e2807152606ff621f654be14121a72906306701d00e446b4484a133", @ANYRES32=r4, @ANYBLOB="080003000200000008000300020000001400020074756e6c3000000000000000000000001400020073797a6b616c6c6572310000000000001400020076657468315f746f5f68737200000000"], 0xd0}, 0x1, 0x0, 0x0, 0x2400c081}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) r8 = socket$alg(0x26, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000051118010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f9c4d6bfa8c2a0c2e1abf3f3ee6a0b3", 0x10}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x2000c085) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000b40)=ANY=[@ANYBLOB="44000000b4d927000084f6faa13053bf8a820465daec0a2cb8f2f962e779fa7b02b16fbde9b112b1142aaf0182c6d7c42b9a138187927a7ea66f038025802b2a3b6626c31853133d2646264dfcff89ec683675d980df25a9424039fb65c4dc090000a821884a6b12a3013d734bae5454792a2db9024756a25f7461e40be6d0c7905e42b23c451d2b189b94a71b6187fbe318a5402fd6fdd03860463eb208d545d44b6ae4e714cd31193f3791c4e6cbea93948cf5fb62286a10f4a4", @ANYRES16=r6, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100000200000000000000df98b07ed6c1497842eeab8c9b9bf61024e617f7409f7380f03ebc2cce1ccc2ae0058b1cb678014564d2bb8b574975057cf20738bc7a40cc9f8f9ae1f1da417c85d671588688b7f7837eec565c4efeb0549dc25016b7127ea17c73d52300000000"], 0x44}, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000126bd7000ffdbdf250100000008000200050000001400018006000100080000000800060012000000dad33ae007a09cc1d357f5"], 0x30}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x50, r6, 0x575f82861bae095f, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000004) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000180)=ANY=[], 0xf0}}], 0x1, 0x24044c41) 128.631174ms ago: executing program 0 (id=788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000400000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @bcast, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) 17.260076ms ago: executing program 2 (id=789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f00000009c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=r0, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000100000007f0dbc7d44a38f0f12b7c818b7bb335bf9879d0aed7e1287fd18839808be06d970736a6385619177a7e7ad74fb3bf03ac3e81bacf40c36b80741d27d8131e3ee83efa06cfe383e63af587d1058f52024d7978d5cf423388d768e3f3f28aa39324872e6109b681683507256bf8cdabad8ce7b561d2c4cddf241d06bb20c0b51ea242ef0eb02345e5cf4b3491080a517"], 0x48) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x8, 0x4) listen(r0, 0xfff) 0s ago: executing program 0 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x0, 0x600}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 68.507444][ T5852] cgroup: Unknown subsys name 'net' [ 68.621663][ T5852] cgroup: Unknown subsys name 'cpuset' [ 68.630392][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.036728][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.421995][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.428355][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.977046][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.995251][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.002943][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.011705][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.019857][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.020596][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.027819][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.042493][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.047822][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.051088][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.059066][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.066267][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.077748][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.078317][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.086870][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.094156][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.101279][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.108202][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.115317][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.121413][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.136009][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.148279][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.158828][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.182930][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.193828][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.824132][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 74.877950][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 74.899237][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 74.984391][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 75.086608][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 75.213083][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.221259][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.229179][ T5865] bridge_slave_0: entered allmulticast mode [ 75.236236][ T5865] bridge_slave_0: entered promiscuous mode [ 75.262987][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.270366][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.279577][ T5863] bridge_slave_0: entered allmulticast mode [ 75.286896][ T5863] bridge_slave_0: entered promiscuous mode [ 75.313018][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.320259][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.327515][ T5865] bridge_slave_1: entered allmulticast mode [ 75.334731][ T5865] bridge_slave_1: entered promiscuous mode [ 75.355164][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.362450][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.369794][ T5880] bridge_slave_0: entered allmulticast mode [ 75.376793][ T5880] bridge_slave_0: entered promiscuous mode [ 75.385792][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.393016][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.400554][ T5880] bridge_slave_1: entered allmulticast mode [ 75.407453][ T5880] bridge_slave_1: entered promiscuous mode [ 75.418893][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.426017][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.434166][ T5863] bridge_slave_1: entered allmulticast mode [ 75.441130][ T5863] bridge_slave_1: entered promiscuous mode [ 75.512472][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.519699][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.526827][ T5864] bridge_slave_0: entered allmulticast mode [ 75.534959][ T5864] bridge_slave_0: entered promiscuous mode [ 75.545223][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.558655][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.591705][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.601168][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.608568][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.615823][ T5864] bridge_slave_1: entered allmulticast mode [ 75.622770][ T5864] bridge_slave_1: entered promiscuous mode [ 75.660514][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.673003][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.695408][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.750068][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.757256][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.765236][ T5862] bridge_slave_0: entered allmulticast mode [ 75.772302][ T5862] bridge_slave_0: entered promiscuous mode [ 75.781222][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.788509][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.795698][ T5862] bridge_slave_1: entered allmulticast mode [ 75.803353][ T5862] bridge_slave_1: entered promiscuous mode [ 75.823012][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.837431][ T5865] team0: Port device team_slave_0 added [ 75.867815][ T5863] team0: Port device team_slave_0 added [ 75.875723][ T5863] team0: Port device team_slave_1 added [ 75.884298][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.906673][ T5865] team0: Port device team_slave_1 added [ 75.914069][ T5880] team0: Port device team_slave_0 added [ 75.922671][ T5880] team0: Port device team_slave_1 added [ 75.991005][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.003561][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.025131][ T5864] team0: Port device team_slave_0 added [ 76.072323][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.079353][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.105834][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.120336][ T5864] team0: Port device team_slave_1 added [ 76.126872][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.133938][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.160955][ T5873] Bluetooth: hci1: command tx timeout [ 76.166703][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.178333][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.185728][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.211673][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.219152][ T5873] Bluetooth: hci2: command tx timeout [ 76.224371][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.228089][ T5185] Bluetooth: hci3: command tx timeout [ 76.234595][ T5869] Bluetooth: hci0: command tx timeout [ 76.235293][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.272116][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.295147][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.302692][ T5185] Bluetooth: hci4: command tx timeout [ 76.305532][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.334424][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.357695][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.364808][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.390931][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.418180][ T5862] team0: Port device team_slave_0 added [ 76.427618][ T5862] team0: Port device team_slave_1 added [ 76.453933][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.461181][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.487176][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.528180][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.535265][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.561453][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.611517][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.619103][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.645139][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.657981][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.669061][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.695417][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.744576][ T5865] hsr_slave_0: entered promiscuous mode [ 76.751613][ T5865] hsr_slave_1: entered promiscuous mode [ 76.774510][ T5880] hsr_slave_0: entered promiscuous mode [ 76.780880][ T5880] hsr_slave_1: entered promiscuous mode [ 76.786874][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 76.792903][ T5880] Cannot create hsr debugfs directory [ 76.814521][ T5863] hsr_slave_0: entered promiscuous mode [ 76.820893][ T5863] hsr_slave_1: entered promiscuous mode [ 76.826852][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 76.832677][ T5863] Cannot create hsr debugfs directory [ 76.929136][ T5864] hsr_slave_0: entered promiscuous mode [ 76.935402][ T5864] hsr_slave_1: entered promiscuous mode [ 76.942187][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 76.947955][ T5864] Cannot create hsr debugfs directory [ 76.984366][ T5862] hsr_slave_0: entered promiscuous mode [ 76.991126][ T5862] hsr_slave_1: entered promiscuous mode [ 76.997399][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 77.003208][ T5862] Cannot create hsr debugfs directory [ 77.556081][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.569417][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.580365][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.607494][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.669809][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.686862][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.703871][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.714934][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.823765][ T5880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.834778][ T5880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.862853][ T5880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.874255][ T5880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.951213][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.994934][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.013704][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.028061][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.050749][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.063051][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.077086][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.099339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.106688][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.162225][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.169415][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.193827][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.219029][ T5185] Bluetooth: hci1: command tx timeout [ 78.252025][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.259213][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.298877][ T5185] Bluetooth: hci3: command tx timeout [ 78.300068][ T5873] Bluetooth: hci0: command tx timeout [ 78.304297][ T5869] Bluetooth: hci2: command tx timeout [ 78.320789][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.327932][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.341056][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.371235][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.379081][ T5185] Bluetooth: hci4: command tx timeout [ 78.409467][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.420352][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.442648][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.535303][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.604024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.611227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.698294][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.705519][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.753606][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.878075][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.927110][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.960679][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.967809][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.977095][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.984239][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.024139][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.105725][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.136104][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.224038][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.231264][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.267894][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.275082][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.391930][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.502557][ T5862] veth0_vlan: entered promiscuous mode [ 79.576821][ T5862] veth1_vlan: entered promiscuous mode [ 79.668860][ T5880] veth0_vlan: entered promiscuous mode [ 79.715077][ T5880] veth1_vlan: entered promiscuous mode [ 79.753382][ T5862] veth0_macvtap: entered promiscuous mode [ 79.782541][ T5862] veth1_macvtap: entered promiscuous mode [ 79.849852][ T5865] veth0_vlan: entered promiscuous mode [ 79.860294][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.887123][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.912471][ T5880] veth0_macvtap: entered promiscuous mode [ 79.923765][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.934565][ T5880] veth1_macvtap: entered promiscuous mode [ 79.946923][ T5865] veth1_vlan: entered promiscuous mode [ 79.966793][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.977620][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.000138][ T3592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.010453][ T3592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.027164][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.087414][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.097744][ T5865] veth0_macvtap: entered promiscuous mode [ 80.132220][ T5865] veth1_macvtap: entered promiscuous mode [ 80.150934][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.188169][ T5863] veth0_vlan: entered promiscuous mode [ 80.227172][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.236240][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.266643][ T5863] veth1_vlan: entered promiscuous mode [ 80.274072][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.283940][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.299856][ T5185] Bluetooth: hci1: command tx timeout [ 80.315659][ T5864] veth0_vlan: entered promiscuous mode [ 80.321875][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.330120][ T5864] veth1_vlan: entered promiscuous mode [ 80.346626][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.354064][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.385250][ T5185] Bluetooth: hci3: command tx timeout [ 80.388634][ T5869] Bluetooth: hci2: command tx timeout [ 80.390766][ T5185] Bluetooth: hci0: command tx timeout [ 80.432358][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.459453][ T5185] Bluetooth: hci4: command tx timeout [ 80.475606][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.484913][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.504845][ T5864] veth0_macvtap: entered promiscuous mode [ 80.510857][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.532101][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.542989][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.560988][ T5864] veth1_macvtap: entered promiscuous mode [ 80.592539][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.606570][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.627403][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.647983][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.672513][ T5863] veth0_macvtap: entered promiscuous mode [ 80.719315][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.730790][ T5863] veth1_macvtap: entered promiscuous mode [ 80.803534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.820967][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.828270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.847841][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.907131][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.926816][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.941034][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.958570][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.966419][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.972448][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.042555][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.087251][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.098059][ T5995] Zero length message leads to an empty skb [ 81.219846][ T5995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.274600][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.287253][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.354962][ T5998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.373409][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.405315][ T5995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.437711][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.454193][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.540753][ T5998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.610477][ T5995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.635442][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.646297][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.834800][ T5998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.999440][ T5995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.087596][ T5998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.232558][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.255075][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.282894][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.318247][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.353977][ T3543] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.372238][ T3543] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.390460][ T5185] Bluetooth: hci1: command tx timeout [ 82.453125][ T3592] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.462709][ T5185] Bluetooth: hci0: command tx timeout [ 82.485651][ T5185] Bluetooth: hci2: command tx timeout [ 82.490056][ T5873] Bluetooth: hci3: command tx timeout [ 82.542925][ T5873] Bluetooth: hci4: command tx timeout [ 82.567166][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.617534][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.658293][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.676788][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.685972][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.718889][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.745371][ T6006] tipc: Started in network mode [ 82.753031][ T6006] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 82.774244][ T6006] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 82.786200][ T6006] tipc: Enabled bearer , priority 10 [ 82.795882][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.839021][ T6006] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 83.031514][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.301856][ T6019] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.606452][ T6019] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.697813][ T6019] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.789611][ T982] tipc: Node number set to 1 [ 83.875834][ T6019] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.971185][ T6024] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.077148][ T6024] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.182169][ T3543] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.195585][ T3543] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.207513][ T3543] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.216550][ T3543] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.322017][ T6029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.353559][ T6024] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.437263][ T6029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.472423][ T6024] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.644198][ T6029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.948883][ T6036] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.020632][ T6036] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.143402][ T6029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.166313][ T6036] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.331777][ T6036] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.359363][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.385460][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.401886][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.464347][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.224169][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.481811][ T6054] lo speed is unknown, defaulting to 1000 [ 86.487816][ T6054] lo speed is unknown, defaulting to 1000 [ 86.547903][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.547989][ T6054] lo speed is unknown, defaulting to 1000 [ 86.581934][ T6057] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 86.596358][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.599751][ T6056] IPVS: stopping backup sync thread 6057 ... [ 86.637865][ T6054] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.654740][ T6059] netlink: 260 bytes leftover after parsing attributes in process `syz.1.19'. [ 86.663629][ T6054] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.673263][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'. [ 86.687938][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.700050][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19'. [ 86.765438][ T3543] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.774853][ T3543] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.793721][ T979] cfg80211: failed to load regulatory.db [ 86.815610][ T6054] lo speed is unknown, defaulting to 1000 [ 86.932426][ T3543] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.972565][ T6054] lo speed is unknown, defaulting to 1000 [ 86.984377][ T6054] lo speed is unknown, defaulting to 1000 [ 87.014810][ T3543] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.085002][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.106114][ T6054] lo speed is unknown, defaulting to 1000 [ 87.160007][ T6054] lo speed is unknown, defaulting to 1000 [ 87.193258][ T6054] lo speed is unknown, defaulting to 1000 [ 87.257612][ T6069] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.415245][ T6077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.570768][ T6096] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 88.584968][ T6069] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.630725][ T6077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.728746][ T6096] geneve2: entered promiscuous mode [ 88.755333][ T6069] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.826861][ T6077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.961152][ T6069] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.063747][ T6077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.148659][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 89.421233][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.465681][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.574918][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.587042][ T6128] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 89.615931][ T3535] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.627262][ T6128] netlink: 184 bytes leftover after parsing attributes in process `syz.0.33'. [ 90.054052][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 90.114431][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.123234][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.516098][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.42'. [ 90.531100][ T3592] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.592840][ T6178] Bluetooth: MGMT ver 1.23 [ 90.594441][ T3535] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.665534][ T3535] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.731859][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.818551][ T6185] netlink: 'syz.4.45': attribute type 4 has an invalid length. [ 91.380678][ T6213] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 91.579027][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 91.605556][ T6232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.749730][ C1] Illegal XDP return value 16128 on prog (id 37) dev lo, expect packet loss! [ 91.835782][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 92.175233][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.204468][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.455563][ T5868] lo speed is unknown, defaulting to 1000 [ 92.485604][ T5868] syz1: Port: 1 Link DOWN [ 92.503519][ T6242] hsr_slave_0: left promiscuous mode [ 92.552275][ T6242] hsr_slave_1: left promiscuous mode [ 92.630435][ T3535] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.644656][ T3535] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.696550][ T3535] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.715710][ T6269] netlink: 256 bytes leftover after parsing attributes in process `syz.2.62'. [ 92.734246][ T3535] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.786756][ T6271] netlink: 'syz.4.63': attribute type 23 has an invalid length. [ 92.842752][ T6276] warning: `syz.1.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.239287][ T6300] netlink: 'syz.1.71': attribute type 2 has an invalid length. [ 93.361749][ T30] audit: type=1804 audit(1757587916.367:2): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.72" name="/newroot/10/cgroup.controllers" dev="tmpfs" ino=71 res=1 errno=0 [ 93.442661][ T30] audit: type=1800 audit(1757587916.367:3): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.72" name="cgroup.controllers" dev="tmpfs" ino=71 res=0 errno=0 [ 93.734434][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 94.426380][ T30] audit: type=1804 audit(1757587917.427:4): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.83" name="/newroot/16/cgroup.controllers" dev="tmpfs" ino=98 res=1 errno=0 [ 94.434363][ T6355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.494299][ T30] audit: type=1800 audit(1757587917.427:5): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.83" name="cgroup.controllers" dev="tmpfs" ino=98 res=0 errno=0 [ 94.539736][ T6361] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 95.163798][ T30] audit: type=1800 audit(1757587918.137:6): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.86" name="memory.events" dev="tmpfs" ino=104 res=0 errno=0 [ 95.225969][ T6384] lo speed is unknown, defaulting to 1000 [ 95.312786][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 95.387985][ T6385] lo speed is unknown, defaulting to 1000 [ 95.565979][ T6400] netlink: 48 bytes leftover after parsing attributes in process `syz.2.93'. [ 95.802395][ T6414] netlink: 'syz.3.98': attribute type 3 has an invalid length. [ 95.826633][ T6414] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 95.855345][ T6414] netlink: 192 bytes leftover after parsing attributes in process `syz.3.98'. [ 95.872189][ T6414] NCSI netlink: No device for ifindex 0 [ 95.921362][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 97.032314][ T6422] netlink: 96 bytes leftover after parsing attributes in process `syz.0.99'. [ 97.376386][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 97.572720][ T6459] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 97.593991][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 97.720769][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.113'. [ 97.775966][ T6477] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 97.827452][ T6459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.907915][ T6464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.113'. [ 97.970421][ T6483] syzkaller0: entered promiscuous mode [ 97.979138][ T6483] syzkaller0: entered allmulticast mode [ 98.002030][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 98.144939][ T6494] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.164577][ T6495] netlink: 'syz.4.121': attribute type 3 has an invalid length. [ 98.177395][ T6498] netlink: 'syz.3.123': attribute type 2 has an invalid length. [ 98.187646][ T6491] netlink: 'syz.4.121': attribute type 10 has an invalid length. [ 98.206504][ T6498] : entered promiscuous mode [ 98.223951][ T6491] dummy0: entered promiscuous mode [ 98.230823][ T6491] bridge0: port 3(dummy0) entered blocking state [ 98.237424][ T6491] bridge0: port 3(dummy0) entered disabled state [ 98.244141][ T6491] dummy0: entered allmulticast mode [ 98.259471][ T6491] bridge0: port 3(dummy0) entered blocking state [ 98.266019][ T6491] bridge0: port 3(dummy0) entered forwarding state [ 98.690912][ T6522] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 99.201835][ T6541] pim6reg: entered allmulticast mode [ 99.269029][ T6547] pim6reg: left allmulticast mode [ 99.683977][ T6560] netlink: 'syz.1.142': attribute type 3 has an invalid length. [ 100.079791][ T6567] lo speed is unknown, defaulting to 1000 [ 100.086367][ T6575] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 100.349567][ T6575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.571082][ T6577] bond1: (slave geneve2): making interface the new active one [ 100.618269][ T6577] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 100.895041][ T6590] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 100.960040][ T6586] macvtap1: entered allmulticast mode [ 100.965478][ T6586] veth0_macvtap: entered allmulticast mode [ 101.020460][ T6592] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.260476][ T6592] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.287025][ T6597] __nla_validate_parse: 7 callbacks suppressed [ 101.287040][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 101.461609][ T6592] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.616082][ T6592] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.632358][ T6603] netlink: 9 bytes leftover after parsing attributes in process `syz.0.155'. [ 101.915556][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.012651][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.089448][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.175293][ T3535] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.272696][ T6624] netlink: 724 bytes leftover after parsing attributes in process `syz.4.162'. [ 102.296736][ T6624] netlink: 83 bytes leftover after parsing attributes in process `syz.4.162'. [ 102.401237][ T6626] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 102.475223][ T6629] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 102.706048][ T6648] lo speed is unknown, defaulting to 1000 [ 102.946176][ T6647] netlink: 224 bytes leftover after parsing attributes in process `syz.4.168'. [ 103.000644][ T6650] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.022525][ T6660] netlink: 'syz.3.170': attribute type 11 has an invalid length. [ 103.190924][ T6650] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.309621][ T6668] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 103.320068][ T6668] netlink: 'syz.3.172': attribute type 3 has an invalid length. [ 103.330722][ T6650] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.351617][ T6668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.172'. [ 103.621671][ T6650] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.673804][ T6680] netlink: 'syz.3.177': attribute type 2 has an invalid length. [ 103.687253][ T6680] netlink: 'syz.3.177': attribute type 8 has an invalid length. [ 103.698976][ T6673] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.704011][ T6680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.177'. [ 103.780611][ T6673] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.900482][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.923289][ T6686] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 103.929329][ T6688] netlink: 56 bytes leftover after parsing attributes in process `syz.3.180'. [ 103.942108][ T982] lo speed is unknown, defaulting to 1000 [ 103.965231][ T982] syz1: Port: 1 Link ACTIVE [ 103.989722][ T6673] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.045588][ T6688] netlink: 48 bytes leftover after parsing attributes in process `syz.3.180'. [ 104.048050][ T6691] netlink: 'syz.4.181': attribute type 32 has an invalid length. [ 104.101304][ T6673] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.202462][ T6701] syzkaller1: entered promiscuous mode [ 104.210044][ T6701] syzkaller1: entered allmulticast mode [ 104.312269][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.400726][ T3553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.413616][ T6708] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 104.458036][ T6711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.468689][ T6710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.525672][ T6712] bond1 (unregistering): Released all slaves [ 104.601118][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.657217][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.829347][ T6721] nbd0: detected capacity change from 0 to 549764202496 [ 104.846828][ T6724] netlink: 'syz.2.188': attribute type 8 has an invalid length. [ 104.964380][ T6726] lo speed is unknown, defaulting to 1000 [ 105.237472][ T6745] netlink: 'syz.3.191': attribute type 21 has an invalid length. [ 105.247707][ T6745] netlink: 156 bytes leftover after parsing attributes in process `syz.3.191'. [ 105.412665][ T5873] block nbd0: Receive control failed (result -104) [ 105.506469][ T6755] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 105.724728][ T6768] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.918047][ T6774] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.987272][ T6774] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.077371][ T6774] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.159062][ T6784] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 106.186707][ T6784] netlink: 'syz.3.203': attribute type 2 has an invalid length. [ 106.216452][ T6774] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.304055][ T6787] __nla_validate_parse: 5 callbacks suppressed [ 106.304074][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 106.369095][ T3553] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.392718][ T6799] delete_channel: no stack [ 106.425027][ T6802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.455522][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.506637][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.614152][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.625041][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.643296][ T6806] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.745021][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.756032][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.091725][ T6810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.113581][ T6810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.123945][ T6810] bond0 (unregistering): Released all slaves [ 107.141500][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.814903][ T6857] netlink: 261 bytes leftover after parsing attributes in process `syz.2.221'. [ 107.898022][ T6857] macvtap1: entered promiscuous mode [ 107.913160][ T6857] macvtap1: entered allmulticast mode [ 107.919621][ T6857] dummy0: entered promiscuous mode [ 107.925080][ T6857] dummy0: entered allmulticast mode [ 107.937187][ T6857] team0: Device macvtap1 failed to register rx_handler [ 107.948065][ T6857] dummy0: left allmulticast mode [ 107.976234][ T6857] dummy0: left promiscuous mode [ 108.266637][ T6865] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 108.334447][ T6872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.228'. [ 108.355618][ T6870] netlink: 176 bytes leftover after parsing attributes in process `syz.0.227'. [ 108.559825][ T6882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.567289][ T6882] IPv6: NLM_F_CREATE should be set when creating new route [ 108.574637][ T6882] IPv6: NLM_F_CREATE should be set when creating new route [ 108.581898][ T6882] IPv6: NLM_F_CREATE should be set when creating new route [ 108.597674][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 108.664938][ T6884] netlink: 228 bytes leftover after parsing attributes in process `syz.0.232'. [ 108.949580][ T6890] lo speed is unknown, defaulting to 1000 [ 109.535312][ T6898] lo speed is unknown, defaulting to 1000 [ 109.779102][ T6929] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.906386][ T30] audit: type=1800 audit(1757587932.907:7): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.243" name="memory.events" dev="tmpfs" ino=278 res=0 errno=0 [ 109.943410][ T6929] netlink: 'syz.4.243': attribute type 49 has an invalid length. [ 110.610964][ T6955] netlink: 228 bytes leftover after parsing attributes in process `syz.3.248'. [ 110.891508][ T6952] lo speed is unknown, defaulting to 1000 [ 111.207783][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 111.248074][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 111.270622][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 111.427039][ T6977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.502279][ T6971] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 111.815464][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.824311][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.026656][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.044837][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.138657][ T7005] __nla_validate_parse: 1 callbacks suppressed [ 112.138675][ T7005] netlink: 44 bytes leftover after parsing attributes in process `syz.3.255'. [ 112.166300][ T7005] netlink: 43 bytes leftover after parsing attributes in process `syz.3.255'. [ 112.177988][ T7005] netlink: 'syz.3.255': attribute type 5 has an invalid length. [ 112.190735][ T7005] netlink: 43 bytes leftover after parsing attributes in process `syz.3.255'. [ 112.397700][ T59] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.410157][ T59] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.480557][ T7008] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 112.483524][ T59] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.497700][ T59] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.557763][ T979] lo speed is unknown, defaulting to 1000 [ 112.607416][ T979] syz1: Port: 1 Link DOWN [ 112.866411][ T7024] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 112.925426][ T7022] : entered promiscuous mode [ 112.953881][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 112.963403][ T7027] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.488322][ T7051] FAULT_INJECTION: forcing a failure. [ 113.488322][ T7051] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.511521][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.1.272 Not tainted syzkaller #0 PREEMPT(full) [ 113.511545][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.511562][ T7051] Call Trace: [ 113.511570][ T7051] [ 113.511578][ T7051] dump_stack_lvl+0x189/0x250 [ 113.511607][ T7051] ? __pfx____ratelimit+0x10/0x10 [ 113.511625][ T7051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.511644][ T7051] ? __pfx__printk+0x10/0x10 [ 113.511684][ T7051] ? __might_fault+0xb0/0x130 [ 113.511716][ T7051] should_fail_ex+0x414/0x560 [ 113.511754][ T7051] _copy_from_user+0x2d/0xb0 [ 113.511775][ T7051] ___sys_sendmsg+0x158/0x2a0 [ 113.511797][ T7051] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.511853][ T7051] ? __fget_files+0x2a/0x420 [ 113.511868][ T7051] ? __fget_files+0x3a0/0x420 [ 113.511893][ T7051] __x64_sys_sendmsg+0x19b/0x260 [ 113.511916][ T7051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.511945][ T7051] ? __pfx_ksys_write+0x10/0x10 [ 113.511963][ T7051] ? rcu_is_watching+0x15/0xb0 [ 113.511986][ T7051] ? do_syscall_64+0xbe/0x3b0 [ 113.512008][ T7051] do_syscall_64+0xfa/0x3b0 [ 113.512024][ T7051] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.512041][ T7051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.512057][ T7051] ? clear_bhb_loop+0x60/0xb0 [ 113.512077][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.512092][ T7051] RIP: 0033:0x7fc13c38eba9 [ 113.512113][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.512126][ T7051] RSP: 002b:00007fc13d246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.512148][ T7051] RAX: ffffffffffffffda RBX: 00007fc13c5d5fa0 RCX: 00007fc13c38eba9 [ 113.512160][ T7051] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 113.512171][ T7051] RBP: 00007fc13d246090 R08: 0000000000000000 R09: 0000000000000000 [ 113.512195][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.512211][ T7051] R13: 00007fc13c5d6038 R14: 00007fc13c5d5fa0 R15: 00007fffe2501d78 [ 113.512239][ T7051] [ 114.139666][ T7068] lo speed is unknown, defaulting to 1000 [ 114.356758][ T7080] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 114.933731][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 115.271670][ T7111] netlink: 'syz.2.290': attribute type 4 has an invalid length. [ 115.314016][ T7109] netlink: 'syz.2.290': attribute type 4 has an invalid length. [ 115.392815][ T7110] FAULT_INJECTION: forcing a failure. [ 115.392815][ T7110] name failslab, interval 1, probability 0, space 0, times 1 [ 115.407346][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 115.431394][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz.0.289 Not tainted syzkaller #0 PREEMPT(full) [ 115.431420][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.431429][ T7110] Call Trace: [ 115.431436][ T7110] [ 115.431444][ T7110] dump_stack_lvl+0x189/0x250 [ 115.431468][ T7110] ? __pfx____ratelimit+0x10/0x10 [ 115.431487][ T7110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.431506][ T7110] ? __pfx__printk+0x10/0x10 [ 115.431533][ T7110] ? __pfx___might_resched+0x10/0x10 [ 115.431555][ T7110] should_fail_ex+0x414/0x560 [ 115.431583][ T7110] should_failslab+0xa8/0x100 [ 115.431607][ T7110] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 115.431629][ T7110] ? __alloc_skb+0x112/0x2d0 [ 115.431651][ T7110] __alloc_skb+0x112/0x2d0 [ 115.431672][ T7110] netlink_sendmsg+0x5c6/0xb30 [ 115.431701][ T7110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.431722][ T7110] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.431741][ T7110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.431760][ T7110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.431778][ T7110] __sock_sendmsg+0x21c/0x270 [ 115.431803][ T7110] ____sys_sendmsg+0x505/0x830 [ 115.431829][ T7110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.431864][ T7110] ? import_iovec+0x74/0xa0 [ 115.431887][ T7110] ___sys_sendmsg+0x21f/0x2a0 [ 115.431908][ T7110] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.431959][ T7110] ? __fget_files+0x2a/0x420 [ 115.431972][ T7110] ? __fget_files+0x3a0/0x420 [ 115.431997][ T7110] __x64_sys_sendmsg+0x19b/0x260 [ 115.432018][ T7110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.432047][ T7110] ? __pfx_ksys_write+0x10/0x10 [ 115.432065][ T7110] ? rcu_is_watching+0x15/0xb0 [ 115.432087][ T7110] ? do_syscall_64+0xbe/0x3b0 [ 115.432108][ T7110] do_syscall_64+0xfa/0x3b0 [ 115.432125][ T7110] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.432141][ T7110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.432158][ T7110] ? clear_bhb_loop+0x60/0xb0 [ 115.432178][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.432193][ T7110] RIP: 0033:0x7f719458eba9 [ 115.432209][ T7110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.432221][ T7110] RSP: 002b:00007f719533e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.432239][ T7110] RAX: ffffffffffffffda RBX: 00007f71947d5fa0 RCX: 00007f719458eba9 [ 115.432251][ T7110] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 115.432262][ T7110] RBP: 00007f719533e090 R08: 0000000000000000 R09: 0000000000000000 [ 115.432272][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.432281][ T7110] R13: 00007f71947d6038 R14: 00007f71947d5fa0 R15: 00007fff8715da48 [ 115.432310][ T7110] [ 115.434077][ T7109] lo speed is unknown, defaulting to 1000 [ 116.345174][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 116.364171][ T7139] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.567085][ T7139] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.638966][ T7139] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.787104][ T7166] trusted_key: syz.1.304 sent an empty control message without MSG_MORE. [ 116.824244][ T7139] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.875811][ T7166] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 116.884455][ T7166] netlink: 228 bytes leftover after parsing attributes in process `syz.1.304'. [ 116.989183][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.006836][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.077415][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.112068][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.197396][ T7176] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 117.207912][ T7176] netlink: 192 bytes leftover after parsing attributes in process `syz.1.307'. [ 118.130582][ T7223] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 118.152192][ T7223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.205087][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 118.229788][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 118.239594][ T7223] netlink: 'syz.4.323': attribute type 13 has an invalid length. [ 118.337052][ T7218] nbd1: detected capacity change from 0 to 127 [ 118.380014][ T5185] block nbd1: Receive control failed (result -32) [ 118.380171][ T5873] block nbd1: Receive control failed (result -32) [ 118.398436][ T5869] block nbd1: Receive control failed (result -32) [ 118.417382][ T6122] block nbd1: Dead connection, failed to find a fallback [ 118.469678][ T6122] block nbd1: shutting down sockets [ 118.475880][ T6122] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.487972][ T6122] Buffer I/O error on dev nbd1, logical block 0, async page read [ 118.496554][ T6122] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.522366][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 118.531406][ T6122] Buffer I/O error on dev nbd1, logical block 1, async page read [ 118.549250][ T6122] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.563472][ T7239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.578471][ T6122] Buffer I/O error on dev nbd1, logical block 2, async page read [ 118.596716][ T6122] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.618334][ T6122] Buffer I/O error on dev nbd1, logical block 3, async page read [ 118.648232][ T6122] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.685774][ T6122] Buffer I/O error on dev nbd1, logical block 0, async page read [ 118.710794][ T6122] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.724701][ T7239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.742562][ T6122] Buffer I/O error on dev nbd1, logical block 1, async page read [ 118.751435][ T6122] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.762139][ T6122] Buffer I/O error on dev nbd1, logical block 2, async page read [ 118.771498][ T6122] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.789179][ T6122] Buffer I/O error on dev nbd1, logical block 3, async page read [ 118.797291][ T6122] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.807274][ T6122] Buffer I/O error on dev nbd1, logical block 0, async page read [ 118.826790][ T6122] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.855575][ T6122] Buffer I/O error on dev nbd1, logical block 1, async page read [ 118.917725][ T6122] ldm_validate_partition_table(): Disk read failed. [ 118.955918][ T6122] Dev nbd1: unable to read RDB block 0 [ 119.025526][ T6122] nbd1: unable to read partition table [ 119.062366][ T6122] ldm_validate_partition_table(): Disk read failed. [ 119.089916][ T7257] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 119.111749][ T6122] Dev nbd1: unable to read RDB block 0 [ 119.136111][ T6122] nbd1: unable to read partition table [ 119.357577][ T7266] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.335'. [ 119.747198][ T7278] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.824282][ T7286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.866223][ T7278] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.883252][ T7282] sctp: [Deprecated]: syz.4.342 (pid 7282) Use of int in maxseg socket option. [ 119.883252][ T7282] Use struct sctp_assoc_value instead [ 119.969150][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 119.994600][ T7278] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.005019][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 120.034998][ T7288] lo speed is unknown, defaulting to 1000 [ 120.095382][ T7278] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.336624][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.401012][ T3535] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.421989][ T3535] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.454520][ T3535] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.602428][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 120.654568][ T7308] macvtap1: entered allmulticast mode [ 120.672882][ T7308] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 120.883638][ T7319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.353'. [ 120.920492][ T7318] FAULT_INJECTION: forcing a failure. [ 120.920492][ T7318] name failslab, interval 1, probability 0, space 0, times 0 [ 120.937855][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.4.352 Not tainted syzkaller #0 PREEMPT(full) [ 120.937880][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.937890][ T7318] Call Trace: [ 120.937898][ T7318] [ 120.937906][ T7318] dump_stack_lvl+0x189/0x250 [ 120.937931][ T7318] ? __pfx____ratelimit+0x10/0x10 [ 120.937950][ T7318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.937970][ T7318] ? __pfx__printk+0x10/0x10 [ 120.937996][ T7318] ? __pfx___might_resched+0x10/0x10 [ 120.938012][ T7318] ? fs_reclaim_acquire+0x7d/0x100 [ 120.938034][ T7318] should_fail_ex+0x414/0x560 [ 120.938060][ T7318] should_failslab+0xa8/0x100 [ 120.938084][ T7318] __kmalloc_cache_noprof+0x70/0x3d0 [ 120.938104][ T7318] ? tcf_chain_create+0xb0/0x310 [ 120.938127][ T7318] tcf_chain_create+0xb0/0x310 [ 120.938152][ T7318] __tcf_chain_get+0x111/0x3c0 [ 120.938180][ T7318] tc_new_tfilter+0x753/0x15b0 [ 120.938211][ T7318] ? __local_bh_enable_ip+0x12d/0x1c0 [ 120.938243][ T7318] ? __pfx_tc_new_tfilter+0x10/0x10 [ 120.938259][ T7318] ? __dev_queue_xmit+0x1d79/0x3b50 [ 120.938316][ T7318] ? __pfx_tc_new_tfilter+0x10/0x10 [ 120.938334][ T7318] rtnetlink_rcv_msg+0x7cc/0xb70 [ 120.938360][ T7318] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 120.938375][ T7318] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.938388][ T7318] ? ref_tracker_free+0x63a/0x7d0 [ 120.938408][ T7318] ? __asan_memcpy+0x40/0x70 [ 120.938425][ T7318] ? __pfx_ref_tracker_free+0x10/0x10 [ 120.938457][ T7318] netlink_rcv_skb+0x208/0x470 [ 120.938477][ T7318] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.938496][ T7318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.938533][ T7318] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.938560][ T7318] netlink_unicast+0x82f/0x9e0 [ 120.938594][ T7318] ? __pfx_netlink_unicast+0x10/0x10 [ 120.938619][ T7318] ? netlink_sendmsg+0x642/0xb30 [ 120.938634][ T7318] ? skb_put+0x11b/0x210 [ 120.938657][ T7318] netlink_sendmsg+0x805/0xb30 [ 120.938686][ T7318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.938707][ T7318] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.938726][ T7318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.938745][ T7318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.938764][ T7318] __sock_sendmsg+0x21c/0x270 [ 120.938791][ T7318] ____sys_sendmsg+0x505/0x830 [ 120.938817][ T7318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.938848][ T7318] ? import_iovec+0x74/0xa0 [ 120.938871][ T7318] ___sys_sendmsg+0x21f/0x2a0 [ 120.938892][ T7318] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.938952][ T7318] ? __fget_files+0x2a/0x420 [ 120.938966][ T7318] ? __fget_files+0x3a0/0x420 [ 120.938993][ T7318] __x64_sys_sendmsg+0x19b/0x260 [ 120.939016][ T7318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.939047][ T7318] ? __pfx_ksys_write+0x10/0x10 [ 120.939066][ T7318] ? rcu_is_watching+0x15/0xb0 [ 120.939089][ T7318] ? do_syscall_64+0xbe/0x3b0 [ 120.939112][ T7318] do_syscall_64+0xfa/0x3b0 [ 120.939128][ T7318] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.939144][ T7318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.939161][ T7318] ? clear_bhb_loop+0x60/0xb0 [ 120.939181][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.939197][ T7318] RIP: 0033:0x7f6098d8eba9 [ 120.939213][ T7318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.939226][ T7318] RSP: 002b:00007f6099b40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.939244][ T7318] RAX: ffffffffffffffda RBX: 00007f6098fd5fa0 RCX: 00007f6098d8eba9 [ 120.939256][ T7318] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 120.939267][ T7318] RBP: 00007f6099b40090 R08: 0000000000000000 R09: 0000000000000000 [ 120.939277][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.939287][ T7318] R13: 00007f6098fd6038 R14: 00007f6098fd5fa0 R15: 00007fffc8ef69e8 [ 120.939317][ T7318] [ 121.492501][ T7324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.355'. [ 121.907510][ T7337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 122.221212][ T7351] __nla_validate_parse: 1 callbacks suppressed [ 122.221230][ T7351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.362'. [ 122.541084][ T7357] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.648073][ T7357] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.708601][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 122.747028][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 122.760525][ T7357] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.769367][ T7361] netlink: 38 bytes leftover after parsing attributes in process `syz.2.364'. [ 122.817909][ T7357] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.999830][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 123.034680][ T7367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.043754][ T7367] team0: Port device macvlan2 added [ 123.065007][ T7367] sctp: [Deprecated]: syz.2.367 (pid 7367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.065007][ T7367] Use struct sctp_sack_info instead [ 123.083067][ T7369] FAULT_INJECTION: forcing a failure. [ 123.083067][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 123.102570][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.4.368 Not tainted syzkaller #0 PREEMPT(full) [ 123.102594][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.102605][ T7369] Call Trace: [ 123.102613][ T7369] [ 123.102621][ T7369] dump_stack_lvl+0x189/0x250 [ 123.102646][ T7369] ? __pfx____ratelimit+0x10/0x10 [ 123.102665][ T7369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.102685][ T7369] ? __pfx__printk+0x10/0x10 [ 123.102713][ T7369] ? __pfx___might_resched+0x10/0x10 [ 123.102735][ T7369] should_fail_ex+0x414/0x560 [ 123.102763][ T7369] should_failslab+0xa8/0x100 [ 123.102787][ T7369] __kmalloc_cache_noprof+0x70/0x3d0 [ 123.102808][ T7369] ? tcf_proto_create+0x65/0x330 [ 123.102832][ T7369] tcf_proto_create+0x65/0x330 [ 123.102857][ T7369] tc_new_tfilter+0x11aa/0x15b0 [ 123.102905][ T7369] ? __pfx_tc_new_tfilter+0x10/0x10 [ 123.102922][ T7369] ? __dev_queue_xmit+0x1d79/0x3b50 [ 123.102980][ T7369] ? __pfx_tc_new_tfilter+0x10/0x10 [ 123.102999][ T7369] rtnetlink_rcv_msg+0x7cc/0xb70 [ 123.103021][ T7369] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 123.103037][ T7369] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.103052][ T7369] ? ref_tracker_free+0x63a/0x7d0 [ 123.103082][ T7369] ? __asan_memcpy+0x40/0x70 [ 123.103100][ T7369] ? __pfx_ref_tracker_free+0x10/0x10 [ 123.103134][ T7369] netlink_rcv_skb+0x208/0x470 [ 123.103154][ T7369] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.103173][ T7369] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.103204][ T7369] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.103231][ T7369] netlink_unicast+0x82f/0x9e0 [ 123.103262][ T7369] ? __pfx_netlink_unicast+0x10/0x10 [ 123.103286][ T7369] ? netlink_sendmsg+0x642/0xb30 [ 123.103302][ T7369] ? skb_put+0x11b/0x210 [ 123.103324][ T7369] netlink_sendmsg+0x805/0xb30 [ 123.103351][ T7369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.103373][ T7369] ? aa_sock_msg_perm+0xf1/0x1d0 [ 123.103392][ T7369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.103410][ T7369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.103428][ T7369] __sock_sendmsg+0x21c/0x270 [ 123.103455][ T7369] ____sys_sendmsg+0x505/0x830 [ 123.103482][ T7369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.103511][ T7369] ? import_iovec+0x74/0xa0 [ 123.103533][ T7369] ___sys_sendmsg+0x21f/0x2a0 [ 123.103554][ T7369] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.103613][ T7369] ? __fget_files+0x2a/0x420 [ 123.103627][ T7369] ? __fget_files+0x3a0/0x420 [ 123.103654][ T7369] __x64_sys_sendmsg+0x19b/0x260 [ 123.103677][ T7369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.103708][ T7369] ? __pfx_ksys_write+0x10/0x10 [ 123.103726][ T7369] ? rcu_is_watching+0x15/0xb0 [ 123.103749][ T7369] ? do_syscall_64+0xbe/0x3b0 [ 123.103772][ T7369] do_syscall_64+0xfa/0x3b0 [ 123.103788][ T7369] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.103804][ T7369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.103821][ T7369] ? clear_bhb_loop+0x60/0xb0 [ 123.103842][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.103858][ T7369] RIP: 0033:0x7f6098d8eba9 [ 123.103873][ T7369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.103887][ T7369] RSP: 002b:00007f6099b40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.103905][ T7369] RAX: ffffffffffffffda RBX: 00007f6098fd5fa0 RCX: 00007f6098d8eba9 [ 123.103917][ T7369] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 123.103928][ T7369] RBP: 00007f6099b40090 R08: 0000000000000000 R09: 0000000000000000 [ 123.103938][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.103948][ T7369] R13: 00007f6098fd6038 R14: 00007f6098fd5fa0 R15: 00007fffc8ef69e8 [ 123.103979][ T7369] [ 123.488574][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 123.503000][ T3543] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 123.689658][ T7373] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 123.875249][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.371'. [ 124.018257][ T7383] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.051509][ T7385] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 124.065773][ T7385] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 124.105080][ T7383] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.166017][ T7383] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.275000][ T7383] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.318961][ T7393] netlink: 'syz.4.377': attribute type 83 has an invalid length. [ 124.394313][ T3543] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.421379][ T3553] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.445354][ T3553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.471140][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.699165][ T3553] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.750411][ T3543] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.794446][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.870966][ T3543] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.038523][ T7405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.070375][ T7405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.172758][ T7407] siw: device registration error -23 [ 125.498998][ T5941] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 125.567604][ T7417] netlink: 2 bytes leftover after parsing attributes in process `syz.4.384'. [ 125.710386][ T7425] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 125.736992][ T7425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.387'. [ 125.750801][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 125.917546][ T7424] syzkaller0: entered promiscuous mode [ 125.964083][ T7424] syzkaller0: entered allmulticast mode [ 125.995077][ T7435] lo: entered promiscuous mode [ 126.016667][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 126.018712][ T7435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.025767][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 126.053119][ T7429] netlink: 'syz.4.388': attribute type 15 has an invalid length. [ 126.069712][ T7429] netlink: 'syz.4.388': attribute type 15 has an invalid length. [ 126.150261][ T1001] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.165440][ T1001] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.257090][ T1001] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.277361][ T1001] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.554162][ T7444] syzkaller1: entered promiscuous mode [ 126.559871][ T7444] syzkaller1: entered allmulticast mode [ 128.712263][ T7449] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 128.723130][ T7449] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 128.939079][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 129.219152][ T7467] bridge0: port 3(dummy0) entered disabled state [ 129.225818][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.233547][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.323846][ T7481] __nla_validate_parse: 8 callbacks suppressed [ 129.323862][ T7481] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.403'. [ 129.432538][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.449840][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.650673][ T7473] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 129.706631][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.726507][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.786793][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.808852][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.950553][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.967459][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.991716][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.000849][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.023349][ T7500] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 130.144896][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 130.160120][ T7512] netlink: 428 bytes leftover after parsing attributes in process `syz.3.407'. [ 131.282218][ T7512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.407'. [ 131.426688][ T7520] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 131.447863][ T7520] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 131.465587][ T7518] tipc: Enabled bearer , priority 0 [ 131.527711][ T7518] syzkaller0: entered promiscuous mode [ 131.539586][ T7518] syzkaller0: entered allmulticast mode [ 131.604182][ T7518] tipc: Resetting bearer [ 131.613015][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 131.657784][ T7518] tipc: Disabling bearer [ 131.695738][ T7529] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.415'. [ 131.705975][ T7528] bridge: RTM_NEWNEIGH with invalid ether address [ 131.870428][ T7533] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 132.071442][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.419'. [ 132.203216][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.576012][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 132.602205][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 132.638662][ T7573] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 132.683352][ T7571] IPVS: stopping master sync thread 7573 ... [ 132.814630][ T7577] veth3: entered promiscuous mode [ 132.874820][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884157][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.083992][ T7585] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.139387][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 133.217713][ T7585] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.241886][ T7595] sit0: entered promiscuous mode [ 133.274211][ T7595] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 133.303714][ T7585] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.661287][ T7585] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.915267][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.934330][ T7631] tipc: Started in network mode [ 133.939705][ T7631] tipc: Node identity 4, cluster identity 4711 [ 133.945964][ T7631] tipc: Node number set to 4 [ 133.989235][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.042420][ T7637] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 134.055237][ T7636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.064686][ T7636] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 134.094077][ T3553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.124321][ T7643] sit0: left promiscuous mode [ 134.147594][ T7643] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.163244][ T7643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.184943][ T5933] lo speed is unknown, defaulting to 1000 [ 134.212495][ T5933] syz1: Port: 1 Link ACTIVE [ 134.259459][ T1001] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.400725][ T7654] __nla_validate_parse: 6 callbacks suppressed [ 134.400742][ T7654] netlink: 92 bytes leftover after parsing attributes in process `syz.3.448'. [ 134.606179][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 134.763299][ T5869] block nbd2: Receive control failed (result -32) [ 134.796193][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.455'. [ 134.847916][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.455'. [ 135.081982][ T7692] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 135.091912][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 135.113783][ T7692] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 135.126406][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 135.143244][ T7692] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 135.152215][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 135.161930][ T7692] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 135.169878][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 135.180478][ T7692] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 135.188205][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 135.197927][ T7692] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 135.206218][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 135.224494][ T7692] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 135.420325][ T55] block nbd0: Possible stuck request ffff8880252b0000: control (read@0,4096B). Runtime 30 seconds [ 135.460018][ T7699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.772174][ T7717] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 136.239435][ T7742] openvswitch: netlink: EtherType 0 is less than min 600 [ 136.543803][ T7759] IPVS: Error connecting to the multicast addr [ 136.762169][ T982] IPVS: starting estimator thread 0... [ 136.883289][ T7766] IPVS: using max 32 ests per chain, 76800 per kthread [ 137.349603][ T7779] dvmrp0: entered allmulticast mode [ 137.548757][ T7781] lo speed is unknown, defaulting to 1000 [ 137.674897][ T7795] lo speed is unknown, defaulting to 1000 [ 137.816918][ T7804] syzkaller0: entered promiscuous mode [ 137.824580][ T7804] syzkaller0: entered allmulticast mode [ 138.018571][ T7808] validate_nla: 26 callbacks suppressed [ 138.018591][ T7808] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 138.618577][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 139.759888][ T7830] __nla_validate_parse: 25 callbacks suppressed [ 139.759907][ T7830] netlink: 128 bytes leftover after parsing attributes in process `syz.4.494'. [ 139.893218][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 139.967210][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.975419][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.072919][ T7830] syz.4.494 (7830) used greatest stack depth: 17560 bytes left [ 140.201746][ T7851] blkio.reset_stats is deprecated [ 140.289704][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.501'. [ 140.477185][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 140.927872][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.510'. [ 140.974988][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 140.989638][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.513'. [ 141.095901][ T7893] netlink: 27 bytes leftover after parsing attributes in process `syz.4.515'. [ 141.421157][ T7907] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.449935][ T7906] lo speed is unknown, defaulting to 1000 [ 141.479192][ T7907] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.621391][ T7907] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.679918][ T7912] lo speed is unknown, defaulting to 1000 [ 141.785847][ T7907] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.925455][ T3535] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.958098][ T3535] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.979534][ T3535] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.000725][ T3535] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.941374][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 143.016900][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.077012][ T7952] bond0: (slave rose0): Enslaving as an active interface with an up link [ 143.236445][ T7958] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.360641][ T7958] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.407863][ T5868] IPVS: starting estimator thread 0... [ 143.428960][ T7971] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.485371][ T7958] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.512353][ T7970] IPVS: using max 30 ests per chain, 72000 per kthread [ 143.628243][ T7958] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.678183][ T7967] lo speed is unknown, defaulting to 1000 [ 143.830870][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.206014][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.508051][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.552249][ T7996] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 144.602189][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.616463][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.809746][ T8011] lo speed is unknown, defaulting to 1000 [ 145.073106][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 145.199661][ T8032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.758316][ T8073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.558'. [ 145.820612][ T8070] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.896000][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 145.934405][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 145.936302][ T8070] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.944216][ T8077] netlink: 60 bytes leftover after parsing attributes in process `syz.4.560'. [ 145.994192][ T8074] veth1_macvtap: left promiscuous mode [ 146.118340][ T8070] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.207661][ T8070] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.645589][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 146.727047][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 147.060834][ T8118] ip6gre1: entered allmulticast mode [ 147.097362][ T8122] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 147.133754][ T8122] netlink: 204 bytes leftover after parsing attributes in process `syz.0.569'. [ 147.168810][ T8122] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 147.300833][ T8129] lo speed is unknown, defaulting to 1000 [ 147.529010][ T8136] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 147.614060][ T8136] team0: Device veth0_macvtap failed to register rx_handler [ 147.831856][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.935032][ T8153] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 147.995230][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.571'. [ 148.006158][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.014422][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.571'. [ 148.151036][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.192206][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.390476][ T8172] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 148.450108][ T8172] bridge0: port 3(macsec0) entered blocking state [ 148.472367][ T8172] bridge0: port 3(macsec0) entered disabled state [ 148.481172][ T8172] macsec0: entered allmulticast mode [ 148.486490][ T8172] veth1_macvtap: entered allmulticast mode [ 148.517278][ T8172] macsec0: entered promiscuous mode [ 148.859611][ T8193] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 149.105194][ T8203] tipc: Enabling of bearer rejected, media not registered [ 149.210912][ T8208] netlink: 'syz.0.595': attribute type 2 has an invalid length. [ 149.229378][ T8208] netlink: 'syz.0.595': attribute type 2 has an invalid length. [ 149.247244][ T8208] netlink: 'syz.0.595': attribute type 2 has an invalid length. [ 149.443826][ T8222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.451169][ T8222] IPv6: NLM_F_CREATE should be set when creating new route [ 149.458521][ T8222] IPv6: NLM_F_CREATE should be set when creating new route [ 149.616755][ T8229] lo: left promiscuous mode [ 149.639959][ T8229] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 150.101539][ T8246] __nla_validate_parse: 7 callbacks suppressed [ 150.101557][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 150.128099][ T8246] chnl_net:caif_netlink_parms(): no params data found [ 150.395224][ T8263] lo speed is unknown, defaulting to 1000 [ 150.940906][ T8277] netlink: 'syz.3.613': attribute type 11 has an invalid length. [ 151.026501][ T8279] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 151.063520][ T8281] netlink: 'syz.2.615': attribute type 12 has an invalid length. [ 151.355520][ T8291] IPVS: length: 20 != 8 [ 151.372904][ T8286] lo speed is unknown, defaulting to 1000 [ 151.468129][ T8296] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.587717][ T8296] bond0: entered promiscuous mode [ 151.598682][ T8296] bond_slave_0: entered promiscuous mode [ 151.613528][ T8296] bond_slave_1: entered promiscuous mode [ 151.646211][ T8296] bond0: left promiscuous mode [ 151.678557][ T8296] bond_slave_0: left promiscuous mode [ 151.706692][ T8296] bond_slave_1: left promiscuous mode [ 151.878319][ T8307] v: renamed from ip6_vti0 [ 152.269678][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 152.464899][ T8330] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 152.546887][ T8332] macvlan3: entered allmulticast mode [ 152.569201][ T8332] syz_tun: entered promiscuous mode [ 152.582602][ T8332] syz_tun: entered allmulticast mode [ 152.627119][ T8332] team0: Port device macvlan3 added [ 153.105974][ T8353] lo speed is unknown, defaulting to 1000 [ 153.190937][ T8359] syzkaller1: entered promiscuous mode [ 153.196502][ T8359] syzkaller1: entered allmulticast mode [ 153.668476][ T8366] lo speed is unknown, defaulting to 1000 [ 154.557561][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.651'. [ 154.899353][ T8417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.907860][ T8417] team0: Port device bond2 added [ 155.499981][ T8438] netlink: 14 bytes leftover after parsing attributes in process `syz.2.659'. [ 155.707159][ T8441] lo speed is unknown, defaulting to 1000 [ 156.331206][ T8467] netlink: zone id is out of range [ 156.336376][ T8467] netlink: zone id is out of range [ 156.350549][ T8467] netlink: zone id is out of range [ 156.364667][ T8467] netlink: zone id is out of range [ 156.378827][ T8467] netlink: zone id is out of range [ 156.416999][ T8467] netlink: zone id is out of range [ 156.433556][ T8478] netlink: del zone limit has 4 unknown bytes [ 156.444923][ T8467] netlink: zone id is out of range [ 156.453609][ T8467] netlink: zone id is out of range [ 156.464997][ T8467] netlink: zone id is out of range [ 156.539078][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 156.716091][ T8487] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.754894][ T8492] netlink: 80 bytes leftover after parsing attributes in process `syz.1.674'. [ 156.819577][ T8495] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.677'. [ 156.830310][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 156.845585][ T8487] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.894165][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 156.904227][ T8495] ip6tnl0: entered promiscuous mode [ 156.915535][ T8495] ip6tnl0: entered allmulticast mode [ 156.945256][ T8487] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.020467][ T8487] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.155411][ T8508] tipc: Started in network mode [ 157.163371][ T8508] tipc: Node identity 320351a37c4, cluster identity 4711 [ 157.177179][ T8508] tipc: Enabled bearer , priority 0 [ 157.204730][ T3553] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.299426][ T1001] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.307670][ T1001] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.329854][ T1001] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.348588][ T8508] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.552012][ T8514] tipc: Disabling bearer [ 157.746209][ T8538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.685'. [ 157.790323][ T8540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.683'. [ 157.872374][ T8521] ¾x9ÿ: left allmulticast mode [ 157.879346][ T8521] ¾x9ÿ: left promiscuous mode [ 157.896990][ T8521] bridge0: port 1(1¾x9ÿ) entered disabled state [ 157.943503][ T8521] bridge_slave_1: left allmulticast mode [ 157.949656][ T8521] bridge_slave_1: left promiscuous mode [ 157.955582][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.968020][ T8521] bond0: (slave bond_slave_0): Releasing backup interface [ 157.987910][ T8521] bond0: (slave bond_slave_1): Releasing backup interface [ 158.013428][ T8521] team0: Port device team_slave_0 removed [ 158.026603][ T8521] team0: Port device team_slave_1 removed [ 158.033736][ T8521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.042239][ T8521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.061119][ T8543] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 158.411655][ T8557] lo speed is unknown, defaulting to 1000 [ 159.546130][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 159.674418][ T8596] ip6tnl0: left promiscuous mode [ 159.681179][ T8596] ip6tnl0: left allmulticast mode [ 159.703208][ T8596] ip6gre1: left allmulticast mode [ 159.711862][ T8596] syz_tun: left allmulticast mode [ 159.717421][ T8596] macvlan3: left allmulticast mode [ 160.085801][ T8617] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 160.131154][ T8616] lo speed is unknown, defaulting to 1000 [ 160.252189][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 160.266765][ T8625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.711'. [ 160.362219][ T8626] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.544386][ T8631] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 160.558174][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.714'. [ 160.575804][ T8631] team0: Port device geneve0 added [ 160.622812][ T1001] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.634544][ T1001] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.659809][ T8626] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.706665][ T1001] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.749811][ T1001] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.792101][ T8637] syzkaller0: entered promiscuous mode [ 160.802854][ T8637] syzkaller0: entered allmulticast mode [ 160.826181][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.715'. [ 160.845426][ T8637] tipc: Started in network mode [ 160.850963][ T8637] tipc: Node identity ba613fc35a9a, cluster identity 4711 [ 160.858887][ T8637] tipc: Enabled bearer , priority 0 [ 160.881994][ T8637] tipc: Resetting bearer [ 160.897419][ T8626] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.935613][ T8636] tipc: Resetting bearer [ 160.956741][ T8636] tipc: Disabling bearer [ 160.983185][ T8626] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.126210][ T8638] tipc: Started in network mode [ 161.159864][ T8638] tipc: Node identity be6115842ad2, cluster identity 4711 [ 161.171395][ T8638] tipc: Enabled bearer , priority 0 [ 161.245100][ T8640] syzkaller0: entered promiscuous mode [ 161.250821][ T8640] syzkaller0: entered allmulticast mode [ 161.279361][ T8640] tipc: Resetting bearer [ 161.404260][ T3543] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.475992][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.519411][ T8650] nbd3: detected capacity change from 0 to 549764202496 [ 161.554862][ T3535] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.597003][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.719'. [ 161.611563][ T8650] netlink: 'syz.1.719': attribute type 7 has an invalid length. [ 161.624442][ T8650] netlink: 'syz.1.719': attribute type 8 has an invalid length. [ 161.632469][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 161.655101][ T8662] netlink: 204 bytes leftover after parsing attributes in process `syz.0.720'. [ 161.668669][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.695032][ T8650] batadv0: entered promiscuous mode [ 161.739994][ T8650] batadv0: left promiscuous mode [ 161.870948][ T3543] tipc: Resetting bearer [ 161.878687][ T8634] tipc: Resetting bearer [ 162.298764][ T24] tipc: Node number set to 2494764420 [ 163.290590][ T8634] tipc: Disabling bearer [ 163.304776][ T8659] lo speed is unknown, defaulting to 1000 [ 163.325011][ T8678] tipc: Enabling of bearer rejected, failed to enable media [ 163.337897][ T5869] block nbd3: Receive control failed (result -104) [ 163.756956][ T8691] lo speed is unknown, defaulting to 1000 [ 163.792516][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 163.880048][ T8707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.944724][ T8710] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 163.960778][ T8710] bond3: (slave macvlan4): Enslaving as a backup interface with an up link [ 163.990153][ T3543] net_ratelimit: 12 callbacks suppressed [ 163.990170][ T3543] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.053177][ T3543] bond3: (slave macvlan4): link status up again after 0 ms [ 164.083993][ T8707] bridge_slave_0: left allmulticast mode [ 164.093141][ T8707] bridge_slave_0: left promiscuous mode [ 164.109777][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.129209][ T1001] bond3: (slave macvlan4): link status up again after 0 ms [ 164.141287][ T8707] bridge_slave_1: left allmulticast mode [ 164.147055][ T8707] bridge_slave_1: left promiscuous mode [ 164.153575][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.161937][ T3543] bond3: (slave macvlan4): link status up again after 0 ms [ 164.177116][ T3543] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.209460][ T1001] bond3: (slave macvlan4): link status up again after 0 ms [ 164.230196][ T36] bond3: (slave macvlan4): link status up again after 0 ms [ 164.244831][ T8707] bond0: (slave bond_slave_0): Releasing backup interface [ 164.254783][ T8707] bond0: (slave bond_slave_1): Releasing backup interface [ 164.259377][ T36] bond3: (slave macvlan4): link status up again after 0 ms [ 164.300648][ T3543] bond3: (slave macvlan4): link status up again after 0 ms [ 164.302437][ T8707] team0: Port device team_slave_0 removed [ 164.319099][ T1001] bond3: (slave macvlan4): link status up again after 0 ms [ 164.347834][ T8707] team0: Port device team_slave_1 removed [ 164.354168][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.363194][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.503355][ T8717] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.624806][ T8717] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.796268][ T8717] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.878704][ T8717] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.998208][ T3543] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.123821][ T43] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.190689][ T1001] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.210118][ T8737] lo speed is unknown, defaulting to 1000 [ 165.249557][ T3543] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.414048][ T8744] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 165.499454][ T55] block nbd0: Possible stuck request ffff8880252b0000: control (read@0,4096B). Runtime 60 seconds [ 165.733438][ T8761] lo speed is unknown, defaulting to 1000 [ 165.788945][ T8734] delete_channel: no stack [ 165.975424][ T8778] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 166.076727][ T8764] syzkaller0: entered promiscuous mode [ 166.086441][ T8764] syzkaller0: entered allmulticast mode [ 166.232179][ T8788] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 166.467877][ T8791] gretap1: entered allmulticast mode [ 166.485824][ T8791] bond1: (slave gretap1): making interface the new active one [ 166.492319][ T8796] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 166.501358][ T8796] netlink: 244 bytes leftover after parsing attributes in process `syz.0.752'. [ 166.504061][ T8791] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 166.523930][ T5873] Bluetooth: hci4: link tx timeout [ 166.530039][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.540081][ T5873] Bluetooth: hci4: link tx timeout [ 166.545215][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.553185][ T5873] Bluetooth: hci4: link tx timeout [ 166.558319][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.566240][ T5873] Bluetooth: hci4: link tx timeout [ 166.571967][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.581411][ T5873] Bluetooth: hci4: link tx timeout [ 166.586542][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.594401][ T5873] Bluetooth: hci4: link tx timeout [ 166.600096][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.723179][ T8799] macvtap1: entered promiscuous mode [ 166.733092][ T8799] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 166.779074][ T8799] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 166.806885][ T8802] IPVS: Scheduler module ip_vs_sip not found [ 166.814760][ T8802] netlink: 'syz.1.755': attribute type 1 has an invalid length. [ 166.892183][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'. [ 166.920797][ T8803] macvtap1: entered promiscuous mode [ 166.938285][ T8803] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 166.957218][ T8803] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 166.987205][ T8795] lo speed is unknown, defaulting to 1000 [ 166.988169][ T8811] 8021q: VLANs not supported on wg0 [ 167.216006][ T8825] netlink: 'syz.4.760': attribute type 83 has an invalid length. [ 167.430352][ T8834] dvmrp0: entered allmulticast mode [ 167.579903][ T8820] netlink: 'syz.1.759': attribute type 7 has an invalid length. [ 167.790371][ T8854] netlink: 'syz.4.765': attribute type 10 has an invalid length. [ 167.823197][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 167.843847][ T8854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 167.905807][ T8855] dummy0: left allmulticast mode [ 167.925829][ T8855] dummy0: left promiscuous mode [ 167.934347][ T8855] bridge0: port 3(dummy0) entered disabled state [ 167.944215][ T8855] bridge_slave_1: left allmulticast mode [ 167.955914][ T8855] bridge_slave_1: left promiscuous mode [ 167.962462][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.983661][ T8855] bridge_slave_0: left allmulticast mode [ 167.995039][ T8855] bridge_slave_0: left promiscuous mode [ 168.001141][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.067220][ T8855] bond0: (slave bridge0): Releasing backup interface [ 168.085335][ T8865] netlink: 472 bytes leftover after parsing attributes in process `syz.2.768'. [ 168.203369][ T8868] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 168.231523][ T8868] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.768'. [ 168.273270][ T8871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.769'. [ 168.549773][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 168.782466][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 168.804534][ T8903] pim6reg1: entered promiscuous mode [ 168.814654][ T8903] pim6reg1: entered allmulticast mode [ 168.970754][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 169.141951][ T8919] bond0: Device is already in use. [ 169.174968][ T1001] net_ratelimit: 28 callbacks suppressed [ 169.174989][ T1001] bond3: (slave macvlan4): failed to get link speed/duplex [ 169.350655][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 169.429158][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 169.807358][ T8949] [ 169.809729][ T8949] ====================================================== [ 169.816753][ T8949] WARNING: possible circular locking dependency detected [ 169.823789][ T8949] syzkaller #0 Not tainted [ 169.828212][ T8949] ------------------------------------------------------ [ 169.835234][ T8949] syz.2.789/8949 is trying to acquire lock: [ 169.841129][ T8949] ffffffff8e23f7a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x153/0x610 [ 169.850309][ T8949] [ 169.850309][ T8949] but task is already holding lock: [ 169.857682][ T8949] ffffffff8e21e6e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 169.867284][ T8949] [ 169.867284][ T8949] which lock already depends on the new lock. [ 169.867284][ T8949] [ 169.877691][ T8949] [ 169.877691][ T8949] the existing dependency chain (in reverse order) is: [ 169.886707][ T8949] [ 169.886707][ T8949] -> #2 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 169.894482][ T8949] lock_acquire+0x120/0x360 [ 169.899500][ T8949] __mutex_lock+0x187/0x1350 [ 169.904599][ T8949] pcpu_alloc_noprof+0x286/0x16b0 [ 169.910160][ T8949] sbitmap_init_node+0x1e1/0x630 [ 169.915613][ T8949] sbitmap_queue_init_node+0x3e/0x4d0 [ 169.921491][ T8949] blk_mq_init_tags+0x110/0x280 [ 169.927285][ T8949] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 169.933252][ T8949] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 169.939568][ T8949] nbd_start_device+0x17f/0xb10 [ 169.944930][ T8949] nbd_genl_connect+0x135b/0x18f0 [ 169.950464][ T8949] genl_family_rcv_msg_doit+0x212/0x300 [ 169.956517][ T8949] genl_rcv_msg+0x60e/0x790 [ 169.961531][ T8949] netlink_rcv_skb+0x208/0x470 [ 169.966805][ T8949] genl_rcv+0x28/0x40 [ 169.971296][ T8949] netlink_unicast+0x82f/0x9e0 [ 169.976574][ T8949] netlink_sendmsg+0x805/0xb30 [ 169.981929][ T8949] __sock_sendmsg+0x21c/0x270 [ 169.987127][ T8949] ____sys_sendmsg+0x505/0x830 [ 169.992420][ T8949] ___sys_sendmsg+0x21f/0x2a0 [ 169.997603][ T8949] __x64_sys_sendmsg+0x19b/0x260 [ 170.003061][ T8949] do_syscall_64+0xfa/0x3b0 [ 170.008070][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.014469][ T8949] [ 170.014469][ T8949] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 170.023141][ T8949] lock_acquire+0x120/0x360 [ 170.028180][ T8949] blk_alloc_queue+0x538/0x620 [ 170.033451][ T8949] __blk_mq_alloc_disk+0x15c/0x340 [ 170.039068][ T8949] nbd_dev_add+0x46c/0xae0 [ 170.044009][ T8949] nbd_init+0x168/0x1f0 [ 170.048672][ T8949] do_one_initcall+0x233/0x820 [ 170.053945][ T8949] do_initcall_level+0x104/0x190 [ 170.059388][ T8949] do_initcalls+0x59/0xa0 [ 170.064225][ T8949] kernel_init_freeable+0x334/0x4b0 [ 170.069930][ T8949] kernel_init+0x1d/0x1d0 [ 170.074786][ T8949] ret_from_fork+0x3fc/0x770 [ 170.079900][ T8949] ret_from_fork_asm+0x1a/0x30 [ 170.085198][ T8949] [ 170.085198][ T8949] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 170.092392][ T8949] validate_chain+0xb9b/0x2140 [ 170.097663][ T8949] __lock_acquire+0xab9/0xd20 [ 170.102849][ T8949] lock_acquire+0x120/0x360 [ 170.107858][ T8949] fs_reclaim_acquire+0x72/0x100 [ 170.113298][ T8949] prepare_alloc_pages+0x153/0x610 [ 170.118918][ T8949] __alloc_frozen_pages_noprof+0x123/0x370 [ 170.125245][ T8949] __alloc_pages_noprof+0xa/0x30 [ 170.130681][ T8949] pcpu_populate_chunk+0x182/0xb30 [ 170.136300][ T8949] pcpu_alloc_noprof+0xcbf/0x16b0 [ 170.141846][ T8949] bpf_map_alloc_percpu+0xbc/0x1b0 [ 170.147477][ T8949] prealloc_init+0x225/0x630 [ 170.152574][ T8949] htab_map_alloc+0x6ce/0xc70 [ 170.157756][ T8949] map_create+0xaa0/0x14d0 [ 170.162767][ T8949] __sys_bpf+0x60f/0x870 [ 170.167510][ T8949] __x64_sys_bpf+0x7c/0x90 [ 170.172429][ T8949] do_syscall_64+0xfa/0x3b0 [ 170.177434][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.183829][ T8949] [ 170.183829][ T8949] other info that might help us debug this: [ 170.183829][ T8949] [ 170.194038][ T8949] Chain exists of: [ 170.194038][ T8949] fs_reclaim --> &q->q_usage_counter(io)#50 --> pcpu_alloc_mutex [ 170.194038][ T8949] [ 170.207660][ T8949] Possible unsafe locking scenario: [ 170.207660][ T8949] [ 170.215086][ T8949] CPU0 CPU1 [ 170.220429][ T8949] ---- ---- [ 170.225770][ T8949] lock(pcpu_alloc_mutex); [ 170.230252][ T8949] lock(&q->q_usage_counter(io)#50); [ 170.238123][ T8949] lock(pcpu_alloc_mutex); [ 170.245127][ T8949] lock(fs_reclaim); [ 170.249092][ T8949] [ 170.249092][ T8949] *** DEADLOCK *** [ 170.249092][ T8949] [ 170.257209][ T8949] 1 lock held by syz.2.789/8949: [ 170.262123][ T8949] #0: ffffffff8e21e6e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 170.272142][ T8949] [ 170.272142][ T8949] stack backtrace: [ 170.278009][ T8949] CPU: 1 UID: 0 PID: 8949 Comm: syz.2.789 Not tainted syzkaller #0 PREEMPT(full) [ 170.278030][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 170.278040][ T8949] Call Trace: [ 170.278046][ T8949] [ 170.278052][ T8949] dump_stack_lvl+0x189/0x250 [ 170.278067][ T8949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.278079][ T8949] ? __pfx__printk+0x10/0x10 [ 170.278093][ T8949] ? print_lock_name+0xde/0x100 [ 170.278106][ T8949] print_circular_bug+0x2ee/0x310 [ 170.278118][ T8949] check_noncircular+0x134/0x160 [ 170.278134][ T8949] validate_chain+0xb9b/0x2140 [ 170.278144][ T8949] ? finish_task_switch+0x266/0x950 [ 170.278158][ T8949] ? finish_task_switch+0x32b/0x950 [ 170.278170][ T8949] ? rcu_is_watching+0x15/0xb0 [ 170.278180][ T8949] ? trace_sched_exit_tp+0x36/0x110 [ 170.278192][ T8949] ? __schedule+0x17ae/0x4cc0 [ 170.278202][ T8949] __lock_acquire+0xab9/0xd20 [ 170.278218][ T8949] ? prepare_alloc_pages+0x153/0x610 [ 170.278227][ T8949] lock_acquire+0x120/0x360 [ 170.278240][ T8949] ? prepare_alloc_pages+0x153/0x610 [ 170.278250][ T8949] ? __pfx___schedule+0x10/0x10 [ 170.278259][ T8949] fs_reclaim_acquire+0x72/0x100 [ 170.278268][ T8949] ? prepare_alloc_pages+0x153/0x610 [ 170.278276][ T8949] prepare_alloc_pages+0x153/0x610 [ 170.278286][ T8949] __alloc_frozen_pages_noprof+0x123/0x370 [ 170.278296][ T8949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 170.278305][ T8949] ? preempt_schedule+0xae/0xc0 [ 170.278317][ T8949] __alloc_pages_noprof+0xa/0x30 [ 170.278325][ T8949] pcpu_populate_chunk+0x182/0xb30 [ 170.278343][ T8949] pcpu_alloc_noprof+0xcbf/0x16b0 [ 170.278362][ T8949] bpf_map_alloc_percpu+0xbc/0x1b0 [ 170.278385][ T8949] prealloc_init+0x225/0x630 [ 170.278407][ T8949] htab_map_alloc+0x6ce/0xc70 [ 170.278420][ T8949] map_create+0xaa0/0x14d0 [ 170.278433][ T8949] ? security_bpf+0x7e/0x300 [ 170.278448][ T8949] __sys_bpf+0x60f/0x870 [ 170.278460][ T8949] ? __pfx___sys_bpf+0x10/0x10 [ 170.278477][ T8949] ? rcu_is_watching+0x15/0xb0 [ 170.278487][ T8949] __x64_sys_bpf+0x7c/0x90 [ 170.278498][ T8949] do_syscall_64+0xfa/0x3b0 [ 170.278510][ T8949] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.278520][ T8949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.278529][ T8949] ? clear_bhb_loop+0x60/0xb0 [ 170.278539][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.278548][ T8949] RIP: 0033:0x7f22e418eba9 [ 170.278558][ T8949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.278566][ T8949] RSP: 002b:00007f22e5034038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.278577][ T8949] RAX: ffffffffffffffda RBX: 00007f22e43d5fa0 RCX: 00007f22e418eba9 [ 170.278584][ T8949] RDX: 0000000000000048 RSI: 00002000000004c0 RDI: 0000000000000000 [ 170.278590][ T8949] RBP: 00007f22e4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 170.278595][ T8949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.278601][ T8949] R13: 00007f22e43d6038 R14: 00007f22e43d5fa0 R15: 00007ffe110a8538 [ 170.278612][ T8949] [ 170.739551][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 170.869308][ T36] bond3: (slave macvlan4): failed to get link speed/duplex [ 170.988587][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 171.098663][ T36] bond3: (slave macvlan4): failed to get link speed/duplex [ 171.208541][ T36] bond3: (slave macvlan4): failed to get link speed/duplex [ 171.318774][ T36] bond3: (slave macvlan4): failed to get link speed/duplex [ 171.428828][ T36] bond3: (slave macvlan4): failed to get link speed/duplex [ 171.538495][ T3592] bond3: (slave macvlan4): failed to get link speed/duplex [ 173.888944][ T5235] udevd[5235]: worker [5918] /devices/virtual/block/nbd0 is taking a long time [ 174.208718][ T3592] net_ratelimit: 23 callbacks suppressed [ 174.208739][ T3592] bond3: (slave macvlan4): failed to get link speed/duplex [ 174.328467][ T3592] bond3: (slave macvlan4): failed to get link speed/duplex [ 174.448847][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 174.558697][ T3553] bond3: (slave macvlan4): failed to get link speed/duplex [ 174.668603][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 174.778948][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 174.888760][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 174.998576][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 175.108545][ T3592] bond3: (slave macvlan4): failed to get link speed/duplex [ 175.228849][ T3543] bond3: (slave macvlan4): failed to get link speed/duplex [ 179.289214][ T3553] net_ratelimit: 35 callbacks suppressed [ 179.289234][ T3553] bond3: (slave macvlan4): failed to get link speed/duplex [ 179.409063][ T3592] bond3: (slave macvlan4): failed to get link speed/duplex [ 179.518573][ T3592] bond3: (slave macvlan4): failed to get link speed/duplex [ 179.628532][ T36] bond3: (slave macvlan4): failed to get link speed/duplex [ 179.738624][ T36] bond3: (slave macvlan4): failed to get link speed/duplex