last executing test programs: 5.869632003s ago: executing program 3 (id=2001): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)) (async) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r5, 0x0, 0x600, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0xfd45}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002400)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000001c00)=""/128, 0x80}, {&(0x7f0000001c80)=""/194, 0xc2}, {&(0x7f0000001d80)=""/85, 0x55}, {&(0x7f0000000740)=""/55, 0x37}], 0x5}}, {{&(0x7f0000001e80), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001f80)=""/187, 0xbb}], 0x1, &(0x7f0000002040)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000002140), 0x6e, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/194, 0xc2}], 0x1, &(0x7f0000002300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}], 0x4, 0x100, &(0x7f0000002500)={0x77359400}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002540)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa00d9cb619e281c62bc56010000000000000000000000ffffff00000000000000000000000000e000000200000000000000000000fe80000013e8020000000a0002004d5a173158f44ee400e8b989d14f317f836e72d5fdb91c5d61a4586db8f8c0fc0726331a9c05a84140fb34584e6d2bfb77998874a4f37687c8edd0007358411603fbad2dd105e86a97f4ef986d1ea6d849b51378a7dacd00a2cabaf3c069bdf126e954ff3797b33ad8d64c6b3c9a2ee75f00"/209], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002540)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa00d9cb619e281c62bc56010000000000000000000000ffffff00000000000000000000000000e000000200000000000000000000fe80000013e8020000000a0002004d5a173158f44ee400e8b989d14f317f836e72d5fdb91c5d61a4586db8f8c0fc0726331a9c05a84140fb34584e6d2bfb77998874a4f37687c8edd0007358411603fbad2dd105e86a97f4ef986d1ea6d849b51378a7dacd00a2cabaf3c069bdf126e954ff3797b33ad8d64c6b3c9a2ee75f00"/209], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x140c, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3, 0xffff}, {0x4}, {0x2, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x824, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x72000000, 0x6fd, 0x8, 0x1, 0x7fffffff, 0x400, 0x8001, 0xae0, 0x9, 0x8000, 0x42d, 0xffff, 0x25, 0x1ff, 0x3, 0xffff, 0x40, 0xe10, 0x4, 0x0, 0xe6c, 0x6, 0xfffffffb, 0x10000, 0x401, 0x3, 0x96e, 0x3, 0x6, 0x101, 0x40, 0x6b31, 0x7, 0x5, 0xffffffff, 0x10001, 0x4402f8f9, 0x81, 0x8, 0x18, 0x5, 0xffffff70, 0x4, 0x7fffffff, 0x2e3, 0x1ff, 0x2, 0x8, 0xff, 0x2, 0x80000001, 0xb, 0xffffffff, 0x2, 0x9a4, 0xfabf, 0x40, 0x7, 0x10000, 0x3, 0x1, 0xab41, 0x1, 0x9, 0x7, 0x6, 0x6, 0x40000000, 0x400, 0x5, 0x8001, 0xffffff9a, 0xffff, 0x0, 0x8, 0xd62c, 0x4e5, 0x12, 0x0, 0x5fb, 0x100, 0xb5a, 0x7fff, 0xfd, 0x7, 0x40, 0x7, 0x2, 0x81, 0x59, 0xe, 0x7fffffff, 0x7, 0x8, 0x94b, 0xb, 0x5, 0x8, 0x4, 0x7, 0x0, 0x1, 0x40, 0x1, 0x4fbfe3ad, 0x8, 0x9, 0x0, 0x4, 0x2, 0x8, 0x3, 0x7fff, 0x7, 0x0, 0x9, 0x3, 0x3, 0x1, 0x9, 0x3, 0x7f, 0x8, 0x6, 0x1, 0xfffffff1, 0x8, 0x7, 0x7fff, 0x4, 0xe, 0x1, 0x6, 0x6, 0x0, 0x9, 0x6, 0x5, 0x0, 0x5, 0x7f, 0x0, 0x1, 0x7, 0x4, 0x2, 0xd, 0x2, 0x7, 0xff, 0xffff, 0x4, 0x1, 0x0, 0x0, 0x6, 0xfffffffe, 0x12, 0x9, 0x4, 0x7, 0xffffff80, 0x7fffffff, 0x1, 0x8, 0xa, 0x4, 0xff961d0d, 0xe, 0x800, 0xfffffff7, 0x12, 0x8, 0xd31, 0x5, 0x57, 0x1, 0x800, 0x2, 0x6e20, 0x6, 0x1, 0xbba, 0x8e5f, 0x1, 0x10, 0x8000000, 0xb1f, 0x85, 0x3, 0x4, 0xee6, 0x2003, 0x6bae, 0xf7a, 0xd, 0x100, 0xfffffffe, 0x9, 0x0, 0x4, 0x3, 0xc0db, 0x7fff, 0x4, 0x3, 0x9, 0x5, 0xd8a4a520, 0x0, 0x7fffffff, 0x3, 0x4, 0x2, 0xffffff88, 0x1000, 0x2, 0x13, 0x7d, 0xb600000, 0x1, 0x9, 0x5, 0x1, 0xbf7, 0xee, 0x6, 0x10000, 0x1, 0x800, 0x3, 0x7f, 0x5, 0xa, 0x2, 0x4, 0x3afd, 0x2, 0x7, 0x2, 0x7, 0x10, 0xfffffffe, 0xe, 0x9, 0xffffff56, 0x100, 0x0, 0x2, 0x6, 0x5, 0x9, 0x3, 0x2, 0x8001, 0x12]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xff, 0x5, 0x6, 0x10001, 0x8, 0x92e7, 0x3, 0x6, 0x800, 0x10, 0x3, 0x1ff, 0x78, 0x1, 0x6, 0x3, 0x8, 0x7fffffff, 0x3, 0x7f, 0xf, 0x8001, 0x8000, 0x9, 0x1, 0x135, 0x9, 0x6, 0x7, 0xfffffffa, 0x5, 0x1, 0x8001, 0x200, 0x100, 0xe, 0x8e, 0x0, 0x200, 0x2, 0x7ff, 0x3, 0x5, 0x5, 0xe4d, 0x1, 0x2, 0xf, 0x400, 0x7, 0x4, 0xac1, 0x8, 0x3, 0xe, 0xb3, 0x6, 0x40, 0x3, 0xb8, 0x7, 0x4, 0xc, 0x10000, 0xffff, 0x2, 0x2a31, 0x9891, 0x8, 0x9b9c, 0x79b0, 0x3, 0x2, 0x8, 0x7, 0x5, 0x0, 0x2, 0x8, 0xfffffffe, 0x4ff, 0x8, 0x8, 0xfffc0000, 0x4, 0x3, 0x5, 0x17a, 0x200, 0x5, 0x6, 0x6, 0x5, 0x8, 0x8, 0x5, 0x800, 0x3ff, 0x4, 0x0, 0x5, 0xa, 0x8, 0x7fc0, 0x0, 0x9, 0x0, 0xbd, 0x0, 0x4, 0x6, 0x7, 0x8, 0x9, 0x1, 0x4, 0x410, 0xff, 0x9, 0x8000, 0x85, 0x4, 0x6, 0x8, 0x5, 0x5, 0x0, 0x9, 0x3, 0x7f, 0x6, 0x8, 0x115, 0x0, 0x3, 0xfffff000, 0x8, 0x4, 0x7, 0x1, 0x3, 0x0, 0xfe9e, 0x3, 0x7, 0x6, 0x3, 0x1314, 0x0, 0x9, 0x9, 0x400, 0x6, 0x3, 0x6, 0xac5, 0x6, 0xaee3, 0xf, 0x4, 0x8, 0x4, 0x8001, 0x6, 0x0, 0x7, 0x1464, 0x200, 0x8, 0x9, 0x0, 0x3, 0x4b, 0x0, 0x4, 0x445, 0x5, 0x8000, 0x1, 0x5b778cd0, 0x9, 0x80000001, 0x9b7f, 0x9, 0x1, 0x4e1, 0xc57, 0x2, 0x9, 0x4, 0x3, 0x80, 0x87b, 0x7914cf72, 0x5, 0x2, 0x3, 0x2, 0x8, 0x382, 0x8, 0xffffffff, 0x6, 0xfffffff0, 0x0, 0x6, 0x80, 0x2, 0x3, 0x3, 0x9, 0x4a, 0x2, 0x4, 0xfffffff9, 0xfffffeff, 0x7, 0x1, 0x0, 0xb, 0x3ff, 0xff, 0x3, 0xa, 0xe, 0xfffffffe, 0x5, 0x80000001, 0x0, 0x47a, 0x2, 0x6, 0x2, 0x3, 0x5, 0xe5, 0x2c84, 0x35e, 0x5, 0x80000001, 0xc, 0x5, 0x40, 0x4, 0x401, 0x100, 0x8, 0xc89, 0x8, 0x7, 0x11, 0x6, 0xf0000000, 0x800, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0xca, 0x8}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x40}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff, 0xff000000, 0xff000000]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xfa8b}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x5d75}]}}, @filter_kind_options=@f_fw={{0x7}, {0xb64, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x4f, 0x200, 0xe9, 0x0, 0x2, 0xfffffffa, 0x6, 0x4800, 0x0, 0xd, 0x3, 0xa, 0x3, 0x40, 0x1ff, 0x7, 0x0, 0xffffffb7, 0x1, 0x1, 0x1, 0x81, 0x6, 0x5297, 0x6, 0x8180, 0xfff, 0x3, 0x1, 0x6, 0x1ff, 0x1, 0x6, 0xa, 0x4, 0x1000, 0x80000001, 0x8, 0x9, 0xb3, 0x3, 0x8, 0x1, 0x200, 0xff, 0x80, 0x6, 0x1, 0xfff, 0x2da, 0x87d, 0x1, 0x4, 0x40, 0xfffffffb, 0x7, 0x2, 0x0, 0x2, 0xfffffe00, 0x1, 0xa000, 0x7ff, 0x7, 0x0, 0x9998, 0x2, 0x1, 0x1, 0x3, 0x20000000, 0x6, 0xffff0000, 0x9, 0x6, 0x9, 0xcac4, 0xb, 0x2, 0xffff, 0x205e, 0x4, 0x5, 0x7f, 0x5, 0x5, 0x100, 0xfde, 0x6, 0x5, 0x0, 0x101, 0x5, 0x400, 0x5, 0x7fff, 0x7, 0x77c8, 0x377, 0x3, 0x1000, 0x2, 0x5, 0x9, 0x8, 0x6, 0x4, 0x100, 0xae6, 0x8, 0xd, 0x2, 0x8001, 0xe6, 0x6, 0x1, 0x4, 0x100, 0x6, 0x6, 0x2, 0x7f, 0xfffffff8, 0x1, 0x10, 0x7, 0x5, 0x9, 0x8, 0x4, 0xc0, 0x489, 0x4, 0x8, 0x1, 0x3, 0xffffffff, 0x9a, 0x8, 0x9, 0x9, 0x7, 0x100, 0x977, 0x4b, 0x10000, 0x7f, 0x24, 0x5, 0xfffffa02, 0x40, 0x7ff, 0x1, 0x2, 0x9, 0x6, 0x401, 0x6, 0x6dc6, 0xa, 0xd56c, 0x8, 0x3d8a, 0x8, 0xbcb, 0x9, 0x5f6, 0x6, 0x7, 0x2, 0x2, 0xd85, 0x1000, 0x40, 0x8, 0x1, 0x2, 0x47a, 0x5, 0xea2, 0x3, 0x9, 0x60000, 0xe0000000, 0x4, 0x0, 0x9, 0x0, 0x81, 0x19c000, 0x8, 0x2, 0xffff7fff, 0xfffff7fb, 0x7f, 0xa, 0x795, 0x42c3, 0x6, 0x8001, 0xfff, 0x3, 0x2, 0xe, 0x13a, 0x3e19, 0xd3bd, 0x0, 0x1, 0xb, 0x80000000, 0x5b7, 0x8, 0x800, 0x80000001, 0x5f, 0x58, 0x5, 0x800, 0x800, 0x0, 0x5, 0x8, 0x5, 0x3, 0x6, 0xffffff80, 0x0, 0x3, 0x4, 0x3b71, 0x401, 0xd4, 0x10001, 0xfffffff9, 0x1, 0x6, 0x9, 0xad29, 0x80, 0xd, 0x6, 0x201, 0x2, 0xfffffff7, 0x101, 0x9, 0xc, 0x1, 0x155, 0xa, 0x4f4, 0x5, 0x5, 0x200]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4, 0x5, 0x9, 0xfffffff8, 0xbae, 0x2, 0x7, 0xe, 0xb1, 0x3, 0x2, 0xa, 0x101, 0x7, 0x54d7ebee, 0x391, 0x8, 0x7, 0xfffff01e, 0x582a6823, 0x2, 0xffffffff, 0xfe6f, 0x0, 0x6, 0x80000000, 0x0, 0x8, 0x7, 0x2, 0x79e1, 0xc, 0x401, 0x4, 0x3, 0x7, 0x1000, 0xfff, 0x6, 0x8, 0x4, 0x90000, 0xe, 0x16f9bcb2, 0x2, 0x4, 0x7ff, 0x7fffffff, 0x4, 0x280000, 0x2, 0x29, 0x3ff, 0x0, 0x15a67848, 0xfffffffc, 0x80000000, 0x6, 0x19dfde39, 0x80, 0x0, 0x1ff, 0xffff, 0x7, 0x9, 0x6, 0x9d, 0x1, 0xc, 0x41f, 0x0, 0x975, 0xfff, 0x3, 0x89f3, 0x7, 0x5, 0x100000, 0x1, 0x0, 0x7, 0x6aa9, 0x5, 0x1, 0xb, 0x2, 0x93c, 0x2, 0x8001, 0x7, 0x8, 0x1, 0x4, 0x7ff, 0x7, 0x1000, 0x3, 0x2, 0x7, 0xa15, 0x7, 0x7, 0x179, 0x9, 0x3, 0x5, 0xd, 0x1, 0x2, 0x0, 0x7fff, 0xfffff801, 0x96d5, 0x4f7b, 0xb, 0x52, 0x9, 0x9, 0x2e4a, 0xfffffff8, 0x2, 0x2, 0x3, 0x1, 0x5, 0xa064, 0x200, 0x6, 0x4, 0x313767f2, 0x2, 0x0, 0x4, 0x0, 0x4, 0x4, 0x29, 0xfff, 0x4, 0x4, 0xffff, 0x186, 0x79, 0x4, 0x8001, 0x7, 0x5, 0x0, 0x9, 0x79, 0xfffffff9, 0xffffffb1, 0x0, 0x464, 0xff, 0x81, 0x6, 0x40, 0xfffffffd, 0x40342a87, 0x0, 0x1, 0x5a, 0x0, 0x4, 0x7, 0xd856, 0x2, 0x7, 0xfffffe6c, 0x1, 0x5, 0x8, 0x1, 0x5, 0x6, 0x1, 0x928, 0xf6, 0x8, 0x6, 0xfa08, 0x3, 0x7, 0x401, 0x3a33, 0x1ff, 0xe, 0x1, 0x0, 0x7fff, 0x0, 0xf, 0x9, 0x1, 0x87c, 0x5, 0x8, 0x0, 0x6, 0x9, 0x9, 0x1, 0x2, 0x9, 0x9a, 0x0, 0x200, 0x3, 0x40, 0x3, 0x0, 0x6, 0x3, 0x401, 0x100, 0x2, 0x2, 0x10000, 0x8000, 0x401, 0x4, 0x7, 0x8, 0x8, 0x4, 0x7, 0x0, 0x7, 0x7fe, 0xffff1028, 0x1ff, 0x9, 0x4, 0x9, 0x80000001, 0x0, 0x3, 0x969b, 0xff, 0x9, 0x80000000, 0x7, 0x28b, 0x7b, 0x1, 0x3, 0xe317, 0x7, 0x100, 0x9, 0x8, 0x6c0b, 0x9, 0x4]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x18}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb8}]}, @TCA_FW_MASK={0x8, 0x5, 0x226ba13d}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_ACT={0x310, 0x4, [@m_ife={0x128, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0xf3, 0x6, "4f1813736fed356dcb29742cdaa9b5d5fe6c4f4c4d3e9c4d2324d4528b0f834e6f41edbaa02b01e0de8fabb7526728b0fbc45853b9b71782a7cb92ef9bd5c6df501d3c6d4af1a02b5109dbcb9158390acce86cddb6ae6a6911335d97d3c6ad5c5e3b5b263d7138515bc68721d36198cc4ed74ee15dd274cb74dec5f39413c6ffd3a254ede1328e890388b4f569b752e137dd78af99ae8b1f27becfb7d8beb21d9b03d2cdfcb4920ec302bb8659bd72b1e018b9588945e49a1a04094e5648a2dec34835e55c6335aeab32168f095742a829965d1098e76b503847b169e6c035f21e3de3229673f46d784cfe598e96f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xac, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa6d0, 0x3, 0xffffffffeffffff8, 0x9, 0xffffffff}}]}, {0x67, 0x6, "2717bc04cc80bd2115e74425722c0ffcfd9fb9a6b0953b801e33cb581ae460acd8bf1b9cd0edba3388a1d89f6d7ae98513e21c1c361595971dfe72c588735c9077ed6bcd52e65c63b2b29b0301f4542e154cf3ffe07981a45e494c4a74b8b80fa880fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ct={0x138, 0x1, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "86abfacae42973f92d139409f4646181"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x1c}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_LABELS_MASK={0x14, 0x8, "a511ae726fad636db1ba28dc16f85f94"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}]}, {0xaf, 0x6, "cfe9a1d9ffce200a7cc5c5c1c88096c89b42d2574a672c62b381ae862bc6218094d63d3695a6f0eda1c364e029a0d248309836b4675fe6af27ff7f97355b4c8de847e4c71d72381a63ef41c26763dd56094e8029bca9e73477b40d6d2512e126ef57083eaef451133fe2577c01b07d2f295f0efa3e5d1a929f4d9e4fc5689b5505f7169a22c29915e11d4c70a670d0cbe05953811da0203780e8712caa64165adba7a3871a081187392523"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x140c}, 0x1, 0x0, 0x0, 0x850}, 0x0) 5.565238753s ago: executing program 3 (id=2005): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x5, &(0x7f0000000180)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2, 0x61, 0x14, 0x70}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x193}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x7c, '\x00', 0x0, @sock_ops, r1}, 0x94) 5.342740441s ago: executing program 3 (id=2007): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x18, 0x0, 0x0, 0x500}, 0x9c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000100)) 5.289672066s ago: executing program 0 (id=2009): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000140)=0xe8) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0x0, 0x15}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x2400c840) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_newroute={0x8c, 0x18, 0x400, 0x70bd27, 0x25dfdbfb, {0xa, 0x9e, 0x0, 0x3, 0xff, 0x4, 0xff, 0x3, 0x1a00}, [@RTA_PREF={0x5, 0x14, 0x4}, @RTA_MARK={0x8}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_UID={0x8, 0x19, r1}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x14, 0x40, r4}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_EXPIRES={0x8, 0x17, 0x5}, @RTA_METRICS={0x27, 0x8, 0x0, 0x1, "c225f4e7c0f749f3c75bd3bed5d60121df42304cc9de709e768d28e38a046c27c8119b"}]}, 0x8c}}, 0x0) 5.158443458s ago: executing program 3 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000800000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6, @ANYBLOB="dbdcff1dca07750ef0f2ce5f1d6104b0820235ebb7117b29a4c294e19ce2132cf94369b884a5af907dfd3d8f9a358773f5fb95a4ed6be1cfee0eb5c77df6a1ab672481aa71232cf725fbd38c5c1a8a1a39425d4ed85415ca0cc817fa10e2ddd58031f8ccdd558538a55ea8634dadebd86b5c5fcba9538e6bed0ecc1dcc3f391f853c105e6b822b3a13fda16f7de689443f4f14ab23f7b7d946b93db2f26852d74b5d9a1c74886312d4b03b9113ddc2cc38e449baa503d3476980ce36becaa7"], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 5.155585649s ago: executing program 0 (id=2012): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendto$inet6(r0, &(0x7f00000004c0)="427aa9d848a62202c1d9ea36c083783c574f634da0ad652e13880a3505bb4c82003f9b0fc34d1229fced781e044205def5cf03e88b5cf5b96b044c0f2a80b7ec74be55edc38f58399a01a37274b8233c1246678082b6d8ad41c673319fd97f5f72692584badd498acbc11de77717bb0f7476a5cf595d2020a97d5239287ef15c1d48c7c7adc5a2fc212221bce4db32e3b6ce1ff8c4d73e4393e40eaf6db58b660f38780ac0b95cca4baf8653b5441fa473030afda5c3b4bc61bac68dff838a552b2fe49792242dcce53bf503f084333f4153d4ce4fd5a305b14df5042c0e9cfd3bf02a51cb4ebb988fd67da001c279241e1979eaa225da", 0xf7, 0x80, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @mcast2, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000006d00110526bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0200005d0200000000000080"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000140)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={r6, 0x101}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', r2, 0x4, 0x2, 0x1, 0x81, 0x2, @empty, @remote, 0x1, 0x1, 0x4040, 0x8001}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000240)=0x6, 0x4) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r8, 0x1) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r10 = socket$kcm(0x2d, 0x2, 0x0) accept(r10, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f000200"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 4.735269208s ago: executing program 0 (id=2017): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}, 0x1}, 0x18, &(0x7f0000000300)={&(0x7f0000000240)="4cfbe916dbe9e3921210cc5fb6b0b4293c40a7b26cf5b158f72922312944cb4cfd9eb64d418f6d3bb2e6a61ec95e7c00542d192f5e00af353ce6dd52a573f31934c68c2a2acff441cf972c4d999d4843f9b8077fe03d8bac0053a199c1a12acfa79aacc203c747adde9597a2a79a5d16f536d019099cbe945074f8579dccaac7d876b3f503289e6f5a359b0aaae93050b9fecbb1459713fc9b4a4c9a425546dabd3f20315c250663520fb45f7f99ea31e3112f6312856819a4", 0xb9}, 0x1, 0x0, 0x0, 0x841}, 0x44080) 4.626359534s ago: executing program 3 (id=2019): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000009000a030000000000000000000002"], 0x0, 0x56}, 0x20) 4.509008622s ago: executing program 3 (id=2021): setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240)=0x4, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/139, 0x8b}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYBLOB="a5fd39f88bbe27f2b2510ce2f585d00cecabe404f15fb3df4eb7acb605d47a6bb587376ee4d87172517dc473beb8f248b621ac0eb937dd446a79fcfc92fe86006a46cdba", @ANYBLOB="0000000014000500000100fe880000000000000000000000040001"], 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x865}, 0x2404c880) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000380)={0x3, 'veth0_virt_wifi\x00', {0xb}, 0xf}) bind$rds(r2, &(0x7f0000000400)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0xfffffffffffffd43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/18, @ANYRES32=r10, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 3.149570817s ago: executing program 2 (id=2034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0x2}}, 0x54, 0x3}, 0x90) (async, rerun: 32) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)) (rerun: 32) r2 = accept(r1, &(0x7f0000000140)=@x25={0x9, @remote}, &(0x7f00000001c0)=0x80) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000200)={0x0, 0x0, "b3beea", 0x0, 0xff}) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000240)=0x2) (async, rerun: 64) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={'veth1_vlan\x00', {0x2, 0x4e21, @local}}) (async, rerun: 64) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000002c0)={0x72c, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f000000af00)) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000000af40)={'wg0\x00', 0x400}) (async, rerun: 64) r3 = syz_genetlink_get_family_id$gtp(&(0x7f000000afc0), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f000000b0c0)={&(0x7f000000af80), 0xc, &(0x7f000000b080)={&(0x7f000000b000)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) (async, rerun: 64) r4 = epoll_create1(0x80000) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000b100)={0x60000012}) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f000000b180)=@o_path={&(0x7f000000b140)='./file0\x00', 0x0, 0x4014, r0}, 0x18) ioctl$int_in(r5, 0x5452, &(0x7f000000b1c0)=0x8000) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f000000b200)={0xf2, 0x8000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f000000c8c0)={0x0, 0x4, 0x7fff, 0x2}) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f000000c900)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f000000c940)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000cc80)={&(0x7f000000c980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000cc40)={&(0x7f000000c9c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x801, 0x0, 0x0, {0xfba3f1e2fba01fb5, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x130, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xf6, 0x6, "389943f285ed43a91a654e6de9f04134ef03b2e007378eab003e4ac4e38c199314b11dd62da13040a3b4ebd96d31c0448d37e8cc055c43acbe20490cc7d4c553cde15e1d411630e99b07fd2be855899d8d73bb7e57c93e22d1b0ed31884125a94a440f6f8037182b9f68f2563014eb9f6b88228140275c36420b50bc384a2ee467b137424d8b059196f6ce94547ae7ec4666d90fd29e04d57f20aab4a22e198ee7224e87dbb01bce7b0377bae3cf88dfc90038de522da7410625061b7fa3fd2eb3ac4e04926cbace91a1f1c8c3d0c312ff0470ba976992b1571268ea6495b59d4e152337c1909129139e9d038de6da90c5e0"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x395c529b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ca23e70}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f000000ccc0)=@generic={0x1, 0x4, 0x5}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f000000cd00)={'vxcan0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f000000cd40)={@in6={{0xa, 0x4e23, 0xfa, @mcast1, 0xf0f}}, 0x0, 0x0, 0x2c, 0x0, "575e8f3faa4e1c032ef51a4c8e3a6a409ace18d63c53205b14ffb32e1c10d4bbd7265411706a83f38fa08df7ddbf421ffd819f1ae0be27cdbcfeb93cf2c21d1bcdb5956823b537e2e751f9a59967731e"}, 0xd8) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f000000ce80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f000000d0c0)={&(0x7f000000ce40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000d080)={&(0x7f000000cf00)={0x164, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x3e, 0x5b, "db6b436d89b5fa44c48fa31df0f5313f9f1f4eb9f34ad9a584078fde9e947aee8ebf4d6bca62f65a62659d3492f2621529656289b160d4501636"}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "5a2dfcc6550a7cffae2e5839c547d003f9db7a1ce51ae811c96d9205c24fa9967cbd665403d24d7ab53e391f048aaa12ef3f8cfa795a47dab613c5fefc2b3d16a667e3236991ef7dbf99c7b823a210a27a14f52ae7f0ddbef1ba077244ec3fdce9a302bcb52438230b48b04395f097220d794e35672e2a0c5c8aafab145780883c751f2bd9e162e98f55f59385a56f184f850a2e76217282dd5eb95b11591933b4f39031d627dfcc1e2e75acd1b44a884b1d303b72559120e7e70b20cdaea57170ee4b5af5691245166f5ea3a465cfd2dd74409a60de446e5bc36d94cdfb0105ad801f936f651bff289165dba7b1cb7c5e4d301b8e27dcb66b9384"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x35}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000040}, 0xc0) 3.040619324s ago: executing program 4 (id=2035): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x50}}, 0x0) 2.96885466s ago: executing program 2 (id=2037): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001"], 0x22c}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x24, 0x2c, 0x66, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @empty}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0xe, 0x0, 0x3, 0x5, 0x2, 0x0, 0x2, 0x4, 0x4, 0x4e24, 0x4e24}}}}}}}, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x7, 0x12, r4, 0x20000000) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2501000000880002803c000180080001c0e80000000800010003000000080001000400000008000100a6ddfa210800010005000000080001000600000008000100040000"], 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r8, &(0x7f0000000200)={0x2, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) 2.861295464s ago: executing program 4 (id=2038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@can, &(0x7f0000000280)=0x80, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @private}, &(0x7f0000000380)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@multicast2, @private, 0x0}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.698108612s ago: executing program 4 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r7}, 0x38) sendfile(r3, r2, 0x0, 0x10000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x20, r10, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000240)={0x1, 0x200, 0xa02f, @empty, 'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18100000000000000000060000000000850000008a0000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003fc0), &(0x7f0000004000)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x6, &(0x7f0000001a40)=ANY=[@ANYRESDEC=r8, @ANYRESOCT=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 1.962369013s ago: executing program 1 (id=2043): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000b000a030000000000000000000002"], 0x0, 0x56}, 0x20) 1.848384153s ago: executing program 1 (id=2044): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000017000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) clock_gettime(0x3, &(0x7f00000002c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept(r10, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 1.796601587s ago: executing program 2 (id=2045): r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000801}, 0x404c8c0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getpid() (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000801}, 0x404c8c0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x54}}, 0x0) (async) 1.695350658s ago: executing program 4 (id=2046): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002c80)="7bc9772c3adcc294fdfb42a877da40d9ebaf07d3a0033ae45b0f30ae8d06951c436ec8e05eb6d405c058f679840bd7a7e65a2c365fb01d60f395699b64615dd42ef9e52b572165ee7cad1c6d0aa1495ea00d2b23a92bcb88efc487fd97329103b5ce46c6b627ff5ee1fabe15d8efcb16dac17470b83e1f9652a0079518396736a8bda106f0967732cbd4f432508645864faef1b6d760a95db78c42ec5a214f9d383b86a941b9ccb34d3932cbb914220b9cbfc43112c2e9ffcff13016630adc", 0xbf}, {&(0x7f0000002e00)="5206d88b9b29508c45c6b82d58f2169003771d873c53f6c24592e8e2928d37d082519921827b9a19fa44e14ec8a22203ac8b6a892756f3b13ad8667f2bb8555e180cdefa6539d01d35b0a0702785398df6dbe806fa5fbec3c04a62143443ab6c8b9aa57d1504ad0c21c86c", 0x6b}], 0x2}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="92f0ac0d687fc396c6e3fcb435c1ab468bfbcb101f67fb0a6eaf21f2fc72ec5a03074a7357c6308114ad5b64ecac13598f51c6ae646ab3f0d7b857201ac0e2c8bee4583571cd473def85", 0x4a}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003040)="b87a12bfe84b8a61e5973e77ad8d2e880d8f77f82bf7f31fb63b3441e4bd657a7248543451a8181b88c0dc4dce63c0d0d89477b6bd6d95ad92ceb4d43e2b720b1235e17c7c744db03b18adbb47804f9e3368cdbeb4b2f75a1989e642b9c9dd84a6f7259615e76ff56a83bdd40f", 0x6d}, {&(0x7f0000003300)="f188f01c5ab1b2d6648a42cff6dd5157a23b61b77e", 0x15}, {&(0x7f0000003340)="eb5331c5b894d975ea5885fc377d68d205d92f42d9b93add8855ef779d0638d6a577269e24a524b3a0ce61dafab620c9c59458f3260a67d355a91c1e59b128964786827aa7262b754b7b72523d0807c6a8e5af2ab370e141c4f8be05ad03e335caf45e25cde29308249c4be6363cc4356dab7c2cfc", 0x75}, {&(0x7f00000033c0)="9e707f06cead4fd09abb88942ed84a458f77ebfeab04150c94f8e8e49793c2cc98d4f83bbf62920ea2dd", 0x2a}, {&(0x7f0000003400)="194e10985a93ab451e60e5e9f33ad8adadfd305ae4216aa152956ce08d30b68d2a10f0efff4a364215e8", 0x2a}], 0x5}}], 0x3, 0x24008804) sendmmsg$alg(r2, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x4010) socketpair(0x27, 0x4, 0x4, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r4, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000400)=[{0x45, 0x0, 0x1, 0x80000001}, {0x0, 0x0, 0xfa}, {0x6, 0x10, 0x0, 0xfffffff9}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000300)={0x3, &(0x7f0000000400)=[{0x45, 0x0, 0x1, 0x80000001}, {0x0, 0x0, 0xfa}, {0x6, 0x10, 0x0, 0xfffffff9}]}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) (async) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r8, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES8=r3, @ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYRES8=r6], 0xc4}}, 0x4040) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES8=r3, @ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYRES8=r6], 0xc4}}, 0x4040) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.69139506s ago: executing program 0 (id=2047): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'vxcan1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xc, 0x80, 0x0, 0x20, 0x10, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}}) 1.342415182s ago: executing program 0 (id=2048): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x50}}, 0x0) 1.339351292s ago: executing program 2 (id=2049): pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x201}, {&(0x7f0000000280)="05", 0x1}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x5) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="81d4ec80e4340dc3000000000000000418000000", @ANYRES32, @ANYRESDEC=r5], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x2f, 0xb0, 0x10, 0x2, 0x2, @mcast1, @mcast1, 0x40, 0x10, 0x5, 0xfffffffb}}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000600)={@private0, 0x79, r10}) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.235160382s ago: executing program 0 (id=2050): unshare(0x6a040000) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x20, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000008200a0010000000000fc9c4ca78be744a5ec42"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r4, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}]}}]}, 0x3c}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000200)) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {}, {0xffff, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20028050}, 0x20004044) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0x6, 0x6, {{0x5, 0x4, 0x3, 0xd, 0x14, 0x64, 0x2, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 824.351881ms ago: executing program 1 (id=2051): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000400)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000300)) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r5, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000f14010025bd7000fcdbdf250800030001000000080001000000000009004500756d6164000000001129422667a2dbc32af6ffbe2bb99b06d5423306993301891a75e3437e62c295db60fbb7a88c0b64ee480f823cf2b1078ae5"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x140d, 0x8, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x20044800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff00000000000000", @ANYRES32, @ANYBLOB="000900400000d30b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000004500000088140000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="026f614bb000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f00000003c0)={0x22, 0x88, 0x7, 0xff}, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000100070000000900025789d8e808175bbb00140007800800130000000fff08001240000000040500050002000000050004000000000012000300686173683a6e65742c706f7274000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$inet6_tcp_int(r10, 0x6, 0x22, &(0x7f00000001c0)=0x2, 0x4) 614.143921ms ago: executing program 4 (id=2052): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000000040)={0x1214, 0x14, 0xc5c0e885fe3b86fd, 0x70bd2c, 0x25dfdbfc, {0x18, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "6dacc380aba618786d46c4791fcf5cf3139103a6f84c5f2040c2a667f8256598955eb7"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "c32acf0a4cbff393a8c590ffddcc61edeb677301ebbbf130b601e38b4cc5de201f6256223edff79dc1e0b2d19957ec7d0e308124ea4a63cdcb3adb93f81d05caf7375a9f1e8919f0e20437ab0720410fe57e5fe24a0f20b115b4d6067fbd8cfc4479f96fb2b7cc1cf6fcf39f874c859fc8ad6575a818c3183648ad2942a2808e51caa82333c2c7dbf82a1079a2e107e3b82a187964bc3801efed0ecdc16ea27880d00839fb734a5e354705f5bdf13a8ef9e5d0ceacc6a664a6deaf5ab0245032589102864637044c8ca6d49e0f4339"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "59fe0b2ee1e864497f0f8f286c4b1a7e0ee15167b115ff9f9f95aeb2ccfb3830b5a96d706842727a77724cc74be4cd4bad2f50602d339e6e3b8728795496ae333dd82c96e0c1a7dd77b46d738b0612d6331ad8f905364777d63a9d8fdab4337d5cde45c7eb4c8099ba81ac304969163a3a13fd88c91889d3f791"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "0fa1e88cc545c434d6534b00dd98cb6e587275626c0d15d3a69632e078516ed33304e484abc05eed72610ec6565269bde53ea1b9d10f1e1f14ed83facd7bdce3dfdf49d9f2ef806774a061ff9b83edc1f537d14a57cda3d9416d6723752a31357afb2150390764fb56b9a92a91456624e6f78f0794d0728b34b8"}]}, 0x1214}, 0x1, 0x0, 0x0, 0x456c4ca073f2873b}, 0x404c814) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000001300)="dbdf12d00b6b20566a76e9ed79d309bc2f1811c5a95b4a33ef4f35690e5f49a60080843e617e92b01fdea8b5b89c5c06d39ee0b6984ade5b6e90d28209e146760c187b743c635f1d572a9cf57d230a030b59142a4a48c015b73b2cdfec742dded1c7555d6767261c6da349ae1dc5229195c33eb273de83875f88297746f75adbb2c6b595379b8f4ecbd1c5c4377c5ab5daef6f3e477b3cb321b209dc9565073b24dfe4ba546c9a66fdcfc14d119ef7a0a88485df5e7dcefde2a64c86215d4c61653eb1e11de4dce80297f11d43d88eb081f681579006ee7fe7fe2dd7b5bd13140cc3095b7ed7e4620db77964", 0xec}], 0x1, 0x4) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000001440)={0x8001, 0x5}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000001480)=0x7, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x21) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r2) (rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x40, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x67, 0x59]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x80) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001740), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001780)={'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f00000017c0)=0xf84e, 0x4) (rerun: 64) socket$rds(0x15, 0x5, 0x0) (async) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001800), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000001840)={[{0x2d, 'net_cls'}]}, 0x9) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000001880)={0x9, {0x7, 0x6, 0x3a, 0x4, 0x7}}) (async, rerun: 64) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r2) (rerun: 64) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001b80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)={0x1ec, r6, 0x516, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3e5}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xfd, 0x3, "b6fd38ca83367cd6c50697188f97d92866d45a45c57f52ccce35630d69ec3bfdae3c30c54cc23d15a1e516761cc69e162bb0ca77c7cda9774fe75c70b92e0b2ae4fb5eda84c09a56ae5727e9117f7983d56c217274e64f27ec0dada7e0d8fe72ba83dc831ee43ff8529491d90f3615d9340788be4e35b1cd3f04729d30798facc08296d6b8754f4d11b22b8c630309ccaaf4431ec2ee877c033eee4fac6bc8fc5f7ef7b3538330c87cdc202028330f3c76c0deae07957963bd0a2f4e902810397762095d7403c19a5a6c9deddc5a7f28dfc42b1cc99eef8a3778dd1962d5ade7ae0f07b04cda386e06661111d6d16bb8748c03f331f71e2610"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "1f34ff446fb50a495f4cd326fc3ac7d111b8fc0cdac7"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "040a499c5d5f3e3a2df9d39596ed5b085433afc95554a45b0e5f46155658"}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x404081c}, 0x8000) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c00), r2) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x40, r7, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0xa0, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_passwd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_notify_exec_t:s0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000090) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x1}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)=@gettaction={0xa0, 0x32, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x254c}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x2be2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8d0}, 0x815) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002180), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x34, r11, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) 574.532067ms ago: executing program 1 (id=2053): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001300290a2dbd70000000000007000000", @ANYRES32=r1, @ANYBLOB="1c00"/16], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2804c000) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80020}, 0x3) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) 385.701694ms ago: executing program 1 (id=2054): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0xfc, 0x1a, 0x7, 0x70bd25, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0xffff, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x20, 0x2b}, @in6=@empty, {0x0, 0x0, 0x2, 0x31, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xffffffffffffffff}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x8}}]}, 0xfc}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000540)={0x0, 0x4, 0xc, 0x6, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 334.097638ms ago: executing program 4 (id=2055): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r4 = gettid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 270.133348ms ago: executing program 2 (id=2056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000030801020000000000000000000000020600024000000000540004800800014046aea47d08000b2704d60c0608000740000000000800094000000000080008400000a9c80800044000000008080005400000000808000840fffffe01080001400000000c080002400000000305000300ff"], 0x78}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000014c0)=@newqdisc={0x60, 0x24, 0xc07, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x2a}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x51}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffca}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4008810) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2e, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20040810) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000c04fcff", 0x58}], 0x1) 148.726254ms ago: executing program 2 (id=2057): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x94, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x121}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008011}, 0x20000000) 0s ago: executing program 1 (id=2058): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000400)={0x0, r1, 0xa27, 0x5, 0x5, 0x3}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000016000000000081000000000000000000080008000f"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x22}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x2, 0x7, 0x0, {0x1, 0x9, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x1, 0x8}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x0, 0x1, 0x0, 0x0, {0x2, 0x40, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x6, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x44083) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) read$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x73) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x102, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x70}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) kernel console output (not intermixed with test programs): family 0 port 6081 - 0 [ 152.492944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.501240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.676219][ T7727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.697353][ T7727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.719792][ T7750] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 152.814094][ T7758] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 152.885933][ T7750] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.067670][ T7771] batadv1: entered promiscuous mode [ 153.194153][ T3479] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.250206][ T3479] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.304201][ T3479] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.336654][ T3479] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.442747][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 153.455947][ T7779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.458311][ T7784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.394'. [ 153.522977][ T5990] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.531913][ T5990] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.532998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.557791][ T7784] gretap1: entered promiscuous mode [ 153.582957][ T7787] tipc: Enabling of bearer rejected, failed to enable media [ 153.605429][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.660306][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.748449][ T7779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.764187][ T7798] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 153.921797][ T7798] bond0: (slave wlan1): Releasing backup interface [ 154.096645][ T7779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.409876][ T7779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.424821][ T7811] Bluetooth: MGMT ver 1.23 [ 154.476800][ T7812] geneve0: entered promiscuous mode [ 154.493884][ T7802] pim6reg1: entered promiscuous mode [ 154.513609][ T7802] pim6reg1: entered allmulticast mode [ 154.530721][ T6150] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.572971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.581214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.641758][ T7821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.402'. [ 154.655579][ T6150] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.668477][ T6150] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.684839][ T6150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.687289][ T7819] netlink: 9 bytes leftover after parsing attributes in process `syz.4.400'. [ 154.753104][ T7819] gretap0: entered promiscuous mode [ 154.788193][ T6148] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.888532][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 154.899827][ T6150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.956461][ T7828] syz_tun (unregistering): left allmulticast mode [ 154.972570][ T6150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.984890][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 155.012155][ T6148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.277935][ T7846] tipc: Enabling of bearer rejected, failed to enable media [ 155.612987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.621221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.658520][ T7868] sctp: [Deprecated]: syz.2.411 (pid 7868) Use of int in max_burst socket option deprecated. [ 155.658520][ T7868] Use struct sctp_assoc_value instead [ 155.814011][ T7871] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 155.949227][ T7871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.412'. [ 156.366742][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 156.590010][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 156.652979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.006466][ T7914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.422'. [ 157.015842][ T7915] syz_tun: entered allmulticast mode [ 157.042484][ T7915] dvmrp1: entered allmulticast mode [ 157.069359][ T7914] netlink: 'syz.3.422': attribute type 2 has an invalid length. [ 157.285391][ T7918] tipc: Enabling of bearer rejected, failed to enable media [ 157.692932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.701264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.766813][ T7911] syz_tun: left allmulticast mode [ 157.776297][ T7911] dvmrp1: left allmulticast mode [ 157.980013][ T7936] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 157.987743][ T7936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.426'. [ 158.041963][ T7939] tipc: Resetting bearer [ 158.078090][ T7939] syzkaller0: left promiscuous mode [ 158.087851][ T7939] syzkaller0: left allmulticast mode [ 158.105938][ T7939] gretap1: left promiscuous mode [ 158.318002][ T7946] sctp: [Deprecated]: syz.1.430 (pid 7946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.318002][ T7946] Use struct sctp_sack_info instead [ 158.345642][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 159.087023][ T7974] netlink: 'syz.3.435': attribute type 13 has an invalid length. [ 159.116317][ T7974] netlink: 'syz.3.435': attribute type 17 has an invalid length. [ 159.132235][ T7975] tipc: Enabled bearer , priority 0 [ 159.197487][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.435'. [ 159.271664][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.307202][ T7974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.363421][ T7984] tipc: Resetting bearer [ 159.426785][ T7973] tipc: Disabling bearer [ 159.519505][ T7986] netlink: 80 bytes leftover after parsing attributes in process `syz.0.438'. [ 159.739467][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 159.879134][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 159.903524][ T7998] macsec1: entered promiscuous mode [ 159.913097][ T7998] ip6gretap0: entered promiscuous mode [ 159.929089][ T7998] macsec1: entered allmulticast mode [ 159.938581][ T7998] ip6gretap0: entered allmulticast mode [ 160.033626][ T7996] netlink: 'syz.1.441': attribute type 12 has an invalid length. [ 160.217538][ T8010] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 160.259261][ T8010] netlink: 'syz.3.444': attribute type 2 has an invalid length. [ 160.292287][ T8015] netlink: 84 bytes leftover after parsing attributes in process `syz.0.446'. [ 160.343347][ T8020] netlink: 256 bytes leftover after parsing attributes in process `syz.4.447'. [ 160.496707][ T8025] tipc: Enabling of bearer rejected, already enabled [ 160.570866][ T8025] syzkaller0: entered promiscuous mode [ 160.582704][ T8025] syzkaller0: entered allmulticast mode [ 160.623202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.912267][ T8044] tipc: Started in network mode [ 160.937244][ T8044] tipc: Node identity 3677173b52c, cluster identity 4711 [ 160.966512][ T8044] tipc: Enabled bearer , priority 0 [ 160.990943][ T8041] syzkaller0: entered promiscuous mode [ 160.996513][ T8041] syzkaller0: entered allmulticast mode [ 161.132988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.141247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.164510][ T8041] tipc: Resetting bearer [ 161.264628][ T8041] tipc: Disabling bearer [ 161.597920][ T24] IPVS: starting estimator thread 0... [ 161.604789][ T8068] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.616354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.624602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.692376][ T8077] __nla_validate_parse: 9 callbacks suppressed [ 161.692397][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 161.719687][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 161.749070][ T8073] IPVS: using max 33 ests per chain, 79200 per kthread [ 161.749768][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 162.125441][ T8092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.465'. [ 162.172997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.213880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.222191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.414969][ T8127] tipc: Enabling of bearer rejected, already enabled [ 163.468082][ T8127] macvtap0: entered promiscuous mode [ 163.485999][ T8127] macvtap0: entered allmulticast mode [ 163.508881][ T8127] veth0_macvtap: entered allmulticast mode [ 163.711691][ T8136] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 163.720325][ T8137] IPv6: sit1: Disabled Multicast RS [ 163.752668][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 163.782312][ T8139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.473'. [ 164.269466][ T8149] netlink: 'syz.1.476': attribute type 10 has an invalid length. [ 164.327112][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.392754][ T8149] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 164.585354][ T8162] netlink: 200 bytes leftover after parsing attributes in process `syz.4.479'. [ 165.097122][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 165.177251][ T8187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.484'. [ 165.192624][ T8181] syzkaller0: entered promiscuous mode [ 165.219272][ T8181] syzkaller0: entered allmulticast mode [ 165.288671][ C0] net_ratelimit: 1 callbacks suppressed [ 165.288692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.335470][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 166.329541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.351658][ T8248] trusted_key: syz.1.502 sent an empty control message without MSG_MORE. [ 166.562035][ T8253] syzkaller0: entered promiscuous mode [ 166.576615][ T8253] syzkaller0: entered allmulticast mode [ 166.778649][ T8263] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 166.806023][ T8263] macsec1: entered allmulticast mode [ 166.811693][ T8263] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 166.824524][ T8263] batman_adv: batadv0: Adding interface: macsec1 [ 166.867454][ T8263] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.915893][ T8263] batman_adv: batadv0: Interface activated: macsec1 [ 167.285698][ T8287] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 167.369561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.468881][ T8287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.086051][ T8309] __nla_validate_parse: 6 callbacks suppressed [ 168.086072][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.514'. [ 168.314717][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 168.589518][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.510'. [ 169.331547][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.521'. [ 169.352691][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 169.392058][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 169.438897][ T8350] netlink: 'syz.0.520': attribute type 7 has an invalid length. [ 169.448685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.611377][ T8355] raw_sendmsg: syz.3.522 forgot to set AF_INET. Fix it! [ 169.657662][ T8349] bond1: entered promiscuous mode [ 169.698742][ T8349] bond1: entered allmulticast mode [ 169.713645][ T8349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.992998][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'. [ 170.488696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.702383][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 170.805853][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 171.411238][ T8405] syzkaller0: entered promiscuous mode [ 171.417451][ T8405] syzkaller0: entered allmulticast mode [ 171.528982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.662032][ T8410] netlink: 364 bytes leftover after parsing attributes in process `syz.3.531'. [ 171.691734][ T8410] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 172.568685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.427883][ T8446] netlink: 'syz.2.537': attribute type 30 has an invalid length. [ 174.452047][ T8432] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 174.461840][ T8432] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.534'. [ 174.648681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.854522][ T8462] bridge7: entered promiscuous mode [ 174.879207][ T8462] bridge7: entered allmulticast mode [ 174.899898][ T8462] team0: Port device bridge7 added [ 175.182393][ T8486] netlink: 'syz.3.547': attribute type 3 has an invalid length. [ 175.219613][ T8486] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 175.227332][ T8486] netlink: 220 bytes leftover after parsing attributes in process `syz.3.547'. [ 175.517463][ T8493] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.548'. [ 175.570308][ T8500] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.548'. [ 175.688712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.797410][ T8509] netlink: 344 bytes leftover after parsing attributes in process `syz.2.553'. [ 175.869155][ T8509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.553'. [ 175.885057][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 176.039888][ T8524] Unsupported ieee802154 address type: 0 [ 176.206319][ T8529] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 176.382329][ T8529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.417015][ T8529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'. [ 176.427572][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 176.517903][ T8541] bond0: (slave rose0): Error: Device can not be enslaved while up [ 176.648110][ T8544] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 176.728861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.768766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.481728][ T8601] netlink: 'syz.4.576': attribute type 3 has an invalid length. [ 178.510074][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.574'. [ 178.569810][ T8608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.744315][ T8614] syzkaller1: entered promiscuous mode [ 178.762074][ T8614] syzkaller1: entered allmulticast mode [ 178.793429][ T8614] unknown channel width for channel at 909000KHz? [ 178.904980][ T8618] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 178.941434][ T8622] pim6reg: entered allmulticast mode [ 178.973818][ T8618] pim6reg: left allmulticast mode [ 179.044640][ T8620] IPVS: persistence engine module ip_vs_pe_ not found [ 179.211319][ T8622] ipvlan2: entered promiscuous mode [ 179.261095][ T8622] bridge0: port 3(ipvlan2) entered blocking state [ 179.289215][ T8622] bridge0: port 3(ipvlan2) entered disabled state [ 179.329101][ T8622] ipvlan2: entered allmulticast mode [ 179.355195][ T8622] syz_tun: entered allmulticast mode [ 179.412268][ T8622] ipvlan2: left allmulticast mode [ 179.445996][ T8622] syz_tun: left allmulticast mode [ 179.849063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.861545][ T8642] tipc: Enabling of bearer rejected, already enabled [ 180.010043][ T8650] __nla_validate_parse: 3 callbacks suppressed [ 180.010063][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.588'. [ 180.144501][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 180.666629][ T8666] netlink: 536 bytes leftover after parsing attributes in process `syz.3.591'. [ 180.878018][ T30] audit: type=1800 audit(1754688479.562:2): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.589" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 180.898698][ T5863] Bluetooth: hci4: command 0x0401 tx timeout [ 181.356790][ T8681] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 181.400233][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 181.424177][ T8681] netlink: 224 bytes leftover after parsing attributes in process `syz.1.593'. [ 182.076491][ T8708] openvswitch: netlink: IP tunnel dst address not specified [ 182.132904][ T8703] bridge: RTM_NEWNEIGH with invalid ether address [ 182.183691][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 182.194878][ T8712] syzkaller0: entered promiscuous mode [ 182.201819][ T8712] syzkaller0: entered allmulticast mode [ 182.214065][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 182.315989][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 182.455884][ T8722] netlink: 'syz.0.606': attribute type 27 has an invalid length. [ 182.577523][ T8729] syzkaller0: entered promiscuous mode [ 182.592538][ T8729] syzkaller0: entered allmulticast mode [ 183.060258][ T8740] netlink: 356 bytes leftover after parsing attributes in process `syz.3.612'. [ 183.314988][ T8724] netlink: 536 bytes leftover after parsing attributes in process `syz.2.605'. [ 183.397920][ T8744] syzkaller0: entered promiscuous mode [ 183.422137][ T8744] syzkaller0: entered allmulticast mode [ 184.281131][ T8760] syzkaller0: entered promiscuous mode [ 184.286793][ T8760] syzkaller0: entered allmulticast mode [ 184.544255][ T8775] netlink: 'syz.2.623': attribute type 4 has an invalid length. [ 184.548054][ T5863] Bluetooth: hci4: link tx timeout [ 184.559949][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.588483][ T8775] netlink: 'syz.2.623': attribute type 4 has an invalid length. [ 184.914836][ T8793] ip6gretap1: entered promiscuous mode [ 185.308216][ T8819] __nla_validate_parse: 4 callbacks suppressed [ 185.308238][ T8819] netlink: 256 bytes leftover after parsing attributes in process `syz.1.631'. [ 185.411404][ T8826] syzkaller0: entered promiscuous mode [ 185.426900][ T8826] syzkaller0: entered allmulticast mode [ 185.800755][ T8845] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 185.973735][ T8854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.316764][ T8863] veth0_to_bridge: entered promiscuous mode [ 186.329142][ T8863] veth0_to_bridge: left promiscuous mode [ 186.346769][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'. [ 186.368018][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.457668][ T8865] bridge_slave_1 (unregistering): left allmulticast mode [ 186.476707][ T8865] bridge_slave_1 (unregistering): left promiscuous mode [ 186.496121][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.654353][ T5863] Bluetooth: hci4: command 0x0401 tx timeout [ 186.684502][ T8876] tipc: Enabling of bearer rejected, failed to enable media [ 186.697182][ T8876] netlink: 48 bytes leftover after parsing attributes in process `syz.2.646'. [ 186.721566][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 186.820037][ T8876] nbd1: detected capacity change from 0 to 875674160 [ 186.831391][ T5867] block nbd1: Receive control failed (result -32) [ 186.891011][ T6001] block nbd1: Dead connection, failed to find a fallback [ 186.904521][ T6001] block nbd1: shutting down sockets [ 186.918332][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.925086][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.650'. [ 186.930649][ T8891] syzkaller0: entered promiscuous mode [ 186.948916][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 186.957168][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.966764][ T8891] syzkaller0: entered allmulticast mode [ 186.994823][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.009806][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.027011][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.035472][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.069283][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.080221][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.109710][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.129767][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.147897][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.221379][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.250270][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.258380][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.329333][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.337268][ T6001] ldm_validate_partition_table(): Disk read failed. [ 187.396575][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.427784][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.449150][ T6001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 187.458286][ T6001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 187.468442][ T6001] Dev nbd1: unable to read RDB block 0 [ 187.476067][ T6001] nbd1: unable to read partition table [ 187.482111][ T8907] block nbd2: shutting down sockets [ 187.502261][ T6001] ldm_validate_partition_table(): Disk read failed. [ 187.520432][ T6001] Dev nbd1: unable to read RDB block 0 [ 187.526661][ T6001] nbd1: unable to read partition table [ 187.715846][ T8914] nbd: must specify a size in bytes for the device [ 187.757766][ T8918] macsec2: entered promiscuous mode [ 187.777652][ T8918] macsec2: entered allmulticast mode [ 187.986005][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 188.193253][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.373482][ T8950] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 188.374429][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.531611][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 188.632117][ T8950] bond4: entered promiscuous mode [ 188.671845][ T8950] bond4: entered allmulticast mode [ 188.697128][ T8944] syzkaller1: entered promiscuous mode [ 188.706791][ T8944] syzkaller1: entered allmulticast mode [ 188.760306][ T8954] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 189.498133][ T8995] lo: entered allmulticast mode [ 189.641233][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 189.653035][ T9006] netlink: 76 bytes leftover after parsing attributes in process `syz.3.677'. [ 189.951419][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.679'. [ 190.876857][ T9051] __nla_validate_parse: 3 callbacks suppressed [ 190.876878][ T9051] netlink: 148 bytes leftover after parsing attributes in process `syz.3.690'. [ 190.932295][ T9043] wireguard0: entered promiscuous mode [ 190.971296][ T9043] wireguard0: entered allmulticast mode [ 191.040426][ T9060] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.691'. [ 191.064686][ T9060] netlink: 124 bytes leftover after parsing attributes in process `syz.2.691'. [ 191.074741][ T9060] netlink: 'syz.2.691': attribute type 13 has an invalid length. [ 191.083043][ T9060] netlink: 'syz.2.691': attribute type 17 has an invalid length. [ 191.205827][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 191.380649][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.399650][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.414985][ T9060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.717113][ T9085] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 191.729418][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 191.794032][ T9086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.697'. [ 192.055701][ T9092] pim6reg1: entered promiscuous mode [ 192.078718][ T9092] pim6reg1: entered allmulticast mode [ 192.104286][ T9042] infiniband syz!: set active [ 192.112278][ T9042] infiniband syz!: added team_slave_0 [ 192.129797][ T9096] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 192.135386][ T9042] syz!: rxe_create_cq: returned err = -12 [ 192.148155][ T9042] infiniband syz!: Couldn't create ib_mad CQ [ 192.156011][ T9042] infiniband syz!: Couldn't open port 1 [ 192.215557][ T9042] RDS/IB: syz!: added [ 192.224864][ T9042] smc: adding ib device syz! with port count 1 [ 192.249781][ T9042] smc: ib device syz! port 1 has pnetid [ 192.257582][ T9096] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.369433][ T9097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.378512][ T9097] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 192.394069][ T9097] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 192.426520][ T9108] netlink: 'syz.3.703': attribute type 13 has an invalid length. [ 192.439121][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 192.769315][ T9113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.220095][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.706'. [ 193.258452][ T9120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.551339][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 193.565562][ T9134] netlink: 48 bytes leftover after parsing attributes in process `syz.2.710'. [ 193.651020][ T9136] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.839191][ T9136] geneve0: left promiscuous mode [ 193.853953][ T9136] bridge7: left promiscuous mode [ 193.879919][ T9136] ip6gretap1: left promiscuous mode [ 193.905224][ T9136] bond4: left promiscuous mode [ 193.919217][ T6148] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.927950][ T6148] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.957951][ T6148] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.979240][ T6148] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.860530][ T9159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.873218][ T9159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.886506][ T9159] hsr0: entered promiscuous mode [ 194.892437][ T9159] hsr0: entered allmulticast mode [ 194.897729][ T9159] hsr_slave_0: entered allmulticast mode [ 194.904315][ T9159] hsr_slave_1: entered allmulticast mode [ 195.006845][ T9166] delete_channel: no stack [ 196.473502][ T9189] __nla_validate_parse: 5 callbacks suppressed [ 196.473523][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.726'. [ 196.558800][ T9189] tc_dump_action: action bad kind [ 196.791772][ T9193] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.879150][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 197.328128][ T9197] lo speed is unknown, defaulting to 1000 [ 197.337196][ T9197] lo speed is unknown, defaulting to 1000 [ 197.382095][ T9197] lo speed is unknown, defaulting to 1000 [ 197.593639][ T9197] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.639713][ T9197] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 197.963522][ T9197] lo speed is unknown, defaulting to 1000 [ 197.995864][ T9197] lo speed is unknown, defaulting to 1000 [ 198.077424][ T9197] lo speed is unknown, defaulting to 1000 [ 198.107391][ T9197] lo speed is unknown, defaulting to 1000 [ 198.126723][ T9197] lo speed is unknown, defaulting to 1000 [ 198.145901][ T9197] lo speed is unknown, defaulting to 1000 [ 198.169877][ T9221] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.734'. [ 198.206845][ T9221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.734'. [ 198.246212][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 198.255339][ T9197] lo speed is unknown, defaulting to 1000 [ 198.299401][ T9221] netlink: 'syz.2.734': attribute type 10 has an invalid length. [ 198.864096][ T9238] netlink: 'syz.2.739': attribute type 12 has an invalid length. [ 198.885216][ T9238] netlink: 'syz.2.739': attribute type 29 has an invalid length. [ 198.893409][ T9238] netlink: 148 bytes leftover after parsing attributes in process `syz.2.739'. [ 198.905897][ T9238] netlink: 59 bytes leftover after parsing attributes in process `syz.2.739'. [ 198.931060][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 199.223717][ T9243] tipc: Enabled bearer , priority 0 [ 199.233016][ T9243] syzkaller0: entered promiscuous mode [ 199.241970][ T9243] syzkaller0: entered allmulticast mode [ 199.257090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.265646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.325191][ T9249] tipc: Resetting bearer [ 199.354302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.362662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.493173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.542465][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 199.632968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.641283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.699172][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.773080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.913038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.029117][ T9242] tipc: Resetting bearer [ 200.201358][ T9242] tipc: Disabling bearer [ 200.407426][ T9268] @ÿ: renamed from bond_slave_0 [ 200.740216][ T9283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 201.092731][ T9299] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 201.105293][ T9299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.336837][ T9308] 8021q: VLANs not supported on ip_vti0 [ 201.601503][ T9321] tipc: Enabled bearer , priority 0 [ 201.612098][ T9321] syzkaller0: entered promiscuous mode [ 201.620553][ T9321] syzkaller0: entered allmulticast mode [ 201.678296][ T9321] tipc: Resetting bearer [ 201.696106][ T9321] __nla_validate_parse: 1 callbacks suppressed [ 201.696127][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 201.721052][ T9319] tipc: Resetting bearer [ 201.744757][ T9319] tipc: Disabling bearer [ 201.904060][ T9339] netlink: 'syz.1.770': attribute type 11 has an invalid length. [ 201.915701][ T9339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 202.033554][ T9347] net_ratelimit: 2 callbacks suppressed [ 202.033569][ T9347] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 202.560491][ T9322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.748476][ T9370] netlink: 'syz.4.780': attribute type 32 has an invalid length. [ 202.770437][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 202.793909][ T9370] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 203.019841][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 203.072401][ T9390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.209665][ T12] wlan0: Trigger new scan to find an IBSS to join [ 203.228173][ T9397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.308430][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.790'. [ 203.318007][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 203.491866][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 203.540548][ T9418] sctp: [Deprecated]: syz.3.793 (pid 9418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.540548][ T9418] Use struct sctp_sack_info instead [ 203.614972][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 203.624712][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 203.634147][ T9421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.762712][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 203.772694][ T9427] netlink: 'syz.0.797': attribute type 2 has an invalid length. [ 204.058066][ T9429] veth0_macvtap (unregistering): left allmulticast mode [ 204.218452][ T9441] syzkaller0: entered promiscuous mode [ 204.234121][ T9441] syzkaller0: entered allmulticast mode [ 204.524418][ T9457] FAULT_INJECTION: forcing a failure. [ 204.524418][ T9457] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 204.538746][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.2.805 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 204.538777][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.538790][ T9457] Call Trace: [ 204.538798][ T9457] [ 204.538808][ T9457] dump_stack_lvl+0x189/0x250 [ 204.538840][ T9457] ? __pfx____ratelimit+0x10/0x10 [ 204.538877][ T9457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.538904][ T9457] ? __pfx__printk+0x10/0x10 [ 204.538935][ T9457] ? __might_fault+0xb0/0x130 [ 204.538980][ T9457] should_fail_ex+0x414/0x560 [ 204.539012][ T9457] _copy_from_user+0x2d/0xb0 [ 204.539034][ T9457] ___sys_sendmsg+0x158/0x2a0 [ 204.539076][ T9457] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.539151][ T9457] ? __fget_files+0x2a/0x420 [ 204.539182][ T9457] ? __fget_files+0x3a0/0x420 [ 204.539228][ T9457] __x64_sys_sendmsg+0x19b/0x260 [ 204.539265][ T9457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.539310][ T9457] ? __pfx_ksys_write+0x10/0x10 [ 204.539346][ T9457] ? do_syscall_64+0xbe/0x3b0 [ 204.539385][ T9457] do_syscall_64+0xfa/0x3b0 [ 204.539412][ T9457] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.539438][ T9457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.539461][ T9457] ? clear_bhb_loop+0x60/0xb0 [ 204.539488][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.539510][ T9457] RIP: 0033:0x7f929958ebe9 [ 204.539530][ T9457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.539548][ T9457] RSP: 002b:00007f929a4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.539570][ T9457] RAX: ffffffffffffffda RBX: 00007f92997b5fa0 RCX: 00007f929958ebe9 [ 204.539585][ T9457] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000004 [ 204.539599][ T9457] RBP: 00007f929a4c8090 R08: 0000000000000000 R09: 0000000000000000 [ 204.539612][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.539624][ T9457] R13: 00007f92997b6038 R14: 00007f92997b5fa0 R15: 00007fff61a4b9c8 [ 204.539656][ T9457] [ 205.634985][ T9463] lo speed is unknown, defaulting to 1000 [ 205.731888][ T5971] IPVS: starting estimator thread 0... [ 205.849372][ T9520] IPVS: using max 23 ests per chain, 55200 per kthread [ 206.012198][ T9526] syzkaller0: entered promiscuous mode [ 206.027900][ T9526] syzkaller0: entered allmulticast mode [ 206.172050][ T6148] wlan0: Trigger new scan to find an IBSS to join [ 206.641460][ T9556] tipc: Enabled bearer , priority 0 [ 206.678534][ T9556] syzkaller0: entered promiscuous mode [ 206.694572][ T9556] syzkaller0: entered allmulticast mode [ 206.844520][ T9550] tipc: Resetting bearer [ 206.908425][ T9550] tipc: Disabling bearer [ 206.945588][ T9569] __nla_validate_parse: 11 callbacks suppressed [ 206.945608][ T9569] netlink: 168 bytes leftover after parsing attributes in process `syz.0.830'. [ 206.994471][ T9570] Dead loop on virtual device ip6_vti0, fix it urgently! [ 207.104361][ T9572] tipc: Started in network mode [ 207.123924][ T9572] tipc: Node identity 1afac22f8561, cluster identity 4711 [ 207.143129][ T9577] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002 [ 207.164058][ T9572] tipc: Enabled bearer , priority 0 [ 207.184721][ T9574] syzkaller0: entered promiscuous mode [ 207.201296][ T9574] syzkaller0: entered allmulticast mode [ 207.246480][ T9536] lo speed is unknown, defaulting to 1000 [ 207.320036][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 207.359088][ T9583] macsec0: entered promiscuous mode [ 207.373213][ T9583] team0: entered promiscuous mode [ 207.380859][ T9583] team_slave_0: entered promiscuous mode [ 207.389653][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.833'. [ 207.401325][ T9588] openvswitch: netlink: EtherType 0 is less than min 600 [ 207.401938][ T9583] team_slave_1: entered promiscuous mode [ 207.429272][ T9583] bridge7: entered promiscuous mode [ 207.437808][ T9583] macsec0: entered allmulticast mode [ 207.443487][ T9583] team0: entered allmulticast mode [ 207.448854][ T9583] team_slave_0: entered allmulticast mode [ 207.454744][ T9583] team_slave_1: entered allmulticast mode [ 207.464198][ T9583] team0: Device macsec0 is already an upper device of the team interface [ 207.474834][ T9583] team0: left allmulticast mode [ 207.483395][ T9583] team_slave_0: left allmulticast mode [ 207.493525][ T9583] team_slave_1: left allmulticast mode [ 207.503430][ T9583] team0: left promiscuous mode [ 207.508383][ T9583] team_slave_0: left promiscuous mode [ 207.514481][ T9583] team_slave_1: left promiscuous mode [ 207.523519][ T9583] bridge7: left promiscuous mode [ 207.591067][ T9572] tipc: Resetting bearer [ 207.632416][ T9571] tipc: Resetting bearer [ 207.699518][ T9571] tipc: Disabling bearer [ 207.751255][ T9601] openvswitch: netlink: IPv4 tun info is not correct [ 207.816308][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 207.851332][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.839'. [ 207.895775][ T9603] netlink: 68 bytes leftover after parsing attributes in process `syz.2.839'. [ 207.944556][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.839'. [ 207.950452][ T9610] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 208.395400][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'. [ 208.757778][ T9630] netlink: 200 bytes leftover after parsing attributes in process `syz.4.846'. [ 208.788184][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 209.209237][ T6148] wlan0: Trigger new scan to find an IBSS to join [ 209.276924][ T9646] netlink: 'syz.0.851': attribute type 4 has an invalid length. [ 209.485630][ T9651] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.608837][ T9657] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 209.661250][ T9659] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 209.674101][ T9651] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.746999][ T9657] team0: Port device dummy0 added [ 209.803408][ T9659] team0: Port device dummy0 removed [ 209.845477][ T9659] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 210.137305][ T9651] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.170873][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.412885][ T9651] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.592757][ T9688] netlink: 'syz.4.862': attribute type 2 has an invalid length. [ 210.669050][ T9688] k›*·]‘: entered promiscuous mode [ 210.706053][ T9689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.765412][ T9688] veth0_to_team: entered promiscuous mode [ 210.780617][ T9688] veth0_to_team: entered allmulticast mode [ 210.831250][ T9691] FAULT_INJECTION: forcing a failure. [ 210.831250][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 210.904134][ T9691] CPU: 1 UID: 0 PID: 9691 Comm: syz.2.863 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 210.904182][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.904195][ T9691] Call Trace: [ 210.904204][ T9691] [ 210.904214][ T9691] dump_stack_lvl+0x189/0x250 [ 210.904247][ T9691] ? __pfx____ratelimit+0x10/0x10 [ 210.904275][ T9691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.904302][ T9691] ? __pfx__printk+0x10/0x10 [ 210.904340][ T9691] ? __pfx___might_resched+0x10/0x10 [ 210.904360][ T9691] ? fs_reclaim_acquire+0x7d/0x100 [ 210.904399][ T9691] should_fail_ex+0x414/0x560 [ 210.904430][ T9691] should_failslab+0xa8/0x100 [ 210.904464][ T9691] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 210.904495][ T9691] ? __alloc_skb+0x112/0x2d0 [ 210.904530][ T9691] __alloc_skb+0x112/0x2d0 [ 210.904564][ T9691] netlink_ack+0x146/0xa50 [ 210.904589][ T9691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.904638][ T9691] netlink_rcv_skb+0x28c/0x470 [ 210.904663][ T9691] ? __lock_acquire+0xab9/0xd20 [ 210.904696][ T9691] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.904726][ T9691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.904767][ T9691] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.904805][ T9691] netlink_unicast+0x82c/0x9e0 [ 210.904841][ T9691] ? __pfx_netlink_unicast+0x10/0x10 [ 210.904868][ T9691] ? netlink_sendmsg+0x642/0xb30 [ 210.904894][ T9691] ? skb_put+0x11b/0x210 [ 210.904929][ T9691] netlink_sendmsg+0x805/0xb30 [ 210.904969][ T9691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.905002][ T9691] ? aa_sock_msg_perm+0xf1/0x1d0 [ 210.905035][ T9691] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.905063][ T9691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.905093][ T9691] __sock_sendmsg+0x21c/0x270 [ 210.905122][ T9691] ____sys_sendmsg+0x505/0x830 [ 210.905168][ T9691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.905213][ T9691] ? import_iovec+0x74/0xa0 [ 210.905238][ T9691] ___sys_sendmsg+0x21f/0x2a0 [ 210.905274][ T9691] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.905350][ T9691] ? __fget_files+0x2a/0x420 [ 210.905382][ T9691] ? __fget_files+0x3a0/0x420 [ 210.905428][ T9691] __x64_sys_sendmsg+0x19b/0x260 [ 210.905464][ T9691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.905508][ T9691] ? __pfx_ksys_write+0x10/0x10 [ 210.905534][ T9691] ? rcu_is_watching+0x15/0xb0 [ 210.905562][ T9691] ? do_syscall_64+0xbe/0x3b0 [ 210.905595][ T9691] do_syscall_64+0xfa/0x3b0 [ 210.905621][ T9691] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.905647][ T9691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.905669][ T9691] ? clear_bhb_loop+0x60/0xb0 [ 210.905696][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.905717][ T9691] RIP: 0033:0x7f929958ebe9 [ 210.905737][ T9691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.905755][ T9691] RSP: 002b:00007f929a4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.905778][ T9691] RAX: ffffffffffffffda RBX: 00007f92997b5fa0 RCX: 00007f929958ebe9 [ 210.905793][ T9691] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000004 [ 210.905807][ T9691] RBP: 00007f929a4c8090 R08: 0000000000000000 R09: 0000000000000000 [ 210.905819][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.905830][ T9691] R13: 00007f92997b6038 R14: 00007f92997b5fa0 R15: 00007fff61a4b9c8 [ 210.905865][ T9691] [ 211.363142][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.416290][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.550353][ T6148] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.592572][ T6148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.960593][ T9714] __nla_validate_parse: 4 callbacks suppressed [ 211.960615][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 212.259628][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 212.281368][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 212.307159][ T9733] netlink: 2 bytes leftover after parsing attributes in process `syz.4.875'. [ 212.335510][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.875'. [ 212.566893][ T9743] syzkaller0: entered promiscuous mode [ 212.573069][ T9743] syzkaller0: entered allmulticast mode [ 212.896553][ T9748] netlink: 'syz.2.879': attribute type 4 has an invalid length. [ 212.927356][ T9748] netlink: 'syz.2.879': attribute type 4 has an invalid length. [ 213.127550][ T9732] lo speed is unknown, defaulting to 1000 [ 213.488442][ T9768] !: renamed from dummy0 (while UP) [ 215.038239][ T9830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.898'. [ 215.161420][ T9830] tipc: Enabled bearer , priority 0 [ 215.180002][ T9834] syzkaller0: entered promiscuous mode [ 215.185642][ T9834] syzkaller0: entered allmulticast mode [ 215.283838][ T9829] tipc: Resetting bearer [ 215.364515][ T9829] tipc: Disabling bearer [ 215.484096][ T9847] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 215.684544][ T9847] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.734954][ T9845] syzkaller0: left promiscuous mode [ 215.741968][ T9845] syzkaller0: left allmulticast mode [ 215.808556][ T9845] bond7: (slave dummy0): making interface the new active one [ 215.841528][ T9845] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 215.993871][ T9840] netlink: 536 bytes leftover after parsing attributes in process `syz.1.900'. [ 216.126000][ T9866] ipvlan2: entered promiscuous mode [ 216.343819][ T9857] lo speed is unknown, defaulting to 1000 [ 216.519416][ T9879] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 216.712912][ T9885] syzkaller0: entered promiscuous mode [ 216.718564][ T9885] syzkaller0: entered allmulticast mode [ 217.131774][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 217.139276][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 217.147102][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 217.565621][ T9923] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 217.597196][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.923'. [ 217.613292][ T9923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.642489][ T9893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.927976][ T9936] syzkaller0: entered promiscuous mode [ 217.954323][ T9936] syzkaller0: entered allmulticast mode [ 218.299780][ T9957] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.373011][ T9961] netlink: 248 bytes leftover after parsing attributes in process `syz.4.938'. [ 218.655997][ T9982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.944'. [ 218.716160][ T5971] IPVS: starting estimator thread 0... [ 218.768323][ T9986] team0: Device gtp0 is of different type [ 218.821035][ T9989] IPVS: using max 23 ests per chain, 55200 per kthread [ 218.879708][ T9991] syzkaller0: entered promiscuous mode [ 218.885428][ T9991] syzkaller0: entered allmulticast mode [ 218.986149][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 219.026783][T10004] netlink: 48 bytes leftover after parsing attributes in process `syz.2.949'. [ 219.093264][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 219.099869][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058bce400: rx timeout, send abort [ 219.556124][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 219.611608][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058bce400: abort rx timeout. Force session deactivation [ 219.657630][T10040] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 219.717086][T10040] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.950'. [ 219.945593][T10049] netlink: 'syz.3.963': attribute type 1 has an invalid length. [ 219.987561][T10049] netlink: 'syz.3.963': attribute type 2 has an invalid length. [ 220.004149][T10049] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.963'. [ 220.249365][T10067] syzkaller1: entered promiscuous mode [ 220.268543][T10067] syzkaller1: entered allmulticast mode [ 220.298275][T10069] netlink: 'syz.0.968': attribute type 3 has an invalid length. [ 220.337930][T10069] netlink: 666 bytes leftover after parsing attributes in process `syz.0.968'. [ 220.657408][T10062] lo speed is unknown, defaulting to 1000 [ 221.063134][T10089] lo speed is unknown, defaulting to 1000 [ 221.789455][T10111] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 222.145353][T10120] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 223.038477][T10115] lo speed is unknown, defaulting to 1000 [ 223.200464][T10159] ksmbd: Unknown IPC event: 3, ignore. [ 223.519657][T10166] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.682316][T10182] tipc: Enabling of bearer rejected, already enabled [ 223.791207][T10186] __nla_validate_parse: 3 callbacks suppressed [ 223.791227][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1000'. [ 224.152864][T10199] netlink: 61 bytes leftover after parsing attributes in process `syz.4.1006'. [ 224.170079][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 224.217102][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 224.250376][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 224.712716][T10190] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1001'. [ 224.890088][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 224.922955][T10225] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1013'. [ 225.761241][T10250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1019'. [ 226.289197][T10226] lo speed is unknown, defaulting to 1000 [ 226.928520][T10295] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1033'. [ 226.972840][T10295] netlink: 'syz.2.1033': attribute type 3 has an invalid length. [ 227.508876][T10318] sctp: [Deprecated]: syz.2.1038 (pid 10318) Use of int in max_burst socket option deprecated. [ 227.508876][T10318] Use struct sctp_assoc_value instead [ 227.803117][T10325] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 228.019523][T10332] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.121857][T10332] lo speed is unknown, defaulting to 1000 [ 229.277217][T10354] __nla_validate_parse: 4 callbacks suppressed [ 229.277239][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 229.449954][T10361] sctp: [Deprecated]: syz.3.1050 (pid 10361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.449954][T10361] Use struct sctp_sack_info instead [ 230.640210][T10413] nftables ruleset with unbound chain [ 230.677958][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 230.700563][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 230.805029][T10418] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1061'. [ 231.181324][T10423] tipc: Enabled bearer , priority 0 [ 231.222376][T10423] syzkaller0: entered promiscuous mode [ 231.228195][T10423] syzkaller0: entered allmulticast mode [ 231.284385][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 231.297852][T10423] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 231.334371][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 231.357806][T10432] tipc: Resetting bearer [ 231.423774][T10436] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1068'. [ 231.434930][T10436] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 231.454388][T10420] tipc: Resetting bearer [ 231.498760][ T9905] block nbd2: Receive control failed (result -32) [ 231.517419][T10420] tipc: Disabling bearer [ 231.599525][T10441] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1069'. [ 231.637167][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1069'. [ 231.886996][T10454] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 232.335274][T10449] lo speed is unknown, defaulting to 1000 [ 232.734344][T10476] tipc: Enabled bearer , priority 0 [ 232.790127][T10473] syzkaller0: entered promiscuous mode [ 232.849605][T10473] syzkaller0: entered allmulticast mode [ 232.942772][T10480] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1080'. [ 233.023135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.031625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.083145][T10472] tipc: Resetting bearer [ 233.159260][T10486] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 233.252367][T10472] tipc: Disabling bearer [ 233.282848][T10482] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 233.807868][T10486] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.330539][T10510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.906114][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.914181][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.055741][T10533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.103889][T10533] vlan0: left promiscuous mode [ 235.175621][T10533] batman_adv: batadv0: Interface deactivated: macsec1 [ 235.183482][T10533] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 235.192169][T10533] macsec1: left allmulticast mode [ 235.201884][T10533] macsec2: left promiscuous mode [ 235.207738][T10533] macsec2: left allmulticast mode [ 235.235703][ T6164] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.262349][ T6164] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.279477][ T6164] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.311621][ T6164] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.527960][T10574] __nla_validate_parse: 3 callbacks suppressed [ 235.527980][T10574] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1103'. [ 236.075622][T10591] lo speed is unknown, defaulting to 1000 [ 236.364190][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 236.404626][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 236.429549][T10611] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.451190][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1112'. [ 236.901788][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 238.186753][T10686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1130'. [ 238.281002][T10688] tap0: tun_chr_ioctl cmd 1074025675 [ 238.286387][T10688] tap0: persist disabled [ 238.407326][T10696] sch_fq: defrate 0 ignored. [ 238.462090][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 238.624822][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 238.673025][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1130'. [ 238.758518][T10713] netlink: 'syz.0.1136': attribute type 28 has an invalid length. [ 239.060299][T10686] lo speed is unknown, defaulting to 1000 [ 239.663135][T10718] lo speed is unknown, defaulting to 1000 [ 240.075731][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 240.122580][T10745] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 240.148698][T10745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.180725][T10749] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 240.229848][T10749] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 240.792207][T10755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.895485][T10773] FAULT_INJECTION: forcing a failure. [ 240.895485][T10773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.919135][T10773] CPU: 1 UID: 0 PID: 10773 Comm: syz.3.1153 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 240.919162][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.919172][T10773] Call Trace: [ 240.919180][T10773] [ 240.919187][T10773] dump_stack_lvl+0x189/0x250 [ 240.919215][T10773] ? __pfx____ratelimit+0x10/0x10 [ 240.919238][T10773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.919260][T10773] ? __pfx__printk+0x10/0x10 [ 240.919296][T10773] should_fail_ex+0x414/0x560 [ 240.919320][T10773] _copy_to_user+0x31/0xb0 [ 240.919340][T10773] simple_read_from_buffer+0xe1/0x170 [ 240.919372][T10773] proc_fail_nth_read+0x1b3/0x220 [ 240.919398][T10773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.919424][T10773] ? rw_verify_area+0x2a6/0x4d0 [ 240.919447][T10773] ? __lock_acquire+0xab9/0xd20 [ 240.919472][T10773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.919494][T10773] vfs_read+0x200/0x980 [ 240.919516][T10773] ? fdget_pos+0x247/0x320 [ 240.919536][T10773] ? __pfx___mutex_lock+0x10/0x10 [ 240.919561][T10773] ? __pfx_vfs_read+0x10/0x10 [ 240.919589][T10773] ? __fget_files+0x2a/0x420 [ 240.919625][T10773] ? __fget_files+0x3a0/0x420 [ 240.919655][T10773] ? __fget_files+0x2a/0x420 [ 240.919698][T10773] ksys_read+0x145/0x250 [ 240.919728][T10773] ? __pfx_ksys_read+0x10/0x10 [ 240.919751][T10773] ? rcu_is_watching+0x15/0xb0 [ 240.919779][T10773] ? do_syscall_64+0xbe/0x3b0 [ 240.919812][T10773] do_syscall_64+0xfa/0x3b0 [ 240.919838][T10773] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.919865][T10773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.919886][T10773] ? clear_bhb_loop+0x60/0xb0 [ 240.919914][T10773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.919936][T10773] RIP: 0033:0x7ffb1b58d5fc [ 240.919956][T10773] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.919976][T10773] RSP: 002b:00007ffb197f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.920000][T10773] RAX: ffffffffffffffda RBX: 00007ffb1b7b5fa0 RCX: 00007ffb1b58d5fc [ 240.920016][T10773] RDX: 000000000000000f RSI: 00007ffb197f60a0 RDI: 0000000000000004 [ 240.920030][T10773] RBP: 00007ffb197f6090 R08: 0000000000000000 R09: 0000000000000000 [ 240.920042][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.920055][T10773] R13: 00007ffb1b7b6038 R14: 00007ffb1b7b5fa0 R15: 00007fffc9536e68 [ 240.920091][T10773] [ 241.274296][T10779] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 241.307323][T10780] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 241.335123][T10780] __nla_validate_parse: 2 callbacks suppressed [ 241.335145][T10780] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1154'. [ 241.358536][T10779] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1155'. [ 241.444980][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 241.582261][T10785] tipc: Enabled bearer , priority 0 [ 241.835748][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 242.579482][ T6171] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 242.698784][ T5862] tipc: Node number set to 2314071271 [ 243.995812][T10820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.014950][T10820] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1170'. [ 244.052977][T10818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.174444][T10830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1174'. [ 244.308925][T10835] nbd4: detected capacity change from 0 to 63 [ 244.352580][T10835] block nbd4: NBD_DISCONNECT [ 244.362950][T10835] block nbd4: Disconnected due to user request. [ 244.377027][T10835] block nbd4: shutting down sockets [ 244.396703][T10838] tipc: Enabling of bearer rejected, already enabled [ 244.426693][T10838] sctp: [Deprecated]: syz.2.1176 (pid 10838) Use of int in maxseg socket option. [ 244.426693][T10838] Use struct sctp_assoc_value instead [ 244.446675][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1178'. [ 244.464895][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 244.588907][T10847] tipc: Enabled bearer , priority 0 [ 244.625522][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 244.667456][T10859] netlink: 'syz.0.1182': attribute type 25 has an invalid length. [ 244.705329][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1182'. [ 245.234113][T10874] tipc: Resetting bearer [ 245.510041][T10888] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 245.599242][ T5862] tipc: Node number set to 1689720635 [ 245.974683][T10900] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 246.078958][T10873] lo speed is unknown, defaulting to 1000 [ 246.629111][T10926] __nla_validate_parse: 3 callbacks suppressed [ 246.629130][T10926] netlink: 164548 bytes leftover after parsing attributes in process `syz.1.1204'. [ 246.670325][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1203'. [ 246.693903][T10926] veth0_to_team: entered promiscuous mode [ 246.718909][T10926] veth0_to_team: entered allmulticast mode [ 246.756763][T10931] netlink: 884 bytes leftover after parsing attributes in process `syz.1.1204'. [ 247.233016][T10940] tipc: Enabled bearer , priority 0 [ 247.244039][T10940] syzkaller0: entered promiscuous mode [ 247.258672][T10940] syzkaller0: entered allmulticast mode [ 247.289513][T10941] tipc: Resetting bearer [ 247.473968][T10941] tipc: Resetting bearer [ 247.633143][T10941] tipc: Disabling bearer [ 247.654416][T10962] netlink: 'syz.2.1215': attribute type 4 has an invalid length. [ 247.695837][T10957] tipc: Enabling of bearer rejected, already enabled [ 247.782755][T10968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1217'. [ 247.871520][T10974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.926025][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1219'. [ 247.940028][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1219'. [ 248.028521][T10981] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1219'. [ 248.725141][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 248.795783][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1233'. [ 248.904670][T11013] lo speed is unknown, defaulting to 1000 [ 248.993122][T11039] netlink: 'syz.1.1235': attribute type 28 has an invalid length. [ 249.100158][T11040] netlink: 'syz.1.1235': attribute type 28 has an invalid length. [ 250.273557][T11070] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1244'. [ 250.443433][T11062] nbd: must specify a size in bytes for the device [ 251.013376][T11091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.161243][T11110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.175514][T11091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.198084][ T30] audit: type=1800 audit(1754688549.882:3): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1252" name="@free" dev="tmpfs" ino=1439 res=0 errno=0 [ 251.235148][T11112] bond0: (slave rose0): Enslaving as an active interface with an up link [ 251.308933][T11091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.434683][T11091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.483250][ T3479] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.495934][ T3479] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.553994][ T3479] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.580693][ T3479] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.679624][ T3479] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.721793][T11123] __nla_validate_parse: 3 callbacks suppressed [ 251.721817][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 251.748285][ T3479] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.789469][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1258'. [ 251.879780][ T6154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.892435][T11123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1258'. [ 251.901972][ T5990] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.094131][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 252.218082][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 252.283415][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1266'. [ 252.503426][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 252.666527][T11165] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 252.878955][ T30] audit: type=1800 audit(1754688551.562:4): pid=11186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1274" name="memory.events" dev="tmpfs" ino=1266 res=0 errno=0 [ 252.942188][ T30] audit: type=1800 audit(1754688551.562:5): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1274" name="memory.events" dev="tmpfs" ino=1266 res=0 errno=0 [ 253.022958][T11191] netlink: 'syz.1.1275': attribute type 11 has an invalid length. [ 253.075745][T11195] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1277'. [ 253.196745][T11208] netlink: 'syz.3.1279': attribute type 1 has an invalid length. [ 253.236692][T11206] tipc: Enabling of bearer rejected, already enabled [ 253.288878][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 253.300269][T11215] netlink: 'syz.1.1281': attribute type 2 has an invalid length. [ 253.304857][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 253.321558][T11210] delete_channel: no stack [ 253.639451][T11223] tipc: Enabled bearer , priority 0 [ 253.659722][T11223] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 253.675516][T11223] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 253.714987][T11223] tipc: Resetting bearer [ 253.889828][T11243] netlink: 'syz.0.1290': attribute type 8 has an invalid length. [ 253.899186][T11243] netlink: 'syz.0.1290': attribute type 8 has an invalid length. [ 254.215743][T11261] tipc: New replicast peer: 255.255.255.255 [ 254.275594][T11261] tipc: Enabled bearer , priority 10 [ 255.192060][T11279] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 255.239085][T11288] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 255.243025][T11279] bond4: entered promiscuous mode [ 255.246891][T11288] netlink: 'syz.4.1304': attribute type 4 has an invalid length. [ 255.263233][T11279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.389685][ T44] tipc: Node number set to 2677785135 [ 255.419427][T11294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.610780][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 255.675867][T11316] netlink: 'syz.0.1311': attribute type 11 has an invalid length. [ 256.086163][T11333] tipc: Enabled bearer , priority 0 [ 256.093676][T11337] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 256.094537][T11333] syzkaller0: entered promiscuous mode [ 256.104577][T11337] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 256.107707][T11333] syzkaller0: entered allmulticast mode [ 256.134252][T11333] tipc: Resetting bearer [ 256.147562][T11332] tipc: Resetting bearer [ 256.176779][T11332] tipc: Disabling bearer [ 256.271774][T11343] veth0: entered promiscuous mode [ 256.469829][T11349] batadv0: left allmulticast mode [ 256.475942][T11349] batadv0: left promiscuous mode [ 256.481693][T11349] bridge0: port 3(batadv0) entered disabled state [ 256.491282][T11349] bridge_slave_1: left allmulticast mode [ 256.496989][T11349] bridge_slave_1: left promiscuous mode [ 256.503013][T11349] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.513082][T11349] bridge_slave_0: left allmulticast mode [ 256.519256][T11349] bridge_slave_0: left promiscuous mode [ 256.525160][T11349] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.636917][T11341] veth0: left promiscuous mode [ 256.917671][T11368] tipc: Enabling of bearer rejected, already enabled [ 256.955383][T11368] xt_limit: Overflow, try lower: 604147548/4200216962 [ 256.992304][T11379] __nla_validate_parse: 16 callbacks suppressed [ 256.992325][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 257.010599][T11381] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1327'. [ 257.023346][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 257.182611][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 257.259361][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 257.373637][T11400] tipc: Enabling of bearer rejected, already enabled [ 257.395580][T11400] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 257.405447][T11400] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 257.649658][T11416] syzkaller1: entered promiscuous mode [ 257.669268][T11416] syzkaller1: entered allmulticast mode [ 257.798482][T11421] validate_nla: 1 callbacks suppressed [ 257.798505][T11421] netlink: 'syz.2.1341': attribute type 11 has an invalid length. [ 258.053909][T11434] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 258.256008][T11407] lo speed is unknown, defaulting to 1000 [ 258.375238][T11451] netlink: 'syz.4.1349': attribute type 2 has an invalid length. [ 258.416881][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1349'. [ 258.562947][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 259.042063][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1356'. [ 259.076933][T11472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1356'. [ 259.305536][T11478] FAULT_INJECTION: forcing a failure. [ 259.305536][T11478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.367138][T11478] CPU: 0 UID: 0 PID: 11478 Comm: syz.3.1359 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 259.367170][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.367184][T11478] Call Trace: [ 259.367192][T11478] [ 259.367202][T11478] dump_stack_lvl+0x189/0x250 [ 259.367235][T11478] ? __pfx____ratelimit+0x10/0x10 [ 259.367263][T11478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.367290][T11478] ? __pfx__printk+0x10/0x10 [ 259.367336][T11478] should_fail_ex+0x414/0x560 [ 259.367368][T11478] _copy_to_user+0x31/0xb0 [ 259.367391][T11478] simple_read_from_buffer+0xe1/0x170 [ 259.367429][T11478] proc_fail_nth_read+0x1b3/0x220 [ 259.367459][T11478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.367489][T11478] ? rw_verify_area+0x2a6/0x4d0 [ 259.367516][T11478] ? __lock_acquire+0xab9/0xd20 [ 259.367546][T11478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.367574][T11478] vfs_read+0x200/0x980 [ 259.367602][T11478] ? fdget_pos+0x247/0x320 [ 259.367626][T11478] ? __pfx___mutex_lock+0x10/0x10 [ 259.367657][T11478] ? __pfx_vfs_read+0x10/0x10 [ 259.367687][T11478] ? __fget_files+0x2a/0x420 [ 259.367737][T11478] ? __fget_files+0x3a0/0x420 [ 259.367770][T11478] ? __fget_files+0x2a/0x420 [ 259.367814][T11478] ksys_read+0x145/0x250 [ 259.367846][T11478] ? __pfx_ksys_read+0x10/0x10 [ 259.367872][T11478] ? rcu_is_watching+0x15/0xb0 [ 259.367901][T11478] ? do_syscall_64+0xbe/0x3b0 [ 259.367935][T11478] do_syscall_64+0xfa/0x3b0 [ 259.367962][T11478] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.367989][T11478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.368011][T11478] ? clear_bhb_loop+0x60/0xb0 [ 259.368039][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.368061][T11478] RIP: 0033:0x7ffb1b58d5fc [ 259.368081][T11478] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.368100][T11478] RSP: 002b:00007ffb197f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.368123][T11478] RAX: ffffffffffffffda RBX: 00007ffb1b7b5fa0 RCX: 00007ffb1b58d5fc [ 259.368138][T11478] RDX: 000000000000000f RSI: 00007ffb197f60a0 RDI: 0000000000000004 [ 259.368151][T11478] RBP: 00007ffb197f6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.368164][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.368177][T11478] R13: 00007ffb1b7b6038 R14: 00007ffb1b7b5fa0 R15: 00007fffc9536e68 [ 259.368213][T11478] [ 259.855683][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1362'. [ 259.894412][T11459] lo speed is unknown, defaulting to 1000 [ 260.247280][T11506] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 260.797050][T11522] netlink: 'syz.2.1371': attribute type 2 has an invalid length. [ 260.978398][T11533] vlan0: entered promiscuous mode [ 261.015321][T11533] batadv0: entered promiscuous mode [ 261.356040][T11548] openvswitch: netlink: Missing key (keys=40, expected=80) [ 261.670904][T11559] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 261.702041][ T6164] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.734717][ T6164] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.779140][T11528] lo speed is unknown, defaulting to 1000 [ 261.831295][ T6164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.852906][ T6164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 262.103049][T11575] __nla_validate_parse: 14 callbacks suppressed [ 262.103071][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1388'. [ 262.184059][T11584] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 262.206931][T11585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1392'. [ 262.255133][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 262.257095][T11575] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1388'. [ 262.844257][T11615] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1398'. [ 263.023387][T11619] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 263.085692][T11619] netlink: 'syz.1.1400': attribute type 21 has an invalid length. [ 263.482704][T11614] lo speed is unknown, defaulting to 1000 [ 263.588651][T11634] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1403'. [ 263.600452][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 263.738463][T11638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1404'. [ 263.747688][T11638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1404'. [ 263.757278][T11638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1404'. [ 264.394776][T11661] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 264.406851][T11661] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 264.470571][T11623] lo speed is unknown, defaulting to 1000 [ 264.515974][T11608] lo speed is unknown, defaulting to 1000 [ 265.217428][T11687] vlan3: entered promiscuous mode [ 265.238960][T11687] erspan0: entered promiscuous mode [ 265.358344][T11693] syzkaller0: left promiscuous mode [ 265.385320][T11693] syzkaller0: left allmulticast mode [ 265.398159][T11695] netlink: 'syz.1.1420': attribute type 13 has an invalid length. [ 265.434608][T11695] netlink: 'syz.1.1420': attribute type 17 has an invalid length. [ 265.570533][T11695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.730887][T11695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.127186][T11696] lo speed is unknown, defaulting to 1000 [ 266.752310][T11714] lo speed is unknown, defaulting to 1000 [ 267.047418][T11745] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 267.146773][T11745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.379777][T11752] batman_adv: batadv0: Adding interface: gretap1 [ 267.386268][T11752] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.416425][T11752] batman_adv: batadv0: Interface activated: gretap1 [ 267.572136][T11768] tipc: Resetting bearer [ 267.663671][T11766] syzkaller1: entered promiscuous mode [ 267.680138][T11766] syzkaller1: entered allmulticast mode [ 267.754739][T11765] tipc: Resetting bearer [ 267.765534][T11726] lo speed is unknown, defaulting to 1000 [ 268.147441][T11792] __nla_validate_parse: 7 callbacks suppressed [ 268.147463][T11792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1443'. [ 268.591416][ T5990] tipc: Resetting bearer [ 268.857257][T11815] syzkaller0: entered promiscuous mode [ 268.897233][T11815] syzkaller0: entered allmulticast mode [ 269.031995][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.050921][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.090136][T11824] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1453'. [ 269.118874][T11827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1452'. [ 269.543471][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 269.706091][T11853] tipc: Resetting bearer [ 269.974497][T11852] tipc: Resetting bearer [ 270.151656][T11862] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.210273][T11862] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.346443][T11862] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.357372][T11862] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.475027][T11862] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.518843][T11862] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.636695][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1463'. [ 270.661115][T11862] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.673908][T11862] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.707752][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1464'. [ 270.709772][T11877] netlink: 'syz.2.1463': attribute type 21 has an invalid length. [ 270.721996][T11879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1464'. [ 270.785911][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1464'. [ 270.805078][T11879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1464'. [ 270.829065][T11877] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1463'. [ 270.907573][ T6171] tipc: Resetting bearer [ 271.002130][ T6148] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.011503][ T6148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.025456][ T6148] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.035191][ T6148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.079399][ T6148] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.098788][ T6148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.124352][ T6148] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.150507][ T6148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.477904][T11909] FAULT_INJECTION: forcing a failure. [ 271.477904][T11909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.569020][T11909] CPU: 1 UID: 0 PID: 11909 Comm: syz.0.1475 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 271.569052][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.569067][T11909] Call Trace: [ 271.569075][T11909] [ 271.569085][T11909] dump_stack_lvl+0x189/0x250 [ 271.569118][T11909] ? __pfx____ratelimit+0x10/0x10 [ 271.569146][T11909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.569174][T11909] ? __pfx__printk+0x10/0x10 [ 271.569205][T11909] ? __might_fault+0xb0/0x130 [ 271.569249][T11909] should_fail_ex+0x414/0x560 [ 271.569281][T11909] _copy_from_user+0x2d/0xb0 [ 271.569304][T11909] wext_handle_ioctl+0xba/0x1c0 [ 271.569338][T11909] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 271.569366][T11909] ? __lock_acquire+0xab9/0xd20 [ 271.569418][T11909] sock_ioctl+0x15f/0x790 [ 271.569444][T11909] ? __pfx_sock_ioctl+0x10/0x10 [ 271.569476][T11909] ? __fget_files+0x2a/0x420 [ 271.569507][T11909] ? __fget_files+0x3a0/0x420 [ 271.569539][T11909] ? __fget_files+0x2a/0x420 [ 271.569576][T11909] ? bpf_lsm_file_ioctl+0x9/0x20 [ 271.569604][T11909] ? __pfx_sock_ioctl+0x10/0x10 [ 271.569626][T11909] __se_sys_ioctl+0xfc/0x170 [ 271.569657][T11909] do_syscall_64+0xfa/0x3b0 [ 271.569684][T11909] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.569718][T11909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.569741][T11909] ? clear_bhb_loop+0x60/0xb0 [ 271.569768][T11909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.569789][T11909] RIP: 0033:0x7ff2b858ebe9 [ 271.569810][T11909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.569830][T11909] RSP: 002b:00007ff2b9418038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.569853][T11909] RAX: ffffffffffffffda RBX: 00007ff2b87b5fa0 RCX: 00007ff2b858ebe9 [ 271.569868][T11909] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000003 [ 271.569882][T11909] RBP: 00007ff2b9418090 R08: 0000000000000000 R09: 0000000000000000 [ 271.569896][T11909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.569908][T11909] R13: 00007ff2b87b6038 R14: 00007ff2b87b5fa0 R15: 00007fff0deda518 [ 271.569944][T11909] [ 271.858819][ T9905] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 272.082996][T11926] netlink: 'syz.3.1478': attribute type 9 has an invalid length. [ 272.128806][T11928] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 272.202519][T11932] netlink: 'syz.1.1480': attribute type 2 has an invalid length. [ 273.826464][T11997] tipc: Resetting bearer [ 273.862835][T11996] tipc: Resetting bearer [ 273.900101][T11978] lo speed is unknown, defaulting to 1000 [ 273.989250][T12000] tipc: Enabling of bearer rejected, failed to enable media [ 274.202106][T12009] wireguard0: entered allmulticast mode [ 274.432495][ T6164] tipc: Resetting bearer [ 274.527888][T12031] __nla_validate_parse: 8 callbacks suppressed [ 274.527909][T12031] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1512'. [ 274.548714][T12031] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1512'. [ 274.587624][T12033] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1513'. [ 274.610885][T12033] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1513'. [ 274.680438][T12037] macvtap1: entered promiscuous mode [ 274.685802][T12037] syz_tun: entered promiscuous mode [ 274.722437][T12037] syz_tun: left promiscuous mode [ 274.749640][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 274.802509][T12031] lo: left allmulticast mode [ 274.849392][T12043] gretap0: left promiscuous mode [ 274.869573][T12043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.893709][T12047] syzkaller0: entered promiscuous mode [ 274.899504][T12047] syzkaller0: entered allmulticast mode [ 274.914038][T12047] netem: change failed [ 274.980687][T12025] lo speed is unknown, defaulting to 1000 [ 274.989256][T12033] rdma_rxe: rxe_newlink: failed to add lo [ 275.011803][T12034] lo speed is unknown, defaulting to 1000 [ 275.056576][T12034] lo speed is unknown, defaulting to 1000 [ 275.085323][T12034] lo speed is unknown, defaulting to 1000 [ 275.177314][T12051] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 275.209200][T12051] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 275.805642][T12034] infiniband syz0: set down [ 275.814252][T12034] infiniband syz0: added lo [ 275.826383][ T5862] lo speed is unknown, defaulting to 1000 [ 275.840348][T12034] syz0: rxe_create_cq: returned err = -12 [ 275.847500][T12034] infiniband syz0: Couldn't create ib_mad CQ [ 275.853848][T12072] tipc: Enabling of bearer rejected, already enabled [ 275.872450][T12034] infiniband syz0: Couldn't open port 1 [ 275.881171][T12070] syzkaller0: entered promiscuous mode [ 275.887155][T12070] syzkaller0: entered allmulticast mode [ 275.927354][T12034] RDS/IB: syz0: added [ 275.937942][T12034] smc: adding ib device syz0 with port count 1 [ 275.945114][T12034] smc: ib device syz0 port 1 has pnetid [ 275.974432][ T5862] lo speed is unknown, defaulting to 1000 [ 275.980894][T12034] lo speed is unknown, defaulting to 1000 [ 276.080465][T12077] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1525'. [ 276.285763][T12089] tipc: Enabled bearer , priority 0 [ 276.323824][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 276.324671][T12089] syzkaller0: entered promiscuous mode [ 276.374390][T12089] syzkaller0: entered allmulticast mode [ 276.422883][T12089] tipc: Resetting bearer [ 276.465245][T12088] tipc: Resetting bearer [ 276.553219][T12088] tipc: Disabling bearer [ 276.664624][T12034] lo speed is unknown, defaulting to 1000 [ 276.759742][T12109] pim6reg1: entered promiscuous mode [ 276.765112][T12109] pim6reg1: entered allmulticast mode [ 277.101166][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 277.184722][T12129] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1540'. [ 277.294982][T12034] lo speed is unknown, defaulting to 1000 [ 277.383432][T12141] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.492961][T12141] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.730179][T12142] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.796455][T12141] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.929635][T12141] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 278.025951][T12034] lo speed is unknown, defaulting to 1000 [ 278.114208][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.155389][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.194939][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.256066][ T6164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 278.554556][T12034] lo speed is unknown, defaulting to 1000 [ 278.605552][T12190] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 278.643488][T12187] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1553'. [ 279.175091][T12210] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 279.198149][T12210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.231483][T12210] team0: Port device bond0 added [ 279.260898][T12205] bond7: (slave dummy0): Releasing active interface [ 279.276050][T12205] bridge_slave_0: left allmulticast mode [ 279.309317][T12205] bridge_slave_0: left promiscuous mode [ 279.316413][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.363953][T12205] bridge_slave_1: left allmulticast mode [ 279.376094][T12205] bridge_slave_1: left promiscuous mode [ 279.386457][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.416619][T12205] bond0: (slave bond_slave_0): Releasing backup interface [ 279.442107][T12205] bond_slave_0: left allmulticast mode [ 279.467563][T12205] bond0: (slave bond_slave_1): Releasing backup interface [ 279.492493][T12205] bond_slave_1: left allmulticast mode [ 279.506802][T12205] team0: Port device team_slave_0 removed [ 279.522285][T12205] team0: Port device team_slave_1 removed [ 279.529511][T12205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.543213][T12205] bond0: (slave wlan1): Releasing backup interface [ 279.552239][T12205] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 279.560368][T12205] batman_adv: batadv0: Removing interface: macvtap0 [ 279.571497][T12205] team0: Port device bridge7 removed [ 279.581664][T12205] bond9: (slave geneve2): Releasing backup interface [ 279.618940][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 279.647520][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 279.668148][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 279.676840][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.409870][T12247] Bluetooth: MGMT ver 1.23 [ 280.906445][T12259] __nla_validate_parse: 1 callbacks suppressed [ 280.906467][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 280.932045][T12259] vlan0: entered promiscuous mode [ 280.937138][T12259] bond0: entered promiscuous mode [ 280.948709][T12259] bond_slave_0: entered promiscuous mode [ 280.954668][T12259] bond_slave_1: entered promiscuous mode [ 281.051225][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 281.060329][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 281.423197][T12279] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 281.627810][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 281.637156][T12293] netlink: 'syz.4.1586': attribute type 14 has an invalid length. [ 281.645422][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 281.707233][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 281.716579][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.732517][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.751033][T12293] netlink: 'syz.4.1586': attribute type 14 has an invalid length. [ 281.776995][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.796932][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.803416][T12300] netlink: 1900 bytes leftover after parsing attributes in process `syz.0.1589'. [ 281.807994][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 282.181727][T12317] ip6gretap0: entered promiscuous mode [ 282.206118][T12317] macsec0: entered allmulticast mode [ 282.218886][T12317] ip6gretap0: entered allmulticast mode [ 282.274804][T12317] ip6gretap0: left allmulticast mode [ 282.328862][T12317] ip6gretap0: left promiscuous mode [ 282.597505][T12336] netlink: 'syz.2.1596': attribute type 13 has an invalid length. [ 283.362987][T12366] netlink: 'syz.2.1603': attribute type 13 has an invalid length. [ 283.377588][T12345] lo speed is unknown, defaulting to 1000 [ 283.387502][T12345] lo speed is unknown, defaulting to 1000 [ 283.394168][T12366] netlink: 'syz.2.1603': attribute type 17 has an invalid length. [ 283.511182][T12368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1603'. [ 283.601137][T12366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.633262][T12373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1603'. [ 283.663554][T12366] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.721926][T12366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.805238][T12370] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 284.136703][T12367] lo speed is unknown, defaulting to 1000 [ 284.144633][T12367] lo speed is unknown, defaulting to 1000 [ 286.913931][T12439] netlink: 'syz.4.1623': attribute type 1 has an invalid length. [ 287.043345][T12452] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1626'. [ 287.224753][T12469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1628'. [ 287.392449][T12482] syzkaller0: entered promiscuous mode [ 287.415035][T12482] syzkaller0: entered allmulticast mode [ 287.872435][T12504] syzkaller0: entered promiscuous mode [ 287.886720][T12504] syzkaller0: entered allmulticast mode [ 287.909891][T12498] netlink: 'syz.1.1636': attribute type 16 has an invalid length. [ 287.918193][T12498] netlink: 'syz.1.1636': attribute type 17 has an invalid length. [ 287.947412][T12498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.359358][T12491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.930627][T12534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1645'. [ 288.993554][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1646'. [ 289.483809][T12550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.541138][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 289.542633][T12558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 289.595746][T12558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1650'. [ 289.936642][T12573] netlink: 628 bytes leftover after parsing attributes in process `syz.4.1654'. [ 290.699621][T12570] tipc: Resetting bearer [ 290.864878][T12572] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 291.174539][T12597] netlink: 'syz.4.1663': attribute type 10 has an invalid length. [ 291.228128][T12601] netlink: 'syz.4.1663': attribute type 10 has an invalid length. [ 291.243997][T12595] IPVS: Scheduler module ip_vs_sip not found [ 291.254211][T12601] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1663'. [ 291.282387][T12597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.340480][T12601] batadv0: entered promiscuous mode [ 291.346713][T12601] batadv0: entered allmulticast mode [ 291.352925][T12601] bridge0: port 3(batadv0) entered blocking state [ 291.360067][T12601] bridge0: port 3(batadv0) entered disabled state [ 291.371273][T12569] lo speed is unknown, defaulting to 1000 [ 291.441869][T12569] lo speed is unknown, defaulting to 1000 [ 291.552860][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 291.649302][ T6171] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 291.658832][ T6171] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 291.781753][T12622] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 291.867228][T12628] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 292.116920][T12644] tipc: Resetting bearer [ 292.205008][T12644] __nla_validate_parse: 1 callbacks suppressed [ 292.205030][T12644] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1675'. [ 292.235539][T12565] lo speed is unknown, defaulting to 1000 [ 292.235870][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 292.258426][T12565] lo speed is unknown, defaulting to 1000 [ 292.275025][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 292.322474][T12642] tipc: Resetting bearer [ 292.506520][T12652] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1676'. [ 292.884332][T12649] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1677'. [ 292.952152][ T6171] tipc: Resetting bearer [ 293.016712][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1682'. [ 293.146389][T12672] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1681'. [ 293.185663][T12671] veth1: entered promiscuous mode [ 293.622560][T12686] netlink: 164548 bytes leftover after parsing attributes in process `syz.3.1688'. [ 293.729515][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1690'. [ 294.239626][T12711] netlink: 'syz.0.1693': attribute type 15 has an invalid length. [ 294.938194][T12695] lo speed is unknown, defaulting to 1000 [ 294.961305][T12695] lo speed is unknown, defaulting to 1000 [ 295.594171][T12732] netlink: 536 bytes leftover after parsing attributes in process `syz.3.1697'. [ 295.613306][T12696] lo speed is unknown, defaulting to 1000 [ 295.637295][T12696] lo speed is unknown, defaulting to 1000 [ 296.026578][T12755] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:1024 [ 296.624459][T12767] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 297.065886][T12775] netlink: 'syz.3.1711': attribute type 39 has an invalid length. [ 297.068676][T12776] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 297.218203][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 297.625052][T12785] tipc: Enabling of bearer rejected, already enabled [ 297.645513][T12785] syzkaller0: mtu greater than device maximum [ 297.786416][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.824601][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.010311][T12798] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 298.037686][T12809] vlan3: entered promiscuous mode [ 298.046076][T12809] vlan3: entered allmulticast mode [ 298.207296][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 298.219453][T12817] tipc: Enabling of bearer rejected, already enabled [ 298.348061][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 298.680528][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.043829][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 299.089286][T12849] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 299.110632][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 299.121821][T12849] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 299.189240][T12857] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1735'. [ 299.228945][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 299.268767][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1737'. [ 299.347440][T12862] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 299.372412][T12862] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1738'. [ 299.424971][T12863] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 301.801123][T12863] bond10: entered promiscuous mode [ 301.807081][T12863] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.887733][T12845] lo speed is unknown, defaulting to 1000 [ 301.946461][T12867] bond10: (slave bridge14): making interface the new active one [ 301.971017][T12867] bridge14: entered promiscuous mode [ 301.992151][T12867] bond10: (slave bridge14): Enslaving as an active interface with an up link [ 302.032620][T12845] lo speed is unknown, defaulting to 1000 [ 302.285793][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1743'. [ 302.310726][T12880] IPv6: sit1: Disabled Multicast RS [ 302.337455][T12880] sit1: entered allmulticast mode [ 302.481738][T12856] lo speed is unknown, defaulting to 1000 [ 302.607613][T12856] lo speed is unknown, defaulting to 1000 [ 302.853507][T12906] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 304.950103][T12954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.132081][T12961] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1764'. [ 305.190716][T12954] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1760'. [ 305.219987][T12969] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1765'. [ 305.336164][T12972] netlink: 'syz.1.1766': attribute type 10 has an invalid length. [ 305.353453][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 305.380770][T12972] team0: Port device dummy0 added [ 305.407018][T12973] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1767'. [ 305.421978][T12972] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1766'. [ 305.523649][T12980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1770'. [ 305.814413][T12988] vlan0: entered promiscuous mode [ 306.088044][T13012] syzkaller0: entered promiscuous mode [ 306.101280][T13012] syzkaller0: entered allmulticast mode [ 306.486873][T13037] netlink: 'syz.2.1786': attribute type 1 has an invalid length. [ 306.537723][T13038] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1786'. [ 306.551955][T13037] bond11: entered promiscuous mode [ 306.557842][T13037] 8021q: adding VLAN 0 to HW filter on device bond11 [ 306.576368][T13038] batadv1: entered promiscuous mode [ 306.582086][T13038] batadv1: entered allmulticast mode [ 306.590593][T13038] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 306.608031][T13038] bond11: (slave batadv1): making interface the new active one [ 306.617198][T13038] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 307.084691][T13066] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 307.220189][T13068] bond5: (slave gretap2): making interface the new active one [ 307.231334][T13068] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 307.256817][T13076] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 307.282943][T13076] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 307.291881][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'. [ 307.310629][T13076] tipc: Resetting bearer [ 307.524162][T13094] netlink: 'syz.1.1799': attribute type 5 has an invalid length. [ 307.655022][T13103] netlink: 'syz.3.1802': attribute type 2 has an invalid length. [ 307.666057][T13103] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1802'. [ 307.970163][T13117] netlink: 'syz.4.1805': attribute type 29 has an invalid length. [ 307.991477][T13124] netlink: 'syz.4.1805': attribute type 29 has an invalid length. [ 308.041715][T13117] netlink: 508 bytes leftover after parsing attributes in process `syz.4.1805'. [ 308.210439][T13133] syzkaller0: entered promiscuous mode [ 308.215989][T13133] syzkaller0: entered allmulticast mode [ 308.314234][ T6150] tipc: Resetting bearer [ 308.567931][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 308.695491][T13167] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 308.783711][T13167] bond6: entered promiscuous mode [ 308.791124][T13167] bond6: entered allmulticast mode [ 308.797002][T13167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.883839][T13167] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 308.987362][T13167] bond7: entered promiscuous mode [ 309.018726][T13167] bond7: entered allmulticast mode [ 309.055568][T13167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 309.081636][T13167] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 309.174118][T13167] bond8: entered promiscuous mode [ 309.195685][T13167] bond8: entered allmulticast mode [ 309.221943][T13167] 8021q: adding VLAN 0 to HW filter on device bond8 [ 309.301008][T13189] bond2: entered promiscuous mode [ 309.307967][T13189] bond2: entered allmulticast mode [ 309.314115][T13189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.323857][T13167] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 309.479650][T13167] bond9: entered promiscuous mode [ 309.502011][T13167] bond9: entered allmulticast mode [ 309.507832][T13167] 8021q: adding VLAN 0 to HW filter on device bond9 [ 309.747115][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 309.755531][T13183] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1823'. [ 309.777974][T13220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1832'. [ 310.125487][T13244] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 310.267390][T13250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'. [ 310.292731][T13250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1841'. [ 310.429052][T13266] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1844'. [ 312.440310][T13284] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 312.466525][T13288] __nla_validate_parse: 2 callbacks suppressed [ 312.466546][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 312.606322][T13289] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1853'. [ 312.711613][T13299] syzkaller1: entered allmulticast mode [ 312.771480][T13301] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 312.979970][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 312.995899][T13309] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1859'. [ 313.228054][T13294] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1855'. [ 313.519929][T13313] lo speed is unknown, defaulting to 1000 [ 313.528041][T13313] lo speed is unknown, defaulting to 1000 [ 313.551467][T13324] tipc: Resetting bearer [ 313.592414][T13324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1862'. [ 313.613326][T13322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1862'. [ 313.742637][T13324] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 313.783285][T13329] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 313.839925][T13321] tipc: Resetting bearer [ 314.438911][ T6148] tipc: Resetting bearer [ 314.653142][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 314.756711][T13359] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1870'. [ 314.849525][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1872'. [ 315.664823][T13383] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 315.722461][T13383] netlink: 'syz.2.1878': attribute type 16 has an invalid length. [ 315.748894][T13383] netlink: 'syz.2.1878': attribute type 3 has an invalid length. [ 315.775530][T13386] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 315.798623][T13386] netlink: 'syz.3.1879': attribute type 2 has an invalid length. [ 315.889191][T13386] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 316.724516][T13425] TCP: TCP_TX_DELAY enabled [ 316.857548][T13424] bridge9: entered promiscuous mode [ 316.883936][T13424] bridge9: entered allmulticast mode [ 317.266372][T13436] netlink: 'syz.3.1891': attribute type 30 has an invalid length. [ 317.524069][T13444] tipc: Enabling of bearer rejected, already enabled [ 317.632368][T13442] __nla_validate_parse: 35 callbacks suppressed [ 317.632392][T13442] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1892'. [ 317.744025][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 317.774066][T13455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1896'. [ 318.207954][T13425] lo speed is unknown, defaulting to 1000 [ 318.241921][T13425] lo speed is unknown, defaulting to 1000 [ 318.360889][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'. [ 318.424612][T13480] netlink: 'syz.4.1900': attribute type 13 has an invalid length. [ 318.443557][T13480] netlink: 'syz.4.1900': attribute type 17 has an invalid length. [ 318.487880][T13451] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1894'. [ 318.637881][T13480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.007440][T13494] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.027545][T13494] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.113303][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'. [ 319.365189][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 319.400007][T13494] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.410808][T13494] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.594031][T13494] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.618791][T13494] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.727276][T13494] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.768223][T13494] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.094830][ T3479] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.118485][ T3479] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.161798][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.178762][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.199293][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.218027][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.280909][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.303407][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.314745][ T9905] Bluetooth: hci4: link tx timeout [ 320.323039][ T9905] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 320.332000][T13484] lo speed is unknown, defaulting to 1000 [ 320.355669][T13484] lo speed is unknown, defaulting to 1000 [ 320.879352][T13530] lo speed is unknown, defaulting to 1000 [ 320.915464][T13530] lo speed is unknown, defaulting to 1000 [ 321.163128][T13535] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1916'. [ 321.186026][T13542] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 321.204630][T13542] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1919'. [ 321.693978][T13548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.711944][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1919'. [ 322.411081][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 322.759868][T13573] __nla_validate_parse: 3 callbacks suppressed [ 322.759892][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 323.144581][T13592] netlink: 'syz.0.1932': attribute type 39 has an invalid length. [ 323.655724][T13584] lo speed is unknown, defaulting to 1000 [ 323.697677][T13584] lo speed is unknown, defaulting to 1000 [ 324.246639][T13626] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 324.308137][T13638] tipc: Resetting bearer [ 324.386121][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 324.396537][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 324.417927][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 324.442938][T13636] tipc: Resetting bearer [ 324.468401][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1946'. [ 324.643543][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'. [ 324.664247][T13648] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 324.685513][T13648] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 324.737240][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'. [ 324.794983][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1947'. [ 324.987482][T13660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1948'. [ 325.066669][ T1101] tipc: Resetting bearer [ 325.103108][T13660] smc: net device bond0 applied user defined pnetid SYZ2 [ 325.142074][T13664] smc: net device bond0 erased user defined pnetid SYZ2 [ 325.708623][T13694] sch_fq: defrate 0 ignored. [ 325.719506][T13698] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1958'. [ 325.810134][T13705] nbd: must specify at least one socket [ 326.059278][T13714] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 326.158965][T13721] veth0: entered promiscuous mode [ 326.192484][T13721] veth0 (unregistering): left promiscuous mode [ 326.296308][T13730] bridge0: port 3(batadv0) entered disabled state [ 326.328162][T13730] bridge_slave_0: left allmulticast mode [ 326.343457][T13730] bridge_slave_0: left promiscuous mode [ 326.355466][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.380124][T13730] bridge_slave_1: left allmulticast mode [ 326.394297][T13730] bridge_slave_1: left promiscuous mode [ 326.407819][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.433126][T13735] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 326.443179][T13737] sctp: [Deprecated]: syz.0.1966 (pid 13737) Use of int in max_burst socket option deprecated. [ 326.443179][T13737] Use struct sctp_assoc_value instead [ 326.465754][T13730] bond0: (slave bond_slave_0): Releasing backup interface [ 326.525497][T13730] bond0: (slave bond_slave_1): Releasing backup interface [ 326.598256][T13730] team0: Port device team_slave_0 removed [ 326.611370][T13730] team0: Port device team_slave_1 removed [ 326.618923][T13730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.626508][T13730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.636947][T13730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.652118][T13730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.669855][T13730] tipc: Resetting bearer [ 326.766772][ T5971] syz!: Port: 1 Link DOWN [ 326.899384][T13751] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 327.084892][T13764] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.503917][T13785] tipc: Enabling of bearer rejected, already enabled [ 327.549803][T13788] team0: Port device dummy0 removed [ 327.558077][T13788] bond0: (slave batadv0): Releasing backup interface [ 327.583723][T13788] bridge_slave_0: left allmulticast mode [ 327.597041][T13788] bridge_slave_0: left promiscuous mode [ 327.603618][T13788] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.619160][T13788] bond0: (slave bond_slave_0): Releasing backup interface [ 327.643899][T13788] bond0: (slave bond_slave_1): Releasing backup interface [ 327.717836][T13788] team0: Port device team_slave_0 removed [ 327.756688][T13788] team0: Port device team_slave_1 removed [ 327.772538][T13788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.795606][T13788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.820991][T13788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.840034][T13788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.878400][T13788] tipc: Resetting bearer [ 327.888132][T13788] batman_adv: batadv0: Interface deactivated: gretap1 [ 327.911145][T13788] batman_adv: batadv0: Removing interface: gretap1 [ 328.131790][T13805] __nla_validate_parse: 7 callbacks suppressed [ 328.131812][T13805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1985'. [ 328.157164][T13805] netlink: 'syz.0.1985': attribute type 4 has an invalid length. [ 328.209183][T13809] netlink: 'syz.0.1985': attribute type 4 has an invalid length. [ 328.246035][T13808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.259641][T13808] netlink: 'syz.3.1986': attribute type 9 has an invalid length. [ 328.267702][T13808] netlink: 'syz.3.1986': attribute type 6 has an invalid length. [ 328.290913][ T5971] lo speed is unknown, defaulting to 1000 [ 328.296763][ T5971] syz0: Port: 1 Link ACTIVE [ 328.327822][ T5942] lo speed is unknown, defaulting to 1000 [ 328.515637][T13824] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 328.613338][T13826] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1992'. [ 328.839700][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 328.876641][T13840] vlan3: entered promiscuous mode [ 328.888811][T13840] gretap0: entered promiscuous mode [ 329.392220][T13876] tipc: Enabling of bearer rejected, already enabled [ 329.826017][T13896] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 329.894594][T13896] 8021q: adding VLAN 0 to HW filter on device bond11 [ 329.919907][T13896] bond11: (slave bridge0): making interface the new active one [ 329.929264][T13896] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 329.948379][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 330.027590][T13896] bond11: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 330.117132][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 330.404967][T13926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2020'. [ 330.552788][T13933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2021'. [ 331.405307][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2017'. [ 331.462767][T13951] netlink: 'syz.0.2017': attribute type 13 has an invalid length. [ 331.479055][T13951] netlink: 'syz.0.2017': attribute type 17 has an invalid length. [ 331.717718][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.763800][T13951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.817810][T13917] lo speed is unknown, defaulting to 1000 [ 331.862010][T13917] lo speed is unknown, defaulting to 1000 [ 332.249829][T13994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2039'. [ 332.260818][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2039'. [ 332.466249][T13999] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 332.502931][T13999] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 332.528101][T13999] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 332.556803][T13999] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 333.385786][T14011] bond12: entered promiscuous mode [ 333.433223][T14011] 8021q: adding VLAN 0 to HW filter on device bond12 [ 334.718151][T14047] pimreg: entered allmulticast mode [ 334.747027][T14047] pimreg: left allmulticast mode [ 335.105642][T14029] lo speed is unknown, defaulting to 1000 [ 335.131267][T14029] lo speed is unknown, defaulting to 1000 [ 335.340607][T14052] [ 335.343038][T14052] ====================================================== [ 335.350342][T14052] WARNING: possible circular locking dependency detected [ 335.357574][T14052] 6.16.0-syzkaller-12063-g37816488247d #0 Not tainted [ 335.364365][T14052] ------------------------------------------------------ [ 335.371412][T14052] syz.2.2057/14052 is trying to acquire lock: [ 335.377508][T14052] ffff8880250471d8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0xf0/0x320 [ 335.386976][T14052] [ 335.386976][T14052] but task is already holding lock: [ 335.394369][T14052] ffff888025046c98 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 335.404718][T14052] [ 335.404718][T14052] which lock already depends on the new lock. [ 335.404718][T14052] [ 335.415171][T14052] [ 335.415171][T14052] the existing dependency chain (in reverse order) is: [ 335.424215][T14052] [ 335.424215][T14052] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 335.432884][T14052] lock_acquire+0x120/0x360 [ 335.437962][T14052] blk_alloc_queue+0x538/0x620 [ 335.443289][T14052] __blk_mq_alloc_disk+0x15c/0x340 [ 335.448973][T14052] nbd_dev_add+0x46c/0xae0 [ 335.453967][T14052] nbd_init+0x168/0x1f0 [ 335.458685][T14052] do_one_initcall+0x233/0x820 [ 335.464247][T14052] do_initcall_level+0x104/0x190 [ 335.469746][T14052] do_initcalls+0x59/0xa0 [ 335.474640][T14052] kernel_init_freeable+0x334/0x4b0 [ 335.480403][T14052] kernel_init+0x1d/0x1d0 [ 335.485416][T14052] ret_from_fork+0x3fc/0x770 [ 335.490568][T14052] ret_from_fork_asm+0x1a/0x30 [ 335.495901][T14052] [ 335.495901][T14052] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 335.503153][T14052] lock_acquire+0x120/0x360 [ 335.508217][T14052] fs_reclaim_acquire+0x72/0x100 [ 335.513720][T14052] prepare_alloc_pages+0x153/0x610 [ 335.519389][T14052] __alloc_frozen_pages_noprof+0x123/0x370 [ 335.525765][T14052] __alloc_pages_noprof+0xa/0x30 [ 335.531262][T14052] pcpu_populate_chunk+0x182/0xb30 [ 335.536941][T14052] pcpu_alloc_noprof+0xcbf/0x16b0 [ 335.542535][T14052] bpf_map_alloc_percpu+0xbc/0x1b0 [ 335.548211][T14052] prealloc_init+0x225/0x630 [ 335.553526][T14052] htab_map_alloc+0x6ce/0xc70 [ 335.558773][T14052] map_create+0xaa0/0x14d0 [ 335.563752][T14052] __sys_bpf+0x60f/0x870 [ 335.568558][T14052] __x64_sys_bpf+0x7c/0x90 [ 335.573548][T14052] do_syscall_64+0xfa/0x3b0 [ 335.578637][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.585309][T14052] [ 335.585309][T14052] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 335.593081][T14052] lock_acquire+0x120/0x360 [ 335.598154][T14052] __mutex_lock+0x187/0x1360 [ 335.603391][T14052] pcpu_alloc_noprof+0x286/0x16b0 [ 335.609068][T14052] sbitmap_init_node+0x1e1/0x630 [ 335.614571][T14052] sbitmap_queue_init_node+0x41/0x660 [ 335.620500][T14052] blk_mq_init_tags+0x110/0x280 [ 335.625886][T14052] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 335.631881][T14052] blk_mq_init_sched+0x28a/0x710 [ 335.637357][T14052] elevator_switch+0x19c/0x5f0 [ 335.642649][T14052] elevator_change+0x21b/0x320 [ 335.647944][T14052] elevator_set_default+0x186/0x260 [ 335.653669][T14052] blk_register_queue+0x35d/0x400 [ 335.659230][T14052] __add_disk+0x677/0xd50 [ 335.664095][T14052] add_disk_fwnode+0xfc/0x480 [ 335.669304][T14052] nbd_dev_add+0x717/0xae0 [ 335.674254][T14052] nbd_init+0x168/0x1f0 [ 335.678964][T14052] do_one_initcall+0x233/0x820 [ 335.684331][T14052] do_initcall_level+0x104/0x190 [ 335.689823][T14052] do_initcalls+0x59/0xa0 [ 335.694692][T14052] kernel_init_freeable+0x334/0x4b0 [ 335.700462][T14052] kernel_init+0x1d/0x1d0 [ 335.705341][T14052] ret_from_fork+0x3fc/0x770 [ 335.710463][T14052] ret_from_fork_asm+0x1a/0x30 [ 335.715777][T14052] [ 335.715777][T14052] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 335.723669][T14052] validate_chain+0xb9b/0x2140 [ 335.728991][T14052] __lock_acquire+0xab9/0xd20 [ 335.734206][T14052] lock_acquire+0x120/0x360 [ 335.739249][T14052] __mutex_lock+0x187/0x1360 [ 335.744372][T14052] elevator_change+0xf0/0x320 [ 335.749584][T14052] elevator_set_none+0x42/0xb0 [ 335.754882][T14052] blk_mq_update_nr_hw_queues+0x68f/0x1890 [ 335.761459][T14052] nbd_start_device+0x17f/0xb10 [ 335.766865][T14052] nbd_genl_connect+0x135b/0x18f0 [ 335.772434][T14052] genl_family_rcv_msg_doit+0x215/0x300 [ 335.778551][T14052] genl_rcv_msg+0x60e/0x790 [ 335.783684][T14052] netlink_rcv_skb+0x208/0x470 [ 335.789004][T14052] genl_rcv+0x28/0x40 [ 335.793523][T14052] netlink_unicast+0x82c/0x9e0 [ 335.798814][T14052] netlink_sendmsg+0x805/0xb30 [ 335.804547][T14052] __sock_sendmsg+0x21c/0x270 [ 335.809762][T14052] ____sys_sendmsg+0x505/0x830 [ 335.815087][T14052] ___sys_sendmsg+0x21f/0x2a0 [ 335.820308][T14052] __x64_sys_sendmsg+0x19b/0x260 [ 335.825785][T14052] do_syscall_64+0xfa/0x3b0 [ 335.830824][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.837252][T14052] [ 335.837252][T14052] other info that might help us debug this: [ 335.837252][T14052] [ 335.847519][T14052] Chain exists of: [ 335.847519][T14052] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 335.847519][T14052] [ 335.861274][T14052] Possible unsafe locking scenario: [ 335.861274][T14052] [ 335.868730][T14052] CPU0 CPU1 [ 335.874101][T14052] ---- ---- [ 335.879485][T14052] lock(&q->q_usage_counter(io)#52); [ 335.884875][T14052] lock(fs_reclaim); [ 335.891382][T14052] lock(&q->q_usage_counter(io)#52); [ 335.899306][T14052] lock(&q->elevator_lock); [ 335.903904][T14052] [ 335.903904][T14052] *** DEADLOCK *** [ 335.903904][T14052] [ 335.912047][T14052] 6 locks held by syz.2.2057/14052: [ 335.917245][T14052] #0: ffffffff8f599fb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 335.925461][T14052] #1: ffffffff8f599dc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 335.934445][T14052] #2: ffff88802567c188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1890 [ 335.946129][T14052] #3: ffff88802567c0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1890 [ 335.957214][T14052] #4: ffff888025046c98 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 335.967945][T14052] #5: ffff888025046cd0 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 335.978937][T14052] [ 335.978937][T14052] stack backtrace: [ 335.984915][T14052] CPU: 1 UID: 0 PID: 14052 Comm: syz.2.2057 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 335.984946][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.984974][T14052] Call Trace: [ 335.984982][T14052] [ 335.984990][T14052] dump_stack_lvl+0x189/0x250 [ 335.985017][T14052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.985040][T14052] ? __pfx__printk+0x10/0x10 [ 335.985067][T14052] ? print_lock_name+0xde/0x100 [ 335.985094][T14052] print_circular_bug+0x2ee/0x310 [ 335.985117][T14052] check_noncircular+0x134/0x160 [ 335.985141][T14052] validate_chain+0xb9b/0x2140 [ 335.985172][T14052] __lock_acquire+0xab9/0xd20 [ 335.985203][T14052] ? elevator_change+0xf0/0x320 [ 335.985225][T14052] lock_acquire+0x120/0x360 [ 335.985251][T14052] ? elevator_change+0xf0/0x320 [ 335.985281][T14052] __mutex_lock+0x187/0x1360 [ 335.985304][T14052] ? elevator_change+0xf0/0x320 [ 335.985328][T14052] ? xa_find_after+0xae/0x430 [ 335.985367][T14052] ? xa_find_after+0x402/0x430 [ 335.985392][T14052] ? elevator_change+0xf0/0x320 [ 335.985415][T14052] ? xa_find_after+0xae/0x430 [ 335.985442][T14052] ? __pfx___mutex_lock+0x10/0x10 [ 335.985469][T14052] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 335.985498][T14052] ? __blk_freeze_queue_start+0x275/0x380 [ 335.985531][T14052] elevator_change+0xf0/0x320 [ 335.985553][T14052] ? elevator_set_none+0x37/0xb0 [ 335.985578][T14052] elevator_set_none+0x42/0xb0 [ 335.985603][T14052] blk_mq_update_nr_hw_queues+0x68f/0x1890 [ 335.985638][T14052] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 335.985679][T14052] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 335.985712][T14052] ? sysfs_add_file_mode_ns+0x259/0x300 [ 335.985746][T14052] nbd_start_device+0x17f/0xb10 [ 335.985774][T14052] ? device_create_file+0xf4/0x1c0 [ 335.985801][T14052] nbd_genl_connect+0x135b/0x18f0 [ 335.985829][T14052] ? __pfx_nbd_genl_connect+0x10/0x10 [ 335.985859][T14052] ? __nla_parse+0x40/0x60 [ 335.985895][T14052] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 335.985919][T14052] genl_family_rcv_msg_doit+0x215/0x300 [ 335.985941][T14052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 335.985967][T14052] ? stack_trace_save+0x9c/0xe0 [ 335.985991][T14052] genl_rcv_msg+0x60e/0x790 [ 335.986011][T14052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.986027][T14052] ? __pfx_nbd_genl_connect+0x10/0x10 [ 335.986057][T14052] netlink_rcv_skb+0x208/0x470 [ 335.986079][T14052] ? __lock_acquire+0xab9/0xd20 [ 335.986105][T14052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.986122][T14052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.986154][T14052] ? down_read+0x1ad/0x2e0 [ 335.986180][T14052] genl_rcv+0x28/0x40 [ 335.986207][T14052] netlink_unicast+0x82c/0x9e0 [ 335.986232][T14052] ? __pfx_netlink_unicast+0x10/0x10 [ 335.986253][T14052] ? netlink_sendmsg+0x642/0xb30 [ 335.986275][T14052] ? skb_put+0x11b/0x210 [ 335.986302][T14052] netlink_sendmsg+0x805/0xb30 [ 335.986330][T14052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.986356][T14052] ? aa_sock_msg_perm+0xf1/0x1d0 [ 335.986383][T14052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.986403][T14052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.986429][T14052] __sock_sendmsg+0x21c/0x270 [ 335.986451][T14052] ____sys_sendmsg+0x505/0x830 [ 335.986481][T14052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.986513][T14052] ? import_iovec+0x74/0xa0 [ 335.986531][T14052] ___sys_sendmsg+0x21f/0x2a0 [ 335.986559][T14052] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.986604][T14052] ? __fget_files+0x2a/0x420 [ 335.986631][T14052] ? __fget_files+0x3a0/0x420 [ 335.986670][T14052] __x64_sys_sendmsg+0x19b/0x260 [ 335.986699][T14052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.986732][T14052] ? rcu_is_watching+0x15/0xb0 [ 335.986753][T14052] ? do_syscall_64+0xbe/0x3b0 [ 335.986779][T14052] do_syscall_64+0xfa/0x3b0 [ 335.986802][T14052] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.986824][T14052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.986843][T14052] ? clear_bhb_loop+0x60/0xb0 [ 335.986864][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.986883][T14052] RIP: 0033:0x7f929958ebe9 [ 335.986899][T14052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.986916][T14052] RSP: 002b:00007f929a4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.986935][T14052] RAX: ffffffffffffffda RBX: 00007f92997b5fa0 RCX: 00007f929958ebe9 [ 335.986948][T14052] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 335.986960][T14052] RBP: 00007f9299611e19 R08: 0000000000000000 R09: 0000000000000000 [ 335.986971][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.986982][T14052] R13: 00007f92997b6038 R14: 00007f92997b5fa0 R15: 00007fff61a4b9c8 [ 335.987004][T14052] [ 336.567849][ T9905] block nbd3: Receive control failed (result -32) [ 336.581931][ T51] block nbd3: Receive control failed (result -32) [ 336.608909][T14052] nbd3: detected capacity change from 0 to 127