last executing test programs: 11.462337873s ago: executing program 2 (id=6442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000210001000000800000000000fe8000000000000000000000000000bbe000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009c001100ac1414bb000000000000000000000000ac1e0101000000000000000000000000e0000001000000000000000000000000e00000020000000000000000000000006c02000000428a0000000a000200ac1414bb0000000000000000000000000a010101000000000000000000000000ac14141c00000000000000000000000000000000000000000000000000000000ff040000000000000a000a00"], 0xec}}, 0x0) 11.192965327s ago: executing program 2 (id=6444): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019580)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) (rerun: 64) close(0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r6, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000180)={0x6, 'pimreg1\x00', {0x1ff}, 0x3}) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d2, 0x0) (async) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) r9 = socket(0x15, 0x5, 0x0) (rerun: 64) getsockopt(r9, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (rerun: 32) setsockopt$inet6_buf(r3, 0x29, 0x2a, &(0x7f00000005c0)="411a211887569f887e5dd032f8d5952f03c76f49e46e127047a352e4f68c2417f0c0879ace1299145a6ba0574b61251f4631207c2e8e542d9fa7b69400096964ae6ed074e8105274d0d9c83bc3fcbbaf0a05c646a9fd0ec09dca33f336224cefcd7241277f8650184ae0805fa6dcb4e8639373082f2cfbb1696caa17b1bed06d5d672b7e1c7a599dab6f371d0aa6583eeb0c07716cbbb259da6a429ce008cf412d720603cca46a7556a6eacacd094223ae5c580f7a8cf1b8aa2a584d2dc84f69f5f09086c402399ec5c17ac38d72a24d7500a4e1d6236747278bae379ae1d21445c64b9f76f2bc2e2ddc", 0xea) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}], 0x1, 0x4000000) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000100), &(0x7f00000004c0)=@tcp6=r3}, 0x20) 8.62983099s ago: executing program 2 (id=6457): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'pimreg1\x00', 0x1}, 0x18) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = socket(0x15, 0x5, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000440)=""/83, 0x53}], 0x2}, 0x122) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x70bd28, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x23, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xde3}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x8011) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 4.759111056s ago: executing program 2 (id=6481): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000007a80)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x40, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x40, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x40}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4.5852957s ago: executing program 0 (id=6484): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4eaa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) (async, rerun: 32) recvmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}}], 0x1, 0x400000a0, 0x0) (async, rerun: 32) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000400)=0x4, 0x4) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getpid() (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r2, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r2, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 4.173505442s ago: executing program 1 (id=6487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket(0x1d, 0x80802, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 3.933568638s ago: executing program 1 (id=6491): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 3.727564258s ago: executing program 0 (id=6492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@map, 0xffffffffffffffff, 0x13, 0x10}, 0x20) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdb000f00000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000000008001001520000009c00118098000580940000800c0003800400020004000200440002800800a10008000000050018010b00000008002201f2000000050018010900000008009f0007000000050018010800000008002600071c000005001901070000000a00010008021100000100002c000280080026006c090000080026006c0900000800a0000000010008009f000400000008002201070200000400038004000280"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400100001800db8d0000000000000000022000000000fe010000000008000400", @ANYRES32, @ANYBLOB="f2000880d53a0dd3721e2e0bb905633b4161fa0d4a344cbe0bf665262c025dd8e61c3e18db79205b93e799f99971906e24f178f87189594b10104db1bd69499ff74925d188afdb70d06db70c601e0925df2d224666970d0acbc4a1afab44b89ee38ec7cdcf84a43bd7e1282c6116d885224870bc20f4bb963184044f8f09d0a4af49116ec00df4e19b89047d0d6c3f97c68b17030f6942ece5be065266d27ad72be7d63493645ba268aecd26c51206f1cb53b155b546ab293e902fd78ee4a8deadf0859663966bddc2e4a72ea9a9c2241baea171776437a5a1c794e953c811b997167b8509c9d6a090e6682ded1ec102d423000006001d004e24000005001b001100000006001d004e22000005001b003a00000008001e0008"], 0x140}}, 0x60800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000780)={0x0, 0x9, 0xeb}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000cc0)={{}, r4, 0x10, @unused=[0x8, 0x640, 0x1ff, 0x1], @devid=r5}) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 3.717617724s ago: executing program 1 (id=6494): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x4}, 0xc) (async) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x4}, 0xc) read$nci(r1, &(0x7f0000000480)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x1000) socket(0x2b, 0x1, 0x1) (async) r5 = socket(0x2b, 0x1, 0x1) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000000) (async) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000000) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) listen(r5, 0x1) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) (async) listen(r10, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00064002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002c0007012bbd7000ffdbdf25077c0000080001800400dd80100003800c0003"], 0x2c}}, 0x2000c004) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002c0007012bbd7000ffdbdf25077c0000080001800400dd80100003800c0003"], 0x2c}}, 0x2000c004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="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", @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.352080778s ago: executing program 3 (id=6495): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff"], 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, @ethernet={0x6, @local}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xf37, 0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r5) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) shutdown(r6, 0x0) recvmmsg$unix(r6, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x44}}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x80800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r4) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r10, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 3.236697112s ago: executing program 0 (id=6496): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014620300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x28}}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800090000000000040003800500020000000000c24e85e04cf859be801287ccb31c6b75208f0b2764f9003105fa78dbe34e8644a20b7210dce304278e9f8f6424bf26ba9887734dddba41982a7df4ba654d6eff8cecc0394f0b309a28251e4930e15f414b92b19db9040d61ed7f5eb1682470436fed294e821e44f2fd865938b06985732074218be3b1a4197d1ef732"], 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x1, 0x46af, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018b3bfba5373f1dcdaff00000a800000ff0300060000000014000100200100000000000000000000000000005320d752c67de4dd42ad5942a0dd993bb82199addc41b9b064921bcc70979458d8447f31b9d70cf085850f65dedcefe9d8491a724c35ef0ae9354f53dbbd808da3bc14ee868b36de22553593e58e4834a362bdbf26f31976634d7c69553f1787a9b3aefafbff02b9d7c95cf538da92ccdeacc0fa"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="80000000080211001b010802110000000802110000000000000000000000000064005dc0010882848b960c12182405edf87d08613e54dbb2d4bb342336c2615fc49eda7866953c2b6efb4464ae6d7a9e223184fe11ec51c7cfc0aeee375e56ee9d5ef4b915660f8684649cf5c6f073e6efd8707740b89262e25896d9bbb708645c9c7e8c0b6985196dee1a7fe7f40bd6ffbba64cadff816e808f9676739e9f470189de69ec0910904f32a720067e407f1e5317b9f11626e6ac8a5ea713b800199d69828dfb2815aab5a0e7387de912806b0db4306f69b0042a8ca9f87249edbda8208e6b7ca90a6dcc4200228ae278b121d2d74a0e63174b10d0d112ec7978c6f77313a79d1776cfec66ac582ca62d878765b7894dd6891833643e80d7760602403200bd0fe7af5b5a3349e9ec533be8de21c47cee7f5dc24a382bc8f48e7e8e71d19eecf15aaefbf60dd39d07a57d1ca45df44d6fddbc1d37565fcdbdfc2e8fa70e071e59b7df46fc55a91dd20914ff4909"], 0x125) 3.226898529s ago: executing program 1 (id=6497): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4020, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf2518000000c1729347b32de29ff109d3"], 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x5c}, &(0x7f0000000080)=0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000400)={r7, 0x33, "fd4bb0df12f734ae19b44df8d9a17a20a6c2b1c3449ab36d7d7126c00eb7788ebdb48cc67e0d869786ee8055322c1210a912b3"}, &(0x7f0000000300)=0x3b) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @remote}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r11) connect$inet6(r8, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r7, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000340)={r6, 0x7, 0x9, 0x3}, &(0x7f0000000380)=0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.154324212s ago: executing program 3 (id=6499): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="8967b626b2b1eb6eaaaaaaaa08060001"], 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={@mcast1, 0x57, r1}) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf", 0x44}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000040)=0x5b9, 0x4) (async) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x8000, &(0x7f0000000200)={0x11, 0x1b, r1}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a2c000000050a01010000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102010073797a30000000000900030073797a3218000000140000001100010000000000000000000200000a0000005d345fe3cb43551616ceea"], 0x80}}, 0x0) 3.017289303s ago: executing program 1 (id=6501): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000021850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xb, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write(r3, &(0x7f0000000580)="4beac53d8760ad2dc5ec5ab4baf37089fa2da41adef1598ed7abfaaa17b28ab3d3c5330e18cea9cdd82e1b2babdb6b5abc009401fa25bb93f00bef23ea1a54b87452817e0b452120ff2ee125597b6ba75c1664f0ddcdfc84cd33b9220f7e6d5b121ae706826ab4f169a2d108274f7348a2132d443fafbf49347a3371c3407f6a13710c606d66e5", 0x87) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, 0x0, 0x44042) socket$inet(0x2, 0x4, 0x1) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000040)=0xf65, 0x4) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 2.867216102s ago: executing program 3 (id=6502): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000002540)={@sco={0x1f, @none}, {&(0x7f0000001500)=""/4096, 0x1000}, &(0x7f0000002500)}, 0xa0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2.123748015s ago: executing program 2 (id=6503): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'bond_slave_0\x00'}) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r6, &(0x7f0000000500)="14451c421535612c43cfd0ce3c9a1be82f859736bb6f30f8385012b7fe240b1b0ab4a47e", 0x0}, 0x20) (async, rerun: 64) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) (async) close(r0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000d1247a5a4cd6927a10b3275da32ff86463032946468021ad92070024e1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r15, r14}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f0000000040)) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_MESH(r11, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c7a5c25a342c7f451b7978f122b53038482aa7109918d006655496d5e8b44bf6c57b8c0abc5e2988cb9672738b85cfd1ef3eb33904594ff19f3be98ad6c60fdb659850fbb2bc28898085c98c354653b8d26d733bb7d44ac4cca0202bbc7d4591cdca499fe375d53f633cbf36a5b3eb01dc6faa90607bbdb54958814fb9899890f043bd1140f44dd088dc023c96a861ee0f72d884015cac8eb5723f4b688bc1076e418b8543cfb58bc0c02b1997dcceff348b", @ANYRES16=r2, @ANYBLOB="200026bd7000fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x4088040}, 0x1) (rerun: 32) 1.962815264s ago: executing program 4 (id=6504): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7e}, @void, @val={0xc, 0x99, {0x84fc, 0x23}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc005}, 0x80) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x10, 0x40, 0x1, 0xed09, {{0x33, 0x4, 0x2, 0x11, 0xcc, 0x68, 0x0, 0xd7, 0x2f, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0xc, 0x1, 0x1, 0x6, [{@empty, 0x5}]}, @timestamp_addr={0x44, 0x44, 0xc1, 0x1, 0x4, [{@empty, 0xe}, {@multicast2}, {@multicast1, 0x6}, {@loopback, 0xfffffff7}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4d8b}, {@remote, 0x4}, {@multicast1}]}, @timestamp_addr={0x44, 0x14, 0x25, 0x1, 0x9, [{@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xb6}]}, @end, @lsrr={0x83, 0x13, 0x3f, [@local, @empty, @remote, @rand_addr=0x64010100]}, @ssrr={0x89, 0x13, 0xdb, [@empty, @multicast1, @multicast1, @multicast2]}, @end, @lsrr={0x83, 0x2b, 0xf0, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x31}, @local, @broadcast, @private=0xa010101, @multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x44}]}]}}}}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8894}, 0x400c0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x22, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x1}, @alu={0x4, 0x1, 0x4, 0x9, 0x6, 0xffffffffffffffe0, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x73, &(0x7f0000000500)=""/115, 0x41100, 0x41, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xe, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x2, 0xf, 0xd}], 0x10, 0xfffffe00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0xfc, 0xc2, &(0x7f0000000740)="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", &(0x7f0000000840)=""/194, 0x9f4d, 0x0, 0x4b, 0x22, &(0x7f0000000940)="9a8051df0bca524159da6f6327a33c5538ee54eec40a1f4b2906006cac41fbd6ea46186774d5bcd662f50765cd9eec10afdeb116447253447dd2edf8c618fefb45b3710d8df418d65476c2", &(0x7f00000009c0)="91813f59c43b022b5d8b2660e1a9b619c02cdb0c75fb0984b1ce6a8e770f1ec071da", 0x0, 0x0, 0x3}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000a80)=0x2, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x26, 0x400, 0x70bd25, 0x25dfdbfd, {0x1a}, [@generic="cf55302f790e353808229ce479fc59e350777d43de281a36906448cc6815f3dc96fe98692fca919aaba7ece389f88ad928"]}, 0x48}, 0x1, 0x0, 0x0, 0x240000c4}, 0xc010) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c00)="9b2e906e604f38c44a2cc1e272ff67117317c5f3c47029ad96fd5dbaf81dab3e9141f9a20ef83b0a6254c1560ce300c8b6515f1dda5ae42f574939efd9107a8d9d893b46cbc288d5401c721a0c3ac8a3c57278a02e4da6b651fd94b16d2ae888555ca3b0ab1c44822d2e1aac82f211a3a08d09a4539f35da9cfb6d975a701cb2b0873f64a68ef7a2cc43bdc274611f2850c2ed1f9a6a2a4db1e5baa88a4e761d0582fbe4fe59d9f603912b2725b80e6735c09490e438a593279b33b440923fae79c2109c58b14c13fcc09a2317b293b18f9390224e79e7ebc9478ed2b7f3d29a4b14f7", 0xe3}, {&(0x7f0000000d00)="87935369fd32bd31b72a947d95179f8a6b98c8ed270e7c69cf09f52278440bc6a1acb9b32bb205bf66b57930db687a999624b482fdadf571adce73d47c742b53322a37", 0x43}, {&(0x7f0000000d80)="e3d5d4cc22dcdc7af4ee03065da4ae9cc56f0aa3040c8a4e72c81eef4fa37340f046bdbb887474825f33375e91167e67217207668fd621575245911909967b669f65f0008650a25621b9a9389b0383916edfa2333421cc62688fa261382722cd7904273573dc634bdaa1987c549aad4c39837fdf992af8967200c5e7c648642d2e8b6714a6ae933895afdb5ed6845fe42bade591ea916aabce", 0x99}, {&(0x7f0000000e40)="fabdb0f740939bb4b1a16b1ec19bba8708667ddecedafe31ffe5", 0x1a}, {&(0x7f0000000e80)="37d87bcb9171049ffbc76ce312f288a0e8f21184e29cb700ef010c5ac3f6a44dd7928e35ad6623685fba46863900a05f425606f4851b41a6e256644de360a5f91544", 0x42}], 0x5, &(0x7f0000000f80)=[@flowinfo={{0x14, 0x29, 0xb, 0x15bb}}], 0x18}, 0x44000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x12c, r6, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79daad42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x612}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe924}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8004}, 0x804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r3, 0x0, 0xc1, 0x81, &(0x7f0000001240)="786f85a7eb569f4ded64a24f3835ce0f8f91b9279f3ce1b34535932178126275bfcd9c79ec8277a335544bd2c5b46886ba2abf7b83178b9fbed8b57a0293346f56a141c8389a2269680d6577da60a23a515cc0d573b697f40c335eba446c770df26a92cb01e447e6f65ccc9ef6a409bfb0774cf71054108bf59d62ae0ee3ddab1820d6779e1e1ec98f0daba81edf1095655343f92ad70cf9b55974f1fe15f6d08d93a386e96b7b72b2a5cd44117d38befd1f2b14cbb8ce40b303d4d4b85b5c8669", &(0x7f0000001340)=""/129, 0x8, 0x0, 0xf8, 0x6e, &(0x7f0000001400)="ba697d37d2c987d11611a79485210ce5ac84947ba76cf499331c07041a5ac84c5ce8089560b108e60ce65a30985e9d4927ffd546e5dbca591b01c5f0debc0a9f2a65a0f70e69d2f519e79214ec0ce70f14673313c1a05450684ace4b44291ece5ad63399649d041eae441366905a4d39a5cd960b7e9a779b09dbc26c65d1c666a7abe36a70bfdcc035fef6e625d39023cdcce5c8fe7f9c98b0db84634f3392fe24e436ac650f415e7ed0a554b56b80be52d7f2f71fd87e662aee01368a6aeb4012b7d153ec024fedc5ca79fc113449371309c595b8a3985cdacf8329b94f0920029a31083063748b828c988a5c73bf2a6caed5664227e33e", &(0x7f0000001500)="bb591e7f75ffb174726f021d2b7652a28e8d3bccd4b5639e29458e8ab008c3c806e8058defb9fc73cba9fc0f7d5fb57a766cd606cdd45cd86ba9b7a857e0d6db942b3f8957be27331f9ffca1287717ea644342ddbbda2384a07621163705fc9803f1291b832dc76f76af70bb8d84", 0x1, 0x0, 0x7e}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{0x1, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{0x1, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)=r3}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000028c0)=0xffffffffffffffff, 0x4) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c80)=@bpf_lsm={0x1d, 0x15, &(0x7f0000002980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x0, 0x8, 0x3, 0xfffffffffffffffe, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002a40)='syzkaller\x00', 0x3, 0x7a, &(0x7f0000002a80)=""/122, 0x40f00, 0xa, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002b00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002b40)={0x1, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000002b80)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002bc0)=[{0x1, 0x3, 0xd, 0x5}, {0x1, 0x5, 0xb, 0xc}, {0x1, 0x5, 0x10, 0x2}, {0x3, 0x4, 0xc, 0x2}, {0x1, 0x1, 0x6, 0x1}, {0x5, 0x3, 0xc, 0x2}, {0x5, 0x4, 0xb, 0x2}, {0x2, 0x2, 0x6, 0x6}, {0x5, 0x3, 0x4, 0xf4adfeec45d617e6}], 0x10, 0x10}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d40)={0x1b, 0x0, 0x0, 0x93f, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002dc0), &(0x7f0000002e00)=r3}, 0x20) pipe(&(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000002ec0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002fc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002f40), &(0x7f0000002f80)=r3}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000003100)={r0, &(0x7f0000003000)='9:\x00', 0x22, &(0x7f0000003040)={@align=0x7, {0x8001, 0x5, 0xab, 0x9}}, 0xffffff7f, &(0x7f0000003080), &(0x7f00000030c0)=0x1}) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000003140), 0x8) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003280)={0x1c, 0x19, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xb, 0xd, 0x4, 0x3, 0x8}, @generic={0x5, 0xb, 0x8, 0x8, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, @exit]}, &(0x7f0000001880)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000018c0)=""/4096, 0x40f00, 0x10, '\x00', r2, @fallback=0x3, r9, 0x8, &(0x7f0000002900)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002940)={0x4, 0x1, 0x9, 0x6}, 0x10, 0xffffffffffffffff, r10, 0x2, &(0x7f0000003200)=[r11, r12, r13, r14, r15, r16, r17, r18], &(0x7f0000003240)=[{0x3, 0x3, 0x2, 0x2}, {0x2, 0x3, 0x1, 0x4}], 0x10, 0xa181}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000033c0)={0xffffffffffffffff, r2, 0x25, 0x2, @void}, 0x10) 1.870914257s ago: executing program 3 (id=6505): r0 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x10}}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=@flushpolicy={0x33, 0x1d, 0x1, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40014}, 0x20010010) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}}, &(0x7f0000000580)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000b40)={r4, @in={{0x2, 0x4e21, @private=0xa010102}}}, &(0x7f0000000c00)=0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xc0, &(0x7f0000000700)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/13, 0xc}], 0x100000000000004b, 0x4, 0xfffffffe) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000340)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRESDEC], 0x44}}, 0x0) 1.83944966s ago: executing program 4 (id=6506): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000007340)={&(0x7f0000007180)=[&(0x7f0000000000)=@uuid={{0x4f32494e, 0x5, 0x10, 0x3}}, &(0x7f0000000040)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000000080)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f00000000c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x908c, 0xfffffffffffffffc}, {0x8000000000000000, 0x9}, {0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x2, 0x4}, {0x100, 0x524}, {0x10001, 0x9}, {0x8, 0xfff}, {0x401, 0x7}, {0x8, 0xfffffffffffffff8}, {0x8, 0x8}, {0xaaf, 0x5}, {0x4, 0x6}, {0x7fffffffffffffff, 0xffffffffffffffff}, {0x5, 0x5}, {0x80000000, 0xa91}, {0x18000000000, 0x10000}, {0x800, 0x8000000000000001}, {0xb, 0x8}, {0x8001, 0x8}, {0xffffffffffffffff}, {0x2, 0x6}, {0x0, 0x5}, {}, {0x4, 0x7ff}, {0x1ff, 0x80000001}, {0x98, 0xe9}, {0x2, 0x2}, {0x5, 0x2}, {0xffffffffffffffff, 0x1}, {0x3ff, 0x4}, {0x1000, 0xfb}, {0x80, 0x6}, {0x916, 0xc89}, {0x8000000000000000, 0x100000000}, {0x9, 0x3}, {0x6, 0xf}, {0x0, 0x80}, {0x4}, {0x401, 0x40}, {0x3000000, 0xfffffffffffffffa}, {0x66, 0x7}, {0x9, 0xc1}, {0x7, 0x8}, {0x1, 0x80000000}, {0x9, 0x9}, {0x574, 0x7fffffffffffffff}, {0xf, 0x5}, {0x4a44, 0xffffffffffffffff}, {0x9, 0xf}, {0x80, 0x7cd9}, {0x8, 0x3ff}, {0x3, 0x5}, {0x5, 0x4}, {0x6, 0x1}, {0x6, 0x40}, {0xfff, 0x8}, {0x2, 0x3}, {0x4, 0x55a403}, {0xf, 0x3}, {0xfff, 0x1}, {0x0, 0x1000}, {0x7fff, 0x9}, {0x2, 0xfff}, {0x1, 0x4}, {0x9, 0x5}, {0x4, 0x4}, {0x3, 0x40}, {0x2887379f, 0x28ed}, {0x3, 0x3}, {0x1c, 0x5}, {0x3, 0x3}, {0x1, 0xed9e}, {0x1000, 0xd621}, {0x0, 0x40fb}, {0x85, 0x6}, {0x80000000, 0xb20}, {0x2, 0xfffffffffffffff7}, {0xe, 0x41}, {0x4, 0x8}, {0x23, 0x2b}, {0xb350, 0x100}, {0x9c8}, {0xf, 0xc}, {0x6, 0x2}, {0x5}, {0x4, 0x2}, {0x9, 0x100000000}, {0x52d, 0x2}, {0x4, 0x80000001}, {0x8, 0x1}, {0xffffffff, 0x5}, {0xf7, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x8000000000000001, 0x8}, {0x0, 0x800}, {0x40, 0x1}, {0xd0, 0x2}, {0x401, 0x800}, {0x1, 0x4}, {0xad3, 0xec7d}, {0x6, 0x8}, {0x1, 0x1}, {0x5497, 0x7}, {0x4, 0x400}, {0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x800, 0x9}, {0x1, 0x97d5}, {0x1, 0xcd}, {0x8000, 0x2}, {0x7, 0x6}, {0x9, 0x1}, {0xcc, 0x6}, {0xec6, 0x80000000}, {0x7, 0xffffffffffffffff}, {0x400, 0x86c}, {0xda7, 0x1}, {0x4800000, 0x8}, {0x1, 0x8}, {0xd, 0x64ca}, {0x8, 0x8}, {0x1ff, 0x2}, {0x7, 0x8}, {0x3b8f, 0x6}, {0x100000000, 0xeb0c}, {0x8, 0xfffffffffffffff0}, {0xdaf4, 0x8}, {0x7fff, 0x1}, {0xffffffffffffffff, 0x38000000}, {0x3, 0x96}, {0x9, 0x5}, {0x6, 0xfffffffffffffff7}, {0x40, 0x74f}, {0x1, 0xffffffffffff7fff}, {0x1ff, 0xf}, {0x2, 0xce12}, {0x800, 0x8}, {0xa0d}, {0x5f80, 0x2}, {0x465, 0x8}, {0x1, 0x3000000000}, {0xffffffffffffffff, 0x2}, {0x7946, 0x8}, {0xfffffffffffff5b1, 0x1}, {0x7d, 0x5}, {0x1, 0x6}, {0xf3, 0x5}, {0x800, 0x1000}, {0x80000000, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x4, 0x3}, {0x7, 0xdd6c}, {0x8, 0x1}, {0x6, 0xe}, {0x3, 0x5}, {0x7f0, 0x4}, {0x5, 0xaca4}, {0x9}, {0x9, 0xfb}, {0x8, 0x3}, {0x4, 0x3}, {0x5, 0x1}, {0x60000, 0x10}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0xffff}, {0x4, 0x541100000}, {0x6, 0xf}, {0xb39a, 0x2}, {0x0, 0x4}, {0x1, 0x6}, {0x304748d2, 0x9}, {0xff, 0x800}, {0x5, 0x2896103d}, {0x800, 0xa}, {0x4, 0x9}, {0xfffffffffffffffd, 0x7}, {0xb0b, 0x6}, {0x7f, 0x4}, {0x3, 0xfff}, {0x0, 0x1}, {0x7f, 0x1}, {0x1, 0x5}, {0x16b, 0x9}, {0x5162c3f, 0xe8e}, {0x7fffffff, 0x6}, {0xa, 0x3}, {0x5}, {0xfffffffffffffff8, 0x904f}, {0x7, 0x8}, {0xe, 0x3}, {0xfffffffffffffffb, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x7, 0x51}, {0x7, 0x2}, {0x9, 0x1}, {0x1, 0x9}, {0x8000000000000000}, {0x1, 0x1}, {0x800, 0x4}, {0x621, 0x3}, {0x1, 0x81}, {0x3ff, 0x6}, {0x5d8a}, {0x2, 0x4}, {0x4, 0x1ca2c000000}, {0x0, 0x100000000}, {0xf, 0x6}, {0x404c}, {0x3, 0x8}, {0xa5, 0x7}, {0x5, 0x6}, {0x101, 0x2}, {0x4, 0x2}, {0xa8, 0x1}, {0x6700000, 0x2}, {0x89e, 0x1}, {0x3, 0xffffffffffffff7f}, {0x3, 0x1c0000000}, {0xfffffffffffffff6, 0x137}, {0x8000000000000001, 0x6}, {0x7fffffffffffffff, 0x100000000}, {0x7, 0x6}, {0x9}, {0x4, 0x3}, {0x101, 0x4}, {0xfffffffffffffe8f, 0x8000}, {0x9a2, 0x4}, {0x0, 0x4}, {0x2, 0x6}, {0x1ff, 0x5}, {0x87, 0x10001}, {0x101, 0x42}, {0x3, 0x121f}, {0x0, 0xffffffffffffffe3}, {0x7fff, 0x100000001}, {0x7, 0x1}, {0xfc, 0x10001}, {0x1, 0x8}, {0x7, 0x8000}, {0x1, 0x9a}, {0x8, 0x5}, {0x5}, {0x100000001, 0xf}, {0x8, 0x9}, {0x8, 0x7}, {0x9, 0x5fd9}, {0x2, 0xb720}, {0x100000000, 0x6}]}, &(0x7f0000001100)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000001140)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x7, 0xc691}, {0xfffffffffffffffb, 0x5}, {0x5b182701, 0x1}, {0x4, 0x8}, {0x7a8, 0x4000000000}, {0x100}, {0x6, 0x7fffffffffffffff}, {0x4, 0xf}, {0x3e7, 0x7}, {0x3ff, 0x9}, {0x3, 0x7}, {0x9, 0x19}, {0x5, 0x8}, {0xfffffffffffffffc, 0xb57e}, {0x4, 0x7}, {0x2, 0x7}, {0x5, 0x6}, {0x8, 0x9}, {0x53, 0x6}, {0x3, 0x6}, {0x2, 0x8}, {0x8, 0x8001}, {0x2, 0xa}, {0x6, 0x1}, {0xffff}, {0x5}, {0x8, 0x7}, {0x1, 0x80000000}, {0x5, 0x5}, {0x10, 0x5}, {0x23, 0x9e91}, {0x6, 0x10}, {0x1, 0x400}, {0x7}, {0x3, 0x4}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0xe}, {0x5, 0x4}, {0x7, 0x3}, {0x3247bb73, 0x4}, {0x8, 0xfff}, {0x8}, {0x7f, 0x200}, {0x5, 0x9}, {0xc, 0x8000000000000000}, {0x9, 0x7}, {0x18716f5, 0x7}, {0x8}, {0x6, 0x3}, {0x787313ef, 0x5}, {0x1ff, 0x8}, {0x7fffffffffffffff, 0x3}, {0x3ef2dac20, 0x4bb7}, {0xa924, 0xfff}, {0x10}, {0x1, 0x6}, {0x3, 0x4}, {0x7, 0x7fffffff}, {0x7, 0x966}, {0x1ff, 0x10}, {0x988, 0x4}, {0x6, 0x76}, {0x5, 0xffff}, {0x8, 0xef}, {0xffffffffffffffff, 0x19}, {0xaf5, 0x5}, {0xa0f5, 0x9}, {0x2, 0xffffffffffffffff}, {0x800, 0x10001}, {0x4c, 0x1ff}, {0x80000000, 0x6}, {0x6, 0x9}, {0x1, 0x3}, {0x1000, 0x7}, {0x7, 0x8f2e}, {0x8, 0xfffffffffffffff1}, {0x614, 0x6}, {0x2, 0x10}, {0x7, 0x4800000}, {0x9, 0x3}, {0x5, 0x3}, {0x3, 0x43b}, {0x5, 0x5}, {0x5, 0xb698}, {0xffffffff00000000, 0x9}, {0x8482, 0x1}, {0x400, 0x3}, {0x7ff}, {0x0, 0x81}, {0xa}, {0x800, 0x2}, {0xe, 0x1fc0}, {0x3, 0x17aa}, {0x7f, 0x6}, {0x9, 0x4}, {0x5, 0x5f}, {0x7, 0x1}, {0x2, 0x2}, {0x8, 0x1046}, {0x53531901, 0x1}, {0x7f, 0x6}, {0x9, 0x9}, {0x4, 0x6}, {0x73d, 0x400}, {0xffff, 0x10}, {0x4, 0xffffffffffffffff}, {0x4, 0x622db101}, {0x8660, 0x3}, {0x800, 0x7}, {0x7fffffffffffffff, 0x5}, {0x7f, 0xfffffffffffffffd}, {0x1, 0xff}, {0x0, 0x101}, {0xd4f, 0xfffffffffffffffe}, {0x0, 0x81}, {0x0, 0x6}, {0xffffffffffffffff, 0x80000000}, {0x0, 0x1}, {0x8, 0x2}, {0x2, 0xb}, {0x9, 0x1}, {0x7fffffff, 0x6f}, {0xb80, 0x2}, {0x5, 0xffff}, {0x43, 0x1}, {0x7, 0x5}, {0x259a, 0x7fffffffffffffff}, {0x9, 0xc}, {0x0, 0xe00000}, {0x6, 0x96b}, {0x8, 0xfffffffffffffffb}, {0x5, 0x400}, {0x1, 0x100000000}, {0x7, 0xdb5}, {0x101, 0x7}, {0x9, 0x5}, {0x7, 0x2}, {0x0, 0x8}, {0x8, 0x9}, {0x7, 0x5}, {0xfffffffffffffff0, 0x7f}, {0xfff, 0x8}, {0x1b, 0x3}, {0x30, 0x4}, {0x7, 0x100000000}, {0x1, 0xfffffffffffff7af}, {0x9, 0x4}, {0xc01, 0x7}, {0x40, 0x10200000}, {0x8, 0xffffffffffffffff}, {0x6b2d, 0xe}, {0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x81}, {0x0, 0x80000000}, {0x8f99, 0x1ff80000000}, {0x770c, 0x4}, {0x3, 0x7f}, {0x6c7c19b7, 0x266}, {0x1, 0x4}, {0x7db3, 0x8000}, {0x4, 0x81ad}, {0x0, 0xc}, {0x6, 0x6}, {0x6, 0xc1}, {0xfffffffffffffffe, 0x715b}, {0x8000000000000001, 0x7}, {0xffffffffffff7fff}, {0x8, 0xcc2d}, {0x80000000, 0x80}, {0x1, 0xfff}, {0x3, 0x2}, {0x1, 0x70000}, {0x0, 0x5}, {0xffffffffffffffff, 0xffffffff}, {0x4, 0x4}, {0x3, 0x1}, {0x9, 0x2}, {0x11, 0x8001}, {0x4, 0x381}, {0x5, 0x7}, {0x8, 0x8}, {0x80, 0xffff}, {0x7, 0x2}, {0x100000000, 0x1}, {0x8, 0x740000000000}, {0x9, 0x4}, {0x3, 0x1}, {0x7, 0x7aeb}, {0x7}, {0xfffffffffffffffa, 0x7fffffffffffffff}, {0x81, 0x1000}, {0x4, 0xb}, {0x0, 0x4}, {0xffffffffffffffff, 0xd}, {0x1, 0x8}, {0x3, 0x101}, {0x7, 0x6}, {0x6, 0x18a}, {0xe53, 0x74}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x4}, {0xa1, 0x6}, {0x36d, 0x5}, {0x64, 0x10}, {0x0, 0x5}, {0x6, 0x9}, {0x7fffffff, 0x100000001}, {0x0, 0x5}, {0x7, 0x2}, {0xffff, 0x1000}, {0x3ff, 0x1000}, {0x9}, {0x7, 0x7}, {0xa, 0xb225}, {0x0, 0x10001}, {0x2, 0x8001}, {0x7fffffffffffffff, 0x6}, {0xab5a, 0xffffffffffff8eea}, {0x3, 0x351}, {0x8, 0x81}, {0x401, 0xa96}, {}, {0x6, 0x5}, {0xfffffffffffffff9, 0x6}, {0x79000, 0xfff}, {0xf800000000000000, 0x8}, {0x7, 0x2}, {0x5, 0x3}, {0x1000, 0x4}, {0x2, 0x5}, {0x4}, {0xffffffffffffffff, 0x11524826}, {0x80000001, 0x7fffffffffffffff}, {0x97, 0x1}, {0xf, 0x9}, {0xfffffffffffffff3, 0x800}, {0x8, 0xfe}, {0x9c4a, 0x74d1}, {0xfffffffffffffff7}, {0x1, 0x81}, {0x7, 0xec}, {0x9, 0x5}, {0x6, 0x7}, {0x400, 0x5}, {0x800, 0x3}, {0x7, 0x6}, {0x7, 0x7f}, {0x9, 0x9}, {0x2, 0x4}]}, &(0x7f0000002180)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f00000021c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}}, &(0x7f0000002300)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000002340)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000002380)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f00000023c0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000002440)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000002480)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f00000024c0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002500)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000002540)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x140000000}}, &(0x7f0000002580)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f00000025c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x9, 0x10001}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0xff}, {0x10000, 0x7f}, {0x1, 0x5918}, {0x5, 0xe89}, {0xfffffffffffffff7, 0x6}, {0x100, 0x4}, {0x200, 0x2}, {0x7, 0x1}, {0xcce4, 0x7f}, {0x8, 0x8}, {0x1ff0cb00, 0x4646304d}, {0xb1a, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0xf2, 0x3}, {0x16, 0x7fffffff}, {0x2, 0x7}, {0xfffffffffffffffb, 0xffffffffffffffff}, {0x1}, {0x10000, 0x9}, {0x8, 0x6dac}, {0x7e19, 0x7}, {0x2, 0x4}, {0x200}, {0x4, 0x7fffffff}, {0xa1, 0xee4c}, {0x8, 0xfffffffffffffc19}, {0x0, 0x3ff}, {0x200, 0xffff}, {0x3, 0xede}, {0x6, 0x6}, {0xfffffffc00000000, 0x2}, {0x1ff, 0x5}, {0xb2c, 0xfa14}, {0x9, 0xc8}, {0x9, 0xfffffffffffffc01}, {0x8000000000000000, 0x9}, {0x4}, {0x10000, 0x101}, {0x7, 0x5cf}, {0x8, 0xb}, {0xcf00, 0x7}, {0x4, 0xe}, {0x7, 0xc86}, {0x200, 0x44a86b6b}, {0x3db5, 0x6e2}, {0x4, 0xffffffffffff9bef}, {0x8, 0x7}, {0x9, 0x1}, {0xc, 0x2}, {0x0, 0x1ff}, {0x5, 0x228}, {0xf36800000000, 0x10001}, {0x3, 0x8}, {0x1, 0x40}, {0x5, 0x1000}, {0x1, 0xffffffff}, {0x2, 0x4}, {0x7}, {0x9, 0x100}, {0x146, 0x7}, {0x4, 0x1}, {0x2, 0xfffffffffffffffa}, {0x9, 0x6}, {0x7a66, 0x6}, {0xe70c, 0xa94f}, {0x7, 0x4}, {0x8, 0x8001}, {0x25d4, 0x9}, {0xff, 0x5}, {0x7, 0x5}, {0x4, 0x8}, {0xb7, 0x8}, {0xfffffffffffff406, 0x10}, {0x43, 0x400000}, {0x3, 0x92}, {0x4, 0x3}, {0xf4, 0x9}, {0x401, 0x2}, {0x16a4, 0x7}, {0x6, 0x8001}, {0x5c, 0x9}, {0xf, 0x6}, {0xd58, 0x8000000000000000}, {0x6, 0xffffffffffffff46}, {0x6, 0x2b7b}, {0x0, 0x7284800000}, {0xe, 0x1}, {0x100000000, 0x101000000000000}, {0x644, 0x401}, {0x3, 0x9}, {0x10, 0xff}, {0x7}, {0x7fffffff, 0xffffffff}, {0xae5, 0x9}, {0x24, 0x8001}, {0x2, 0x6}, {0xda6, 0x7fffffff}, {0x7, 0x4}, {0x6, 0x5}, {0x1}, {0x1, 0x10}, {0x5, 0xfffffffffffffffb}, {0xd, 0xdf6}, {0x5, 0x1}, {0x0, 0x37c}, {0x6, 0x2}, {0x8, 0xa}, {0x6, 0xf9}, {0x1, 0xd94}, {0x25f, 0x986}, {0x400000000000000, 0x2}, {0x5, 0x9}, {0x9, 0x3}, {0x81, 0x80000000}, {0xd7, 0x9}, {0x800, 0x49c9}, {0x0, 0x4}, {0x10001, 0x87}, {0x4}, {0x7, 0x2a22e54b}, {0x2, 0x7c0a}, {0x33, 0xffffffffffffffff}, {0x2, 0x1}, {0x6, 0xa7d}, {0x2, 0xa55}, {0x21c, 0x1}, {0x30e, 0xfffffffffffffbfc}, {0x7, 0x1000000000000000}, {0x6, 0x1}, {0x318, 0x4}, {0x6, 0xdd}, {0x2, 0x9}, {0x23a9, 0x3}, {0x4}, {0xb8d4, 0x2}, {0x4, 0x4}, {0x8, 0x401}, {0x4ebc, 0x4}, {0x7fff, 0x40000000}, {0x7, 0xffffffffffffffff}, {0x9edd, 0xef}, {0x9, 0x5}, {0x48, 0x7}, {0xffffffff, 0xff}, {0x10000, 0x10}, {0x3, 0x7}, {0xdf, 0xcec}, {0x9, 0x80000001}, {0x9, 0x1000}, {0x4, 0xfffffffffffffffe}, {0x2, 0x81}, {0x80, 0xf6}, {0x0, 0x200}, {0x9, 0xd}, {0x1, 0x8}, {0xcae, 0x2}, {0xf, 0x7}, {0x7fffffff, 0x2}, {0x7, 0x4}, {0x9, 0x4}, {0xff, 0x81}, {0x2, 0x7}, {0x874, 0x2}, {0x1, 0x8000000000000000}, {0x0, 0x4}, {0xaea, 0xfffffffffffffffe}, {0x400, 0x80000001}, {0x56, 0x9}, {0x4, 0x800}, {0xe9, 0x9e}, {0xfffffffffffffffa, 0xf7}, {0x3ff, 0x3}, {0x10000, 0x2}, {0xff, 0x4}, {0x10000, 0x3}, {0xeb2f, 0x6}, {0x100000000, 0xa0}, {0x2, 0xf}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x80}, {0x348a, 0x5}, {0xb555}, {0x6605}, {0x5, 0x1000}, {0x4, 0xe4f}, {0x80000000, 0x9}, {0x31ba, 0x7ff}, {0x3ff, 0xb}, {0x48, 0x7}, {0x6, 0x3}, {0x0, 0xfffffffffffffffe}, {0xff, 0x36}, {0x7, 0x3}, {0x6, 0x9}, {0x9, 0xe}, {0x2, 0x6}, {0x6, 0xfffffffffffffffb}, {0x9, 0x9}, {0xf8e, 0xee}, {0x5, 0x3}, {0x5, 0x2}, {0x8, 0x7}, {0x5, 0x4}, {0x9ccf, 0x2}, {0x8, 0x54d7}, {0x400, 0x50000000}, {0x8000000000000000, 0x1}, {0x10, 0x1}, {0x2, 0x2}, {0xfffffffffffffe00, 0x3}, {0xfffffffffffffe01, 0x6}, {0xffffffffffffffff, 0x3}, {0x1}, {0xffffffffffffffff, 0xbe}, {0x800, 0x7f}, {0x5, 0x2}, {0xfffffffffffffff5}, {0x8, 0xffffffffffffff7b}, {0xfffffffffffffffe, 0xffff}, {0x40, 0x2}, {0xe, 0x5}, {0x56d86fed, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x0, 0xffffffffffffffff}, {0x7fff, 0xfff}, {0xfff, 0xfffffffffffffff9}, {0x1, 0x5c0a}, {0x7ff, 0xffffffffffffffff}, {0x6, 0x399}, {0x8ae, 0xe55}, {0xcf89, 0x40}, {0x7, 0x3}, {0x4e}, {0x100000000, 0x6}, {0x4, 0x80000000000}, {0x2, 0x400}, {0x1}, {0x510b, 0x101}, {0x4ae98376, 0x6}, {0x5, 0xecb}, {0x10, 0x7}, {0x4, 0x3}, {0x4, 0x4}, {0xffffffff00000000, 0x4ed7}, {0x9, 0xffffffff}, {0x8001, 0x3}, {0x9, 0x1}, {0x7, 0x81}, {0x32d, 0x80}]}, &(0x7f0000003600)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000003640)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003680)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000036c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x100000001, 0x4}, {0xb2, 0x100000000}, {0xfff, 0x3}, {0x5, 0x7}, {0x7, 0x3}, {0x1, 0x8}, {0x5bff, 0x8}, {0xc427, 0x5}, {0x2, 0x80000000}, {0x7, 0x10}, {0x3}, {0x4}, {0x5, 0x2}, {0x80, 0x3}, {0x6, 0xfffffffffffff825}, {0x1, 0x1}, {0x7, 0x6632}, {0x4}, {0xffffffffffffffc0, 0x8}, {0x4, 0xb}, {0x1, 0x6}, {0xb4, 0x1}, {0x2, 0x2b8d7fc0}, {0x7, 0xd3}, {0x80000000, 0x4}, {0x8, 0x8}, {0x0, 0xe3}, {0xfffffffffffffffc, 0x8}, {0x40, 0x3}, {0x2, 0x3}, {0x8000000000000000}, {0x7, 0xffffffffffff6b8e}, {0x7, 0x2}, {0x100000001, 0x2}, {0xffffffffffff9248, 0x790d}, {0x5, 0x1ff}, {0x10001, 0x970c}, {0x2, 0x4}, {0x6, 0x4}, {0x4, 0x798e}, {0x3, 0x8}, {0x80000000, 0x6}, {0x7fff, 0x2}, {0x2000000000, 0x40}, {0x7, 0x8}, {0x0, 0x3ff}, {0x9, 0x1}, {0x6, 0x7}, {0x9, 0x5}, {0x81, 0x9}, {0x800000, 0x5}, {0x6, 0x100000001}, {0x9, 0xe00000}, {0x101, 0x7}, {0x4, 0x7fffffff}, {0x0, 0x7f}, {0x100000001, 0x6}, {0x81, 0x7}, {0x2, 0x6}, {0x40, 0x1}, {0x8001, 0x100}, {0x9}, {0x7, 0x100}, {}, {0x2, 0x8}, {0x9f, 0x4}, {0x1, 0x4}, {0x7fff, 0x6}, {0xbf, 0x6}, {0x1, 0xb}, {0x100000000, 0x6}, {0x7f, 0x7}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x80000001}, {0x2}, {0x40, 0x2}, {0x56, 0x100000000}, {0x3, 0x1ff}, {0xffff, 0x5}, {0x100}, {0x100000001, 0xc}, {0x0, 0x4}, {0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x235}, {0x80, 0x2}, {0x7, 0x9d29}, {0x800, 0xdb}, {0x7, 0x9}, {0x0, 0x401}, {0xc9, 0x3}, {0x7fff, 0x100000001}, {0x1, 0x7}, {0x6, 0x70}, {0x9, 0xd54}, {0xfffffffffffffffc, 0x4}, {0x7, 0x2}, {0x7fffffff}, {0x0, 0x8}, {0x530d, 0x6}, {0x8, 0x5}, {0x8001, 0x9}, {0x4, 0xffffffffffffc82a}, {0x400, 0xd3}, {0x400, 0x3944}, {0x5, 0x707e2c94}, {0xc1ee, 0x8}, {0x10000, 0x1}, {0x97, 0xd}, {0x1000}, {0x401, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x8001}, {0x9, 0x81}, {0xe7b, 0x4}, {0x6, 0xffffffffffffffff}, {0x1, 0x6}, {0xa469, 0x1}, {0x1, 0xfffffffffffffffc}, {0x2e}, {0x0, 0x1}, {0x7, 0x9}, {0xff, 0x7}, {0x6, 0x87}, {0x5, 0x5}, {0x5, 0xb07}, {0x80000001, 0x3}, {0x561, 0x7}, {0x7, 0x7f}, {0x94, 0x8}, {0x4, 0x1ff}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xfff}, {0x1, 0x3}, {0x10001, 0x7fffffffffffffff}, {0x5, 0x7}, {0x5}, {0xd, 0x3}, {0x6, 0x48}, {0x9, 0x2}, {0x40, 0xb}, {0xfffffffffffffffb, 0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x1}, {0x81, 0x7fffffffffffffff}, {0x7, 0x5}, {0x25fe5cf3, 0xfffffffffffffffd}, {0x3}, {0x6, 0x6}, {0xf419, 0x2}, {}, {0x7, 0x3}, {0xfffffffffffffffb, 0x96fb}, {0x200, 0x3}, {0xfffffffffffffff8, 0x3}, {0x1, 0x4}, {0xcf6, 0x2}, {0xfffffffeffffffff, 0x7fffffff}, {0x1000, 0x8000000000000000}, {0x1, 0x2}, {0x7, 0x3}, {0x2, 0xb}, {0x1, 0x2}, {0x70ea, 0x1}, {0x4, 0x7}, {0x7fffffffffffffff, 0x10001}, {0x4, 0x6}, {0x80000001, 0x6d6}, {0x8, 0x8c8}, {0xffffffffffff7ee6, 0x200}, {0x6, 0xc4}, {0x7fff, 0x6}, {0xfffffffffffffffc, 0xa36}, {0xed45, 0x100000000}, {0x10000, 0x3}, {0x6}, {0xb, 0x93}, {0x7ff, 0x1}, {0x200, 0xa}, {0xfffffffffffeffff, 0x232}, {0x7d33, 0x3}, {0x7fffffff, 0x5}, {0x8, 0xfffffffffffffffa}, {0x7db80000000000, 0xfffffffffffffff9}, {0x3, 0x70}, {0xffffffff, 0x6}, {0x8, 0xa}, {0x4986, 0x6}, {0xfffffffffffffffb, 0x9}, {0x5, 0x1cddde1c}, {0x6, 0x80000001}, {0x8d, 0x5}, {0x1, 0x3ff}, {0x5fd, 0x6}, {0x8, 0x8}, {0x0, 0x7ba0}, {0xf2, 0x8001}, {0x4}, {0x6}, {0x81, 0x101}, {0x6}, {0x1, 0x8000}, {0x0, 0x10000}, {0x2, 0x7}, {0x0, 0x9}, {0xffffffffffff91f9, 0x1}, {0x1}, {0x4, 0x38000000000}, {0x101, 0x7fff}, {0x7, 0x3}, {0xd022, 0x7}, {0x3}, {0x3e3, 0x3}, {0x5, 0x4}, {0x9, 0x8}, {0x572, 0x7ff}, {0x9, 0x3}, {0x6}, {0x8000000000000001, 0x8000}, {0xfffffffffffffff9, 0x40}, {0x5, 0x8000}, {0x6, 0xde}, {0x1, 0x1}, {0x100000000, 0x1ff}, {0x8000, 0x8000000000000000}, {0x80000000000000, 0x8}, {0xfff, 0xd8}, {0x7, 0x8001}, {0xdb6a, 0xfffffffffffffff8}, {0x3, 0x1}, {0x1000, 0x9}, {0x0, 0x100000001}, {0xfffffffffffffffe}, {0xe5a, 0x2}, {0x6a, 0x1}, {0x1ff, 0x5}, {0x2d, 0xffffffffffffff07}, {0x6084f444, 0x2}, {0x3, 0xb8a}, {}, {0x8, 0xab5a}, {0x1, 0x1}, {0xfffffffffffffff9, 0x7}, {0x1ff, 0x308}, {0xffffffff, 0x7fff}, {0x6}, {0x6, 0x7}, {0x3, 0x1}, {0x7fff, 0xff}, {0x912, 0x7}, {0x2, 0x35}]}, &(0x7f0000004700)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0xec0e, 0x4}, {0x3ff, 0x5}, {0xbded, 0x40}, {0x9, 0x8}, {0x3, 0x5}, {0x800, 0x200}, {0x73c, 0x4}, {0x80, 0x7fff}, {0x9}, {0x935, 0x275}, {0x8, 0xbac6}, {}, {0x8, 0x6}, {0x1, 0x74}, {0x5, 0xc3}, {0xafb, 0xffffffffffffffff}, {0x57fd, 0x4}, {0x28, 0x2}, {0x4, 0x5}, {0x28ee, 0x1}, {0x80000000000}, {0x7fffffff, 0x6}, {0x4, 0x2}, {0x5, 0x1}, {0x8}, {0x4, 0x4}, {0x80, 0x40}, {0x4, 0x1cf8c000000}, {0x6, 0x8}, {0x1ff, 0xfffffffffffffffb}, {0x5, 0x200}, {0x8001, 0x9}, {0x2, 0x2}, {0xa13, 0x9}, {0x80, 0x6}, {0x7, 0x5}, {0x8, 0x80000000}, {0x5, 0x800}, {0x0, 0x40000000}, {0xd, 0x5}, {0xff0, 0x7f}, {0x6135, 0x1}, {0x4, 0x2}, {0x6, 0xa96e}, {0xb, 0x538f9974}, {0x100, 0xffffffffffffffff}, {0x2, 0x4}, {0x8, 0x3}, {0x2, 0x80000000}, {0x7, 0x4}, {0x6, 0x5}, {0x8, 0x9}, {0x100, 0x800}, {0x2, 0x5}, {0x8, 0x2}, {0x7, 0x3}, {0xfffffffffffffff8, 0x5}, {0x1}, {0x1, 0x80000000}, {0x0, 0x10000}, {0x7fff, 0x7}, {0x4, 0x7fffffff}, {0x9a45, 0x1}, {0x2089}, {0x10001}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0xbe}, {0x299, 0x9}, {0x5, 0x3}, {0x11, 0x9}, {0x1, 0x4}, {0xb}, {0x5b4a, 0x6}, {0x200000000, 0x7000000000000}, {0x5, 0x101}, {0x7fff, 0xfffffffffffffffd}, {0xff, 0x7ff}, {0x5, 0xa}, {0x4, 0x1}, {0x2, 0x500}, {0x75d7, 0x1000}, {0xfffffffffffffc23, 0xfffffffffffffffb}, {0x42, 0x3}, {0x3ff, 0x6}, {0x9, 0x3}, {0x3, 0x5}, {0xf, 0x10}, {0x3, 0x4}, {0x5d, 0xd4af}, {0x2, 0x8001}, {0x70e6, 0x80000001}, {0x0, 0x9}, {0xfffffffffffffc01, 0x23f}, {0x3, 0x81}, {0x3, 0xd3c}, {0x8, 0x4}, {0x4306, 0x10001}, {0xf7e4ca, 0x3}, {0xffffffffffffff80, 0x4}, {0x3, 0x100000000}, {0x7, 0x3a3}, {0x4, 0x3}, {0x4, 0xfaf}, {0x8, 0x9}, {0x7fffffffffffffff, 0x9}, {0x4, 0xb}, {0x7, 0xfffffffffffffff0}, {0x9}, {0x4, 0x80000001}, {0x80000000, 0x7}, {0x5, 0x3ab}, {0xfffffffffffffffb, 0x2}, {0x0, 0x4}, {0x4, 0x80000001}, {0xef02, 0x8}, {0xfca, 0x8000}, {0x6, 0x3}, {0x1, 0x15a4802b}, {0x9, 0x100000000}, {0x8, 0x6}, {0x40, 0x9}, {0x8, 0x2000000000000000}, {0x3, 0x9}, {0x8, 0x8}, {0x3d, 0x4}, {0x1, 0xf05}, {0x7e, 0x7}, {0x9124, 0xa2}, {0x5, 0x2}, {0x7, 0xfffffffffffffff9}, {0x7ff, 0x3}, {0x8}, {0xfffffffffffffffa, 0x7}, {0x6}, {0x986, 0x101}, {0x8, 0x6}, {0x5}, {0x0, 0x7fffffffffffffff}, {0xffff, 0x80}, {0x4, 0x2}, {0x8, 0x100000000}, {0x1}, {0xb8, 0x6}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x100000001}, {0x1, 0x9118}, {0xfc, 0x100000001}, {0x1, 0x10000}, {0xe07, 0x7ff}, {0xff, 0x7}, {0x0, 0x8001}, {0x0, 0x7}, {0x5, 0x4}, {0x5cbad9a7, 0x1}, {0xe57, 0x1}, {0x21, 0x4}, {0x9, 0x100}, {0x183, 0x4}, {0x1f1, 0xfffffffffffffffc}, {0xfff, 0x1}, {0x5, 0x80000000}, {0x10001, 0x4}, {0xb6, 0x3}, {0x7, 0x91a}, {0x1, 0x8}, {0x6, 0xdd9}, {0x0, 0x8000000000000000}, {0x80, 0x5b}, {0x6, 0x2}, {0x8, 0x8}, {0x8, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x2}, {0xffffffffffffff57, 0x6}, {0x3, 0x6}, {0x8, 0xb32}, {0x4, 0x4}, {0x3, 0x631}, {0x8, 0x2}, {0x8, 0x1}, {0x240000, 0xffff}, {0x3, 0x8000000000000000}, {0x4, 0x1}, {0x9, 0xea}, {0xfffffffffffffffd, 0x6}, {0xfffffffffffeffff, 0x8}, {0x1000, 0x7baf5c15}, {0x1, 0xffffffffffffffff}, {0x101, 0x1}, {0x5, 0x8000000000000001}, {0x7, 0x9}, {0x0, 0x10}, {0x3, 0x1}, {0x0, 0x101}, {0x5, 0x2}, {0x2, 0xfffffffffffffff3}, {0x6, 0x2}, {0x100, 0x1}, {0xa8e, 0x40}, {0x4fb, 0x3}, {0x1, 0x5}, {0x9, 0x5}, {0xa, 0x80200000000000}, {0x0, 0x6}, {0x6, 0x3}, {0xfffffffffffffff8, 0x9e81}, {0x400, 0xfb8}, {0x17a, 0xc}, {0xfffffffffffffffe, 0xfff}, {0xfe3a, 0x7fffffffffffffff}, {0x9, 0xfffffffffffffff5}, {0x7fff, 0x401}, {0x6, 0x60}, {0x2, 0x3}, {0xf3, 0x3}, {0x100000001, 0xabaa}, {0xf8, 0x8}, {0x1, 0xfffffffffffffff8}, {0x1, 0x3b57}, {0x7, 0x8}, {0x95, 0x4}, {0x0, 0x8}, {0xfffffffffffffffc, 0x4000000}, {0x6, 0x8}, {0x1ff, 0xffff}, {0x70d6, 0xfffffffffffffffd}, {0x1, 0x9}, {0x1, 0x1}, {0x9, 0x2}, {0x8, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0xf, 0x200}, {0x2f2, 0x8ffb}, {0x6, 0xfffffffffffffff3}, {0x6, 0x8000000000000000}, {0x8}, {0x9, 0x900000}, {0x81, 0x7}, {0xffffffff, 0x8}, {0xfffffffff0000000, 0xbfb}, {0xf, 0x8000000000000000}, {0x7, 0x1}, {0x3ff, 0x9}, {0x1, 0x4}, {0xb, 0x3}, {0xffffffff, 0xb7}, {0x2, 0xffffffffffffffe9}, {0x1}, {0xd, 0x8000}]}, &(0x7f0000005740)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x2}, {}, 0x2}, &(0x7f0000005880)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f00000058c0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000001}}, &(0x7f0000005900)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000005940)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000005980)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f00000059c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000005a00)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x3ff}, &(0x7f0000005b40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000005b80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005bc0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005c00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000005c40)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000005c80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x2c}, &(0x7f0000005dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000005e00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x2}}, &(0x7f0000005e40)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000005e80)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000005ec0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000005f00)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000005f40)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000005fc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x7, 0x6}, {0x1, 0x3}, {0x8, 0x40}, {0xf, 0x2}, {0x6, 0xfffffffffffffff9}, {0x74a0}, {0x5, 0x401}, {0x17e4e7af, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x4b, 0xefa8}, {0xed, 0x5}, {0xffffffffffffffff, 0x8}, {0x4, 0x8}, {0x697, 0x1}, {0x300000000000, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x8, 0x5}, {0x6, 0x9}, {0xcf}, {0x100000000, 0x7}, {0x8000, 0x8}, {0x7fffffff, 0x4}, {0xbdc, 0x4}, {0x393}, {0x9, 0x5}, {0x6, 0x4}, {0xfffffffffffffffb, 0x7}, {0xffffffffffffffff, 0x3}, {0xe36a, 0x5}, {0xb3, 0x3}, {0x8, 0xffffffff}, {0x100000000, 0x5}, {0x6bde, 0x7fffffff}, {0xa69e, 0x80000001}, {0x8, 0x3}, {0x400}, {0x797f, 0xfffffffffffffc01}, {0xfffffffffffffffd, 0x6}, {0x401, 0x7fff}, {0xe720, 0xffff}, {0x0, 0x5}, {0x7, 0x4}, {0x9}, {0x81, 0x8}, {0xffffffffffff0001}, {0xffffffff, 0x7}, {0x1, 0xd7c7}, {0xf4e, 0x1}, {0x0, 0x2}, {0x101, 0x7}, {0x80000000, 0x7}, {0x80, 0x5}, {0x8, 0x1a29}, {0x1, 0x8}, {0xffffffffffffffff, 0x1}, {0x2, 0xfb4}, {0x0, 0x6}, {0x1, 0x8ffc}, {0x8, 0x7fffffffffffffff}, {0xf, 0x2e}, {0x100, 0x78e}, {0xb00, 0x2}, {0x6, 0x3}, {0xffffffff, 0x100000001}, {0xffffffffffffffff, 0x89db}, {0x1, 0x1}, {0x2, 0x4}, {0x10001, 0x5b0}, {0x0, 0xc10}, {0x8, 0x3b17486f}, {0x146f, 0xde}, {0x9, 0x9}, {0xfff, 0xff}, {0x10, 0xa}, {0x6, 0x41d562dc}, {0x2, 0x4}, {0xd, 0xfffffffffffffffe}, {0x7, 0x3}, {0x1, 0x8000}, {0x1, 0x5}, {0x1}, {0x1, 0x6}, {0xadc, 0x4}, {0x3, 0x6}, {0x100, 0x80}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x3, 0xffff}, {0x2, 0x2}, {0xdbc4, 0x5}, {0x6, 0x100000000}, {0x2, 0x2}, {0x735c4bc3, 0x7fff}, {0x7, 0x5}, {0xa, 0x3}, {0x101, 0x8}, {0x7fff, 0x1}, {0x3ff, 0x8}, {0xfffffffffffffffc, 0x4}, {0x4, 0x2}, {0x2, 0x2}, {0x5, 0xb}, {0x0, 0xfffffffffffffffc}, {0xc04}, {0x0, 0x974f}, {0x1, 0x8}, {0xf, 0xffffffffffff3e39}, {0xfe4, 0x3}, {0x9, 0x36}, {0x80, 0x1c7}, {0x3, 0x4}, {0x2, 0xd}, {0xfff, 0x7}, {0x2, 0x100000001}, {0xcfd, 0x3}, {0x7, 0x8}, {0x314f, 0x1}, {0x99ce, 0x401}, {0x40, 0x4}, {0x8, 0x3}, {0x2, 0xffffffff00000000}, {0x3, 0x800}, {0x7, 0x2}, {0x80, 0x20f9}, {0x1, 0x9}, {0x7, 0xa01b}, {0x8, 0x7f}, {0x10000, 0x8}, {0x101, 0x8000000000000000}, {0x10, 0x586e108a}, {0x6, 0x7}, {0x2, 0x7}, {0xfffffffffffffffa, 0x2}, {0x2, 0xffffffffffffec84}, {0x9, 0x679}, {0x0, 0x7f}, {0x20000000000, 0x5c}, {0x8}, {0xefd5, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x1ff, 0xd5e}, {0xfff, 0x2}, {0x4, 0x3}, {0x6, 0x8000}, {0x8, 0x5}, {0x3, 0x1}, {0x2, 0x4f}, {0x7d, 0x3}, {0x4, 0x4}, {0x9, 0x9}, {0x63d, 0x79}, {0x3b44669c, 0x3}, {0x7, 0x6fc96a81}, {0x3, 0x6}, {0x4, 0x7f}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x100000000}, {0x4, 0x8000}, {0x80, 0xbd86}, {0x7fffffffffffffff, 0x2}, {0x43cd, 0x5653}, {0x0, 0x8}, {0x7, 0xffffffffffffff01}, {0x4, 0x3}, {0xf5c6, 0xd}, {0xfffffffffffffffa, 0x6726776b}, {0x9ce4, 0x8}, {0x0, 0x1}, {0xf, 0x3}, {0x3, 0xffffffffffffff81}, {0xcda3, 0x7ff}, {0x0, 0x72ca}, {0x1000, 0x2}, {0x10, 0x3}, {0x100, 0x2}, {0x6, 0x7}, {0x3, 0x3000000000000000}, {0x4, 0x7f5e}, {0x9, 0x1}, {0x3aa7b12, 0x3}, {0xffff, 0x7fffffff}, {0x7, 0x1000}, {0x7, 0x7fffffffffffffff}, {0x7fffffffffffffff, 0x7fff}, {0x7fff, 0xfffffffffffffffd}, {0x10001, 0xfffffffffffffffb}, {0x9c, 0x7}, {0x81, 0xfffffffffffffff8}, {0x4cc2, 0x2}, {0x7648, 0x9}, {0x400, 0x7fffffff}, {0x5, 0x2}, {0x2, 0x8}, {0x4, 0x9}, {0x8, 0x9}, {0x5, 0x8}, {0x1f08000000000000}, {0x6, 0x200}, {0x1, 0x8}, {0x1000, 0x7}, {0x800, 0x8}, {0x40, 0x834}, {0xa43, 0x1}, {0x7, 0xd4}, {0x4, 0x2}, {0x3, 0x80000000}, {0x10, 0x6}, {0x80000000, 0x1}, {0x8, 0xb}, {0x3, 0xa2f}, {0x2, 0xa8}, {0x4}, {0x7c8, 0x4}, {0xb000, 0x5}, {0xb, 0x1}, {0x7fff, 0x3}, {0xa8f4, 0x2748}, {0x2, 0x6}, {0x5, 0xa}, {0x1ff, 0x6af4}, {0x9, 0x10001}, {0x100000000, 0x100000000}, {0x8, 0x7f}, {0x5, 0x1}, {0xfff, 0x7}, {0x52ec, 0xc6c4}, {0x10000, 0x30000}, {0x7fffffff, 0x2}, {0x2, 0x9}, {0x3, 0x1}, {0xff, 0x2}, {0x3, 0x8}, {0x0, 0x4}, {0x8000000000000000, 0x3}, {0x3}, {0x8, 0x9}, {0x6, 0x4}, {0x4, 0x53}, {0x1, 0x5}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x8, 0x1}, {0x200, 0x6}, {0x200, 0x4cd3}, {0x101, 0x100000001}]}, &(0x7f0000007000)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000007040)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f00000070c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000007140)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}], 0x32}) (async) socketpair(0x2a, 0x5, 0x80000001, &(0x7f0000007380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007400), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000007540)={&(0x7f00000073c0)={0x10, 0x0, 0x0, 0x44109410}, 0xc, &(0x7f0000007500)={&(0x7f0000007440)={0x8c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}}, 0x4000000) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000007580), r5) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f00000075c0), r5) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000076c0)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000007680)={&(0x7f0000007640)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4011) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000007740)=0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000007800)={&(0x7f0000007700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000077c0)={&(0x7f0000007780)={0x3c, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x44}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8a}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x64}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24008054) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000007840), 0x40200, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000007880)=0xd) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000007900), r5) (rerun: 32) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f00000079c0)={&(0x7f00000078c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x1c, r9, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5cda83d4b0f854aa}, 0x2) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007a40), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000007a80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000007b40)={&(0x7f0000007a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007b00)={&(0x7f0000007ac0)={0x3c, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000007c40)={&(0x7f0000007b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007c00)={&(0x7f0000007bc0)={0x40, 0x0, 0x310, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0xc890) (async) listen(r0, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000007c80)={0x14}) (async, rerun: 32) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000007d80)={&(0x7f0000007cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000007d40)={&(0x7f0000007d00)={0x28, r10, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x41) r12 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000007dc0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r12, &(0x7f0000007e00)={'full', 0x20, 0x0, 0x20, 0x8}, 0x2f) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007e80), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000007f40)={&(0x7f0000007e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007f00)={&(0x7f0000007ec0)={0x24, r13, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) r14 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007f80), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r14, 0x949fd000) 1.805069975s ago: executing program 1 (id=6507): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000020301776c6aeb39f4040000000000000000010000090800054000000002090002000000000102000000e1758b9e96f549584e8c92d8bceccab669f5b70dcfb7ce511dede8974978d9020000000000000082d1b0565dade9f5eae423c1c3115ab18c176a4ff2576e91ddf7b00700000000003aa58045c08865b71e4fd1b80000ecf5de1b47697a7364e69f100b4f33c2fcb63592804fe75be7626e4d0f476d8986e7f6bb5c2e143ee357960000d8ae139fd6"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r3}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvfrom(r5, &(0x7f00000004c0)=""/233, 0xe9, 0x40002000, &(0x7f00000005c0)=@hci={0x1f, 0x0, 0x2}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448fa, &(0x7f0000000000)="3a4da9bc2810fb3b8123087bd1c3a90a3c53dd5d8262b8fbc4e55edeea5caf5d74a0d20e6813107c11092c4b9f671a7ba95781b3195e68c443385889a3d2bc991fb68e38f08253b6ed4f11b0e49133ebdacf8a85c09050517b3c7e66f10170dbd8badd42b4b3005240027f4bce0a2048fc07ea82a742ad9bd500bca6da9b748f8113989be6bbf7e0e9abc6a990de52d52a811f5514410888e323ee958c208681ac37f674047bb944a662d24dc406468685d51106f1580dc888ad68dfc97b7f8ff77e870dac99cbd5fd32ef009ae550d158ee2df231b53d8b624a6fb17e847568a3ddf8c54759e8bdb5") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r2, 0x1}, 0x20) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100638a6e6e6c696d70740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) 1.599293567s ago: executing program 4 (id=6508): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@bloom_filter={0x1e, 0x4cd, 0x3, 0x0, 0x5, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x3, 0x2, 0x3, 0x3}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf251400000008000300", @ANYRES32, @ANYBLOB="0c00060002000000000000000c000600030000000000000008000300", @ANYRES32, @ANYBLOB="08000100010000000c000600030000000300000008000300", @ANYRES8=r1], 0x70}, 0x1, 0x0, 0x0, 0x10004040}, 0x10) r4 = socket$inet(0x2, 0x3, 0x7f) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x2b, 0x1, 0x1) r9 = socket$inet6(0xa, 0x805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r9, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797aee235d625885d0760073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e208000140000000000800014000000007ebfd014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb0800014000000003140001800800014000000005080001400000000108000340000000a4140000001000010000000000000000000000000a"], 0x140}}, 0x0) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 1.59540199s ago: executing program 3 (id=6509): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00000c00028008001580040001"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r5, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000001180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000011c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002cbd7000ffdbdf25050000002800018008000300ff010000100001006574683a65727370616e30000c00028008000400000800000c00098008000100010001006cd4d93bed6f56daf9dd854ae3390f2897b52b752e70ad4b82ee5e03aedff2c08f4192db921f4824db"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000040)={0x1f, 0x6, 0x7, 0x8, 0xbd9d, 0x81}) 1.310121628s ago: executing program 0 (id=6510): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) (async) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r2, 0x5}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r2, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/4105, 0x1009}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000200)=0x4, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x94) 547.887804ms ago: executing program 2 (id=6511): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1f2f, 0x24, 0x0, &(0x7f0000000000)="1e749f447f700400684010a40800297a5d41726bb1d331200ce375083a37c86b7fd9d7da", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x10}, 0x94) 483.987474ms ago: executing program 4 (id=6512): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xd, 0xc}, {0x8, 0xa}}}, 0x24}}, 0x20048054) 375.856727ms ago: executing program 3 (id=6513): syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000bf91000000000000b7020000025800188500000085000000b7000000000000009500"], &(0x7f0000000040)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 335.372852ms ago: executing program 0 (id=6514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, 0x0, 0x12}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}]}, 0x1c}}, 0x1) 187.940054ms ago: executing program 4 (id=6515): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700000000000220000001800018014000200766972745f7769666930000000000000f8c93822da8fb829f3e0b2672f84"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) close(0x3) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) write(r0, &(0x7f0000000640)="14000000140005b7ffccc1882cda0000060860eb575a6b82d65efb634ba3a40c64df6bcba26797da522d070e2d22910b1e3a38ed37f509e9cc557f53f15d87442c9e2c49ece14060138b30870e703c61a5d6eea02eb2ca0a325d66a2d1c50e52560ee092e527fd1e36674a7fa2cceb019ca871a39b1c7e900d6f41d1a8208110a47ddd1598f7ffffffc541a1f2ffec7bd840651242dc14d00251290abb", 0x9d) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYBLOB="00042cbd7000fedbdf254c0000000c0058003300"], 0x20}}, 0x4008082) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/331], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4004010) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'veth0\x00', 0x8000}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000009, 0x10010, r0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) (rerun: 64) 34.544545ms ago: executing program 0 (id=6516): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e21, @multicast1}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x762d1000) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x20, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0xfffffffffffffffe, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) 0s ago: executing program 4 (id=6517): r0 = socket$inet6(0xa, 0x80001, 0x0) unshare(0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xf0d2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000084}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @call={0x85, 0x0, 0x0, 0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x90}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000500)) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0xa4, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e21, 0x3, 'none\x00', 0x15, 0x2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e22, 0x3, 0x2, 0x5, 0x1}}, 0x44) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x1b0, 0x280, 0x0, 0x1b0, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b0}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000000000)=0x1e) kernel console output (not intermixed with test programs): ed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 832.471756][T26933] netlink: 'syz.1.5145': attribute type 4 has an invalid length. [ 832.517495][T26929] netlink: 'syz.1.5145': attribute type 4 has an invalid length. [ 833.005728][ T29] audit: type=1800 audit(1781587946.819:9): pid=26943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5150" name="memory.events" dev="tmpfs" ino=2165 res=0 errno=0 [ 833.058790][T26949] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 833.079999][T26949] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 833.108378][T26949] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 833.629796][T26964] bridge_slave_0: left allmulticast mode [ 833.644554][T26964] bridge_slave_0: left promiscuous mode [ 833.663434][T26964] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.718010][T26964] bridge_slave_1: left allmulticast mode [ 833.741028][T26964] bridge_slave_1: left promiscuous mode [ 833.756192][T26964] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.778945][T26964] vlan4: left promiscuous mode [ 833.797976][T26964] geneve0: left promiscuous mode [ 833.815550][T26964] vlan0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 833.833841][T26964] vlan0: Port device team_slave_0 removed [ 833.850192][T26964] vlan0: Failed to send options change via netlink (err -105) [ 833.867152][T26964] vlan0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 833.883540][T26964] vlan0: Port device team_slave_1 removed [ 833.895013][T26964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.903660][T26964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 833.981406][T26964] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 834.980356][T27038] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20000 [ 835.158767][T27050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5176'. [ 835.202263][T27050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5176'. [ 835.212437][T27054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5177'. [ 835.260524][T27050] netlink: 'syz.3.5176': attribute type 1 has an invalid length. [ 835.513572][T27050] 8021q: adding VLAN 0 to HW filter on device bond4 [ 835.698570][T27084] netlink: 'syz.2.5186': attribute type 5 has an invalid length. [ 835.711537][T27083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5184'. [ 835.736699][T27084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5186'. [ 835.758084][T27084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5186'. [ 835.802493][T27094] xt_hashlimit: max too large, truncated to 1048576 [ 835.820011][T27094] No such timeout policy "syz1" [ 836.166735][T27112] netlink: 'syz.3.5191': attribute type 6 has an invalid length. [ 836.194619][T27112] netlink: 'syz.3.5191': attribute type 1 has an invalid length. [ 836.222691][T27112] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5191'. [ 836.250780][T27112] netlink: 'syz.3.5191': attribute type 1 has an invalid length. [ 836.283895][T27112] netlink: 634 bytes leftover after parsing attributes in process `syz.3.5191'. [ 836.613568][T27134] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5198'. [ 836.656539][T27134] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 836.931896][T27155] netlink: 'syz.1.5203': attribute type 8 has an invalid length. [ 837.445166][T27165] tipc: Cannot configure node identity twice [ 837.474586][T27163] syzkaller0: entered promiscuous mode [ 837.480132][T27163] syzkaller0: entered allmulticast mode [ 837.575912][T27163] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 837.896007][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5212'. [ 837.941858][T27179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5212'. [ 838.118572][T27189] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 838.327667][T27202] netlink: 'syz.2.5220': attribute type 1 has an invalid length. [ 838.358183][T27202] netlink: 'syz.2.5220': attribute type 7 has an invalid length. [ 838.391463][T27202] netlink: 'syz.2.5220': attribute type 8 has an invalid length. [ 838.419604][T27202] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5220'. [ 838.430224][T27202] NCSI netlink: No device for ifindex 1073545264 [ 838.763562][T27230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5227'. [ 838.794611][T27230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5227'. [ 838.811585][T27230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5227'. [ 838.826961][T27230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5227'. [ 838.857563][T27233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5229'. [ 838.876394][T27230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5227'. [ 838.919089][T27230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5227'. [ 839.144369][T27245] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 839.297046][T27255] netlink: 'syz.2.5239': attribute type 1 has an invalid length. [ 839.420436][T27264] netlink: 'syz.4.5242': attribute type 2 has an invalid length. [ 839.433527][T27264] netlink: 'syz.4.5242': attribute type 2 has an invalid length. [ 839.568870][T27276] xt_l2tp: v2 doesn't support IP mode [ 839.826044][T27290] netlink: 'syz.4.5247': attribute type 3 has an invalid length. [ 841.273416][T27347] tipc: Enabling of bearer rejected, failed to enable media [ 841.529910][T27367] netlink: 'syz.1.5265': attribute type 1 has an invalid length. [ 841.703643][T27367] 8021q: adding VLAN 0 to HW filter on device bond6 [ 841.747482][T27379] tunl0: Caught tx_queue_len zero misconfig [ 841.781106][T27376] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 842.005244][T27392] IPVS: Unknown mcast interface: _ridge_slave_0 [ 842.681755][T27441] bridge0: entered allmulticast mode [ 842.777330][T27445] bridge_slave_1: left allmulticast mode [ 842.787042][T27445] bridge_slave_1: left promiscuous mode [ 842.804759][T27445] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.838742][T27445] bridge_slave_0: left allmulticast mode [ 842.854553][T27445] bridge_slave_0: left promiscuous mode [ 842.861302][T27445] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.929928][T27445] bond0: (slave bridge0): Releasing backup interface [ 842.951846][T27445] bridge0 (unregistering): left promiscuous mode [ 843.138735][T27442] dvmrp0: entered allmulticast mode [ 843.206846][T27459] __nla_validate_parse: 77 callbacks suppressed [ 843.206867][T27459] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5293'. [ 843.250309][T27460] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5293'. [ 843.282467][T27460] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5293'. [ 843.301240][T27459] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5293'. [ 844.093102][T27507] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5303'. [ 846.522821][T27475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.686922][T27518] vlan2: entered allmulticast mode [ 846.694739][T27518] bridge_slave_0: entered allmulticast mode [ 846.723956][T27526] sock: sock_timestamping_bind_phc: sock not bind to device [ 846.839095][T27533] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5311'. [ 846.935255][T27536] netlink: 'syz.0.5312': attribute type 1 has an invalid length. [ 846.949115][T27539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5310'. [ 846.961998][T27536] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5312'. [ 847.327504][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5318'. [ 847.724461][T27570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'. [ 847.941740][T27574] bridge7: entered promiscuous mode [ 847.954718][T27574] bridge7: entered allmulticast mode [ 847.976278][T27576] lo: Caught tx_queue_len zero misconfig [ 848.004214][T27581] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 848.433451][T27598] __nla_validate_parse: 2 callbacks suppressed [ 848.433472][T27598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5333'. [ 848.761153][T27521] Bluetooth: hci4: command 0x0405 tx timeout [ 848.768535][T27623] netlink: 'syz.3.5341': attribute type 1 has an invalid length. [ 848.840737][T27623] bond5: entered promiscuous mode [ 848.847034][T27623] 8021q: adding VLAN 0 to HW filter on device bond5 [ 848.968776][T27633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5344'. [ 849.239268][T27646] team0: Port device dummy0 removed [ 849.486952][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'. [ 849.821066][T27667] netlink: 'syz.3.5354': attribute type 12 has an invalid length. [ 851.038957][ T5656] block nbd6: Receive control failed (result -32) [ 851.039811][T27521] block nbd6: Receive control failed (result -32) [ 853.344442][T27681] batadv_slave_0: entered promiscuous mode [ 853.388964][T27682] batadv_slave_0: left promiscuous mode [ 853.424222][T27686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5358'. [ 853.521748][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.563406][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.604182][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.653128][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.718130][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.739683][T27699] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5362'. [ 853.750539][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.783037][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.843672][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.898349][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.941209][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.959594][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.976931][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 853.996147][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.018052][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.032461][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.057234][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.087651][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.117517][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.147213][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.174250][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.197778][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.219511][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.239329][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.252202][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.280801][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.307516][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.327128][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.336095][T27724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5368'. [ 854.347237][T27688] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 854.522814][T27733] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5371'. [ 854.780786][T27747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5374'. [ 855.251920][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5378'. [ 855.547750][T27792] bond0: Caught tx_queue_len zero misconfig [ 855.636080][T27794] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 855.644764][T27794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 855.864405][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5389'. [ 856.118726][T27802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5390'. [ 856.280260][T27808] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5392'. [ 856.342170][T27813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5393'. [ 856.358342][T27813] ip6tnl0: Caught tx_queue_len zero misconfig [ 856.979817][T27853] netlink: 'syz.2.5403': attribute type 1 has an invalid length. [ 856.988473][T27853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5403'. [ 857.004661][T27853] netlink: 'syz.2.5403': attribute type 10 has an invalid length. [ 857.013821][T27853] netlink: 'syz.2.5403': attribute type 10 has an invalid length. [ 857.869914][T27866] netlink: 'syz.1.5408': attribute type 39 has an invalid length. [ 860.074588][T27868] bond7 (unregistering): Released all slaves [ 863.182251][T27883] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 863.238234][T27896] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 863.337151][T27906] netlink: 'syz.0.5416': attribute type 2 has an invalid length. [ 863.382958][T27906] netlink: 'syz.0.5416': attribute type 1 has an invalid length. [ 863.457241][T27912] __nla_validate_parse: 3 callbacks suppressed [ 863.457263][T27912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5415'. [ 863.469657][T27914] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 863.581979][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5415'. [ 863.683612][T27912] ip6tnl2: entered allmulticast mode [ 864.076347][T27935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5424'. [ 864.158055][T27943] netlink: 'syz.3.5426': attribute type 10 has an invalid length. [ 864.493845][T27952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5428'. [ 864.508657][T27952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5428'. [ 864.679251][T27954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5429'. [ 867.118728][T27938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.702046][T27950] syzkaller0: entered promiscuous mode [ 867.707600][T27950] syzkaller0: entered allmulticast mode [ 867.888522][T27967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5431'. [ 867.914714][T27967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5431'. [ 867.977925][T27979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5433'. [ 868.045747][T27983] netlink: 'syz.2.5432': attribute type 1 has an invalid length. [ 868.067278][T27983] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5432'. [ 868.086217][T27983] netlink: 'syz.2.5432': attribute type 1 has an invalid length. [ 868.777723][T28003] __nla_validate_parse: 6 callbacks suppressed [ 868.777746][T28003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5442'. [ 871.597000][T28003] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 871.882523][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5449'. [ 871.901144][T28038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5449'. [ 874.841867][T28041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.090681][T28073] ip6erspan0: entered allmulticast mode [ 876.210253][T28107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5467'. [ 876.339523][T28117] netlink: 'syz.0.5468': attribute type 22 has an invalid length. [ 876.365295][T28112] netlink: 'syz.0.5468': attribute type 22 has an invalid length. [ 880.328951][T28169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5485'. [ 880.343306][T28172] netlink: 'syz.4.5484': attribute type 1 has an invalid length. [ 880.397251][T28172] gretap6: entered allmulticast mode [ 880.533924][T28180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5488'. [ 880.715870][T28180] 8021q: adding VLAN 0 to HW filter on device bond8 [ 880.799586][T28185] bond8: (slave veth11): Enslaving as an active interface with an up link [ 880.930508][T28180] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5488'. [ 881.026712][T28185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5488'. [ 881.109715][T28185] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 881.208269][T28211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5495'. [ 884.874561][T28238] vlan3: entered promiscuous mode [ 884.897357][T28238] bridge0: entered promiscuous mode [ 885.021879][T28251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5502'. [ 885.079151][T28255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5503'. [ 885.281306][T28265] netlink: 'syz.0.5506': attribute type 32 has an invalid length. [ 885.414276][T28270] No such timeout policy "syz1" [ 885.526571][T28284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5510'. [ 885.546597][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5510'. [ 885.565291][T28284] netlink: 'syz.0.5510': attribute type 14 has an invalid length. [ 885.580524][T28284] netlink: 'syz.0.5510': attribute type 13 has an invalid length. [ 885.673187][T28284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5510'. [ 885.717584][T28291] netlink: 'syz.2.5512': attribute type 39 has an invalid length. [ 885.733492][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5510'. [ 885.761117][T28284] netlink: 'syz.0.5510': attribute type 14 has an invalid length. [ 885.771252][T28284] netlink: 'syz.0.5510': attribute type 13 has an invalid length. [ 885.792957][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5513'. [ 885.804678][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5513'. [ 885.834503][T28297] bond0: left promiscuous mode [ 885.847568][T28297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.884129][T28293] netlink: 'syz.3.5513': attribute type 4 has an invalid length. [ 885.892512][T28293] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5513'. [ 885.911841][T28297] bond6: (slave bond0): making interface the new active one [ 885.943710][T28297] bond6: (slave bond0): Enslaving as an active interface with an up link [ 886.021040][T28307] netlink: 'syz.0.5517': attribute type 32 has an invalid length. [ 886.308206][T28324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5519'. [ 886.622520][T28335] GUP no longer grows the stack in syz.1.5524 (28335): 200000003000-20000000a000 (200000001000) [ 886.657158][T28335] CPU: 0 UID: 0 PID: 28335 Comm: syz.1.5524 Not tainted syzkaller #0 PREEMPT(full) [ 886.657191][T28335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 886.657204][T28335] Call Trace: [ 886.657213][T28335] [ 886.657224][T28335] dump_stack_lvl+0xe8/0x150 [ 886.657259][T28335] __get_user_pages+0x238c/0x2720 [ 886.657319][T28335] ? down_read_killable+0x1bb/0x340 [ 886.657358][T28335] __gup_longterm_locked+0xd52/0x15c0 [ 886.657390][T28335] ? lock_acquire+0x106/0x350 [ 886.657436][T28335] gup_fast_fallback+0x1d82/0x20d0 [ 886.657500][T28335] ? __pfx_gup_fast_fallback+0x10/0x10 [ 886.657532][T28335] ? is_valid_gup_args+0x11f/0x200 [ 886.657560][T28335] ? get_user_pages_fast+0x4d/0xb0 [ 886.657590][T28335] __iov_iter_get_pages_alloc+0x378/0xa40 [ 886.657624][T28335] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 886.657691][T28335] iov_iter_get_pages2+0x5e/0xa0 [ 886.657721][T28335] __se_sys_vmsplice+0x7b5/0x1660 [ 886.657774][T28335] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 886.657806][T28335] ? __pfx_futex_wait+0x10/0x10 [ 886.657914][T28335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.657940][T28335] do_syscall_64+0x174/0x580 [ 886.657963][T28335] ? trace_irq_disable+0x3b/0x140 [ 886.657993][T28335] ? clear_bhb_loop+0x40/0x90 [ 886.658020][T28335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.658041][T28335] RIP: 0033:0x7f1110d9ce59 [ 886.658070][T28335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.658089][T28335] RSP: 002b:00007f1111d3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 886.658112][T28335] RAX: ffffffffffffffda RBX: 00007f1111015fa0 RCX: 00007f1110d9ce59 [ 886.658127][T28335] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 886.658141][T28335] RBP: 00007f1110e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 886.658158][T28335] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 886.658171][T28335] R13: 00007f1111016038 R14: 00007f1111015fa0 R15: 00007ffc7812f9d8 [ 886.658207][T28335] [ 887.242072][T28345] netlink: 'syz.0.5527': attribute type 1 has an invalid length. [ 888.195191][T28370] syzkaller0: entered promiscuous mode [ 888.203881][T28370] syzkaller0: entered allmulticast mode [ 888.784886][T28401] netlink: 'syz.0.5543': attribute type 21 has an invalid length. [ 891.869704][T28401] __nla_validate_parse: 2 callbacks suppressed [ 891.869727][T28401] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5543'. [ 891.975636][T28415] veth0: entered promiscuous mode [ 892.103436][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5546'. [ 892.112883][T28423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5546'. [ 892.118178][T28422] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5547'. [ 892.136652][T28415] veth0: left promiscuous mode [ 892.292617][T28423] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5546'. [ 892.513509][T28438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5550'. [ 892.634800][T28449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5552'. [ 892.815983][T28454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5554'. [ 892.901318][T28458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5555'. [ 893.130657][T28466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'. [ 893.535194][T28487] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 894.124754][T28504] veth0_to_hsr: entered promiscuous mode [ 894.146411][T28504] veth0_to_hsr: left promiscuous mode [ 895.431444][T28573] pim6reg: entered allmulticast mode [ 895.675170][T28591] lo speed is unknown, defaulting to 1000 [ 895.693411][T28591] lo speed is unknown, defaulting to 1000 [ 895.708264][T28591] lo speed is unknown, defaulting to 1000 [ 895.752795][T28591] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 895.829669][T28591] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 895.875950][T28591] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 895.970363][T28591] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 895.992226][T28602] x_tables: duplicate entry at hook 1 [ 896.027722][T28591] lo speed is unknown, defaulting to 1000 [ 896.050551][T28591] lo speed is unknown, defaulting to 1000 [ 896.076807][T28591] lo speed is unknown, defaulting to 1000 [ 896.117017][T28602] netlink: 'syz.0.5589': attribute type 1 has an invalid length. [ 896.226236][T28591] lo speed is unknown, defaulting to 1000 [ 896.255318][T28591] lo speed is unknown, defaulting to 1000 [ 896.322735][T28591] lo speed is unknown, defaulting to 1000 [ 896.402056][T28591] lo speed is unknown, defaulting to 1000 [ 896.887031][T28619] pim6reg: entered allmulticast mode [ 897.055228][T28627] netlink: 'syz.0.5599': attribute type 1 has an invalid length. [ 897.097956][T28627] bond9: entered promiscuous mode [ 897.103785][T28627] 8021q: adding VLAN 0 to HW filter on device bond9 [ 897.168748][T28636] __nla_validate_parse: 7 callbacks suppressed [ 897.168769][T28636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5602'. [ 897.315788][T28647] netlink: 'syz.1.5604': attribute type 3 has an invalid length. [ 897.355065][T28647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5604'. [ 897.433673][T28652] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5606'. [ 897.478948][T28645] syzkaller0: entered promiscuous mode [ 897.496229][T28645] syzkaller0: entered allmulticast mode [ 897.562147][T28662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5609'. [ 897.657623][T28658] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5608'. [ 897.918274][T28675] netlink: 'syz.0.5613': attribute type 1 has an invalid length. [ 897.920129][T28676] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5615'. [ 897.978299][T28675] 8021q: adding VLAN 0 to HW filter on device bond10 [ 898.236200][T28690] sock: sock_timestamping_bind_phc: sock not bind to device [ 898.424535][T28696] netlink: 'syz.2.5622': attribute type 8 has an invalid length. [ 898.808739][T28707] pim6reg: entered allmulticast mode [ 898.908938][T28717] sctp: [Deprecated]: syz.3.5626 (pid 28717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 898.908938][T28717] Use struct sctp_sack_info instead [ 899.683573][T28762] netlink: 'syz.2.5634': attribute type 6 has an invalid length. [ 899.701525][T28762] netlink: 'syz.2.5634': attribute type 1 has an invalid length. [ 899.709500][T28762] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5634'. [ 900.227840][T28789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5643'. [ 900.243665][T28786] : option downdelay: invalid value (18446744073709547007) [ 900.261061][T28786] : option downdelay: allowed values 0 - 2147483647 [ 900.298049][T28786]  (unregistering): Released all slaves [ 900.332543][T28794] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5644'. [ 900.382745][T28789] hsr_slave_0: left promiscuous mode [ 900.442303][T28794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5644'. [ 900.646958][T28800] netlink: 'syz.3.5645': attribute type 7 has an invalid length. [ 901.545491][T28858] netlink: 'syz.0.5658': attribute type 10 has an invalid length. [ 901.606194][T28858] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.637748][T28862] netlink: 'syz.2.5659': attribute type 3 has an invalid length. [ 901.647712][T28858] team0: entered promiscuous mode [ 901.657051][T28858] team_slave_0: entered promiscuous mode [ 901.668843][T28863] xt_cgroup: invalid path, errno=-2 [ 901.680700][T28858] team_slave_1: entered promiscuous mode [ 901.694755][T28858] batadv1: entered promiscuous mode [ 901.700380][T28858] geneve1: entered promiscuous mode [ 901.707296][T28858] bond0: (slave team0): Enslaving as an active interface with an up link [ 902.042262][T28882] netlink: 'syz.0.5666': attribute type 10 has an invalid length. [ 902.084980][T28882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.107640][T28882] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 902.125250][T28882] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 902.148708][T28882] team0: Failed to send options change via netlink (err -105) [ 902.161090][T28882] team0: Port device netdevsim1 added [ 902.180505][T28886] __nla_validate_parse: 3 callbacks suppressed [ 902.180509][T28887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5667'. [ 902.180524][T28886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5667'. [ 902.262219][T28883] bond11: option broadcast_neighbor: invalid value (30) [ 902.289608][T28883] bond11 (unregistering): Released all slaves [ 902.363243][T28886] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 902.370102][T28887] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 902.737240][T28909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5671'. [ 902.947296][T28915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5673'. [ 903.065919][T28919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5675'. [ 903.247161][T28926] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 903.413878][T28935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5679'. [ 903.582432][T28935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 903.632310][T28938] 8021q: adding VLAN 0 to HW filter on device bond7 [ 903.633739][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5682'. [ 903.640533][T28938] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 903.659861][T28938] bond7: (slave ipip0): Error -95 calling set_mac_address [ 903.819122][T28950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5685'. [ 903.988281][T28963] netlink: 'syz.3.5689': attribute type 1 has an invalid length. [ 904.011942][T28963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.022870][T28961] netlink: zone id is out of range [ 904.054650][T28961] netlink: zone id is out of range [ 904.098855][T28961] netlink: zone id is out of range [ 904.133674][T28961] netlink: zone id is out of range [ 904.145584][T28961] netlink: zone id is out of range [ 904.167760][T28961] netlink: zone id is out of range [ 904.181630][T28963] bond7: option miimon: invalid value (18446744073709551607) [ 904.189235][T28961] netlink: zone id is out of range [ 904.199135][T28961] netlink: zone id is out of range [ 904.208881][T28963] bond7: option miimon: allowed values 0 - 2147483647 [ 904.222813][T28961] netlink: zone id is out of range [ 904.253098][T28963] bond7 (unregistering): Released all slaves [ 904.368831][T28979] netlink: 'syz.4.5692': attribute type 22 has an invalid length. [ 904.624487][T28979] 8021q: adding VLAN 0 to HW filter on device bond12 [ 904.664800][T28974] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 904.710404][T28974] 8021q: adding VLAN 0 to HW filter on device bond12 [ 904.734176][T28974] bond12: (slave lo): Enslaving as an active interface with an up link [ 904.817344][T28993] netlink: 'syz.0.5696': attribute type 3 has an invalid length. [ 904.824095][ T5746] lo speed is unknown, defaulting to 1000 [ 904.833164][T28993] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5696'. [ 904.841102][T26418] lo speed is unknown, defaulting to 1000 [ 904.863043][ T5746] syz2: Port: 1 Link ACTIVE [ 904.898445][T28993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5696'. [ 905.338045][T29023] siw: device registration error -23 [ 905.373165][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.402049][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.422683][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.442363][T29022] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 905.481617][T29022] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 905.521248][T29022] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 905.569855][T29022] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 905.633891][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.657724][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.691774][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.700722][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.723822][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.742833][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.758011][T29022] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.832093][T29035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.288707][T29054] IPVS: length: 172 != 8 [ 906.807010][T29080] sctp: [Deprecated]: syz.2.5719 (pid 29080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.807010][T29080] Use struct sctp_sack_info instead [ 907.426319][T29106] __nla_validate_parse: 11 callbacks suppressed [ 907.426343][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5727'. [ 907.493562][T29110] netlink: 'syz.3.5728': attribute type 1 has an invalid length. [ 907.606885][T29115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'. [ 907.680702][T29110] bond7: entered promiscuous mode [ 907.705375][T29110] 8021q: adding VLAN 0 to HW filter on device bond7 [ 907.753133][T29125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5732'. [ 907.766169][T29125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5732'. [ 907.788671][T29113] vlan5: entered allmulticast mode [ 907.800695][T29113] bond7: entered allmulticast mode [ 907.814125][T29125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5732'. [ 907.856631][T29118] bond7: (slave bridge5): making interface the new active one [ 907.876150][T29118] bridge5: entered promiscuous mode [ 907.893006][T29118] bridge5: entered allmulticast mode [ 907.913612][T29118] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 908.111044][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5736'. [ 908.130279][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5736'. [ 908.279045][T29150] netlink: 'syz.3.5738': attribute type 32 has an invalid length. [ 908.386868][T29133] bond0: left promiscuous mode [ 908.397879][T29133] bond_slave_0: left promiscuous mode [ 908.407004][T29133] team0: left promiscuous mode [ 908.414078][T29133] team_slave_0: left promiscuous mode [ 908.419821][T29133] team_slave_1: left promiscuous mode [ 908.426302][T29133] batadv1: left promiscuous mode [ 908.432727][T29133] geneve1: left promiscuous mode [ 908.437898][T29133] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 908.889661][T29133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.949568][T29133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.984688][T29133] xfrm0: left allmulticast mode [ 909.463740][T29133] ip6gre1: left promiscuous mode [ 909.477770][T29133] ip6gre1: left allmulticast mode [ 909.598009][T29133] bond2: left promiscuous mode [ 909.615772][T29133] bond3: left promiscuous mode [ 909.629350][T29133] bond3: left allmulticast mode [ 909.779861][T29133] bond9: left promiscuous mode [ 909.843603][ T197] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.873659][ T197] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.945718][ T197] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.976629][ T197] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.979219][T29163] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5740'. [ 910.006241][ T197] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.020298][ T197] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.037306][ T197] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.059048][ T197] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.080779][T29171] xt_hashlimit: size too large, truncated to 1048576 [ 910.245909][T29182] netlink: 'syz.3.5746': attribute type 1 has an invalid length. [ 910.271030][T29182] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5746'. [ 910.280364][T29182] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5746'. [ 910.286623][T29176] net_ratelimit: 7 callbacks suppressed [ 910.286641][T29176] openvswitch: netlink: Flow key attr not present in new flow. [ 910.351628][T29161] bond13 (unregistering): Released all slaves [ 910.515592][T29190] bond13: entered promiscuous mode [ 910.521474][T29190] 8021q: adding VLAN 0 to HW filter on device bond13 [ 910.605088][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.637243][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.674673][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.714150][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.018167][T29212] 8021q: adding VLAN 0 to HW filter on device bond8 [ 911.228296][T27521] block nbd7: Receive control failed (result -32) [ 911.610178][T29227] lo speed is unknown, defaulting to 1000 [ 911.720483][T29227] virt_wifi0 speed is unknown, defaulting to 1000 [ 912.407679][T29263] bond11 (unregistering): Released all slaves [ 913.254115][T29290] syzkaller1: entered promiscuous mode [ 913.278642][T29290] syzkaller1: entered allmulticast mode [ 913.464111][T29285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.509111][T29285] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.553134][T29285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.668821][T29285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.678533][T29285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.692094][T29285] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 913.702926][T29285] veth1_vlan: left promiscuous mode [ 913.709438][T29285] veth0_vlan: left promiscuous mode [ 913.716337][T29285] veth0_vlan: entered promiscuous mode [ 913.726391][T29285] veth1_vlan: entered promiscuous mode [ 913.740134][T29285] veth1_macvtap: left promiscuous mode [ 913.747417][T29285] veth0_macvtap: left promiscuous mode [ 913.754240][T29285] veth0_macvtap: entered promiscuous mode [ 913.762205][T29285] veth1_macvtap: entered promiscuous mode [ 913.773184][T29285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 913.782036][T29285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.790323][T29285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.799634][T29285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 913.843319][T29285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 913.855902][T29285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 913.865023][T29285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 913.876782][T29285] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 913.886038][T29285] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 913.956276][T13276] virt_wifi0 speed is unknown, defaulting to 1000 [ 913.956355][T15478] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.972960][T15478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.982671][T15478] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.991842][T15478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.011577][T15478] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.020517][T15478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.030155][T15478] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.049477][T15478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.268221][T29323] __nla_validate_parse: 4 callbacks suppressed [ 914.268245][T29323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5780'. [ 914.286150][T29323] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5780'. [ 914.297315][T29323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5780'. [ 914.307456][T29323] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5780'. [ 914.318095][T29323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5780'. [ 915.323060][T29335] syzkaller0: entered promiscuous mode [ 915.328799][T29335] syzkaller0: entered allmulticast mode [ 915.344618][T29335] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 916.131141][T29291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 916.406717][T29342] netlink: 'syz.0.5785': attribute type 1 has an invalid length. [ 916.424493][T29342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.693711][T29358] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5792'. [ 916.716509][T29360] netlink: 'syz.3.5793': attribute type 3 has an invalid length. [ 916.873377][T29366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.947341][T29373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5795'. [ 917.132134][T29383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5798'. [ 917.248570][T29388] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5798'. [ 917.557682][T29383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5798'. [ 917.833603][T29394] nbd: must specify at least one socket [ 918.088210][T29405] SET target dimension over the limit! [ 918.107992][T29405] x_tables: duplicate underflow at hook 2 [ 918.423952][T29418] syzkaller1: entered promiscuous mode [ 918.458363][T29418] syzkaller1: entered allmulticast mode [ 918.461542][T29421] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 919.131459][ T29] audit: type=1800 audit(1781588032.949:10): pid=29407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5804" name="memory.events" dev="tmpfs" ino=3017 res=0 errno=0 [ 919.225279][T29418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 919.628885][T29451] netlink: 'syz.2.5814': attribute type 1 has an invalid length. [ 919.649143][T29451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.839890][T29455] netlink: 'syz.3.5815': attribute type 16 has an invalid length. [ 919.873086][T29455] netlink: 'syz.3.5815': attribute type 17 has an invalid length. [ 919.900727][T29458] netlink: 'syz.4.5817': attribute type 1 has an invalid length. [ 920.046997][T29455] 8021q: adding VLAN 0 to HW filter on device vlan0 [ 920.068459][T29455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.090068][T29462] __nla_validate_parse: 1 callbacks suppressed [ 920.090089][T29462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5819'. [ 920.196406][T29455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 920.209579][T29455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 920.232461][T29455] veth1_macvtap: left promiscuous mode [ 920.243246][T29455] veth0_macvtap: left promiscuous mode [ 920.253945][T29455] veth0_macvtap: entered promiscuous mode [ 920.263572][T29455] veth0_macvtap: entered allmulticast mode [ 920.274103][T29455] veth1_macvtap: entered promiscuous mode [ 920.288812][T29455] geneve0: entered promiscuous mode [ 920.305352][T29455] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 920.312673][T29455] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 920.327087][T29455] bond1: left promiscuous mode [ 920.332608][T29455] bridge1: left promiscuous mode [ 920.351737][T29455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.510137][T29471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.540661][T29455] ip6erspan0: left allmulticast mode [ 920.556720][T29455] batman_adv: batadv0: Interface activated: gretap1 [ 920.563654][T29475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.579040][T29455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 920.582049][T29480] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5823'. [ 920.589109][T29455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 920.612676][T29455] vlan1: left promiscuous mode [ 920.617653][T29455] geneve1: left promiscuous mode [ 920.624455][T29455] vlan1: left allmulticast mode [ 920.629382][T29455] geneve1: left allmulticast mode [ 920.638131][T29455] vlan3: left allmulticast mode [ 920.643594][T29455] macvtap0: left allmulticast mode [ 920.648939][T29455] veth0_macvtap: left allmulticast mode [ 920.696630][T29455] bridge3: left promiscuous mode [ 920.702006][T29455] bridge3: left allmulticast mode [ 920.719551][T29455] bridge0: port 3(vlan4) entered blocking state [ 920.726130][T29455] bridge0: port 3(vlan4) entered forwarding state [ 920.778989][T29455] bond5: left promiscuous mode [ 920.799852][T29455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 920.816172][T29455] bond7: left promiscuous mode [ 920.822642][T29455] bridge5: left promiscuous mode [ 920.839251][T29455] vlan5: left allmulticast mode [ 920.851745][T29455] bond7: left allmulticast mode [ 920.863456][T29455] bridge5: left allmulticast mode [ 920.883777][T29458] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 921.140864][ T9708] ip6_tunnel: d xmit: Local address not yet configured! [ 921.159398][ T5753] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 921.194302][ T5753] ip6_tunnel: d xmit: Local address not yet configured! [ 921.201766][ T9708] ip6_tunnel: d xmit: Local address not yet configured! [ 921.232723][ T5753] ip6_tunnel: d xmit: Local address not yet configured! [ 921.374681][ T5753] ip6_tunnel: d xmit: Local address not yet configured! [ 921.422834][ T9708] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 921.559388][T29512] lo speed is unknown, defaulting to 1000 [ 921.585855][T29520] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5832'. [ 921.590403][T29519] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5832'. [ 921.598645][T29512] virt_wifi0 speed is unknown, defaulting to 1000 [ 921.623271][T29519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5832'. [ 921.646929][T29520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5832'. [ 921.753996][T29524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5833'. [ 921.800907][T29524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5833'. [ 921.836238][T29524] x_tables: duplicate underflow at hook 1 [ 921.883376][ T496] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 922.004352][T29528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5834'. [ 922.054272][ T5753] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 922.257537][T29538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5836'. [ 922.268708][T29530] veth0_macvtap: entered allmulticast mode [ 922.277644][T29530] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 922.922169][T15478] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 922.940698][T29557] netlink: 'syz.2.5841': attribute type 12 has an invalid length. [ 922.967540][T15478] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 923.057063][T29567] netlink: 'syz.1.5845': attribute type 1 has an invalid length. [ 923.063142][T29564] syzkaller0: entered promiscuous mode [ 923.205786][T29567] bond9: entered promiscuous mode [ 923.212780][T29567] 8021q: adding VLAN 0 to HW filter on device bond9 [ 923.231237][T29571] netlink: 'syz.2.5846': attribute type 6 has an invalid length. [ 923.282477][T29569] vlan0: entered allmulticast mode [ 923.287895][T29569] bond9: entered allmulticast mode [ 923.400597][T29567] bond9: (slave bridge9): making interface the new active one [ 923.422962][T29567] bridge9: entered promiscuous mode [ 923.434795][T29567] bridge9: entered allmulticast mode [ 923.449746][T29567] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 924.264493][T29612] bond11: entered promiscuous mode [ 924.270408][T29612] 8021q: adding VLAN 0 to HW filter on device bond11 [ 924.334871][T29612] 8021q: adding VLAN 0 to HW filter on device bond11 [ 924.352819][T29612] bond11: (slave sit1): The slave device specified does not support setting the MAC address [ 924.389593][T29612] bond11: (slave sit1): Error -95 calling set_mac_address [ 924.938649][T29637] syzkaller1: entered promiscuous mode [ 924.951016][T29637] syzkaller1: entered allmulticast mode [ 925.121860][T29648] __nla_validate_parse: 9 callbacks suppressed [ 925.121883][T29648] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5866'. [ 925.307409][T29656] syzkaller0: entered promiscuous mode [ 925.322944][T29656] syzkaller0: entered allmulticast mode [ 925.437367][T29653] vlan2: entered promiscuous mode [ 925.451162][T29653] bridge0: entered promiscuous mode [ 925.480568][T29658] lo: left promiscuous mode [ 925.518781][T29658] 0: left allmulticast mode [ 925.538754][T29658] hsr_slave_0: left allmulticast mode [ 925.567816][T29658] hsr_slave_1: left allmulticast mode [ 925.584777][T29658] veth0_vlan: left allmulticast mode [ 925.602483][T29658] vlan0: left promiscuous mode [ 925.624312][T29658] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 925.646701][T29658] bridge1: left allmulticast mode [ 925.663629][T29658] bond3: left promiscuous mode [ 925.675315][T29658] bridge2: left promiscuous mode [ 925.687748][T29658] macvtap1: left allmulticast mode [ 925.705831][T29658] veth5: left allmulticast mode [ 925.711758][T29658] bond4: left promiscuous mode [ 925.717515][T29658] macvtap2: left allmulticast mode [ 925.750241][T29658] bond10: left promiscuous mode [ 925.762595][T29658] bridge4: left promiscuous mode [ 925.859925][T29658] ip6erspan0: left allmulticast mode [ 925.880057][T29653] netlink: 'syz.4.5868': attribute type 4 has an invalid length. [ 925.924802][T15478] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.944591][T15478] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.046520][T15478] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.079445][T15478] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.138428][T29680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5874'. [ 926.154759][T29680] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5874'. [ 926.205532][T29680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.417042][T29690] netlink: 'syz.2.5879': attribute type 1 has an invalid length. [ 926.488630][T29686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5876'. [ 926.620454][T29690] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 926.686681][ T5656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 926.717192][ T5656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 926.729685][ T5656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 926.742709][ T5656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 926.760166][ T5656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 927.241373][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 927.241402][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 927.835479][T29742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5887'. [ 928.144387][T29748] syzkaller0: entered promiscuous mode [ 928.162145][T29748] syzkaller0: entered allmulticast mode [ 928.851202][ T5656] Bluetooth: hci2: command tx timeout [ 930.941861][ T5656] Bluetooth: hci2: command tx timeout [ 932.317353][T29700] lo speed is unknown, defaulting to 1000 [ 932.348005][T29700] virt_wifi0 speed is unknown, defaulting to 1000 [ 932.588160][T29786] tipc: Enabled bearer , priority 16 [ 932.614547][T29791] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 932.864594][T29807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5903'. [ 932.920015][T29805] netlink: 'syz.0.5901': attribute type 3 has an invalid length. [ 932.943405][T29805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5901'. [ 932.998709][T29807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5903'. [ 933.007895][ T5656] Bluetooth: hci2: command tx timeout [ 933.031217][T29807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5903'. [ 933.034876][T29810] netlink: 'syz.2.5903': attribute type 12 has an invalid length. [ 933.060283][T29810] netlink: 'syz.2.5903': attribute type 5 has an invalid length. [ 933.232063][T29816] netlink: 'syz.2.5905': attribute type 10 has an invalid length. [ 933.432780][T29700] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.457603][T29700] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.490124][T29700] bridge_slave_0: entered allmulticast mode [ 933.524983][T29700] bridge_slave_0: entered promiscuous mode [ 933.544414][T29700] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.576817][T29700] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.607615][T29700] bridge_slave_1: entered allmulticast mode [ 933.616605][T29827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5908'. [ 933.621767][T29700] bridge_slave_1: entered promiscuous mode [ 933.751255][T29833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5910'. [ 933.926104][T29700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.999048][T29700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.229478][T29700] team0: Port device team_slave_0 added [ 934.250129][T29700] team0: Port device team_slave_1 added [ 934.266010][T29856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5916'. [ 934.320199][T29700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.336060][T29700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.365153][ C0] ip6_tunnel: d xmit: Local address not yet configured! [ 934.406703][T29700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.440729][T29858] bridge0: entered allmulticast mode [ 934.568164][T29700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.652983][T29700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.821267][T29700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.086889][ T5656] Bluetooth: hci2: command tx timeout [ 935.568842][T29700] hsr_slave_0: entered promiscuous mode [ 935.595031][T29700] hsr_slave_1: entered promiscuous mode [ 935.622666][T29700] debugfs: 'hsr0' already exists in 'hsr' [ 935.636574][T29700] Cannot create hsr debugfs directory [ 935.787119][T29894] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5924'. [ 936.099099][T29906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5927'. [ 936.128717][T29904] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 936.141328][T29906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5927'. [ 936.282513][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 936.695944][T29929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.383413][T29954] openvswitch: netlink: Actions may not be safe on all matching packets [ 937.625398][T29959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.671425][T29959] batadv_slave_1: entered promiscuous mode [ 937.735457][T29700] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 937.757141][T29700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 937.766557][T29700] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 937.778270][T29967] netlink: 'syz.4.5941': attribute type 4 has an invalid length. [ 937.778439][T29700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.808892][T29963] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 937.840614][T29968] netlink: 'syz.4.5941': attribute type 4 has an invalid length. [ 937.907847][T29700] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 937.954917][T29700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 938.026747][T29700] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 938.057840][T29700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 938.357391][T29700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.414316][T29700] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.459015][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.466300][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.519829][T29991] __nla_validate_parse: 4 callbacks suppressed [ 938.519851][T29991] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5948'. [ 938.574866][ T9709] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.582132][ T9709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.433703][T29700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.457407][T30043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.480082][T30043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5959'. [ 940.504200][T30043] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 940.669860][T30043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5959'. [ 940.710416][T29700] veth0_vlan: entered promiscuous mode [ 940.775694][T30055] netlink: 'syz.1.5961': attribute type 1 has an invalid length. [ 940.797620][T30055] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5961'. [ 940.849566][T29700] veth1_vlan: entered promiscuous mode [ 940.935876][T29700] veth0_macvtap: entered promiscuous mode [ 940.984334][T29700] veth1_macvtap: entered promiscuous mode [ 941.105694][T29700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.165757][T29700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.212563][ T9709] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.236827][ T9709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.273772][ T9709] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.306544][T30045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5960'. [ 941.318913][ T9709] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.634549][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.667767][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.804911][T21633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.839453][T21633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.700071][T30102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 942.862863][T30090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.987750][T30090] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 942.998417][T30090] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 943.042189][T30090] veth1_vlan: left promiscuous mode [ 943.057109][T30090] veth0_vlan: left promiscuous mode [ 943.063954][T30090] veth0_vlan: entered promiscuous mode [ 943.075532][T30090] veth1_vlan: entered promiscuous mode [ 943.104298][T30090] veth1_macvtap: left promiscuous mode [ 943.118564][T30090] veth0_macvtap: left promiscuous mode [ 943.126133][T30090] veth0_macvtap: entered promiscuous mode [ 943.134251][T30090] veth1_macvtap: entered promiscuous mode [ 943.154600][T30090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 943.167900][T30090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.179940][T30090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.192223][T30090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 943.236224][T30090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 943.246157][T30090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 943.255681][T30090] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 943.277987][T30090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 943.298762][T30090] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 943.315436][T30090] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 943.327647][T30090] bridge0: port 2(vlan2) entered blocking state [ 943.334286][T30090] bridge0: port 2(vlan2) entered forwarding state [ 943.354485][T30090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 943.365301][T30090] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 943.386177][T30090] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 943.421590][T30090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 943.430270][T30090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 943.448401][T30090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.469179][T30090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 943.477482][T30090] 8021q: adding VLAN 0 to HW filter on device bond8 [ 943.525848][T30090] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 943.694834][T14378] bridge0: port 1(veth3) entered blocking state [ 943.701325][T14378] bridge0: port 1(veth3) entered forwarding state [ 943.738261][T26418] bridge2: entered promiscuous mode [ 943.758074][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.775647][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.788965][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.798474][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.827099][T30117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5976'. [ 943.849665][T30117] tipc: Enabling of bearer rejected, failed to enable media [ 943.878167][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.916547][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.997552][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.053036][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.151255][ T35] bond8: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 944.195691][ T35] bond8: (slave veth7): making interface the new active one [ 944.233516][ T35] bond8: active interface up! [ 944.370454][ T197] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 944.398089][ T5746] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 944.408235][ T197] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 944.421601][T30151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5986'. [ 944.566190][T30148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.582314][T30152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 944.672461][T26418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 944.947775][T26418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 945.008176][T30176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5991'. [ 945.053280][T30176] veth0: entered allmulticast mode [ 945.298747][T30188] netlink: 'syz.1.5994': attribute type 1 has an invalid length. [ 945.339737][T30187] netlink: 'syz.1.5994': attribute type 1 has an invalid length. [ 945.414027][T30187] 8021q: adding VLAN 0 to HW filter on device bond10 [ 945.442109][T30186] bond10: (slave gretap1): making interface the new active one [ 945.451289][T30186] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 945.608290][T30203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5998'. [ 945.676198][T30205] netlink: 'syz.0.5998': attribute type 89 has an invalid length. [ 946.118859][T30214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6000'. [ 946.135267][T30214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6000'. [ 946.159431][T30214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6000'. [ 946.227625][T30228] ip6tnl4: entered allmulticast mode [ 946.913780][T30227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 946.956745][T30227] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 947.186287][ T35] wlan1: Trigger new scan to find an IBSS to join [ 947.235752][T30259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6009'. [ 947.357311][T30262] netlink: 700 bytes leftover after parsing attributes in process `syz.3.6009'. [ 947.513334][T30227] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 947.544771][T30227] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 947.573541][T30260] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 947.599649][T15478] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 947.671272][ T10] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 947.679149][T15478] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 948.162669][ T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 948.509874][T30227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 948.521473][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 948.531473][T30227] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 949.191385][T30291] netlink: 'syz.2.6016': attribute type 4 has an invalid length. [ 949.191906][T30294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6018'. [ 949.266955][T30294] netlink: 'syz.0.6018': attribute type 8 has an invalid length. [ 949.337663][T30294] geneve3: entered promiscuous mode [ 949.346004][T30294] geneve3: entered allmulticast mode [ 949.771503][T30323] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6023'. [ 949.829167][T30320] veth13: entered promiscuous mode [ 949.865800][T30325] syzkaller0: entered promiscuous mode [ 949.872046][T30325] syzkaller0: entered allmulticast mode [ 950.056811][T26418] bridge0: entered promiscuous mode [ 950.148615][T30329] syzkaller0: entered promiscuous mode [ 950.184130][T30329] syzkaller0: entered allmulticast mode [ 950.220351][T30333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6028'. [ 950.251044][T30333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6028'. [ 950.265823][T30334] 5: entered promiscuous mode [ 950.607043][T30349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6033'. [ 950.745322][T30352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6034'. [ 950.781131][T30352] netlink: 'syz.3.6034': attribute type 7 has an invalid length. [ 950.804359][T30352] netlink: 'syz.3.6034': attribute type 8 has an invalid length. [ 950.871260][T30352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6034'. [ 950.919001][T30363] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6036'. [ 951.039812][T30369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6040'. [ 951.049440][T30365] lo speed is unknown, defaulting to 1000 [ 951.060624][T30365] virt_wifi0 speed is unknown, defaulting to 1000 [ 951.262682][T30375] netlink: 'syz.3.6041': attribute type 11 has an invalid length. [ 951.269386][T30370] lo speed is unknown, defaulting to 1000 [ 951.342833][T30370] virt_wifi0 speed is unknown, defaulting to 1000 [ 951.437076][T30377] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.503918][T30377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.644003][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 951.644029][ C0] ip6_tunnel: d xmit: Local address not yet configured! [ 951.881036][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 952.660325][T30406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6047'. [ 952.808901][T30411] IPv6: NLM_F_REPLACE set, but no existing node found! [ 953.011824][T30416] netlink: 'syz.1.6049': attribute type 11 has an invalid length. [ 953.562124][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 956.362943][T30434] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 956.771386][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 958.156591][T30417] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.291687][T30417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 958.309569][T30417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.326803][T30417] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 958.344220][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.351456][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.389809][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.397163][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.437760][T30442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6054'. [ 958.460001][T30434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6051'. [ 958.559168][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6054'. [ 958.716998][T30442] 8021q: adding VLAN 0 to HW filter on device bond14 [ 958.827279][T30459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6058'. [ 958.856587][T30446] bond14: entered promiscuous mode [ 958.874067][T30446] bond14: entered allmulticast mode [ 958.923651][T30442] bond14 (unregistering): Released all slaves [ 959.045782][T30462] lo speed is unknown, defaulting to 1000 [ 959.058152][T30462] virt_wifi0 speed is unknown, defaulting to 1000 [ 959.395205][T30480] netlink: 'syz.4.6065': attribute type 13 has an invalid length. [ 959.500278][T30480] netlink: 'syz.4.6065': attribute type 13 has an invalid length. [ 959.952795][T27521] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 959.980297][T27521] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 959.995096][T27521] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 960.011504][T27521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 960.021171][T27521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 960.119397][ T5656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 960.170593][ T5656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 960.189984][ T5656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 960.215722][ T5656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 960.230071][ T5656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 960.454124][T30505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6071'. [ 960.601308][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 961.157060][T30534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6078'. [ 961.431737][T30500] lo speed is unknown, defaulting to 1000 [ 961.448353][T30500] virt_wifi0 speed is unknown, defaulting to 1000 [ 961.754854][T30551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6083'. [ 961.795701][T30554] syzkaller0: entered promiscuous mode [ 961.802695][T30554] syzkaller0: entered allmulticast mode [ 961.823375][T30554] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.899511][T30554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6084'. [ 962.223747][T30500] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.234474][T30500] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.261241][T30500] bridge_slave_0: entered allmulticast mode [ 962.281640][T27521] Bluetooth: hci5: command tx timeout [ 962.309837][T30500] bridge_slave_0: entered promiscuous mode [ 962.413738][T30578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6091'. [ 962.437735][T30578] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 962.869291][T30500] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.879480][T30500] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.895838][T30500] bridge_slave_1: entered allmulticast mode [ 962.919761][T30500] bridge_slave_1: entered promiscuous mode [ 963.035626][T30600] vxcan0: entered allmulticast mode [ 963.118488][T30594] batadv_slave_1: left promiscuous mode [ 963.231228][T30594] geneve3: left promiscuous mode [ 963.440415][T30500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.473818][T30500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.566714][T30603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6098'. [ 963.577141][T30605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6097'. [ 963.578067][T30500] team0: Port device team_slave_0 added [ 963.600470][T30500] team0: Port device team_slave_1 added [ 963.693588][T30609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6097'. [ 963.727276][ T29] audit: type=1800 audit(1781588077.539:11): pid=30608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6099" name="r" dev="tmpfs" ino=211 res=0 errno=0 [ 963.760251][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6098'. [ 963.780352][T30609] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 963.780444][T30609] block (null): Could not allocate knbd recv work queue. [ 963.787060][T30500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.840206][T30500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.874796][T30609] nbd: failed to add new device [ 963.888776][T30500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.903817][T30614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6101'. [ 963.915923][T30614] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6101'. [ 963.928363][T30500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.952214][T30500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.989653][T30615] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6101'. [ 964.029308][T30500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.363801][T27521] Bluetooth: hci5: command tx timeout [ 964.470774][T30500] hsr_slave_0: entered promiscuous mode [ 964.494703][T30640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6107'. [ 964.509924][T30500] hsr_slave_1: entered promiscuous mode [ 964.532237][T30500] debugfs: 'hsr0' already exists in 'hsr' [ 964.540145][T30500] Cannot create hsr debugfs directory [ 964.804629][T30650] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6109'. [ 964.818119][T30650] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 966.461058][T27521] Bluetooth: hci5: command tx timeout [ 968.521227][T27521] Bluetooth: hci5: command tx timeout [ 969.293842][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6112'. [ 969.319935][T30668] netlink: 'syz.0.6112': attribute type 9 has an invalid length. [ 969.590097][T30500] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.741213][T30681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6119'. [ 969.750276][T30681] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6119'. [ 969.967646][T30500] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.315116][T30500] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.689102][T30500] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.952753][T30703] netlink: 'syz.3.6123': attribute type 1 has an invalid length. [ 971.042334][T30711] netlink: 'syz.0.6125': attribute type 1 has an invalid length. [ 971.181671][T30711] 8021q: adding VLAN 0 to HW filter on device bond12 [ 971.235753][T30714] bond12: (slave veth13): Enslaving as an active interface with a down link [ 971.570431][T30724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6129'. [ 971.626138][T30500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 971.637428][T30731] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6131'. [ 971.817306][T30500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.875586][T30733] xt_TPROXY: Can be used only with -p tcp or -p udp [ 972.123351][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 972.267062][T30500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 972.331225][T30737] netlink: 'syz.0.6134': attribute type 11 has an invalid length. [ 972.367344][T30500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.385037][T30500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 972.408257][T30500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.418614][T30738] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6133'. [ 972.430240][T30500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 972.468341][T30500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 972.485111][T30740] netlink: 'syz.2.6133': attribute type 13 has an invalid length. [ 972.983422][T13276] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 973.069689][ T5746] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 973.185073][T30775] dvmrp0: left allmulticast mode [ 973.252959][ T5746] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 973.286606][T30757] mac80211_hwsim hwsim54 syzkaller0: entered promiscuous mode [ 973.294500][T30757] mac80211_hwsim hwsim54 syzkaller0: entered allmulticast mode [ 973.583983][T30500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.611993][T30500] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.632087][ T9708] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.639363][ T9708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.673367][T13276] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 973.690222][T14378] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.697512][T14378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.799026][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6148'. [ 974.059079][T30798] netlink: 'syz.2.6147': attribute type 1 has an invalid length. [ 974.163706][T30798] bond14: entered promiscuous mode [ 974.169585][T30798] 8021q: adding VLAN 0 to HW filter on device bond14 [ 974.454951][T30816] netlink: 'syz.3.6153': attribute type 2 has an invalid length. [ 974.471157][T30816] netlink: 'syz.3.6153': attribute type 1 has an invalid length. [ 974.488966][T30816] netlink: 'syz.3.6153': attribute type 1 has an invalid length. [ 974.513588][T30816] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6153'. [ 974.604049][T30798] bond14: (slave bridge6): making interface the new active one [ 974.615135][T30798] bridge6: entered promiscuous mode [ 975.047511][T30798] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 975.285309][T30827] netlink: 'syz.0.6156': attribute type 1 has an invalid length. [ 975.310163][T30827] nbd: couldn't find device at index -427251215 [ 975.336087][T30827] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6156'. [ 976.449949][T30500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.673729][T30873] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6168'. [ 977.173031][T30882] netlink: 'syz.0.6170': attribute type 1 has an invalid length. [ 977.300655][T30882] 8021q: adding VLAN 0 to HW filter on device bond13 [ 977.446442][T30883] bond13: (slave veth15): Enslaving as an active interface with a down link [ 977.498706][T30500] veth0_vlan: entered promiscuous mode [ 977.523957][T30500] veth1_vlan: entered promiscuous mode [ 977.586918][T30883] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 977.613470][T30883] bond13: (slave batadv2): making interface the new active one [ 977.632982][T30883] batadv2: entered promiscuous mode [ 977.639447][T30883] bond13: (slave batadv2): Enslaving as an active interface with an up link [ 977.698941][T30888] bond13 (unregistering): (slave veth15): Releasing active interface [ 977.720086][T30888] bond13 (unregistering): (slave batadv2): Releasing active interface [ 977.779282][T30888] bond13 (unregistering): Released all slaves [ 977.862582][T30500] veth0_macvtap: entered promiscuous mode [ 977.887165][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 977.921058][T30500] veth1_macvtap: entered promiscuous mode [ 977.951930][T30500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.967105][T30500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.059793][ T9708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.075653][T30916] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6176'. [ 978.092075][ T9708] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.101250][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6176'. [ 978.112649][ T9708] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.119199][T30918] netlink: 'syz.0.6177': attribute type 21 has an invalid length. [ 978.123115][ T9708] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.151099][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6176'. [ 978.170787][T30918] netlink: 'syz.0.6177': attribute type 6 has an invalid length. [ 978.178339][T30920] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6177'. [ 978.193665][T30918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6177'. [ 978.558882][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.577503][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.627042][T30932] xt_hashlimit: size too large, truncated to 1048576 [ 978.634962][T30933] veth1_to_bond: entered allmulticast mode [ 978.645275][T30929] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6181'. [ 978.662798][T15478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.682525][T15478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.394949][T25793] IPVS: starting estimator thread 0... [ 979.511209][T30953] IPVS: using max 26 ests per chain, 62400 per kthread [ 979.831658][T30955] lo speed is unknown, defaulting to 1000 [ 979.887861][ T5656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 979.902461][ T5656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 979.912765][ T5656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 979.924630][T30955] virt_wifi0 speed is unknown, defaulting to 1000 [ 979.937978][ T5656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 979.958172][ T5656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 979.968360][T30967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6188'. [ 980.053669][T30967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6188'. [ 980.091222][T30967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6188'. [ 980.119930][T30967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6188'. [ 980.164071][T30967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6188'. [ 980.430479][T30967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6188'. [ 981.018165][T30989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6179'. [ 981.549313][T31002] syz_tun: entered allmulticast mode [ 981.742458][T31014] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6196'. [ 981.826788][T31005] bond1 (unregistering): Released all slaves [ 981.870884][T31017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6197'. [ 981.994166][T30964] lo speed is unknown, defaulting to 1000 [ 982.004881][T30964] virt_wifi0 speed is unknown, defaulting to 1000 [ 982.052843][ T5656] Bluetooth: hci1: command tx timeout [ 982.479582][T31032] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 982.643162][T31034] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6202'. [ 983.025983][T31047] bridge0: port 3(dummy0) entered blocking state [ 983.051443][T31047] bridge0: port 3(dummy0) entered disabled state [ 983.081695][T31047] dummy0: entered allmulticast mode [ 983.215080][T31047] dummy0: entered promiscuous mode [ 983.282092][T31047] bridge0: port 3(dummy0) entered blocking state [ 983.288625][T31047] bridge0: port 3(dummy0) entered forwarding state [ 983.428908][T31051] dummy0: left allmulticast mode [ 983.434752][T31051] dummy0: left promiscuous mode [ 983.440110][T31051] bridge0: port 3(dummy0) entered disabled state [ 983.504316][T30964] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.512420][T30964] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.519804][T30964] bridge_slave_0: entered allmulticast mode [ 983.529462][T30964] bridge_slave_0: entered promiscuous mode [ 983.539030][T30964] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.547557][T30964] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.555812][T30964] bridge_slave_1: entered allmulticast mode [ 983.565129][T30964] bridge_slave_1: entered promiscuous mode [ 983.694573][T30964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.736809][T31074] syz_tun: entered allmulticast mode [ 983.799742][T30964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.868506][T31080] netlink: 'syz.4.6211': attribute type 3 has an invalid length. [ 983.978784][T30964] team0: Port device team_slave_0 added [ 984.015564][T30964] team0: Port device team_slave_1 added [ 984.065569][T31086] netlink: 'syz.3.6212': attribute type 12 has an invalid length. [ 984.131550][ T5656] Bluetooth: hci1: command tx timeout [ 984.205171][T30964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.247979][T30964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.374119][T30964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.440545][T30964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.468463][T30964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.541348][T30964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.561793][ C0] ip6_tunnel: d xmit: Local address not yet configured! [ 985.853069][T31099] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 985.883866][T31099] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 985.915394][T31099] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 986.044848][T30964] hsr_slave_0: entered promiscuous mode [ 986.084856][T30964] hsr_slave_1: entered promiscuous mode [ 986.114041][T30964] debugfs: 'hsr0' already exists in 'hsr' [ 986.130880][T30964] Cannot create hsr debugfs directory [ 986.203554][ T5656] Bluetooth: hci1: command tx timeout [ 986.704210][T31111] __nla_validate_parse: 7 callbacks suppressed [ 986.704235][T31111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6216'. [ 986.828841][T31110] lo speed is unknown, defaulting to 1000 [ 986.869634][T31110] virt_wifi0 speed is unknown, defaulting to 1000 [ 987.261862][T30964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.279855][T31125] netlink: 'syz.3.6221': attribute type 83 has an invalid length. [ 987.315715][T30964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.593751][T31126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6221'. [ 987.606255][T31126] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6221'. [ 987.799883][T31143] xt_hashlimit: size too large, truncated to 1048576 [ 987.808547][T31143] xt_hashlimit: max too large, truncated to 1048576 [ 987.994757][T30964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.008458][T30964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.126577][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 988.159117][T31149] netlink: 'syz.1.6229': attribute type 13 has an invalid length. [ 988.252393][T30964] team0: Port device netdevsim1 removed [ 988.281904][T27521] Bluetooth: hci1: command tx timeout [ 988.306611][T30964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.317843][T30964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.720209][T31161] netlink: 360 bytes leftover after parsing attributes in process `syz.2.6222'. [ 989.232861][T30964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.258932][T30964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.864992][T31179] netlink: 'syz.3.6237': attribute type 1 has an invalid length. [ 989.967859][T31185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6237'. [ 990.125279][T31179] bond1: entered promiscuous mode [ 990.139199][T31179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.361165][T27521] Bluetooth: hci1: command 0x0405 tx timeout [ 990.483147][T30964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 990.517724][T31195] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6242'. [ 990.565151][T31196] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6241'. [ 990.579412][T30964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 990.588958][T30964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 990.604065][T30964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 990.639884][T30964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 990.683228][T30964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 990.720247][T30964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 990.781891][T30964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 990.972933][T31211] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 991.145195][T30964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.228908][T31199] syzkaller1: entered promiscuous mode [ 991.251311][T31199] syzkaller1: entered allmulticast mode [ 991.287250][T31221] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 991.531110][T30964] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.599277][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.606615][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.671584][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.678886][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.967573][T31229] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6248'. [ 992.178870][T30964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 992.213781][T30964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 992.675517][T31253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6253'. [ 992.867855][T31258] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 993.459520][T31236] bond15: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 993.473719][T31236] bond15 (unregistering): Released all slaves [ 993.706285][T31251] debugfs: '1^!Y [ 993.706285][T31251] 3UH5rBn\' already exists in 'ieee80211' [ 993.880329][T31257] veth1_to_bond: entered allmulticast mode [ 994.226126][T31274] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6254'. [ 994.479512][T31283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6257'. [ 994.526770][T31283] vlan2: entered promiscuous mode [ 994.546184][T31283] batadv0: entered promiscuous mode [ 994.794881][T31291] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6259'. [ 994.907298][T31298] sctp: [Deprecated]: syz.4.6259 (pid 31298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 994.907298][T31298] Use struct sctp_sack_info instead [ 994.948313][T31298] netlink: 'syz.4.6259': attribute type 1 has an invalid length. [ 995.111449][T31298] netlink: 'syz.4.6259': attribute type 3 has an invalid length. [ 995.145090][T31298] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6259'. [ 995.178743][T30964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.288442][T31298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 995.309511][T31298] bond1: (slave bond2): making interface the new active one [ 995.321698][T31298] bond1: (slave bond2): Enslaving as an active interface with an up link [ 995.432258][T31316] bridge_slave_1: default FDB implementation only supports local addresses [ 995.459451][T31317] bridge_slave_1: default FDB implementation only supports local addresses [ 995.472424][T31316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6264'. [ 995.472429][T31317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6264'. [ 995.559741][T30964] veth0_vlan: entered promiscuous mode [ 995.602819][T30964] veth1_vlan: entered promiscuous mode [ 995.674177][T30964] veth0_macvtap: entered promiscuous mode [ 995.736531][T30964] veth1_macvtap: entered promiscuous mode [ 995.820724][T31322] bond11 (unregistering): Released all slaves [ 995.830023][T31332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6267'. [ 995.864232][T30964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.883396][T31332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6267'. [ 995.931249][T30964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.948686][T31322] sit0: entered promiscuous mode [ 996.014711][T31322] netlink: 'syz.1.6267': attribute type 1 has an invalid length. [ 996.070453][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.110137][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.146272][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.172470][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.500369][ T9709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.539502][ T9709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.639102][T15478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.669860][T15478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.749129][T31347] netlink: 'syz.1.6276': attribute type 7 has an invalid length. [ 996.975802][T31354] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 996.996663][T31355] __nla_validate_parse: 3 callbacks suppressed [ 996.996683][T31355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6185'. [ 997.031695][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6278'. [ 997.286984][T31358] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.526396][T27521] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 997.546768][T27521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 997.560886][T27521] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 997.579418][T27521] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 997.601568][T27521] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 998.300739][T31387] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 998.346777][T31387] bond3 (unregistering): Released all slaves [ 998.413617][T31396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6289'. [ 998.588038][T31398] vlan3: entered promiscuous mode [ 998.668395][T31371] lo speed is unknown, defaulting to 1000 [ 998.676774][T31371] virt_wifi0 speed is unknown, defaulting to 1000 [ 998.748696][T31398] mac80211_hwsim hwsim54 syzkaller0: Caught tx_queue_len zero misconfig [ 998.799414][T31398] tipc: Enabled bearer , priority 0 [ 999.259144][T31410] openvswitch: netlink: EtherType 50a is less than min 600 [ 999.425876][T31421] bridge_slave_0: left allmulticast mode [ 999.432650][T31421] bridge_slave_0: left promiscuous mode [ 999.438602][T31421] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.517837][T31421] bridge_slave_1: left allmulticast mode [ 999.554510][T31421] bridge_slave_1: left promiscuous mode [ 999.566112][T31421] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.623558][T31421] bond0: (slave bond_slave_0): Releasing backup interface [ 999.677907][T31421] bond0: (slave bond_slave_1): Releasing backup interface [ 999.708014][T31421] team0: Port device team_slave_0 removed [ 999.733790][ T5656] Bluetooth: hci3: command tx timeout [ 999.789839][T31421] team0: Port device team_slave_1 removed [ 999.797469][T31421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.806451][T31421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.823358][T31421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.835681][T31421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.847257][T31421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 999.999483][T26418] tipc: Node number set to 2429752777 [ 1000.008189][T31371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.020750][T31371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.028249][T31371] bridge_slave_0: entered allmulticast mode [ 1000.052062][T31371] bridge_slave_0: entered promiscuous mode [ 1000.096375][T31371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.143718][T31371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.151433][ T29] audit: type=1107 audit(1781588113.959:12): pid=31438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='n?8]PN|["ޮI\N2&WD$͝B$ͧDH!eI;PWIH[yV&%]: [ 1000.151433][ T29] " Jy0D-0l'2;m8jPbIfBujT+|)kwVSB-MZ>{{ō!"' [ 1000.211132][T31371] bridge_slave_1: entered allmulticast mode [ 1000.228503][T31371] bridge_slave_1: entered promiscuous mode [ 1000.326373][T31445] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6301'. [ 1000.401449][T31371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.425306][T31371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.564364][T31371] team0: Port device team_slave_0 added [ 1000.585801][T31371] team0: Port device team_slave_1 added [ 1000.768311][T31371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.808362][T31371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.871196][T31371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.905115][T31371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.923786][T31371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.970035][T31371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.037583][T31371] hsr_slave_0: entered promiscuous mode [ 1001.052175][T31454] netlink: 'syz.3.6305': attribute type 22 has an invalid length. [ 1001.088140][T31371] hsr_slave_1: entered promiscuous mode [ 1001.104754][T31371] debugfs: 'hsr0' already exists in 'hsr' [ 1001.123473][T31371] Cannot create hsr debugfs directory [ 1001.803667][ T5656] Bluetooth: hci3: command tx timeout [ 1001.827608][T31371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.840650][T31371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.211393][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1002.783492][T31371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.795312][T31371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.060549][T31501] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6317'. [ 1003.114525][T31371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.146686][T31371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.387110][T31513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6320'. [ 1003.405112][T31371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.429207][T31371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.878737][T31523] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1003.898366][ T5656] Bluetooth: hci3: command tx timeout [ 1004.084989][T31371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1004.106950][T31371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.143886][T31371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1004.174036][T31371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1004.222906][T31371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1004.257888][T31371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.274226][T31371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1004.309186][T31371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.409344][T31550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1004.482124][T31552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6327'. [ 1004.494539][T31552] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6327'. [ 1004.505783][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1004.515191][T31557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1004.598546][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1004.607562][T31563] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6333'. [ 1004.644187][ T3386] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.653264][ T3386] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.668464][T31543] syzkaller1: entered promiscuous mode [ 1004.676027][T31543] syzkaller1: entered allmulticast mode [ 1004.722596][ T3386] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.270453][T31582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1005.313634][T31371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.349949][T31581] can: request_module (can-proto-3) failed. [ 1005.371293][T31371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.493759][ T3386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.501021][ T3386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.630465][ T3386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.637815][ T3386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.748560][T31592] netlink: 'syz.2.6341': attribute type 23 has an invalid length. [ 1005.973900][ T5656] Bluetooth: hci3: command tx timeout [ 1006.151414][T31615] netlink: zone id is out of range [ 1006.345762][T31622] netlink: 'syz.4.6349': attribute type 1 has an invalid length. [ 1006.432528][T31626] netlink: 'syz.0.6351': attribute type 30 has an invalid length. [ 1006.985733][T31637] netlink: 'syz.0.6354': attribute type 1 has an invalid length. [ 1006.994139][T31637] NCSI netlink: No device for ifindex 0 [ 1007.333446][T31623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.582436][T31371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.705207][T31371] veth0_vlan: entered promiscuous mode [ 1007.737074][T31371] veth1_vlan: entered promiscuous mode [ 1007.828303][T31371] veth0_macvtap: entered promiscuous mode [ 1007.856210][T31371] veth1_macvtap: entered promiscuous mode [ 1007.936201][T31371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.989506][T31371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.021883][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.050255][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.113366][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.174839][T31667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.182179][T31667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.339977][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.359410][T31677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.372026][T31677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.383080][T31677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.391937][T31677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.569924][T31698] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1010.177643][ T9709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.187075][T31734] netlink: 'syz.0.6373': attribute type 1 has an invalid length. [ 1010.197957][ T9709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.242588][T31734] __nla_validate_parse: 14 callbacks suppressed [ 1010.242608][T31734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6373'. [ 1010.270448][ T9705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.317043][ T9705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.386659][T31741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6373'. [ 1011.163692][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1011.261557][T31777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1011.285734][T31777] IPv6: NLM_F_CREATE should be specified when creating new route [ 1011.473599][T31782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1011.504657][T31782] netlink: 'syz.1.6383': attribute type 11 has an invalid length. [ 1011.532743][T31782] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1011.546743][T31784] ip6tnl0: entered promiscuous mode [ 1011.553456][T31784] ip6tnl0: entered allmulticast mode [ 1011.876455][T31801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1012.219317][T31813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6389'. [ 1012.632977][T31804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6389'. [ 1012.860692][T31822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6393'. [ 1012.955073][T31822] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6393'. [ 1013.032868][T31827] syzkaller1: entered promiscuous mode [ 1013.060474][T31827] syzkaller1: entered allmulticast mode [ 1013.958798][ T9709] bond1: left allmulticast mode [ 1013.967316][ T9709] bond1: left promiscuous mode [ 1013.979875][ T9709] bridge0: port 3(bond1) entered disabled state [ 1014.022758][ T9709] bridge_slave_1: left allmulticast mode [ 1014.028471][ T9709] bridge_slave_1: left promiscuous mode [ 1014.058935][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.117095][ T9709] bridge_slave_0: left allmulticast mode [ 1014.146953][ T9709] bridge_slave_0: left promiscuous mode [ 1014.175305][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.262022][ T9709] pim6reg: left allmulticast mode [ 1014.267570][ T9709] pimreg: left allmulticast mode [ 1015.187661][ T9709] bond10 (unregistering): (slave gretap1): Releasing active interface [ 1015.343189][ T9709] bridge0 (unregistering): left promiscuous mode [ 1015.444704][ T9709] bond9 (unregistering): (slave bridge9): Releasing backup interface [ 1015.456419][ T9709] bridge9 (unregistering): left promiscuous mode [ 1015.463395][ T9709] bridge9 (unregistering): left allmulticast mode [ 1015.516546][ T9709] bond1 (unregistering): Released all slaves [ 1015.556943][ T9709] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1015.572134][ T9709] bond0 (unregistering): Released all slaves [ 1015.587286][ T9709] bond2 (unregistering): Released all slaves [ 1015.603397][ T9709] bond3 (unregistering): (slave veth3): Releasing active interface [ 1015.616145][ T9709] bond3 (unregistering): (slave veth5): Releasing active interface [ 1015.634138][ T9709] bond3 (unregistering): Released all slaves [ 1015.655915][ T9709] bond4 (unregistering): Released all slaves [ 1015.679193][ T9709] bond5 (unregistering): Released all slaves [ 1015.695779][ T9709] bond6 (unregistering): Released all slaves [ 1015.712333][ T9709] bond7 (unregistering): Released all slaves [ 1015.766259][ T9709] bond8 (unregistering): Released all slaves [ 1015.832872][ T9709] bond9 (unregistering): Released all slaves [ 1015.850522][ T9709] bond10 (unregistering): Released all slaves [ 1016.124640][ T13] wlan1: Trigger new scan to find an IBSS to join [ 1016.897856][T31914] netlink: 'syz.4.6407': attribute type 1 has an invalid length. [ 1017.311995][T31914] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1017.440492][ T9709] tipc: Left network mode [ 1017.806310][T31929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1018.050472][T31939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6413'. [ 1018.061624][T31940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6413'. [ 1018.099806][T31939] sctp: [Deprecated]: syz.4.6413 (pid 31939) Use of int in max_burst socket option. [ 1018.099806][T31939] Use struct sctp_assoc_value instead [ 1018.171745][T31935] block nbd8: server does not support multiple connections per device. [ 1018.190306][T31935] block nbd8: shutting down sockets [ 1018.212471][T31944] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6411'. [ 1018.728847][T31961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6417'. [ 1018.832685][T31956] IPVS: Scheduler module ip_vs_ not found [ 1018.929323][T31935] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1018.951392][T31935] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1019.089083][T31971] tipc: Started in network mode [ 1019.121030][T31971] tipc: Node identity a2fc4ab19599, cluster identity 4711 [ 1019.148744][T31971] tipc: Enabled bearer , priority 0 [ 1019.165818][ T197] wlan1: Trigger new scan to find an IBSS to join [ 1019.198343][T31971] syzkaller0: entered promiscuous mode [ 1019.215619][T31971] syzkaller0: entered allmulticast mode [ 1019.291230][T31935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1019.328448][T31935] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1019.335034][T31971] tipc: Resetting bearer [ 1019.478931][T31971] tipc: Resetting bearer [ 1019.586521][T31971] tipc: Disabling bearer [ 1019.677955][T31935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1019.701247][T31935] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1019.821150][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6424'. [ 1019.849384][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6424'. [ 1019.863251][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6424'. [ 1019.877497][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6424'. [ 1019.911927][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6424'. [ 1020.106928][T31987] tap0: tun_chr_ioctl cmd 1074025672 [ 1020.116280][T31987] tap0: ignored: set checksum disabled [ 1020.165377][T31996] netlink: 'syz.3.6426': attribute type 1 has an invalid length. [ 1020.728704][T31996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1020.805964][T31996] bond2: (slave bond3): making interface the new active one [ 1020.842106][T31996] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1021.015087][T32023] bond0: Caught tx_queue_len zero misconfig [ 1026.871122][T32064] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1026.916890][T32064] __nla_validate_parse: 27 callbacks suppressed [ 1026.916913][T32064] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6438'. [ 1026.985260][T32069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6440'. [ 1026.995120][ T9709] veth0_to_team: left promiscuous mode [ 1027.109106][ T9709] hsr_slave_0: left promiscuous mode [ 1027.135324][ T9709] hsr_slave_1: left promiscuous mode [ 1027.144330][T32076] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6443'. [ 1027.154812][T32076] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6443'. [ 1028.008616][ T9709] team0 (unregistering): Port device team_slave_1 removed [ 1028.056429][ T9709] team0 (unregistering): Port device team_slave_0 removed [ 1028.199809][T32095] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1028.280248][T32099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1028.426768][T32071] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1028.905887][T32107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6447'. [ 1029.328696][T32127] syzkaller1: entered promiscuous mode [ 1029.362732][T32127] syzkaller1: entered allmulticast mode [ 1029.427595][T32127] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1029.685130][T32135] ip6tnl0: left promiscuous mode [ 1029.712596][T32135] ip6tnl0: left allmulticast mode [ 1030.763434][T32135] syzkaller1: left promiscuous mode [ 1030.775455][T32135] syzkaller1: left allmulticast mode [ 1030.815225][T32136] debugfs: '1^!Y [ 1030.815225][T32136] 3UH5rBn\' already exists in 'ieee80211' [ 1030.878568][ T9709] IPVS: stop unused estimator thread 0... [ 1030.958092][T15478] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.967445][T15478] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.048858][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.081902][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.144226][T32144] lo speed is unknown, defaulting to 1000 [ 1031.163003][T32144] virt_wifi0 speed is unknown, defaulting to 1000 [ 1031.268961][T32189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6460'. [ 1031.308735][T32186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1031.667193][T25793] IPVS: starting estimator thread 0... [ 1031.675837][T32201] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1031.791980][T32202] IPVS: using max 27 ests per chain, 64800 per kthread [ 1032.086819][T32173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1032.102568][T32211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6464'. [ 1032.137923][T32173] netlink: 'syz.2.6457': attribute type 7 has an invalid length. [ 1032.148503][T32219] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6467'. [ 1032.156455][T32173] netlink: 'syz.2.6457': attribute type 8 has an invalid length. [ 1032.189952][T14378] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.199228][T32211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6464'. [ 1032.226897][T14378] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.253672][T14378] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.265847][T14378] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.309283][T32173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1032.383695][T32225] bridge_slave_0: left allmulticast mode [ 1032.396657][T32225] bridge_slave_0: left promiscuous mode [ 1032.405067][T32225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.465778][T32225] bridge_slave_1: left allmulticast mode [ 1032.480408][T32225] bridge_slave_1: left promiscuous mode [ 1032.489638][T32225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.562812][T32225] bond0: (slave bond_slave_0): Releasing backup interface [ 1032.625007][T32225] bond0: (slave bond_slave_1): Releasing backup interface [ 1032.694325][T32225] team0: Port device team_slave_0 removed [ 1032.728328][T32225] team0: Port device team_slave_1 removed [ 1032.748419][T32225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1033.198879][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1033.371654][T32255] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6475'. [ 1033.516521][T32255] nbd8: detected capacity change from 0 to 3 [ 1033.530554][ T5656] block nbd8: Receive control failed (result -32) [ 1033.609946][T32181] block nbd8: Dead connection, failed to find a fallback [ 1033.658523][T32181] block nbd8: shutting down sockets [ 1033.690087][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.740092][T32181] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1033.770378][T32181] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1033.799678][T32269] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1033.811288][T32271] can: request_module (can-proto-0) failed. [ 1033.831269][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1033.879265][T32181] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1033.926134][T32181] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1033.945752][T32278] sctp: [Deprecated]: syz.3.6483 (pid 32278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1033.945752][T32278] Use struct sctp_sack_info instead [ 1033.965831][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.017653][T32181] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1034.066934][T32181] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1034.116948][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.168713][T32181] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1034.215500][T32181] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1034.248764][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.300722][T32181] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1034.339159][T32181] Buffer I/O error on dev nbd8, logical block 1, async page read [ 1034.380223][T32181] ldm_validate_partition_table(): Disk read failed. [ 1034.409979][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.440199][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.466442][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.486856][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.510619][T32181] Dev nbd8: unable to read RDB block 0 [ 1034.537776][T32181] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1034.543980][T32298] netlink: 'syz.3.6489': attribute type 1 has an invalid length. [ 1034.550997][T32181] nbd8: unable to read partition table [ 1034.563193][T32181] nbd8: partition table beyond EOD, truncated [ 1034.604496][T32181] ldm_validate_partition_table(): Disk read failed. [ 1034.612410][T32181] Dev nbd8: unable to read RDB block 0 [ 1034.618878][T32181] nbd8: unable to read partition table [ 1034.625959][T32181] nbd8: partition table beyond EOD, truncated [ 1034.687400][T32298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1034.747013][T32298] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 1034.758737][T32298] netlink: 'syz.3.6489': attribute type 10 has an invalid length. [ 1034.767163][T32298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6489'. [ 1034.791129][T15478] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1034.855506][T32315] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1034.872328][T32319] xt_hashlimit: max too large, truncated to 1048576 [ 1034.883141][T32316] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6494'. [ 1034.892802][T32319] No such timeout policy "syz1" [ 1034.907157][T32307] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 1034.917598][T32298] dummy0: entered promiscuous mode [ 1034.951107][T15478] bond4: (slave dummy0): link status up again after 0 ms [ 1034.962915][T15478] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1034.974039][T32298] bond4: (slave dummy0): Removing an active aggregator [ 1034.983772][T32298] bond4: (slave dummy0): Releasing backup interface [ 1034.992182][T32298] bond4: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1035.010097][T32313] netlink: 'syz.4.6493': attribute type 13 has an invalid length. [ 1035.069092][T32319] team0: Port device syz_tun added [ 1035.472042][T32336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6496'. [ 1035.637681][T32355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.670486][T32365] bond5 (unregistering): Released all slaves [ 1037.126187][T32391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.140624][T32389] __nla_validate_parse: 2 callbacks suppressed [ 1037.140650][T32389] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6508'. [ 1038.020445][T32400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6512'. [ 1038.212523][T32405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6514'. [ 1038.515891][T32413] [ 1038.518291][T32413] ====================================================== [ 1038.525400][T32413] WARNING: possible circular locking dependency detected [ 1038.532547][T32413] syzkaller #0 Not tainted [ 1038.537047][T32413] ------------------------------------------------------ [ 1038.544150][T32413] syz.0.6516/32413 is trying to acquire lock: [ 1038.550294][T32413] ffffffff8ea84d80 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 1038.559564][T32413] [ 1038.559564][T32413] but task is already holding lock: [ 1038.566951][T32413] ffff888036c80f78 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1038.576492][T32413] [ 1038.576492][T32413] which lock already depends on the new lock. [ 1038.576492][T32413] [ 1038.586910][T32413] [ 1038.586910][T32413] the existing dependency chain (in reverse order) is: [ 1038.595932][T32413] [ 1038.595932][T32413] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1038.603589][T32413] __might_fault+0xcb/0x130 [ 1038.608669][T32413] _copy_from_user+0x28/0xb0 [ 1038.613795][T32413] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1038.620387][T32413] ip_generic_getfrag+0x149/0x2d0 [ 1038.626011][T32413] __ip6_append_data+0x3aef/0x4080 [ 1038.631702][T32413] ip6_append_data+0x108/0x270 [ 1038.637022][T32413] rawv6_sendmsg+0x1298/0x18c0 [ 1038.642378][T32413] ____sys_sendmsg+0x853/0xa20 [ 1038.647669][T32413] ___sys_sendmsg+0x2a5/0x360 [ 1038.652888][T32413] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1038.658353][T32413] do_syscall_64+0x174/0x580 [ 1038.663486][T32413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.670021][T32413] [ 1038.670021][T32413] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1038.678383][T32413] lock_sock_nested+0x41/0x100 [ 1038.683690][T32413] inet_shutdown+0x6a/0x390 [ 1038.688833][T32413] nbd_mark_nsock_dead+0x2cb/0x550 [ 1038.694531][T32413] recv_work+0x1cef/0x1e10 [ 1038.699677][T32413] process_scheduled_works+0xa8e/0x14e0 [ 1038.705761][T32413] worker_thread+0xa47/0xfb0 [ 1038.710878][T32413] kthread+0x389/0x470 [ 1038.715475][T32413] ret_from_fork+0x514/0xb70 [ 1038.720616][T32413] ret_from_fork_asm+0x1a/0x30 [ 1038.725907][T32413] [ 1038.725907][T32413] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1038.733586][T32413] __mutex_lock+0x19d/0x1590 [ 1038.738704][T32413] nbd_queue_rq+0x373/0x1150 [ 1038.743829][T32413] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1038.749966][T32413] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1038.756864][T32413] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1038.763374][T32413] blk_mq_run_hw_queue+0x348/0x4f0 [ 1038.769012][T32413] blk_mq_dispatch_list+0xd11/0xe10 [ 1038.774739][T32413] blk_mq_flush_plug_list+0x45f/0x540 [ 1038.780644][T32413] __blk_flush_plug+0x3ed/0x4d0 [ 1038.786080][T32413] __submit_bio+0x465/0x560 [ 1038.791126][T32413] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1038.797484][T32413] block_read_full_folio+0x599/0x830 [ 1038.803297][T32413] filemap_read_folio+0x12c/0x3a0 [ 1038.808876][T32413] do_read_cache_folio+0x354/0x590 [ 1038.814519][T32413] read_part_sector+0xb6/0x2b0 [ 1038.819856][T32413] adfspart_check_ICS+0xb1/0x960 [ 1038.825320][T32413] bdev_disk_changed+0x82b/0x1780 [ 1038.830875][T32413] blkdev_get_whole+0x372/0x510 [ 1038.836290][T32413] bdev_open+0x324/0xd70 [ 1038.841057][T32413] blkdev_open+0x461/0x600 [ 1038.846000][T32413] do_dentry_open+0x816/0x1380 [ 1038.851291][T32413] vfs_open+0x3b/0x340 [ 1038.855886][T32413] path_openat+0x2e3b/0x3890 [ 1038.861009][T32413] do_file_open+0x23e/0x4a0 [ 1038.866062][T32413] do_sys_openat2+0x113/0x200 [ 1038.871702][T32413] __x64_sys_openat+0x138/0x170 [ 1038.877078][T32413] do_syscall_64+0x174/0x580 [ 1038.882193][T32413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.888615][T32413] [ 1038.888615][T32413] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1038.895831][T32413] __mutex_lock+0x19d/0x1590 [ 1038.900952][T32413] nbd_queue_rq+0xc1/0x1150 [ 1038.905989][T32413] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1038.912065][T32413] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1038.918946][T32413] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1038.925454][T32413] blk_mq_run_hw_queue+0x348/0x4f0 [ 1038.931093][T32413] blk_mq_dispatch_list+0xd11/0xe10 [ 1038.936820][T32413] blk_mq_flush_plug_list+0x45f/0x540 [ 1038.942717][T32413] __blk_flush_plug+0x3ed/0x4d0 [ 1038.948112][T32413] __submit_bio+0x465/0x560 [ 1038.953228][T32413] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1038.959396][T32413] block_read_full_folio+0x599/0x830 [ 1038.965215][T32413] filemap_read_folio+0x12c/0x3a0 [ 1038.970780][T32413] do_read_cache_folio+0x354/0x590 [ 1038.976441][T32413] read_part_sector+0xb6/0x2b0 [ 1038.981734][T32413] adfspart_check_ICS+0xb1/0x960 [ 1038.987203][T32413] bdev_disk_changed+0x82b/0x1780 [ 1038.992769][T32413] blkdev_get_whole+0x372/0x510 [ 1038.998150][T32413] bdev_open+0x324/0xd70 [ 1039.002916][T32413] blkdev_open+0x461/0x600 [ 1039.007863][T32413] do_dentry_open+0x816/0x1380 [ 1039.013156][T32413] vfs_open+0x3b/0x340 [ 1039.017749][T32413] path_openat+0x2e3b/0x3890 [ 1039.022874][T32413] do_file_open+0x23e/0x4a0 [ 1039.027911][T32413] do_sys_openat2+0x113/0x200 [ 1039.033113][T32413] __x64_sys_openat+0x138/0x170 [ 1039.038493][T32413] do_syscall_64+0x174/0x580 [ 1039.043614][T32413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.050043][T32413] [ 1039.050043][T32413] -> #3 (set->srcu){.+.+}-{0:0}: [ 1039.057182][T32413] __synchronize_srcu+0xc9/0x2f0 [ 1039.062645][T32413] elevator_switch+0x1e8/0x7b0 [ 1039.068021][T32413] elevator_change+0x2fa/0x480 [ 1039.073311][T32413] elevator_set_default+0x375/0x440 [ 1039.079038][T32413] blk_register_queue+0x3f3/0x4e0 [ 1039.084592][T32413] __add_disk+0x6cb/0xe30 [ 1039.089451][T32413] add_disk_fwnode+0xfb/0x4b0 [ 1039.094655][T32413] nbd_dev_add+0x733/0xb60 [ 1039.099608][T32413] nbd_init+0x15f/0x1e0 [ 1039.104384][T32413] do_one_initcall+0x250/0x870 [ 1039.109702][T32413] do_initcall_level+0x10a/0x1a0 [ 1039.115166][T32413] do_initcalls+0x59/0xa0 [ 1039.120019][T32413] kernel_init_freeable+0x29d/0x3e0 [ 1039.125741][T32413] kernel_init+0x1d/0x1d0 [ 1039.130610][T32413] ret_from_fork+0x514/0xb70 [ 1039.135729][T32413] ret_from_fork_asm+0x1a/0x30 [ 1039.141045][T32413] [ 1039.141045][T32413] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1039.148877][T32413] __mutex_lock+0x19d/0x1590 [ 1039.154017][T32413] elevator_change+0x1af/0x480 [ 1039.159323][T32413] elevator_set_none+0xb5/0x140 [ 1039.164702][T32413] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1039.171046][T32413] nbd_start_device+0x189/0xb30 [ 1039.176586][T32413] nbd_genl_connect+0x1597/0x1c10 [ 1039.182187][T32413] genl_family_rcv_msg_doit+0x233/0x340 [ 1039.188290][T32413] genl_rcv_msg+0x614/0x7a0 [ 1039.193331][T32413] netlink_rcv_skb+0x226/0x4a0 [ 1039.198621][T32413] genl_rcv+0x28/0x40 [ 1039.203133][T32413] netlink_unicast+0x7bb/0x940 [ 1039.208519][T32413] netlink_sendmsg+0x813/0xb40 [ 1039.213834][T32413] ____sys_sendmsg+0x9b9/0xa20 [ 1039.219130][T32413] ___sys_sendmsg+0x2a5/0x360 [ 1039.224335][T32413] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1039.229802][T32413] do_syscall_64+0x174/0x580 [ 1039.234951][T32413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.241376][T32413] [ 1039.241376][T32413] -> #1 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1039.250045][T32413] blk_alloc_queue+0x544/0x690 [ 1039.255344][T32413] __blk_mq_alloc_disk+0x194/0x390 [ 1039.260986][T32413] nbd_dev_add+0x494/0xb60 [ 1039.266020][T32413] nbd_init+0x15f/0x1e0 [ 1039.270705][T32413] do_one_initcall+0x250/0x870 [ 1039.275996][T32413] do_initcall_level+0x10a/0x1a0 [ 1039.281459][T32413] do_initcalls+0x59/0xa0 [ 1039.286313][T32413] kernel_init_freeable+0x29d/0x3e0 [ 1039.292033][T32413] kernel_init+0x1d/0x1d0 [ 1039.296896][T32413] ret_from_fork+0x514/0xb70 [ 1039.302011][T32413] ret_from_fork_asm+0x1a/0x30 [ 1039.307328][T32413] [ 1039.307328][T32413] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1039.314566][T32413] __lock_acquire+0x1520/0x2cd0 [ 1039.319962][T32413] lock_acquire+0x106/0x350 [ 1039.324994][T32413] fs_reclaim_acquire+0x71/0x100 [ 1039.330473][T32413] prepare_alloc_pages+0x15b/0x650 [ 1039.336122][T32413] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1039.342465][T32413] alloc_pages_mpol+0x212/0x380 [ 1039.347850][T32413] alloc_pages_noprof+0xac/0x2a0 [ 1039.353328][T32413] pte_alloc_one+0x22/0x370 [ 1039.358363][T32413] do_pte_missing+0x13bc/0x3540 [ 1039.363835][T32413] handle_mm_fault+0x1b38/0x3080 [ 1039.369434][T32413] do_user_addr_fault+0x744/0x1340 [ 1039.375099][T32413] exc_page_fault+0x6a/0xc0 [ 1039.380144][T32413] asm_exc_page_fault+0x26/0x30 [ 1039.385524][T32413] rep_movs_alternative+0xf/0x90 [ 1039.391000][T32413] _copy_from_user+0x7a/0xb0 [ 1039.396121][T32413] sco_sock_setsockopt+0x63a/0x10c0 [ 1039.401932][T32413] do_sock_setsockopt+0x17c/0x1b0 [ 1039.408187][T32413] __x64_sys_setsockopt+0x13d/0x1b0 [ 1039.413933][T32413] do_syscall_64+0x174/0x580 [ 1039.419067][T32413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.425486][T32413] [ 1039.425486][T32413] other info that might help us debug this: [ 1039.425486][T32413] [ 1039.435726][T32413] Chain exists of: [ 1039.435726][T32413] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1039.435726][T32413] [ 1039.448580][T32413] Possible unsafe locking scenario: [ 1039.448580][T32413] [ 1039.456104][T32413] CPU0 CPU1 [ 1039.461506][T32413] ---- ---- [ 1039.466886][T32413] rlock(&mm->mmap_lock); [ 1039.471310][T32413] lock(sk_lock-AF_INET6); [ 1039.478349][T32413] lock(&mm->mmap_lock); [ 1039.485206][T32413] lock(fs_reclaim); [ 1039.489287][T32413] [ 1039.489287][T32413] *** DEADLOCK *** [ 1039.489287][T32413] [ 1039.497442][T32413] 2 locks held by syz.0.6516/32413: [ 1039.502659][T32413] #0: ffff88806b379260 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_sock_setsockopt+0x151/0x10c0 [ 1039.514330][T32413] #1: ffff888036c80f78 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1039.524273][T32413] [ 1039.524273][T32413] stack backtrace: [ 1039.530163][T32413] CPU: 1 UID: 0 PID: 32413 Comm: syz.0.6516 Not tainted syzkaller #0 PREEMPT(full) [ 1039.530183][T32413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1039.530194][T32413] Call Trace: [ 1039.530205][T32413] [ 1039.530228][T32413] dump_stack_lvl+0xe8/0x150 [ 1039.530250][T32413] print_circular_bug+0x2e1/0x300 [ 1039.530274][T32413] check_noncircular+0x12e/0x150 [ 1039.530297][T32413] __lock_acquire+0x1520/0x2cd0 [ 1039.530318][T32413] ? mas_next_slot+0xc98/0xd70 [ 1039.530386][T32413] ? prepare_alloc_pages+0x15b/0x650 [ 1039.530410][T32413] lock_acquire+0x106/0x350 [ 1039.530426][T32413] ? prepare_alloc_pages+0x15b/0x650 [ 1039.530453][T32413] ? __lock_acquire+0x683/0x2cd0 [ 1039.530470][T32413] fs_reclaim_acquire+0x71/0x100 [ 1039.530493][T32413] ? prepare_alloc_pages+0x15b/0x650 [ 1039.530517][T32413] prepare_alloc_pages+0x15b/0x650 [ 1039.530543][T32413] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1039.530570][T32413] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1039.530597][T32413] ? __pfx_policy_nodemask+0x10/0x10 [ 1039.530623][T32413] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1039.530652][T32413] alloc_pages_mpol+0x212/0x380 [ 1039.530680][T32413] alloc_pages_noprof+0xac/0x2a0 [ 1039.530695][T32413] pte_alloc_one+0x22/0x370 [ 1039.530716][T32413] do_pte_missing+0x13bc/0x3540 [ 1039.530742][T32413] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1039.530771][T32413] handle_mm_fault+0x1b38/0x3080 [ 1039.530803][T32413] ? handle_mm_fault+0xec/0x3080 [ 1039.530826][T32413] ? __pfx_handle_mm_fault+0x10/0x10 [ 1039.530857][T32413] ? __lock_acquire+0x683/0x2cd0 [ 1039.530875][T32413] ? lock_mm_and_find_vma+0xa7/0x340 [ 1039.530898][T32413] do_user_addr_fault+0x744/0x1340 [ 1039.530921][T32413] exc_page_fault+0x6a/0xc0 [ 1039.530940][T32413] asm_exc_page_fault+0x26/0x30 [ 1039.530957][T32413] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1039.530982][T32413] Code: c4 10 e9 54 5b 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 1039.530998][T32413] RSP: 0018:ffffc90004e77c18 EFLAGS: 00050202 [ 1039.531015][T32413] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1039.531026][T32413] RDX: 0000000000000001 RSI: 0000200000000580 RDI: ffffc90004e77cb0 [ 1039.531039][T32413] RBP: ffffc90004e77e48 R08: 0000000000000003 R09: 0000000000000004 [ 1039.531050][T32413] R10: dffffc0000000000 R11: fffff520009cef96 R12: 0000000000000010 [ 1039.531062][T32413] R13: ffffc90004e77cc0 R14: ffffc90004e77cb0 R15: 0000200000000580 [ 1039.531082][T32413] _copy_from_user+0x7a/0xb0 [ 1039.531102][T32413] sco_sock_setsockopt+0x63a/0x10c0 [ 1039.531126][T32413] ? __pfx_sco_sock_setsockopt+0x10/0x10 [ 1039.531158][T32413] ? __fget_files+0x2a/0x420 [ 1039.531178][T32413] ? aa_sock_opt_perm+0xff/0x1a0 [ 1039.531203][T32413] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1039.531226][T32413] ? __pfx_sco_sock_setsockopt+0x10/0x10 [ 1039.531248][T32413] do_sock_setsockopt+0x17c/0x1b0 [ 1039.531266][T32413] __x64_sys_setsockopt+0x13d/0x1b0 [ 1039.531283][T32413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.531299][T32413] do_syscall_64+0x174/0x580 [ 1039.531318][T32413] ? trace_irq_disable+0x3b/0x140 [ 1039.531345][T32413] ? clear_bhb_loop+0x40/0x90 [ 1039.531366][T32413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.531383][T32413] RIP: 0033:0x7f2a3919ce59 [ 1039.531400][T32413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.531415][T32413] RSP: 002b:00007f2a39ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1039.531432][T32413] RAX: ffffffffffffffda RBX: 00007f2a39415fa0 RCX: 00007f2a3919ce59 [ 1039.531446][T32413] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 [ 1039.531457][T32413] RBP: 00007f2a39232d6f R08: 00000000000000e8 R09: 0000000000000000 [ 1039.531469][T32413] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 1039.531480][T32413] R13: 00007f2a39416038 R14: 00007f2a39415fa0 R15: 00007ffd305d88a8 [ 1039.531499][T32413]