last executing test programs: 31.797479073s ago: executing program 3 (id=2895): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) r3 = socket(0x2b, 0x80801, 0x1) bind$bt_hci(r3, 0x0, 0x0) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000550001050000000000c4000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, [{0x3, 0x9, "d33e6d4706598090a8030037ffffefffffffff23732407010000ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49e04a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb697adf4e1d9090705f85ddf041bc076775f5d27555d3f60c44192fa92eee16828c1c4aa17f4a743e212cd2c084e5acc9aae96852cd54afd2d60786"}]}}}}}}, 0x0) 31.714207082s ago: executing program 3 (id=2896): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x4) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000000000000a004e210000007fff020000000000000000000000000001720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000030000000a004e2000008000fc02000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000001fbfc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200010009fe880000000000000000000000000101d600"/524], 0x210) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x3, 0x7a8, 0x80}, 0xe) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4a, 0x2, 0xfe, 0x9, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x4, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4a, 0x2, 0xfe, 0x9, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x4, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) 31.589992885s ago: executing program 3 (id=2898): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00002900be0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000002000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000020000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x10) 31.36846817s ago: executing program 3 (id=2900): setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000080)=0x7fffffffffffffff, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000080)=0x7fffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0xffffffffffffff8e, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 29.963219234s ago: executing program 3 (id=2903): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) unshare(0x6a040000) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x1) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x17}], 0x400000000000172, 0x4001c00) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) unshare(0x6a040000) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x80002, 0x1) (async) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x17}], 0x400000000000172, 0x4001c00) (async) 29.316402956s ago: executing program 3 (id=2909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES16=r0], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendto$l2tp(r2, &(0x7f0000000d00)="2a15214e2ba685ce303f1b71c46c82b996b9f994ca15c236bc428d30e45a9665633f61758cb8c22d386f8b47709ffd01dbdcab4641429826e3ac69de0486eb7afa6fd4ad060232e3340c2259909e91e56b9f764b7cf48b761365", 0x5a, 0x140000c0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="a000000000000000100100000d0000006daa055b1e488a40ffffffff85a62f2b7bd953018cc44ca052b4f73701c049f90bf1ea967b594e24a4d42d5a26b64eb5bddaac55172e0e1905ec994bce9145f37cf8a4ff88e8cf3145f049a17c74006e28f8584e13a6940d0877a7cf2a2f5b1c99014a83023e7c9212cf68a106a982ceeb817eaf0c92fb6550b9352c8c420eb8a5f6c1ee222c078df314469b7ee6a50018000000000000000d0100000100"/184], 0xb8}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) sendmsg$kcm(r4, &(0x7f0000003f80)={&(0x7f0000000440)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)="8f2b6a1b5385ec39cf53cf38a2a7ba5161cff216f13fcd26c1769876b81ac29bb573de5a30a199fb671071ebbf07f8bc69f3c57807ea92a565755b6b69c86258fc3db9dbeac6c0f74432cce437a2e57191fbd33914b3d8a639c922fb6badbae5864ee25f90c1e9edac588d82c37fc2ab2ac86d76b66df5510bb98bf37ac1b58f7de341a8c1670a0e9b1828275d6f2920a7decfdbe9989b50b14845f6d92d5f92551b296b20f7762e226e155dbb77f6f5e6a4b6fc5bca6d", 0xb7}, {&(0x7f0000000600)="ec46c224fafcdce6ff03dfd20cd432820d68d7e94555bfb887d6191bc3103d781df9ec1b15c26a9dbcd1c8d23a3517ee30e08d93774e70d7822c54dd5cf087c6f32bf894eb2f83bfc52ea6b35b9b3068f1b7e6855bacbf8c0902e0791d4c596434d29c1f2446c5c38b66e05925b324441858f5bda6835836602cfbc4f66bf8888d12bcd1b026a6acb1fe686ab9d2f5953ac8b3ba57019094351f1f0bcb05b02b", 0xa0}, {&(0x7f00000006c0)="40b724dc06397a9984938c94842dcaa5b6040192f92abcf87a37e4e792265035aa861130b45609562c89fe95330bef1cdc8cf841daba1862e1cd48870c5155d43407ea523b630ca0ba865d53e699f20d6e2c5f09e1a61f7635d40422", 0x5c}, {&(0x7f0000000780)="108f355837f952208b4e35ba4c97c06ae6f0528cebd5835c0da4e97729cda48617fc66bc1d74f5e846e1b0e706ae35199420718e90dfcc807e42a486cf5b00a01a76727561e420f22f76758542ea4d4ca4fd72e75f5f5ae6232fcdc0d3673bd32c5d63f792b0046e2e348e1967f2ddb76039458aa39d146504963e13cb6aeea9b2e5492b157825fcf4cdab587c73ad9954d933ebe6cb6b72e62c1ff69acbe53433", 0xa1}, {&(0x7f0000000840)="65384f8680effee1f7f0f82224d3d92ddcf6c8d52f0d63eebd351d2832b528f0c09af2e626ec40b0ecd124ccb6aa05f17af816ae0594e664e95bf402334fa8702fe4bf2caa5eb5065d3be4f78f9d56025500f64893ef9de5ee14cf869f65fcaf2288a451493ea24abb90f91bacc91a28d2f8afe19d6e90dd7bb3a1", 0x7b}], 0x5, &(0x7f0000002940)=[{0xd8, 0x107, 0x4, "61c168f4385f415d954ad4883d610b1b08fd25643b0235ce4908d5c26623f9a0e29ac86bdfc662b93886df1cce1575796414f7227f260bdbbe49a5afa5dcb7a3daee2a4c11a57b5ce4adc6c6d9ccf05fe2392c12ce4f692617371462d6dc186a68a8c6df3178d87524a964547fb392dafe30ce48c9bdcaead16b261831723621d614e9328d97934f17855c954c437a64c25115ac4668eb32229a9d4c2e666d8fea812c8920bb433aad924b198dd39e3f18568bf7c24ce4cda5354f1763e0db2c5de3bfffaf"}, {0x78, 0x29, 0x1, "6531599e413846c232088f7a8fcd267b326a1cdf743da4668fa94c459dcc812289dce1e02fc533db4bdc2901050e266c251187a2beab92f75b54a4746185d135fbd1b2173d283f4a9498f8567443c3bf5e01a1f032d268613eb0ef274bf73a271ba5ac3b"}, {0x1010, 0x0, 0x8001, "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"}, {0x40, 0x84, 0x5, "793e1cc55c67480e8a92035718afbb22390aeaeb4ae1f0aa2edf811ea28dcde8d872a0e85a213b08b20c423f524e367a"}, {0x28, 0x115, 0x6397c8fb, "2aad91ea469a213338767daf78407b318cc28ae3894e"}, {0xf0, 0x118, 0x0, "e52b841a7ec60509bcd720c35b898972ce1ec5b1ce1a9d73ce8102b6eb16705c29c359615a9867a5e61c1aa8340825bf5ff244479e595228c044a9fc0cfe0866923227c9c1b13a8e3d9a1ed25be4a7473f47ad2530b5d4d030b65d1e20cbe5061dbda271dbc2ab130c493e952344beb76334edc0169b9c689b8e0fa92a76808b8bf8fd04c9e28283ce12f25a27938220e88d2f15b9998c81ec2d4f7d5941e184dedcb6c4c82e4a8083eaf8abcd5d4a0af004d5c443f243816c8f578cda47ca18e275a0409ff3ce96872a5f9bc5ad0307a7cdcd00c18941d004a1"}, {0x108, 0x88, 0x1, "ce654fd093dd51054dbf2c8abf631e58119a1f3bdc8ea4f464c6b3d212dd5b74c20d637ff4e84fce01e8a82df69f852f0f712dbe305424b4db5bb332ac07f9974d2b60ee3a8728be6b5aaae675a3428e6ead7d285abe107399939bffc3a47cbf1fb75e4804b670fb9c3c1af3ae4f30c69f4dec90c8f489ecbfcf050b01f6f01084d709504963dd771e9e4b3f19ce71506b2938cdc0e8f0c62bffdc2df20658dd27a6c49512ee9b4b3670ea1a1233a77172b6d7e6a05099cf150569a4961a527008e9f70a1955ea0acf2ef71017fbec8f34fd8253d8a87d9bcb444957503bd23dab3095b250d74b71df6a4c0c1c776c75ac705b22"}, {0x100, 0x114, 0x1, "7cb7c114fcc3c9bf2a54fc9a80fd9ac8dbbc8f694cbe2b309197137e396ba784bf85a12025b13f33a753af87ffbdbcfd283d646c3b4301128bdd9beac11bcddffaa76b1824390070a773ea559007c9016e7d1d7f15e31873f853082070d593078e892890e1b59ed76d88b315c427c24d87050e3cd33828ae4364550b16001e3269af8ca557a867e8b7e4764942d42ac6a7be2a214ad7d24c1ac98d8efb75037230cce9d3cf1eeadb9024cf50be3c1f374df6377acf85dabbeaa84a3ed77c4d3afd6823ad451580bf23f5b3bd4da8ec43408326ddb927c077730bd6b53414ceba6cc751e0118f9c163d"}, {0xb0, 0x119, 0xb, "30405f8075e85ff6d705197c36582ef429352025b4da0c151973a9fe35514e95e9f0183d8396de1e5ed9508ca3eadae9cfa923dc5ff45e88296f7d490278e5a2914196c0819b799fe2335d3dc7313203c36d60ad508a9ef168e89bdfbb30ace829db0621ae0a43e48c155cf63de26c50a9c16a78461334aa3038b15f9f2447ccbd4342ccd24e66e7d6051dc24a1272bbc721777c444dfe380d"}, {0xa0, 0x109, 0x1, "9d923f297ceedb245ef5ea8a10845ffa0a85233875701846019e7a66fb29dcfa4e29b86a4f81e09bf76dae96c3d33b4ab787e4653186cc7d009db60f3d0d0909ace3c5b9c94e9fdd53c45a2f2d038b9eee92a921f44de33f0ad7f18aadd1778ddd68a0bcb6efb3e51b248f9ddeab1fdbabb6e6d27a080bac8beeec2f15947aceef3aba43b1ab34c619071f48"}], 0x1610}, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000380)="3cbcd9fad9cc9a8b72b24bd0c83f0fd9313dfc7184f0fd1196e7808df1f218c22fa1b6c8e747bcfcbbf654c6219f2a1af7a1cb633525439c0e1d2b7b6cbc10e735c3f2f74cbe78caa8a92b1aa3c72ee73ebe725e18d23a7c", 0x58, 0x805, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="621d020000000000140003007465616d3000000000000000000000001c0016801800018014000a0089739ec3"], 0x50}}, 0x20084084) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x7, 0x10, 0x8005, 0x8, 0x7, 0x47, 0x6, 0xbd, 0x0}, &(0x7f0000000340)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000400)={r7, 0x84}, 0x8) 26.260312581s ago: executing program 1 (id=2929): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) unshare(0xe040400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) ppoll(&(0x7f0000000280)=[{r8, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006004e6f6e6500000000080008000000000008000b0073697000a67bcc3e4a817dd252ee8a79e2669d07e45df7da880d548eeb0595f8e4b6131e3e5db1c564ee0c34ae2f2a64f50a02bbd5a709180bd87de9c0a92d2fdaa2eee099dda99e296afb850a2cb66798f73e0438a80f40c705a1cf6ee3239710e493317285fc3f50d8592034e4b2"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010028bd7000fbdbdf254f00000008000300", @ANYRES32=r9, @ANYBLOB='@\x00z'], 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) 26.196403745s ago: executing program 4 (id=2930): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xb8410608002e4972, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getsockname$inet(r1, 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0xd031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@deltaction={0x98, 0x31, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x98}}, 0x0) 25.010006155s ago: executing program 1 (id=2935): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={&(0x7f0000000180)=@in6={0xa, 0x4e21, 0xffff, @empty, 0xfc000000}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="9e7c57acaf398855a06fe43d996546a547ff7901b0c7696db5209a1b", 0x1c}, {&(0x7f0000000240)="811596f32b4e317711510f95b75366ca542c9639b8394597741f54947cc462930ca0498aea57ac02112f6269462937c7106ec4eaa9f7ff74b699991c130dad9ecc9c0d3458278d1b3618877b5ed0d0396648a900f6f25e088c3e08362ed7cbd6cf323673d5453f420778a225712d0a4c7bffad683f34d53022ba5ad5a79b6f968f4e92b808332d60814113d82a6cc76dcfc7f7ef869372404d", 0x99}, {&(0x7f0000000340)="ddb5e998794b4e6dfc97d07948d3577d20a42ef5bc81dea987cc069da60118011f85", 0x22}, {&(0x7f0000000380)="c52ea38be2b65d944eae04939b4beb7692d11249467e6b99183624fc82", 0x1d}], 0x4, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x804) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x4311a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040044}, 0x4040010) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x4311a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040044}, 0x4040010) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12ad9a", 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x19, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c000000000000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8ba7a514c4b7a94fe18e88605aa6be1a02a326a6bce65f"}]}}}}}}, 0x0) 24.640296591s ago: executing program 1 (id=2936): socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x1000, 0x0, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x1b}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd84, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r8 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 24.639879268s ago: executing program 4 (id=2937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@empty, r3}, 0x14) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c0000000000000000000000000000007dce0200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd0000000000000048000200"], 0x1a0}}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0xef, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x3fa}, [], {0x14, 0x3f3}}, 0x28}}, 0xc144) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000000)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d", 0x23, 0x44880, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="72a4dcc97dd0dd9cbe0f4e0c1af3ecaa", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES16=r6, @ANYRES8=r0, @ANYBLOB="b92cdc0d698e9d63b86a26c10869fe139cee0c368e92c7a0b274aec1dceadf20406f99d827a6c7d8813811015cc319b665c22cf1e3246893a72e2182dd797a25be0faffc437494ee3a8fa750f2f5be57d0a9410bb44c7a1cc16a89762b08c22dc2c0edeb604c81c4fcc82dc87251991a918e76023b61235b918e747e7fa39a2afee44954b70cd81817fb2bb23f4498ed77c41fc24f726562d67a343f33e4a6f0a6441ad215702ee95e3bcda2700e6f3992f735cfdc0fc7a1284982d3d8f16a5369725ee6894ad92c53b6b042637f20b45944b701f86c250b4d302bc5266f471bdcf642", @ANYRESOCT=r4], 0x40}, 0x1, 0x0, 0x0, 0x400c080}, 0x8040) 24.521229642s ago: executing program 0 (id=2939): r0 = socket(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x4000, 0x4, 0x200, 0x3, 0x8, 0x0, 0x10000000, 0x4, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe8800051a0000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r6, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r5, 0x0, 0x0) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {}, {0x1c, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x41bd31d4576420eb}, 0x8851) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) 24.377030329s ago: executing program 4 (id=2940): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) unshare(0x20000400) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = epoll_create(0x9) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000180)="812e", 0x2}], 0x1) ppoll(&(0x7f0000000340)=[{r1, 0x4000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x48010880) socket(0x18, 0x3, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r4, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="f9eedcf9b64041ad8a00000000000000"], 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) writev(r3, &(0x7f0000000000)=[{0x0, 0x5d}, {&(0x7f0000000040)="ace4e81540a04f1171b08a13bb1b8f122d19fe2e8185b5334072d1c24e0a427f5af12595d503b031bba60e0a5a21d0e3d3be77ed1a7b7a96056d42a7f5cc1b699be0db7ea9c1df5bbaa50dcabcb4df1db4359515e8c93264845161f1c4cdb90eb8613809a21cd714660b3ac128de6498687740ad9acd6a5530fa7cfede1a16e1dedb81add6deb9ea88f2f4b0876eefe252990fd7316550d4a0b899db327717a5e0ffd6d2c96c7ae76d9b0f6c11", 0xad}], 0x2) 24.260961381s ago: executing program 0 (id=2941): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0x5}, {0x7, 0x8}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 24.04712704s ago: executing program 4 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xb}}}, 0x24}}, 0x24040004) 20.672180287s ago: executing program 0 (id=2946): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d0080"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="84040000130000012bbd7000fedbdf25fc020000000000000000000000000000e00000010000000000000000000000004e23000a4e2300000a00805573000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000000000006000000000000000600000000000000ffffffff00000000020000000000000001000000000000000100000000000000001c000000000000080000000000000004000000000000000000000000000000080000000000000006000000ba6b6e000000010100000000ac000700e000000100000000000000000000000000000000000000000000ffff000000004e2200084e2000020a00a0206c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000060000000000000009000000000000000000000000000000f8ffffffffffffff0600000000000000ffffffffffffffff0000000000000000830000000000000099f60f16000000000100000000000000080000000000000005000000b76b6e000000010100000000"], 0x484}}, 0x0) (async, rerun: 32) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x800448d3, &(0x7f00000000c0)) (async) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000000101040000000014000100000000002400000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000080068c109eeca5c10545bfb0740000000010000000000000000000000003ca91d8fe1d1ba03c119926993dd20ccaba79c29170a4cfa642761ae963f110869ae097e005974dc5a825c7bf00e4c237185b937d4b4285448487fe551ae3b40dc67e75dac378950ce0bd70a707cce94f47a34faab72d15dcd34f88973f8eef6b21893fa0b1ed1d80667d344758e0e181c12b4c136c7fe212ddd9869cf346df347808863bb19915ccd1d8e"], 0x64}}, 0x8080) (rerun: 64) 20.636389088s ago: executing program 4 (id=2947): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000006c0)={@val={0x6f01, 0x7}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @llc={@llc={0x8a, 0x2, "1614", "9374f177fee03b43aed3e0f87a1206b7a97b1dbe0c15fa65762d01a30a957a35135c14c780acf4ef8077b4e459ffdcfa41289e9f6c9c52ae4149e1e5e795452c52db2047579d5f4b3f8720d043c4a536fbd680607f5f2db3beca2134ed62549e43ccd5c170261246e28213d6441b9eeba0e84ad3c84e096bed4a2dac960e8a1acfe7788b69c2e69b9a234f15782a71b8cfbe390d41adc6c0a029dd114a3276c23d44ad445f92e42e577613a5dbe530a8e7af6fcd60749491"}}}, 0xca) (async) write$tun(r3, &(0x7f00000006c0)={@val={0x6f01, 0x7}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @llc={@llc={0x8a, 0x2, "1614", "9374f177fee03b43aed3e0f87a1206b7a97b1dbe0c15fa65762d01a30a957a35135c14c780acf4ef8077b4e459ffdcfa41289e9f6c9c52ae4149e1e5e795452c52db2047579d5f4b3f8720d043c4a536fbd680607f5f2db3beca2134ed62549e43ccd5c170261246e28213d6441b9eeba0e84ad3c84e096bed4a2dac960e8a1acfe7788b69c2e69b9a234f15782a71b8cfbe390d41adc6c0a029dd114a3276c23d44ad445f92e42e577613a5dbe530a8e7af6fcd60749491"}}}, 0xca) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}]}}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000001d35bf00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000007d000000b7000000000000009500000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000001d35bf00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000007d000000b7000000000000009500000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000600200100eb0ca490bbc9b267000000000108001f0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000600200100eb0ca490bbc9b267000000000108001f0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @multicast}, 0x10) 20.559744849s ago: executing program 0 (id=2948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r1, 0x607, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xffffffff, 0x0, 0x9}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x16, 0x1, 0x200, 0x0, {0x11}}, 0x14}}, 0x8000) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000580)={0x8, 0x37, '\x00', [@generic={0x7, 0x7b, "46366384245f21f94e2235c9754dba6317cb83cb7c905b578e6f3bc370d0beaf54d1ceab980c12c7cac0fe6b242729aa20ec3ffe7b2ddb2c0db331e9bafa4711526887c20e7ddfa3f4d95d81f2a63266afb4188f644950041849f05d9cb93914c04649c3e83920eab17a9bb053c2b8e18d776a081ab0b0534b3c32"}, @ra={0x5, 0x2, 0xffff}, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x5, [0x9, 0x8, 0x7fff, 0x2e4, 0x4, 0x7, 0x6, 0x5]}}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0xbb}, @jumbo={0xc2, 0x4, 0x96}, @hao={0xc9, 0x10, @loopback}, @generic={0x2, 0xca, "6da843e745fda0b07bece84862a781ba2e09e8c68a6ad247fe7ca8156afac6caf47b629355b6d70e7b740c829c5aea5e4e31d90e701c164d44c1042ff70300ea129b1db5e7691a48aded756e5f64c0959145bbc587e64c5eda08a1e7734b6c20ab4cc9a15cf9b4a61f7294aa01a98a064d671b1fa64ed81ad49221b5ee7017f0bcef8267d333d7b7265f49a521d2315e4746fa71319fcc5604bab3080583739067cd936eb79f2bb88e20781b87e902a0572902ec6305202b757bef037fd62dde3e9848597a57d370f02a"}, @jumbo={0xc2, 0x4, 0x1}]}, 0x1c8) 20.54091594s ago: executing program 0 (id=2949): r0 = socket(0x10, 0x803, 0x0) socketpair(0xa, 0x6, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x81) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r4 = socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000000c0)=ANY=[], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x200) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001700)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000be0ea0fce4894c0c3f187ba5a39aa3c81032b7b66bae4b51cfe73ac73e922607bc9912bb23e9e6480234dd093e0c6d39267a98006efe7253689e8fb372cdf1042e", @ANYRES16=r7, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="1c00238006000200cc00000008000b000000000005000e0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmmsg$unix(r4, &(0x7f0000004400), 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r11, @ANYRES16=r12, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c009900410000005f00000008002600a30900122700020000005def7c0465a16ccc9c42e117899e4c69c4152c032f3616d7a428783ac76c234180543f26c26f7d10ebff0af124ee9f8141b1303e07079efae71424a60e4352ec4a39ba1bef8100bc5042d265d61499f61c9147b6b0ad795e6b6b4ecd299e252af97fb2d15e283a89a2f45ce4468cc3de7f084f1ba3f06547e7e7ead8e26b18374c6c62fc09f14e0263fe0a14ea0000"], 0x38}, 0x1, 0x0, 0x0, 0x4044885}, 0x440c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000104000000000600000000000000", @ANYRES32=r3, @ANYBLOB="24200400838b0400340012800e00010069703665727370616e0000002000028006000e0001100000040012"], 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 17.13263934s ago: executing program 2 (id=2950): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x480c1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) listen(r2, 0xd8e) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000000c0)='veth0_macvtap\x00') syz_emit_ethernet(0x86, &(0x7f00000002c0)={@local, @local, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010111}, {@private}, {@loopback}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 17.065431073s ago: executing program 1 (id=2951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="d462a7d08062202a"], 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'syzkaller0\x00', 0x2}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4004, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xfffffffa}, 0x1c) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000014c0)={0x1, 0x2, 0x1000, 0xe4, &(0x7f0000000180)="6180191623754b6116e6678b8a3f3f786b2aec232392d5bd5a9e59e9e61676d0098841c2197c2ad0531583d77efe92adbfbfe2140c423e251a484f4c195e15ea3e329627b2a6dbfcc808360291b6c9a133c01395be0c40fac7de6d7172553c9da857e128c010e92be582b4c63662e7587c351581117cea7dfec16acac0e8b18c1117f13de1e8a88accadec77f9e28688683cda13ae8fabbd3592dffe86d6c4421713349390b84e3a6e1220d85b2230c410b600e5dfb294efc35b6cbd55eec29bad8db35113983506001f80d0f4476a8bcc6a48d89fa7bbe8ca7825b2a8a9ebaef0880b81", 0x1000, 0x0, &(0x7f00000004c0)="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"}) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='yeah', 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000340)=0x9) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f00000002c0)=r9, 0x4) 17.019353986s ago: executing program 0 (id=2952): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = accept(r1, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x29c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdfe7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x21}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @local, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x993}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x17}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9c9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2d715f5f5f290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0xd0, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf564e667fabaf2ea}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'geneve\x00'}]}]}]}]}, 0xd0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) 17.003863329s ago: executing program 4 (id=2953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x24000040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x4030582a, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="150000001000000002"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000010001000003be8c5ee17688a2002b08030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000000000", 0xb8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00', 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x800}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="77ae25bd7000fddbdf250300000008000100000000000c0002000b000000000000000c00020081000000000000000c00020006000000000000004c0007800c00018008", @ANYRES32=0x0], 0xa4}}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r11, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 16.941796552s ago: executing program 2 (id=2954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x7, 0x8, 0xc, 0x0, 0x1, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r3], 0x48}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="18000000560001060200000000000000070000000024e300"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x16, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xb3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002040)={{r5, &(0x7f00000001c0)='\x00', 0x2100, &(0x7f0000000200)={@_ha_fsid={[0x5, 0x40000]}, {0xa7ed, 0x4, 0xb, 0x8}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0x9}, 0x7, &(0x7f0000001f40)=[{0x2, 0x3, &(0x7f00000003c0)='-]\x00', &(0x7f00000009c0)="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", 0x1000, 0x20}, {0x2, 0xfffffe01, &(0x7f00000019c0)='\x00', &(0x7f0000001a00)="2110387397702c7528b73f24452e2df1621b70038ca3cd263d3f1c49bbfb065d84a2840f85e39da9b233c26e76b32d4939a058dff0d74204e349986971b3188158609f386fdbb5a2a8422bcb9c730edcf6560902e8e1e03110fe766d818655b14ff558d1152d78de4e5c7f3710ce3fd95026a30916d4c9cc530551c558661d11f524195e", 0x84}, {0x2, 0xfffffff7, &(0x7f0000001ac0)='GPL\x00', &(0x7f0000001b00)="1e598c894f4dc051093b004239a073c6589e92231a676015beab2da5d1b1a13565d1ffcacaf98771f97a9c9bc185ac18fd66818db72363f84bfd9ffbd3701460e3741b40cb4892b0d3d4f04755027259b94ca7282ee73ee26b1018831a62d6529b4d3cfa4bb8ce473c100b7a1abef0203cf49877574484477d4c0fe14b0c79d12bdbcc058c38b65cff3c7f5bc00ad7aca548a68520b61591d48cf37a6dff28cde3f22ab12822984412c120a4f4324200c234ee659a4c405ff450d77c6c02b17ae13d56b98de56a761c5a022909b2b1c33062b816b1e9c3ecafcd260adea8dedd3f013798b6293a9cfdfc082daff2339b709a6baaa521d7", 0xf7, 0x20}, {0x3, 0x1, &(0x7f0000001c00)='.]@$^{{(\x00', &(0x7f0000001c40)="77ce3cf1b8998b506f5852f01c34979b5c4da6169cc2b182e88a229931030a916bbab8c47ffb2591fba2571dc6b63aeeaad08805dc3b46f95ccfefe756404feccf12c0542f0e91fa010a56b9057d04b6b21830d39de216f33258df91a0dca96ad7f816da793fb4a379eeeeae2247375502cef199b4236ad5eb5fc74be43bd77b7bf70b8d7c449e746e7e9c4daa3daba4e50bde7652ed803db302ce", 0x9b, 0x22}, {0x2, 0x40, &(0x7f0000001d00)='\x00', &(0x7f0000001d40)="4b654479b63e66fe89f656ce327fe8b62baaad63b863c1ddabe9cb7898b0502b4641ce08d22373b39f4ff33d8a49139b0b6c089a5c7ca6a8444a0dc786f6bfb1d259e5da7a6288c8ea20", 0x4a, 0x12}, {0x2, 0xffffffa0, &(0x7f0000001dc0)='\x00', &(0x7f0000001e00)="95c2b4bce215d30c283ee368f1de15e510c778f91e4856e676463c956f62adafdee210e9792169eeb9be9fd3bbf8ef6a4e04807d11b745965db38ef3dd8ba99e422af78f1b79d3c53c549f4d5f020e06bb5296ce17834a87f85a1c406139a49d877fa4a9df496fe855b7f788e0729f468ae79e30c3adbd8ffd8bb7cdc0bf81a8b2e06348731b3d", 0x87}, {0x1, 0x3, &(0x7f0000001ec0)='\x00', &(0x7f0000001f00)="09ec24a50c6f1b265b860c83a9ac6c60070bdb3199aad6309b56ec8ed30b64bdab7170cf3a74110994", 0x29}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{r4, 0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)=r6}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002280)={0x6, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x2, 0x3, 0x3, 0xa, 0x8, 0x100, 0x10}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ldst={0x0, 0x3, 0x0, 0xa, 0x0, 0xc, 0xfffffffffffffff0}, @ldst={0x1, 0x2, 0x3, 0x2, 0x3, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x35, &(0x7f0000000180)=""/53, 0x41000, 0x0, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000020c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002100)={0x4, 0x2, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002200)=[r4, r4, r4, r8, r4, r4, r4, r3], &(0x7f0000002240)=[{0x3, 0x5, 0x2, 0x9}, {0x5, 0x4, 0x4, 0xc}, {0x4, 0x2, 0x10, 0x4}, {0x5, 0x2, 0xb, 0x3}], 0x10, 0x7}, 0x94) 16.751508676s ago: executing program 2 (id=2955): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0x5}, {0x7, 0x8}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 16.447573129s ago: executing program 2 (id=2956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xb}}}, 0x24}}, 0x24040004) 16.22933446s ago: executing program 2 (id=2957): syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde080045000074fffc000000019078ac1414bbac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c000364010102000120000000000000000000ac14140000000000ac1414bb000000007f00000100000000ac1e010100"/130], 0x0) r0 = socket$inet6_sctp(0xa, 0x4, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x40, 0x0, 0xcb, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmmsg$inet(r1, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r3, 0x1000, "c1e1cbe8acbe25b50b172a04c5188256e3b537d257d418a083dd70353f5df4f635ca3fabc59327e0fabc0759cacf547274ae5b0223f312551434ed685da9ca18d99298ffdc46d4543e521268a75e2ed6c258250ea295ea381b992c984fb53b94084833a0e14aad77819fa1c0f3be0aee386bb4af7c6dcd342c5449cba7d87726eb8618bd66b6fab8ee9822e9f8b01faccccaf8ef8303fd148c8e820d3438ba42da000f081be261eb261bdf296ef73b30f71eebaef0a646a249906a489a6827311ea2447f7085667a4305536595224f31cd7a0dd13344560904ba735120c355d6f4611b3bda2a008d6ab812042a7b0e2dd21838ed54cc94b51599b3879ff09c6f1d02feb578d347b445e0a54555f9f3d4f16f7e3f3530e36c7d86e13fcbfe85cd2a57739a0b2607bf0061aef68d2dc5f7f3faea0035960a1e0b8cd59334a0c57a0f231967c13c876370ba9efad6534b641f3983781a4fa0d31e1c069c8d16cd2b8af5057c1fe3a6ac387ab813469db2bfa757412a2d504bb247a43e5e16c49146d13970032a4ee458a69c209e95829ec2dbc20bef15c37347be75a1889414bb55487c44871a12d5abdd730bda075405bf42f29cf79e1e8241c4d61647fed2a32d0b1f73000d79da56511cb7a6e25d1301c530960359799696b6da09d5e3e3f26798256d38749cf7824161548596cd3ad49b1817762da1a3f3c5420d704ae41253f0f8152f7dc180774ee1fe1237d8e6094454199b06a05cb897299d43fb0ec5d5ee7aca6322655e9a94a06e29e7aab9c929ee58eca299ec7973d76da46c1238ad697927dd68a368aa388ea5a58a7c020c164bf8b2f46e01243dd5f9c0aec2ee0c46ea2230364005abeb4820cbb5106cb1e0c2c75c5138842a8aa9b0f8713b94e789e60207bd5431466f4efe082e6a3606f42c3c94f63da4f88d94047e475f9a785473c1e736e918b19ad1dd48e6c3ea7dad6e8ae71c044bf045090c5a8f42e90d0875937e424b9504e166960a0509c0dc98c0cfef6edbad07ab9be85f7f5a83ff87ddeefdb95331842fd9c401850290bf329115f03c71b18311c46f88bd511015d4aa2133598f8cc90ea56c7b6885150a71dba706d6c364c907b82a987a5e0a05ac88d48a206c1a9fbdea8f33664b3f9250fb4cfda8786f635508f18eed3d80ae2a45293317a227573186dc971f7b3f0bc6a2667caafd587e43eb16449626eb1f0f150070853b234705e21b4fbaa196df7cc52a58601aac8232cc88ecca3ade9608545cd28258f7848c38a03d25363287e274e6389ec8723cd244e233a9f3e4462a0e94fed07da014b32b8edbd292c4bab1d8ecdc37d6bd36cda06e6b5fb4ee7472b2ebaacac3b1846bfe1d52f7420190654a9fc0ce8efedca91fc4acce974f911609c3f93e523354a3cc397de11e1c5fc193cd03c12c9bf0fad06159154158d93b77192f03111d8ef71c9e76ddc311520871a1bf51dcd0519f25ec6b4d0bb22129e5dcb580b01ab5e5bf5f0cf58d5fcf36438c2d04b702d17ac6c0721759b2d8b7bd34c09a9ffab0c4a98d885b28111bc742bc56d4ba96ed9a3ef6267c32ce3003dcd1e33d2a74a76041fd4d1c7d302f7428b00711e1f3ba70a326175e8077845946294cbebfb54123a0f56f96840308846140fe6c6ed16b5cf9dc0d505ee49c0109524fdb0672aacb77e96cb0ab00fb9222c1886cd1a2deeaadec3d9dc09f0ba5d409231c3d82a97eee6c237ccb65ce363a0f3ce24fee3b2e1cf78f8e8b298b7767515c14ffd46d2ba828f317059d44bd529dba36e34bc0e8a84a81dc7c9671d2837a04edd9de35c2d719471c00be0548c65e35344e02639803762eb8c6d019c79befe30be6e0b2b7362ff2740ee84ae1f8d54a902eb7c651ce1edf67798ce7ad24404680353b32aa3fc84574a718e56accae70314b230b7533324bd96c3de6c5e87615e56084a59306ba5fab913c400cabe2a7a7a1f37c5f8ada77ac2682ddb848b2d1732c81b1a4ffd78d629e12c880a544d1c52d220a49152fe3ac16322e4dae9458a194c503f13891fc888f69aa3e6785fc4c3485b696e1bc80939bcb0f10929246c48f18a7c006fca7df339f1bd0cf2c693dc9bfb57507da365d5b626e22930d9195dad37a74ce5a1cc5c1130b005da0ef25873ba7b10edbd1e7fb4bc75251506d37d6f7feec77831d13a137484abf60b2daab0facd6304378fc0b7431b8337029f9e5d36e61b6556e70ba573663675cbe7209c38ad17ce3fe89c4a0fe53a4f1139dc3825b928a4b00fd84d84e7b7a2802731c2635020c98de87cc81545c83fcb1824fda1a2713aa0f0eeabe455767a8c8f1b6b224ca7f71086b5eb26625e8606258c257d93cbf97cf050cf5b8204575b78876fefb786471eee61576c985b465df71bfdee7b4d79d8b0bbe32f9710905691237815f42e85e0d2e57c06d86104bc326c1dbe5f7942fd8fdc4cb4038c199a328b849894be71d5b2756b8f962f91cea29f20ae3556b7770ba6063e7d063917a0067452f7451dbaa7aaa5d141552ad7cf69732061f9b7a8b7de7f7ddea13dabc3ed9b4e2abd9b421ddb3acdc1c53e27cef5d558e9a4254c04461daab6cc7705278e821018a5845e4fa9946ce9eb5c470bd4676ef32fa70fb0327085e50f05e28f6e8846b04dd0b287d93f5abd2f57e16db5152e90d1b53b5de45d2c91abab9300084b2731d9e4163d6df0486e1464ab3afd1686a5afa72e61653a9945ffb32f0910f88a9a75a9efe4892f3a2dd618bf6edc4a9a83b40aae696fffae1963424972b94cb531be62277f749a4f7e2e71febca96dc1466fc470a9f6b97cc1869b7f3651a3d3b70d20cdbff80a18488eb930dd0aa6aee89227580f9391e389fa7cae1174bfc54f8854f2387ed8fb19665bb330ec56a3668064e643ae4549c7c9a4ef9b17b4dc9e8db1b0e2749f708707c5a9f4c578175e8a88094557ccf7dac49bd1f45af12ca967478b11ba6d0fd3e7a58052d4b6296d0e5750ba50ea5462c3ea4e9f8f9ee28fd0dcc57f74fef5bafa15d96feeee771e288fa1fc9b4dc406a32a859c1ebfe281951944fc153778afc8ae4b316d3f31429730db21d2e1567ed3d04bcbc725c3ae63ef8fbaab751fd38500ecfb4136b1a33f35b9c8221e06f1d0563ff1313faabb5d41f31b31753566492e5a6e705aff367c5f63161b58ffb5e8aaf10a27cbba794d705b36952d1bdb479cc0fb5bcf379fb07a111e7f539c1c9fea21b84cea6e253fa115c957003a4ed04863ba1f533b12b95105be1b9e700bb9bcece6a9025ad1ec7137cbbfa52dbacc85e75ba8c60455d17b419d2f3892fc90a20835795e1cd5d0604a8ea0d763176c933e611509268360de533127f8ea060d0f5596c727bd7e7ab8ff0b50323bb99dabb9a802b000dc378994a3fee2dd96f8a5e9c70b3d0934a97a9d7d37691f8934caf97b71679986a6d11d8b19bfee4526ddd5c9b38d47d6d6e58074c64fdb31db1aec20333628e355639fc23b215a2ee977805b8397f6ff73f1bd93078ccb3649c1b3e5065fc08c70889fd7786e16e111dc3e52b9a78cd92a929cd10653c7042a93d5ee20ae616a107be1c0612e630b8e6695d1f3d659bd49906eaa3db97162255f58fdf2d77e123fee1a75b90519ad8129cb1d06c494f974e0c08a486b0c9e7da87986547a58baa66d2b3e853c66b4463bbc38ff8c8d01769f3b3997377121b5c18f02dc1846aefd286fde2094615d941aa4b320ea48bee85306d21a13024051c03031ed7a9e3dd3510c9d50a9f9f56e8d36c16cef4e9e9df86c09336f69d56ca29aaf4f129b93ccb2bfe54a2f43e41516bf547cae10f0de31f2d7f81983d5fab720aa8fdcea462e379fd15f1ab2af2c19ba6bcf25b5f9c01ae304b120ec5434b2d77f49faa62f8f25fe58e0cb836e50df6dd294f8d16595b584b51ef10def8f5d0d9b81eaea2419f5b47fb26cd29ad4766fad13e45cd54990268d3580f1f81c7b61e718a58998e3036880b844ab51c855408a3dad92cb5423095bfafe7b62dbeb983b78060b0148e806ebe33810f5497ea291520ee3963af193b05ba117ae4107371808371c3d8b97bdba8d3344110bd789cbfd3a4d765002e1c6de6ae33195f7d4c4166bfd021fee0122608a1ebc0d4ea6e934484c7abf1b2ccc327e54c68b45d8ef9761451019ef859b41d66c0a8774d8140d5bf86bf4074160ccad46a0775377d45da32181cf31731ac0d22f90d5404df7d24d5b650f2d32f0038ad4404ad5c1cd1bdff1fd8354bed1f79ec7d4fa2e89d2bc533f5faa1ca325c1f054c8294a5aef4a3e7f8846b340ae64fd4634bd6526c118c9c1c1099a6a7abf9d9eadb5c096a2e33cc7a248e96261be8fafdb6facd6f57f0fa50d9aa096601d737af5237c4a56d9fe2a0353f40a71ba01df9d3f0a3e41e304ef2593e5b90d4faa4c4b992f6cc34fc36904022cb204decebca614d6e92aee61f465ddea31fb640e95797054c58ca36b5c7d646a88aacbf808745b6114eb98ab5571f2d078598d7d289c6476d4fb638d02e2e7da49a208a922ab02377ec86c1472bbbf45292cc2c2f811dc0687b43c43fae59463d572052dfadacb1c06a8bea65209e4d6038d3dc312815115723b72608b3ec60bba839a0d8032cd81a72eac5a6e9ff5ff6de2416164247794cdc8f547e6fc125a01fd4505d469eee89ec78d6b2f5dba398b38c7f8d330ebee1fa69e031ffff8a97bc995623ccac7702c65c8993697bd3bfe13829ad3e49e372c20f0252f24238909773ba0e1dbc4815edf4fbb63bfc8d8a91972c7e16efa4ca5c03cdd28f91b48557b7a223520b1f8cc70b79ca8b2a438a9e795d0b6d92186bdf1d077fae769367aea301f605dceb0eef32a4626a0a06dc68399475ad45fe3ac8ce193acae69f9cc5b91ae72620b0718270a57234de48b8aa553105763b2394f76ff88520e536cffa65016e3f3f965d274fe79ca4af8862ab3dcf85f90c29fe02d04bbb861f7f60864075c8f1fc007feb673beeb3a49e2d7fcf1fec40b78a6613e9ff17a787f8b8abfc8bd6bfba95fa8db14eda3eaf353cace9a8bb64bcd66bcfc6abeecfe8f2d544c0ae789a87129d5e1f3f9681f1d2ba98f5469b277a0893d4835ca96c9ec7c0df5b25a7fce032809d8742f74c930d6aecb7780790b262f70990dcf33aa7319871e16b8fcaec4111dce99fe9e329385b3050918cffae1589bafbd8f4ee19c069a686745bc1675f87c3cf1757595880fa6986dbb1483da0917c8f144597aa4aaef708568d499ee9e358f91c0b9308423071bf5ddfa0b8177da57fa635b356a968069740fc66c3a9b643dd8e3fe2ff8855863b4f5805458cee285d04af72eb58120f6abe56cbb01e77b78c86a3dab42604f95e12fe8e396a503624386a1c3049394d0962499c642f76edd5312ad29bd98a85d72b0df37f22103d51f1fd3484ed8c5dfec95567167c40f7ba2ccc8c1d482ba921f2d68dabdf35558527f282e2ad7bf338ce4ac7ff947b7e9a2945a8cb95a6e5f57168ee762d0e0ff106b1b972342c3f3d15bfa57f3c4e6fdf43d1cfde3fe424f06e9f9d88cd3c7abc1a9ee86dc0f5f587745d3976b0dbe5448f4170c1d9a2a2cf34b2a5a5da2196c522099a91e8186d2394f96e91528e85774650412534dc4524876c7cee6845e625cbac9d488d9ae713e3afeabf45de881f49315ff7e148e264a2ad8e7f2f89d34a5d3cb5766737f987325535f0537b21ccbf6fb978c7c04ca3e06b9cc9eae646d0c7508a7a51ecbd1345391f3eaaedc0db976c4965e9f38e7f0fd885"}, &(0x7f0000001340)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001440)={0x0, 0xb8, &(0x7f0000001380)=[@in6={0xa, 0x4e20, 0x5, @empty, 0x5}, @in6={0xa, 0x4e23, 0x1, @private1, 0x36}, @in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @in6={0xa, 0x4e21, 0xc0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0xc23}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x531}]}, &(0x7f0000001480)=0x10) 15.989636441s ago: executing program 1 (id=2958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004be53fae8500000082000000bf91000000000085000000b700000000000000950000000000cc00f220e7dd24ae592d706b0d19298d26294714e6ed84725b00"/127], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x4c0, 0x2d0, 0x2d0, 0x0, 0x3d8, 0x3d8, 0x3d8, 0x4, &(0x7f0000000340), {[{{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x43}, 0xff, 0xffffffff, 0x4, 0x8, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0x7f]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x8, 0x7, 0x7, 0x3, 0x7f, 0x9, 'batadv_slave_1\x00', 'macvlan0\x00', {}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x81, {0x7fffffff}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x510) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois', 0x8) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15.899968086s ago: executing program 2 (id=2959): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) unshare(0x20000400) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = epoll_create(0x9) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000180)="812e", 0x2}], 0x1) ppoll(&(0x7f0000000340)=[{r1, 0x4000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x48010880) socket(0x18, 0x3, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r4, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="f9eedcf9b64041ad8a00000000000000"], 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) writev(r3, &(0x7f0000000000)=[{0x0, 0x5d}, {&(0x7f0000000040)="ace4e81540a04f1171b08a13bb1b8f122d19fe2e8185b5334072d1c24e0a427f5af12595d503b031bba60e0a5a21d0e3d3be77ed1a7b7a96056d42a7f5cc1b699be0db7ea9c1df5bbaa50dcabcb4df1db4359515e8c93264845161f1c4cdb90eb8613809a21cd714660b3ac128de6498687740ad9acd6a5530fa7cfede1a16e1dedb81add6deb9ea88f2f4b0876eefe252990fd7316550d4a0b899db327717a5e0ffd6d2c96c7ae76d9b0f6c11", 0xad}], 0x2) 15.105342795s ago: executing program 1 (id=2960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20044080) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x800) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_MARK_MASK, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x0, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x656}, @CTA_SYNPROXY_TSOFF, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x439}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0xc57}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xffffffffffffff7d}}, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r8 = socket(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000600)={{0x5c, @multicast2, 0x4e24, 0x4, 'rr\x00', 0x5, 0xfffffff3, 0xe}, {@broadcast, 0x4e23, 0x4, 0x1c6, 0x2, 0x5}}, 0x44) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x22100800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1b, r9, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000005c0)={'wg1\x00'}) r10 = socket$qrtr(0x2a, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r15 = accept4(r14, 0x0, 0x0, 0x80000) sendmmsg$alg(r15, &(0x7f0000007080)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)="1fd26334fd9c847b538883a0769e832697f9840183fe3aa90317e9e6528403197bc6207b4a70e8998d1716999841c77dcf1bea3eee8d8edf2ba02d052d5ec134c6d6f3e2b9e3cbbf22cc939be50a5254340069792f5db376dfd25713d4cfc2ac936790200feb3fea0af0f8d9ab45ed7e6000253254c274390872703a00193f4e030109bc0402c2fa28b2574911171c2cf191f54b59c2b23c989b1672f9da891ccaa1c9c2f761a53408e9e522ae56e5f167bce2f9f36928c4789b2dfa2162b27d4fb0ca8da2813a22057963248729df01090e31af2274b688fe16915934c1285d940092650f687462c9cbcb179d3500c8618cf15cb5a15b14ee1d471ef32321e9c787700adaf8c558493f21b584bff522615d6def15e4b8e35ad34ae45ec6783d53d2dc40f146d11345d4eb85974d6dbcdc33b324280987bc8e903f852a283415c9ea4090e2d7da4465551a6999f7a32955a1b0ccaafc46c9181463fc97d2f8a37c5137326ab21624fa50036dda9f428ec9a7449189a46ddd09faaca9cd9468429cfff4861c35f0a4808aa011d35f62641d22f6cfffe8db90b18047ea1aa0087690", 0x1a1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x40) ppoll(&(0x7f00000000c0)=[{r5, 0x71}, {r6, 0x80}, {r7, 0x10}, {r10, 0xf110}, {0xffffffffffffffff, 0x2000}, {r11, 0x10}], 0x6, &(0x7f0000000140)={r12, r13+60000000}, &(0x7f0000000180)={[0x80]}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.153270331s ago: executing program 32 (id=2952): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = accept(r1, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x29c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdfe7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x21}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @local, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x993}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x17}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9c9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2d715f5f5f290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0xd0, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf564e667fabaf2ea}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'geneve\x00'}]}]}]}]}, 0xd0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) 1.108147182s ago: executing program 33 (id=2953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x24000040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x4030582a, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="150000001000000002"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000010001000003be8c5ee17688a2002b08030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000000000", 0xb8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00', 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x800}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="77ae25bd7000fddbdf250300000008000100000000000c0002000b000000000000000c00020081000000000000000c00020006000000000000004c0007800c00018008", @ANYRES32=0x0], 0xa4}}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r11, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 61.326762ms ago: executing program 34 (id=2960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20044080) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x800) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_MARK_MASK, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x0, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x656}, @CTA_SYNPROXY_TSOFF, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x439}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0xc57}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xffffffffffffff7d}}, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r8 = socket(0xa, 0x3, 0x3a) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000600)={{0x5c, @multicast2, 0x4e24, 0x4, 'rr\x00', 0x5, 0xfffffff3, 0xe}, {@broadcast, 0x4e23, 0x4, 0x1c6, 0x2, 0x5}}, 0x44) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x22100800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1b, r9, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000005c0)={'wg1\x00'}) r10 = socket$qrtr(0x2a, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r15 = accept4(r14, 0x0, 0x0, 0x80000) sendmmsg$alg(r15, &(0x7f0000007080)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)="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", 0x1a1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x40) ppoll(&(0x7f00000000c0)=[{r5, 0x71}, {r6, 0x80}, {r7, 0x10}, {r10, 0xf110}, {0xffffffffffffffff, 0x2000}, {r11, 0x10}], 0x6, &(0x7f0000000140)={r12, r13+60000000}, &(0x7f0000000180)={[0x80]}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 0s ago: executing program 35 (id=2959): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) unshare(0x20000400) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = epoll_create(0x9) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000180)="812e", 0x2}], 0x1) ppoll(&(0x7f0000000340)=[{r1, 0x4000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x48010880) socket(0x18, 0x3, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r4, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="f9eedcf9b64041ad8a00000000000000"], 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) writev(r3, &(0x7f0000000000)=[{0x0, 0x5d}, {&(0x7f0000000040)="ace4e81540a04f1171b08a13bb1b8f122d19fe2e8185b5334072d1c24e0a427f5af12595d503b031bba60e0a5a21d0e3d3be77ed1a7b7a96056d42a7f5cc1b699be0db7ea9c1df5bbaa50dcabcb4df1db4359515e8c93264845161f1c4cdb90eb8613809a21cd714660b3ac128de6498687740ad9acd6a5530fa7cfede1a16e1dedb81add6deb9ea88f2f4b0876eefe252990fd7316550d4a0b899db327717a5e0ffd6d2c96c7ae76d9b0f6c11", 0xad}], 0x2) kernel console output (not intermixed with test programs): sim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.588908][ T5826] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.603836][T11942] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 369.640469][ T7721] lo speed is unknown, defaulting to 1000 [ 369.682564][T11942] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 369.738997][T13133] geneve3: entered promiscuous mode [ 369.778479][T11948] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 39661 - 0 [ 369.798475][T11948] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 39661 - 0 [ 369.825645][T13141] xt_TCPMSS: Only works on TCP SYN packets [ 369.836301][T11948] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 39661 - 0 [ 369.855003][T13141] xt_TCPMSS: Only works on TCP SYN packets [ 369.896266][T11948] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 39661 - 0 [ 369.942170][T13105] tipc: Resetting bearer [ 369.998307][T13105] tipc: Disabling bearer [ 370.010562][T13152] __nla_validate_parse: 1 callbacks suppressed [ 370.010579][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 370.199464][T13153] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1875'. [ 370.229428][T13153] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1875'. [ 370.318277][T13162] syzkaller0: entered promiscuous mode [ 370.330804][T13162] syzkaller0: entered allmulticast mode [ 370.356138][T13162] netlink: 'syz.0.1877': attribute type 4 has an invalid length. [ 370.372702][T13162] netlink: 'syz.0.1877': attribute type 4 has an invalid length. [ 370.731856][T13177] netlink: 'syz.3.1882': attribute type 1 has an invalid length. [ 370.753278][T13177] netlink: 'syz.3.1882': attribute type 2 has an invalid length. [ 371.075712][T13186] syzkaller1: entered promiscuous mode [ 371.095602][T13186] syzkaller1: entered allmulticast mode [ 371.131261][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1884'. [ 371.448536][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 371.640381][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1889'. [ 371.783076][T13213] bond10: ARP target 9.0.0.0 is already present [ 371.789715][T13213] bond10: option arp_ip_target: invalid value (9) [ 371.798255][T13213] bond10 (unregistering): Released all slaves [ 372.591432][T13253] syzkaller0: entered promiscuous mode [ 372.620211][T13253] syzkaller0: entered allmulticast mode [ 372.803588][T13256] lo speed is unknown, defaulting to 1000 [ 373.064901][T13267] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1910'. [ 373.676209][T13285] vti0: entered promiscuous mode [ 373.685057][T13285] vti0: entered allmulticast mode [ 373.694232][T13287] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1915'. [ 373.730334][T13287] bridge0: port 3(batadv1) entered disabled state [ 373.737160][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.744590][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.752430][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 373.816891][T13294] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1915'. [ 373.902424][T13294] bridge0: port 3(batadv1) entered blocking state [ 373.909104][T13294] bridge0: port 3(batadv1) entered forwarding state [ 373.916767][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.923999][T13294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.931553][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.938815][T13294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.951327][ T1108] batman_adv: batadv1: IGMP Querier appeared [ 373.957764][ T1108] batman_adv: batadv1: MLD Querier appeared [ 374.011305][T13294] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1915'. [ 374.035366][T13294] bridge0: port 3(batadv1) entered disabled state [ 374.042120][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.049391][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.057456][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 374.137932][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 374.146759][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 374.177821][T13256] ip6_vti0 speed is unknown, defaulting to 1000 [ 374.192330][T13251] lo speed is unknown, defaulting to 1000 [ 375.428933][ T4960] block nbd0: Possible stuck request ffff8880275d0000: control (read@0,1024B). Runtime 150 seconds [ 375.440441][ T4960] block nbd0: Possible stuck request ffff8880275d01c0: control (read@1024,1024B). Runtime 150 seconds [ 375.452161][ T4960] block nbd0: Possible stuck request ffff8880275d0380: control (read@2048,1024B). Runtime 150 seconds [ 375.463352][ T4960] block nbd0: Possible stuck request ffff8880275d0540: control (read@3072,1024B). Runtime 150 seconds [ 375.896216][T13303] lo speed is unknown, defaulting to 1000 [ 375.985137][T13251] ip6_vti0 speed is unknown, defaulting to 1000 [ 376.120187][T13333] __nla_validate_parse: 3 callbacks suppressed [ 376.120206][T13333] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1924'. [ 376.145578][T13333] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1924'. [ 376.161124][T13333] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 376.161124][T13333] Please contact the netfilter-devel mailing list or update your nftables rules. [ 376.524504][T13347] syzkaller0: entered promiscuous mode [ 376.533297][T13347] syzkaller0: entered allmulticast mode [ 377.107179][T13303] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.352302][T13374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1933'. [ 377.667387][T13384] netlink: 'syz.1.1937': attribute type 12 has an invalid length. [ 377.865847][T13386] macsec0: entered promiscuous mode [ 377.885723][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'. [ 377.919363][T13386] veth1_macvtap: left promiscuous mode [ 377.961549][T13386] macsec0 (unregistering): left promiscuous mode [ 378.090285][T13392] tipc: Enabled bearer , priority 0 [ 378.410453][T13392] syzkaller0: entered promiscuous mode [ 378.436240][T13392] syzkaller0: entered allmulticast mode [ 378.461890][T13398] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.1940'. [ 378.470709][T13392] tipc: Resetting bearer [ 378.485274][T13398] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.1940'. [ 378.628118][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.830115][ T7024] tipc: Resetting bearer [ 379.034076][T13393] lo speed is unknown, defaulting to 1000 [ 379.231608][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1944'. [ 379.259751][T13391] tipc: Resetting bearer [ 382.124832][T13391] tipc: Disabling bearer [ 382.134728][ T5635] tipc: Node number set to 3024882921 [ 382.143367][T13412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1944'. [ 382.152810][T13413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1944'. [ 382.209272][T13393] ip6_vti0 speed is unknown, defaulting to 1000 [ 382.457713][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 382.954268][T13452] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1956'. [ 382.968611][T13452] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1956'. [ 382.978795][T13452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1956'. [ 383.018395][T13457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1957'. [ 383.055823][ T137] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30 [ 383.097868][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 383.209091][T13460] openvswitch: netlink: Message has 16 unknown bytes. [ 383.463660][T13473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1961'. [ 383.483307][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 383.564927][T13461] xt_hashlimit: size too large, truncated to 1048576 [ 383.585638][T13461] xt_hashlimit: max too large, truncated to 1048576 [ 384.355820][T13499] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1966'. [ 384.512463][T13504] IPVS: set_ctl: invalid protocol: 59 172.20.20.64:20002 [ 386.001764][T13558] IPv6: Can't replace route, no match found [ 386.024532][T13558] IPv6: Can't replace route, no match found [ 386.361323][T13574] netlink: 'syz.1.1984': attribute type 21 has an invalid length. [ 386.377880][T13574] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.391856][T13574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.399171][T13574] IPv6: NLM_F_CREATE should be set when creating new route [ 386.406470][T13574] IPv6: NLM_F_CREATE should be set when creating new route [ 386.413753][T13574] IPv6: NLM_F_CREATE should be set when creating new route [ 386.421536][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1983'. [ 386.459605][T13576] ip6gre2: entered promiscuous mode [ 386.467817][T13576] ip6gre2: entered allmulticast mode [ 386.473401][T13580] netlink: 'syz.1.1984': attribute type 21 has an invalid length. [ 386.506507][T13580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.542271][T13580] netlink: 'syz.1.1984': attribute type 21 has an invalid length. [ 386.564070][T13576] netlink: 'syz.4.1983': attribute type 6 has an invalid length. [ 386.578149][T13580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.209960][T13609] __nla_validate_parse: 3 callbacks suppressed [ 387.209979][T13609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1993'. [ 387.588504][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'. [ 387.954781][T13637] m1Ie5nè‹Ò: entered promiscuous mode [ 388.099545][T13643] syzkaller1: entered promiscuous mode [ 388.115778][T13643] syzkaller1: entered allmulticast mode [ 388.324210][T13646] syzkaller0: entered promiscuous mode [ 388.332143][T13646] syzkaller0: entered allmulticast mode [ 388.392598][T13655] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 388.565812][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'. [ 388.977645][T13665] netlink: 'syz.2.2010': attribute type 4 has an invalid length. [ 390.245041][T13655] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 390.251306][T13656] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 390.270385][T13656] gretap2: entered allmulticast mode [ 390.372500][T13669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2011'. [ 390.382133][T13669] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2011'. [ 390.528552][T13674] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 390.581567][T13674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2013'. [ 390.592931][T13674] 8021q: adding VLAN 0 to HW filter on device bond9 [ 390.616539][T13684] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2014'. [ 390.645782][T13674] 8021q: adding VLAN 0 to HW filter on device bond9 [ 390.672362][T13674] bond9: (slave geneve2): making interface the new active one [ 390.680864][T13680] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2014'. [ 390.699480][T13674] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 390.725162][T11942] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 390.749806][T11942] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 390.776230][T11942] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 390.809782][T11942] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 390.879496][T13692] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 390.918700][T13697] syzkaller0: entered promiscuous mode [ 390.938624][T13697] syzkaller0: entered allmulticast mode [ 391.220582][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 391.306524][T13711] block nbd1: NBD_DISCONNECT [ 391.313845][T13711] block nbd1: Send disconnect failed -32 [ 391.321202][T13711] block nbd1: Send disconnect failed -32 [ 391.554472][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'. [ 391.764814][T13734] bridge0: port 3(batadv1) entered blocking state [ 391.771481][T13734] bridge0: port 3(batadv1) entered forwarding state [ 391.778517][T13734] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.785706][T13734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.793237][T13734] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.800463][T13734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.873513][T13734] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 391.918316][ T1108] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 391.933563][ T5635] IPVS: starting estimator thread 0... [ 391.955675][T13749] syzkaller0: entered promiscuous mode [ 391.970749][T13749] syzkaller0: entered allmulticast mode [ 392.017940][T13737] sock: sock_timestamping_bind_phc: sock not bind to device [ 392.037337][T13751] IPVS: using max 27 ests per chain, 64800 per kthread [ 392.097908][T13741] lo speed is unknown, defaulting to 1000 [ 392.679994][T13741] ip6_vti0 speed is unknown, defaulting to 1000 [ 393.725599][T13822] syzkaller0: entered promiscuous mode [ 393.742218][T13822] syzkaller0: entered allmulticast mode [ 394.270264][T13839] __nla_validate_parse: 3 callbacks suppressed [ 394.270282][T13839] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2048'. [ 394.862014][T13868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2054'. [ 395.228055][T13876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2055'. [ 395.358641][T13882] syzkaller0: entered promiscuous mode [ 395.386367][T13882] syzkaller0: entered allmulticast mode [ 395.554972][T13888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2059'. [ 395.578712][T13888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2059'. [ 395.599935][T13888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2059'. [ 395.622300][T13889] bridge0: entered allmulticast mode [ 395.739848][T13888] pim6reg: entered allmulticast mode [ 395.993209][T13892] netlink: 'syz.4.2060': attribute type 25 has an invalid length. [ 396.024501][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 396.131365][T13892] netlink: 'syz.4.2060': attribute type 25 has an invalid length. [ 396.149493][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 396.412264][T13896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2062'. [ 397.403320][T13907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2065'. [ 397.454885][T13907] scsi_nl_rcv_msg: discarding partial skb [ 398.129795][T13937] nftables ruleset with unbound chain [ 399.097543][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 399.133556][T13953] syzkaller0: entered promiscuous mode [ 399.147627][T13953] syzkaller0: entered allmulticast mode [ 399.312048][T13968] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 399.483402][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 399.642251][T13977] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2082'. [ 399.884487][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 399.964615][T13992] lo speed is unknown, defaulting to 1000 [ 400.293048][T14005] syzkaller0: entered promiscuous mode [ 400.320449][T14005] syzkaller0: entered allmulticast mode [ 400.399345][T14012] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 400.725650][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 400.900163][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.907546][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.029158][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 401.124233][T14019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.142067][T14019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.423935][T13992] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.440387][T14031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 401.458194][T14032] syzkaller1: entered promiscuous mode [ 401.463958][T14032] syzkaller1: entered allmulticast mode [ 401.473121][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.484359][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.494015][ T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 401.503501][ T13] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 39661 - 0 [ 401.666242][T14039] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.688949][T14039] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.715256][T14047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2099'. [ 401.717827][T14039] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 401.762167][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.772637][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.781673][ T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 401.791500][ T13] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 39661 - 0 [ 401.801371][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.810630][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.821261][ T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 401.830638][ T13] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 39661 - 0 [ 401.889486][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.899282][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.908756][ T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 401.917713][ T13] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 39661 - 0 [ 402.065209][T14039] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.075193][T14039] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.090770][T14039] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.281252][T14039] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.299186][T14039] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.335144][T14039] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.422212][T14072] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2106'. [ 402.503997][T14039] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.541152][T14039] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.568561][T14039] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.598345][T14076] netlink: 'syz.1.2107': attribute type 16 has an invalid length. [ 402.618709][T14076] netlink: 'syz.1.2107': attribute type 17 has an invalid length. [ 402.663199][T14076] xt_l2tp: wrong L2TP version: 0 [ 402.729469][T14082] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2110'. [ 402.731293][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 402.766356][T14082] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2110'. [ 402.832061][T14086] macsec0: entered promiscuous mode [ 402.838799][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 402.857136][ T7029] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.876399][ T7029] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 402.885137][ T7029] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 403.016286][T14084] macsec0 (unregistering): left promiscuous mode [ 403.122479][T14039] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.133672][T14039] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 403.145381][T14039] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 403.410227][T14104] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 403.840747][T14112] syzkaller0: entered promiscuous mode [ 403.846462][T14112] syzkaller0: entered allmulticast mode [ 404.011354][T14117] bond11: entered promiscuous mode [ 404.025870][T14117] 8021q: adding VLAN 0 to HW filter on device bond11 [ 404.186563][T14135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.510070][ T4960] block nbd0: Possible stuck request ffff8880275d0000: control (read@0,1024B). Runtime 180 seconds [ 405.521041][ T4960] block nbd0: Possible stuck request ffff8880275d01c0: control (read@1024,1024B). Runtime 180 seconds [ 405.532585][ T4960] block nbd0: Possible stuck request ffff8880275d0380: control (read@2048,1024B). Runtime 180 seconds [ 405.549645][ T4960] block nbd0: Possible stuck request ffff8880275d0540: control (read@3072,1024B). Runtime 180 seconds [ 406.200781][T14149] kthread_run failed with err -4 [ 406.329436][T14157] netlink: 'syz.2.2128': attribute type 1 has an invalid length. [ 406.427054][T14157] 8021q: adding VLAN 0 to HW filter on device bond10 [ 406.585002][T14173] __nla_validate_parse: 1 callbacks suppressed [ 406.585021][T14173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2132'. [ 406.602412][T14174] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 406.611972][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2130'. [ 406.840126][T14177] syzkaller0: entered promiscuous mode [ 406.845703][T14177] syzkaller0: entered allmulticast mode [ 407.012826][T14184] lo speed is unknown, defaulting to 1000 [ 407.345557][T14184] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.366304][T14197] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2137'. [ 407.375455][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 407.384852][T14197] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2137'. [ 407.395637][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 407.418087][T14197] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2137'. [ 407.812828][T14206] lo speed is unknown, defaulting to 1000 [ 408.276378][T14206] ip6_vti0 speed is unknown, defaulting to 1000 [ 409.415195][T14164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.764043][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 410.365507][T14242] netlink: 'syz.1.2148': attribute type 41 has an invalid length. [ 410.401013][T14239] syzkaller0: entered promiscuous mode [ 410.409147][T14239] syzkaller0: entered allmulticast mode [ 410.439775][T14242] syzkaller1: entered promiscuous mode [ 410.445867][T14242] syzkaller1: entered allmulticast mode [ 410.703213][T14244] netlink: 'syz.0.2149': attribute type 10 has an invalid length. [ 410.744189][T14253] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2152'. [ 410.783375][T14250] 8021q: adding VLAN 0 to HW filter on device bond12 [ 410.859188][T14246] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2150'. [ 411.168739][T14280] syzkaller0: entered promiscuous mode [ 411.174703][T14280] syzkaller0: entered allmulticast mode [ 411.205991][T14281] netlink: 'syz.3.2160': attribute type 1 has an invalid length. [ 411.248647][T14282] tipc: Enabling of bearer rejected, failed to enable media [ 411.257944][T14281] tipc: Enabling of bearer rejected, failed to enable media [ 411.275106][T14292] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 411.729989][T14321] syzkaller0: entered promiscuous mode [ 411.749084][T14321] syzkaller0: entered allmulticast mode [ 412.147770][T14340] geneve2: entered promiscuous mode [ 412.173540][T14340] __nla_validate_parse: 3 callbacks suppressed [ 412.173557][T14340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2179'. [ 412.191595][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.205793][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.215038][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.224453][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.243453][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.263438][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.272835][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.284416][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.293982][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2178'. [ 412.472112][T14356] xt_hashlimit: size too large, truncated to 1048576 [ 412.793312][T14368] syzkaller0: entered promiscuous mode [ 412.815905][T14368] syzkaller0: entered allmulticast mode [ 413.078834][T14383] netlink: 'syz.3.2189': attribute type 21 has an invalid length. [ 413.087827][T14378] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 413.104045][T14378] bond9 (unregistering): Released all slaves [ 413.221811][T14384] netlink: 'syz.4.2187': attribute type 12 has an invalid length. [ 413.241041][T14389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.279544][T14389] batadv0 (unregistering): left promiscuous mode [ 413.692798][T14403] pim6reg1: entered promiscuous mode [ 413.703341][T14403] pim6reg1: entered allmulticast mode [ 413.823768][T14420] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 414.072544][T14430] syzkaller0: entered promiscuous mode [ 414.087380][T14430] syzkaller0: entered allmulticast mode [ 415.313747][T14479] syzkaller0: entered promiscuous mode [ 415.320295][T14479] syzkaller0: entered allmulticast mode [ 415.771878][T14511] lo speed is unknown, defaulting to 1000 [ 416.077983][T14525] syzkaller0: entered promiscuous mode [ 416.095353][T14525] syzkaller0: entered allmulticast mode [ 416.213024][T14527] bridge8: entered promiscuous mode [ 416.227720][T14527] bridge8: entered allmulticast mode [ 416.349073][T14511] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.452659][T14538] netlink: 'syz.2.2232': attribute type 1 has an invalid length. [ 416.686903][T14538] bond11: entered promiscuous mode [ 416.751763][T14538] bond11: entered allmulticast mode [ 416.781292][T14538] 8021q: adding VLAN 0 to HW filter on device bond11 [ 416.869761][T14542] erspan1: entered allmulticast mode [ 416.903038][T14542] bond11: (slave erspan1): making interface the new active one [ 416.918495][T14542] erspan1: entered promiscuous mode [ 416.949022][T14542] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 417.006489][T14563] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 417.015482][T14560] syz.2.2232 (14560) used obsolete PPPIOCDETACH ioctl [ 417.024190][T14516] sctp: [Deprecated]: syz.3.2223 (pid 14516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.024190][T14516] Use struct sctp_sack_info instead [ 417.045371][T14563] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 417.056291][T14573] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 417.073390][T14563] veth1_virt_wifi: entered allmulticast mode [ 417.083221][T14563] veth1_virt_wifi: left allmulticast mode [ 417.097161][T14557] syzkaller1: entered promiscuous mode [ 417.111498][T14557] syzkaller1: entered allmulticast mode [ 417.192964][T14576] netlink: 'syz.4.2238': attribute type 1 has an invalid length. [ 417.203680][T14573] __nla_validate_parse: 215 callbacks suppressed [ 417.203697][T14573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2238'. [ 417.380400][T14578] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 417.591655][T14586] syzkaller0: entered promiscuous mode [ 417.599469][T14586] syzkaller0: entered allmulticast mode [ 417.628861][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 417.688587][T14592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2243'. [ 417.816364][T14594] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 418.171492][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 418.205124][T14608] lo speed is unknown, defaulting to 1000 [ 418.261229][T14620] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 418.636670][T14625] bond11: entered allmulticast mode [ 418.680838][T14626] macvlan2: entered promiscuous mode [ 418.701240][T14626] macvlan2: entered allmulticast mode [ 418.724255][T14626] bond11: (slave macvlan2): Opening slave failed [ 419.484844][T14608] ip6_vti0 speed is unknown, defaulting to 1000 [ 419.495127][T14643] syzkaller0: entered promiscuous mode [ 419.530201][T14643] syzkaller0: entered allmulticast mode [ 420.083929][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2261'. [ 420.170746][T14666] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2262'. [ 420.302516][T14666] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 420.337380][T14666] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 420.372351][T14666] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 420.419154][T14666] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 420.549374][T14679] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2265'. [ 420.558971][T14679] openvswitch: netlink: Flow key attr not present in new flow. [ 420.611496][T14680] netlink: 'syz.3.2264': attribute type 83 has an invalid length. [ 421.006972][T14695] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 421.047521][T14695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.116954][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 421.625785][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2276'. [ 421.658611][T14731] pimreg: tun_chr_ioctl cmd 1074025677 [ 421.664420][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2276'. [ 421.678732][T14731] pimreg: linktype set to 823 [ 421.895332][T11947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.904966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.983030][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.991495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.014237][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.022593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.043163][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.242116][T14742] xt_hashlimit: size too large, truncated to 1048576 [ 422.244211][T14744] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 422.259005][T14744] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2280'. [ 422.629885][T14767] netlink: 'syz.1.2285': attribute type 3 has an invalid length. [ 422.659307][T14767] netlink: 'syz.1.2285': attribute type 3 has an invalid length. [ 422.816744][T14774] netlink: 'syz.0.2287': attribute type 1 has an invalid length. [ 422.903496][T14774] 8021q: adding VLAN 0 to HW filter on device bond9 [ 423.243940][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'. [ 423.276975][T14794] net_ratelimit: 7 callbacks suppressed [ 423.277002][T14794] openvswitch: netlink: Invalid VLAN frame [ 423.503377][T14809] netlink: 'syz.3.2297': attribute type 1 has an invalid length. [ 423.548434][T14811] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 423.607797][ T137] batman_adv: batadv1: MLD Querier appeared [ 423.627661][T14809] bond13: entered promiscuous mode [ 423.633371][T14809] 8021q: adding VLAN 0 to HW filter on device bond13 [ 423.721588][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2297'. [ 423.741536][T14815] bond13: entered allmulticast mode [ 423.813597][T14822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2300'. [ 423.833226][T14809] bond13: (slave bridge9): making interface the new active one [ 423.855306][T14809] bridge9: entered promiscuous mode [ 423.872378][T14809] bridge9: entered allmulticast mode [ 423.908428][T14809] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 423.933550][T14822] netlink: 4828 bytes leftover after parsing attributes in process `syz.0.2300'. [ 424.185534][T14837] tc_dump_action: action bad kind [ 424.394993][T14851] pim6reg1: entered promiscuous mode [ 424.408744][T14851] pim6reg1: entered allmulticast mode [ 424.605197][T14863] netlink: 'syz.0.2306': attribute type 4 has an invalid length. [ 424.702361][T14867] netlink: 'syz.0.2306': attribute type 4 has an invalid length. [ 424.968464][T14882] syzkaller1: entered promiscuous mode [ 424.974223][T14882] syzkaller1: entered allmulticast mode [ 424.985551][T14882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2313'. [ 425.550745][T14908] netlink: 193 bytes leftover after parsing attributes in process `syz.0.2321'. [ 425.607891][T14913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2323'. [ 425.633015][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 425.900940][T14920] bond10: Unable to set up delay as MII monitoring is disabled [ 425.954358][T14920] bond10 (unregistering): Released all slaves [ 426.509284][T14947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.564556][T14947] bond0: (slave wlan0): Opening slave failed [ 426.712833][T14953] lo speed is unknown, defaulting to 1000 [ 426.847773][T14961] tipc: Enabled bearer , priority 0 [ 426.864480][T14961] syzkaller0: entered promiscuous mode [ 426.876607][T14961] syzkaller0: entered allmulticast mode [ 426.950499][T14966] team0: left allmulticast mode [ 426.965670][T14966] geneve1: left allmulticast mode [ 426.993537][T14966] bridge6: left allmulticast mode [ 427.009723][T14966] bridge7: left allmulticast mode [ 427.033909][T14966] dummy0: left allmulticast mode [ 427.066516][T14966] team0: left promiscuous mode [ 427.093909][T14966] geneve1: left promiscuous mode [ 427.115154][T14966] bridge6: left promiscuous mode [ 427.129698][T14966] bridge7: left promiscuous mode [ 427.148027][T14966] dummy0: left promiscuous mode [ 427.155297][T14966] bridge0: port 1(team0) entered disabled state [ 427.209338][T14966] team0: Port device dummy0 removed [ 427.260301][T14966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.461599][T14953] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.487630][T14960] tipc: Resetting bearer [ 427.578651][T14960] tipc: Disabling bearer [ 427.750869][T14983] ipip0: entered promiscuous mode [ 427.796136][T14989] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0 [ 427.836539][T14989] gretap3: entered promiscuous mode [ 427.858233][T14989] gretap3: entered allmulticast mode [ 427.879553][T14983] tipc: Enabled bearer , priority 0 [ 427.909243][T14998] netlink: 'syz.1.2344': attribute type 12 has an invalid length. [ 427.923983][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 428.003456][T14983] tipc: Disabling bearer [ 428.103607][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 428.153480][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'. [ 428.166254][T15007] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2348'. [ 428.257509][T15013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2350'. [ 428.314215][T15013] veth1_to_team: entered promiscuous mode [ 428.353468][T15013] veth1_to_team: left promiscuous mode [ 428.461785][T15021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2351'. [ 428.756085][T15034] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2356'. [ 428.781637][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 428.799402][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 429.053185][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2362'. [ 429.720196][T15056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.241068][T15080] lo speed is unknown, defaulting to 1000 [ 430.261119][T15085] syzkaller1: entered promiscuous mode [ 430.277229][T15085] syzkaller1: entered allmulticast mode [ 430.744034][T15099] netlink: 'syz.2.2375': attribute type 3 has an invalid length. [ 430.762513][T15099] A link change request failed with some changes committed already. Interface ªªªªªª7ýd§ãî«2 may have been left with an inconsistent configuration, please check. [ 430.972421][T15080] ip6_vti0 speed is unknown, defaulting to 1000 [ 431.092352][T15082] nbd: socks must be embedded in a SOCK_ITEM attr [ 431.679728][T15131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.244148][T15157] xt_hashlimit: size too large, truncated to 1048576 [ 432.802956][T15178] netlink: 'syz.4.2395': attribute type 1 has an invalid length. [ 432.911288][T15178] 8021q: adding VLAN 0 to HW filter on device bond12 [ 433.030125][T15180] bond12: (slave veth7): Enslaving as an active interface with a down link [ 433.197890][T15181] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 433.214192][T15181] bond12: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 433.347009][T15187] ªªªªªª7ýd§ãî«2: renamed from lo (while UP) [ 433.460173][T15189] pimreg: entered allmulticast mode [ 433.561095][T15196] xt_hashlimit: size too large, truncated to 1048576 [ 433.584128][T15189] dvmrp0: left allmulticast mode [ 433.626341][T15201] netlink: 'syz.3.2400': attribute type 1 has an invalid length. [ 433.665058][T15188] pimreg: left allmulticast mode [ 433.667886][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 433.672135][T15201] __nla_validate_parse: 12 callbacks suppressed [ 433.672173][T15201] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2400'. [ 433.714385][T15207] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2400'. [ 434.366011][T15195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.475326][T15249] x_tables: duplicate underflow at hook 3 [ 434.713671][ T5646] block nbd1: Receive control failed (result -32) [ 434.814181][T15268] tipc: Enabled bearer , priority 0 [ 434.848373][T15268] d: renamed from syzkaller0 [ 434.860918][T15268] tipc: Disabling bearer [ 434.882649][T15274] netlink: 'syz.2.2415': attribute type 13 has an invalid length. [ 435.102727][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2415'. [ 435.119722][T15274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2415'. [ 435.144506][T15288] rdma_op ffff88807b1551f0 conn xmit_rdma 0000000000000000 [ 435.211738][T15290] netlink: 'syz.3.2417': attribute type 11 has an invalid length. [ 435.383469][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 435.479967][T15309] netlink: 'syz.3.2421': attribute type 4 has an invalid length. [ 435.579360][ T4960] block nbd0: Possible stuck request ffff8880275d0000: control (read@0,1024B). Runtime 210 seconds [ 435.590593][ T4960] block nbd0: Possible stuck request ffff8880275d01c0: control (read@1024,1024B). Runtime 210 seconds [ 435.602205][ T4960] block nbd0: Possible stuck request ffff8880275d0380: control (read@2048,1024B). Runtime 210 seconds [ 435.614386][ T4960] block nbd0: Possible stuck request ffff8880275d0540: control (read@3072,1024B). Runtime 210 seconds [ 435.665462][T15314] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:20002 [ 437.911508][T15316] bond14 (unregistering): Released all slaves [ 438.137442][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 438.493476][T15340] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 438.851366][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 438.879018][T15362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2435'. [ 439.425918][T15340] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.817373][T15420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2447'. [ 439.943851][T15423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'. [ 440.062040][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.183816][T15427] netlink: 'syz.1.2450': attribute type 1 has an invalid length. [ 442.225807][T15497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.276486][T15501] netlink: 'syz.2.2467': attribute type 61 has an invalid length. [ 442.339761][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 442.550905][T15506] syzkaller0: entered promiscuous mode [ 442.572023][T15506] syzkaller0: entered allmulticast mode [ 443.342117][T15523] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 443.375965][T15529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2474'. [ 443.531015][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 443.746400][T15546] netlink: 840 bytes leftover after parsing attributes in process `syz.0.2481'. [ 443.767825][T15544] syzkaller0: entered promiscuous mode [ 443.773383][T15544] syzkaller0: entered allmulticast mode [ 443.859221][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2482'. [ 444.230040][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 444.384265][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 444.456406][T15574] dvmrp8: entered allmulticast mode [ 444.499321][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 444.551437][T15577] 8021q: adding VLAN 0 to HW filter on device bond12 [ 444.569201][T15582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2490'. [ 444.608131][T15582] bond12 (unregistering): Released all slaves [ 444.666716][T15586] team0: entered promiscuous mode [ 444.672602][T15586] team_slave_0: entered promiscuous mode [ 444.678752][T15586] team_slave_1: entered promiscuous mode [ 445.061063][T15597] netlink: 'syz.1.2495': attribute type 13 has an invalid length. [ 445.100370][T15601] syzkaller0: entered promiscuous mode [ 445.116182][T15601] syzkaller0: entered allmulticast mode [ 445.126457][T15600] syzkaller0: entered promiscuous mode [ 445.140386][T15600] syzkaller0: entered allmulticast mode [ 445.548609][T15614] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 445.643125][T15625] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 445.986575][T15638] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.064365][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 446.246340][T15614] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.475518][T15643] netlink: zone id is out of range [ 446.488411][T15643] netlink: zone id is out of range [ 446.506678][T15643] netlink: zone id is out of range [ 446.524848][T15643] netlink: zone id is out of range [ 446.557726][T15643] netlink: zone id is out of range [ 446.563038][T15643] netlink: zone id is out of range [ 446.584277][T15645] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2507'. [ 446.761289][T15652] tls_set_device_offload: netdev not found [ 446.798729][T15653] macsec0: entered promiscuous mode [ 446.820158][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 446.841966][T15653] veth1_macvtap: left promiscuous mode [ 446.873990][T15653] macsec0 (unregistering): left promiscuous mode [ 446.929811][T15660] netlink: 'syz.3.2512': attribute type 13 has an invalid length. [ 447.210109][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'. [ 448.133005][T15662] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 448.150954][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'. [ 448.283155][T15675] FAULT_INJECTION: forcing a failure. [ 448.283155][T15675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.300192][T15673] netlink: 'syz.3.2514': attribute type 39 has an invalid length. [ 448.327355][T15675] CPU: 1 UID: 0 PID: 15675 Comm: syz.4.2515 Not tainted syzkaller #0 PREEMPT(full) [ 448.327385][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.327402][T15675] Call Trace: [ 448.327415][T15675] [ 448.327424][T15675] dump_stack_lvl+0xe8/0x150 [ 448.327453][T15675] should_fail_ex+0x412/0x560 [ 448.327485][T15675] _copy_from_iter+0x1d3/0x1670 [ 448.327516][T15675] ? rcu_is_watching+0x15/0xb0 [ 448.327547][T15675] ? __pfx__copy_from_iter+0x10/0x10 [ 448.327582][T15675] ? netlink_sendmsg+0x650/0xb40 [ 448.327603][T15675] ? skb_put+0x11b/0x210 [ 448.327636][T15675] netlink_sendmsg+0x6c0/0xb40 [ 448.327668][T15675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.327693][T15675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 448.327722][T15675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.327753][T15675] ____sys_sendmsg+0x972/0x9f0 [ 448.327773][T15675] ? __might_fault+0xaf/0x130 [ 448.327805][T15675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.327835][T15675] ? import_iovec+0x73/0xa0 [ 448.327868][T15675] ___sys_sendmsg+0x2a5/0x360 [ 448.327887][T15675] ? __lock_acquire+0x6b5/0x2cf0 [ 448.327921][T15675] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.327979][T15675] ? __fget_files+0x2a/0x420 [ 448.328003][T15675] ? __fget_files+0x3a0/0x420 [ 448.328038][T15675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 448.328061][T15675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.328093][T15675] ? __pfx_ksys_write+0x10/0x10 [ 448.328131][T15675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.328153][T15675] do_syscall_64+0x15f/0xf80 [ 448.328182][T15675] ? trace_irq_disable+0x3b/0x140 [ 448.328213][T15675] ? clear_bhb_loop+0x40/0x90 [ 448.328238][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.328258][T15675] RIP: 0033:0x7f9bb2b9ce59 [ 448.328278][T15675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.328295][T15675] RSP: 002b:00007f9bb3997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.328317][T15675] RAX: ffffffffffffffda RBX: 00007f9bb2e15fa0 RCX: 00007f9bb2b9ce59 [ 448.328331][T15675] RDX: 0000000020084084 RSI: 0000200000000280 RDI: 0000000000000003 [ 448.328344][T15675] RBP: 00007f9bb3997090 R08: 0000000000000000 R09: 0000000000000000 [ 448.328358][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.328369][T15675] R13: 00007f9bb2e16038 R14: 00007f9bb2e15fa0 R15: 00007fff1ec27788 [ 448.328414][T15675] [ 448.672337][T15673] syzkaller0: entered promiscuous mode [ 448.680234][T15673] syzkaller0: entered allmulticast mode [ 449.541053][T15703] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 449.747519][T15709] netlink: 'syz.1.2525': attribute type 3 has an invalid length. [ 450.030952][T15717] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 450.568059][T15738] nbd3: detected capacity change from 0 to 63 [ 450.599251][T15744] block nbd3: NBD_DISCONNECT [ 450.635408][T15744] block nbd3: Disconnected due to user request. [ 450.661967][T15744] block nbd3: shutting down sockets [ 450.680357][T15717] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.693113][ C0] blk_print_req_error: 138 callbacks suppressed [ 450.693133][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.708618][ C0] buffer_io_error: 138 callbacks suppressed [ 450.708636][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 450.729188][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.738376][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 450.746262][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.755400][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 450.763247][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.772352][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 450.782722][ T8467] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.803375][ T8467] Buffer I/O error on dev nbd3, logical block 0, async page read [ 450.833009][ T8467] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.857538][ T8467] Buffer I/O error on dev nbd3, logical block 1, async page read [ 450.867016][ T8467] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.887497][ T8467] Buffer I/O error on dev nbd3, logical block 2, async page read [ 450.897007][ T8467] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.919080][ T8467] Buffer I/O error on dev nbd3, logical block 3, async page read [ 450.946029][ T8467] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.976575][ T8467] Buffer I/O error on dev nbd3, logical block 0, async page read [ 451.002573][ T8467] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 451.013760][ T8467] Buffer I/O error on dev nbd3, logical block 1, async page read [ 451.035332][ T8467] ldm_validate_partition_table(): Disk read failed. [ 451.044214][ T8467] Dev nbd3: unable to read RDB block 0 [ 451.074550][ T8467] nbd3: unable to read partition table [ 451.131586][ T8467] ldm_validate_partition_table(): Disk read failed. [ 451.151228][ T8467] Dev nbd3: unable to read RDB block 0 [ 451.177078][ T8467] nbd3: unable to read partition table [ 451.571975][T15775] netlink: 'syz.4.2544': attribute type 3 has an invalid length. [ 451.627811][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 451.668064][T15783] xt_TCPMSS: Only works on TCP SYN packets [ 451.830430][T15783] batadv1: left allmulticast mode [ 451.846667][T15783] batadv1: left promiscuous mode [ 451.872629][T15783] bridge0: port 3(batadv1) entered disabled state [ 451.913014][T15783] bridge_slave_1: left allmulticast mode [ 451.925206][T15783] bridge_slave_1: left promiscuous mode [ 451.939859][T15783] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.971720][T15783] bridge_slave_0: left allmulticast mode [ 451.983146][T15783] bridge_slave_0: left promiscuous mode [ 451.995747][T15783] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.413559][T15815] netlink: 'syz.4.2551': attribute type 1 has an invalid length. [ 452.508953][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2551'. [ 452.681780][T15815] bond13: entered promiscuous mode [ 452.741774][T15815] 8021q: adding VLAN 0 to HW filter on device bond13 [ 453.201200][T15826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2554'. [ 453.353962][T15836] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.2557'. [ 453.612558][T15843] openvswitch: netlink: Invalid VLAN frame [ 453.766678][T15849] vlan0: entered promiscuous mode [ 453.772163][T15849] geneve1: entered promiscuous mode [ 453.782454][T15849] vlan0: entered allmulticast mode [ 454.795021][T15903] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 455.025022][T15903] ip6_vti0 speed is unknown, defaulting to 1000 [ 455.734163][T15942] netlink: 'syz.2.2578': attribute type 1 has an invalid length. [ 455.830931][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 455.902912][T15942] 8021q: adding VLAN 0 to HW filter on device bond12 [ 455.950173][T15957] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 456.175493][T15965] xt_hashlimit: size too large, truncated to 1048576 [ 456.193223][T15970] SET target dimension over the limit! [ 456.555562][T15981] IPVS: Error connecting to the multicast addr [ 456.578577][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 456.720237][T15986] C: renamed from veth1_to_team [ 456.733839][T15986] netlink: 'syz.1.2591': attribute type 2 has an invalid length. [ 456.737093][T15983] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 456.761241][T15986] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2591'. [ 456.795487][T15986] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 456.859864][T15983] netlink: 'syz.3.2590': attribute type 22 has an invalid length. [ 456.881855][T15983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2590'. [ 456.933693][T15957] ip6_vti0 speed is unknown, defaulting to 1000 [ 456.942686][T15988] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 456.966585][T15992] netlink: 'syz.1.2593': attribute type 9 has an invalid length. [ 456.974745][T15992] netlink: 'syz.1.2593': attribute type 6 has an invalid length. [ 456.984484][T15992] netlink: 'syz.1.2593': attribute type 7 has an invalid length. [ 457.000625][T15992] netlink: 'syz.1.2593': attribute type 8 has an invalid length. [ 457.259073][T16003] FAULT_INJECTION: forcing a failure. [ 457.259073][T16003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.318105][T16003] CPU: 0 UID: 0 PID: 16003 Comm: syz.1.2597 Not tainted syzkaller #0 PREEMPT(full) [ 457.318133][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.318146][T16003] Call Trace: [ 457.318154][T16003] [ 457.318163][T16003] dump_stack_lvl+0xe8/0x150 [ 457.318194][T16003] should_fail_ex+0x412/0x560 [ 457.318227][T16003] _copy_from_user+0x2d/0xb0 [ 457.318258][T16003] kstrtouint_from_user+0xd6/0x180 [ 457.318287][T16003] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 457.318331][T16003] proc_fail_nth_write+0x8e/0x210 [ 457.318386][T16003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 457.318420][T16003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 457.318458][T16003] vfs_write+0x29a/0xb90 [ 457.318496][T16003] ? __pfx_vfs_write+0x10/0x10 [ 457.318526][T16003] ? __fget_files+0x2a/0x420 [ 457.318554][T16003] ? __fget_files+0x3a0/0x420 [ 457.318577][T16003] ? __fget_files+0x2a/0x420 [ 457.318610][T16003] ksys_write+0x150/0x270 [ 457.318640][T16003] ? __pfx_ksys_write+0x10/0x10 [ 457.318678][T16003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.318699][T16003] do_syscall_64+0x15f/0xf80 [ 457.318726][T16003] ? trace_irq_disable+0x3b/0x140 [ 457.318756][T16003] ? clear_bhb_loop+0x40/0x90 [ 457.318780][T16003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.318800][T16003] RIP: 0033:0x7f397f95d68e [ 457.318819][T16003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.318835][T16003] RSP: 002b:00007f398091efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.318912][T16003] RAX: ffffffffffffffda RBX: 00007f398091f6c0 RCX: 00007f397f95d68e [ 457.318929][T16003] RDX: 0000000000000001 RSI: 00007f398091f0a0 RDI: 0000000000000004 [ 457.318941][T16003] RBP: 00007f398091f090 R08: 0000000000000000 R09: 0000000000000000 [ 457.318953][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.318964][T16003] R13: 00007f397fc16038 R14: 00007f397fc15fa0 R15: 00007ffe234dbc08 [ 457.318998][T16003] [ 457.826262][T15988] ip6_vti0 speed is unknown, defaulting to 1000 [ 459.436451][T16032] netlink: 'syz.1.2604': attribute type 9 has an invalid length. [ 459.445613][T16032] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2604'. [ 459.621295][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2605'. [ 459.715122][T16047] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 459.785974][T16047] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 459.985857][T16058] netlink: 'syz.1.2611': attribute type 16 has an invalid length. [ 459.999988][T16058] netlink: 'syz.1.2611': attribute type 3 has an invalid length. [ 460.012010][T16058] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.2611'. [ 460.052942][T16060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2610'. [ 460.850583][T16073] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2614'. [ 460.867499][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 460.977369][T16073] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2614'. [ 461.018646][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 461.710172][T16100] tunl0: Caught tx_queue_len zero misconfig [ 461.877602][T16105] syzkaller0: entered promiscuous mode [ 461.887333][T16105] syzkaller0: entered allmulticast mode [ 461.910912][T16111] netlink: 'syz.3.2629': attribute type 21 has an invalid length. [ 461.926694][T16111] __nla_validate_parse: 3 callbacks suppressed [ 461.926709][T16111] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2629'. [ 461.962861][T16111] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2629'. [ 462.130748][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2633'. [ 462.178433][T16122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2633'. [ 462.236563][T16122] ip6gretap3: entered allmulticast mode [ 462.260516][T16128] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 462.314399][T16132] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 462.489528][T16140] netlink: 'syz.3.2638': attribute type 1 has an invalid length. [ 462.547483][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'. [ 462.612878][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 462.868266][T16153] bridge0: entered allmulticast mode [ 462.873988][T16132] ip6_vti0 speed is unknown, defaulting to 1000 [ 463.593736][T16184] netlink: 'syz.2.2650': attribute type 11 has an invalid length. [ 463.932303][T16193] netlink: 'syz.2.2652': attribute type 3 has an invalid length. [ 463.958765][T16193] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2652'. [ 464.012827][T16197] sock: sock_timestamping_bind_phc: sock not bind to device [ 464.093696][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'. [ 464.174044][T16205] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2655'. [ 464.204868][T16205] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 464.438828][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2659'. [ 464.964323][T16236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.439788][T16249] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 465.661885][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.671638][ T4960] block nbd0: Connection timed out, retrying (0/1 alive) [ 465.679210][ T4960] block nbd0: Connection timed out, retrying (0/1 alive) [ 465.686422][ T4960] block nbd0: Connection timed out, retrying (0/1 alive) [ 465.693886][T10725] block nbd0: Dead connection, failed to find a fallback [ 465.708830][ T4960] block nbd0: Connection timed out, retrying (0/1 alive) [ 465.824622][T16269] x_tables: duplicate entry at hook 3 [ 466.794599][T16249] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.795568][T16274] ªªªªªª7ýd§ãî«2 speed is unknown, defaulting to 1000 [ 467.192642][T16322] __nla_validate_parse: 6 callbacks suppressed [ 467.192662][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 467.376561][T16274] ip6_vti0 speed is unknown, defaulting to 1000 [ 467.527428][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 467.653812][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'. [ 467.832946][T16338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2690'. [ 468.554278][T16356] smc: removing ib device sqz0 [ 468.767905][T16356] smbdirect: ib_dev[sqz0] removed [ 469.177821][ T5633] Bluetooth: hci3: command 0x0405 tx timeout [ 469.376243][T16382] netlink: 'syz.4.2703': attribute type 1 has an invalid length. [ 469.418471][T16382] netlink: 'syz.4.2703': attribute type 2 has an invalid length. [ 469.626932][T16389] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2705'. [ 469.640850][T16389] siw: device registration error -23 [ 470.299438][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 470.317968][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 470.342777][T16399] netlink: 'syz.3.2709': attribute type 13 has an invalid length. [ 470.691316][T16417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.742382][ T7734] geneve1: entered promiscuous mode [ 470.764600][ T7734] bridge6: entered promiscuous mode [ 470.774381][ T7734] bridge7: entered promiscuous mode [ 470.823868][T16424] netlink: 'syz.1.2716': attribute type 1 has an invalid length. [ 470.854564][T16424] netlink: 'syz.1.2716': attribute type 3 has an invalid length. [ 470.967950][T16435] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2718'. [ 470.996407][T16428] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 471.005006][T16427] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 471.472787][T16447] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 471.832056][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2724'. [ 471.889916][T16453] syzkaller0: entered promiscuous mode [ 471.895712][T16453] syzkaller0: entered allmulticast mode [ 471.984803][T16455] netlink: 'syz.1.2725': attribute type 13 has an invalid length. [ 472.041586][ T7734] IPVS: starting estimator thread 0... [ 472.142106][T16457] IPVS: using max 32 ests per chain, 76800 per kthread [ 472.169291][T16459] syzkaller0: entered promiscuous mode [ 472.185147][T16459] syzkaller0: entered allmulticast mode [ 472.219973][T16459] geneve1: left promiscuous mode [ 472.238323][T16459] team0: entered promiscuous mode [ 472.243468][T16459] geneve1: entered promiscuous mode [ 472.277953][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2728'. [ 472.295919][T16464] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 472.484027][T16472] netlink: 'syz.2.2731': attribute type 1 has an invalid length. [ 472.502627][T16472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2731'. [ 472.893126][T16492] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2737'. [ 472.904923][T16492] syzkaller0: entered promiscuous mode [ 472.910642][T16492] syzkaller0: entered allmulticast mode [ 472.966249][T16494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2738'. [ 473.040315][T16496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2739'. [ 473.049608][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 473.081317][T16496] IPVS: rr: FWM 3 0x00000003 - no destination available [ 473.549139][T16525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.560015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.610787][ T30] audit: type=1800 audit(1779110162.947:14): pid=16525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2747" name=CB dev="tmpfs" ino=2639 res=0 errno=0 [ 473.826120][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2751'. [ 473.910900][T16543] erspan0: entered promiscuous mode [ 474.070321][T16547] netlink: 210640 bytes leftover after parsing attributes in process `syz.3.2753'. [ 474.412851][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2758'. [ 474.429923][T16572] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2758'. [ 474.684474][T16535] erspan0: left promiscuous mode [ 474.786827][T16584] ªªªªªª7ýd§ãî«2: Caught tx_queue_len zero misconfig [ 474.953407][T16586] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 475.130170][T16586] bond14 (unregistering): Released all slaves [ 475.259821][ T7721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.268921][T11947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.282853][ T7721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.293152][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.598066][T16617] netlink: 'syz.0.2772': attribute type 7 has an invalid length. [ 475.633112][T16621] netlink: 'syz.1.2773': attribute type 10 has an invalid length. [ 475.659962][T16611] syzkaller0: entered promiscuous mode [ 475.665585][T16611] syzkaller0: entered allmulticast mode [ 475.754342][T16632] netlink: 'syz.1.2773': attribute type 10 has an invalid length. [ 477.927395][ T4995] udevd[4995]: worker [8331] /devices/virtual/block/nbd0 timeout; kill it [ 477.938919][ T4995] udevd[4995]: seq 13837 '/devices/virtual/block/nbd0' killed [ 477.981048][T16622] syzkaller0: entered promiscuous mode [ 477.986614][T16622] syzkaller0: entered allmulticast mode [ 478.008509][T16634] syzkaller1: entered promiscuous mode [ 478.020849][T16634] syzkaller1: entered allmulticast mode [ 478.316037][T16653] __nla_validate_parse: 7 callbacks suppressed [ 478.316059][T16653] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2777'. [ 478.359290][T16653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2777'. [ 478.528279][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 478.542919][T16665] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 478.645129][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2784'. [ 478.934000][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2787'. [ 479.023171][T16685] netlink: 'syz.0.2789': attribute type 11 has an invalid length. [ 479.100361][T16682] sctp: [Deprecated]: syz.0.2789 (pid 16682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.100361][T16682] Use struct sctp_sack_info instead [ 479.124273][T16693] sctp: [Deprecated]: syz.0.2789 (pid 16693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.124273][T16693] Use struct sctp_sack_info instead [ 479.151569][T16694] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2790'. [ 479.175065][T16694] openvswitch: netlink: Message has 3 unknown bytes. [ 479.356113][T16705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2794'. [ 479.377378][T16705] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 480.033394][T16731] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 480.047638][T16731] bond14 (unregistering): Released all slaves [ 480.173911][T16738] veth0_macvtap: Caught tx_queue_len zero misconfig [ 480.394631][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'. [ 480.413509][T16753] xt_hashlimit: size too large, truncated to 1048576 [ 480.421362][T16753] xt_hashlimit: max too large, truncated to 1048576 [ 480.429931][T16758] lo: Caught tx_queue_len zero misconfig [ 480.673314][T16767] netlink: 'syz.0.2812': attribute type 11 has an invalid length. [ 480.684587][T16765] syzkaller0: entered promiscuous mode [ 480.690515][T16765] syzkaller0: entered allmulticast mode [ 480.802005][T16776] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2813'. [ 481.326464][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 481.372751][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 481.381258][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 481.423218][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 481.442934][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.498884][ T5633] Bluetooth: hci5: command tx timeout [ 483.652115][T16783] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.019307][T16835] netlink: 'syz.3.2825': attribute type 10 has an invalid length. [ 484.218905][T11947] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.234771][T11947] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.262365][T11947] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.290527][T11947] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.391355][T16840] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2828'. [ 484.493181][T16843] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.661613][T16843] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.783585][T16843] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.861377][T16857] openvswitch: netlink: IP tunnel dst address not specified [ 484.876502][T16843] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.183324][ T7024] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.277485][T11942] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.366249][T11947] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.434579][ T7024] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.577315][ T5633] Bluetooth: hci5: command tx timeout [ 485.598158][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 485.745809][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 485.797531][T16879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2839'. [ 486.232305][T16783] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.254218][T16783] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.280017][T16783] bridge_slave_0: entered allmulticast mode [ 486.306791][T16783] bridge_slave_0: entered promiscuous mode [ 486.366483][T16783] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.382094][T16783] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.401838][T16783] bridge_slave_1: entered allmulticast mode [ 486.410074][T16783] bridge_slave_1: entered promiscuous mode [ 486.484018][T16783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.537468][T16783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.684113][T16783] team0: Port device team_slave_0 added [ 486.714521][T16783] team0: Port device team_slave_1 added [ 486.837281][T16783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.858815][T16783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.931552][T16783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.979363][T16783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.986449][T16933] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 487.026300][T16783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.062600][T16783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.154217][T16933] bond15: entered promiscuous mode [ 487.172323][T16933] 8021q: adding VLAN 0 to HW filter on device bond15 [ 487.311970][T16934] ipvlan2: entered allmulticast mode [ 487.319885][T16934] bond15: entered allmulticast mode [ 487.373400][T16936] bond15: (slave bridge11): making interface the new active one [ 487.381364][T16936] bridge11: entered promiscuous mode [ 487.386971][T16936] bridge11: entered allmulticast mode [ 487.397994][T16936] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 487.477573][T16783] hsr_slave_0: entered promiscuous mode [ 487.484535][T16783] hsr_slave_1: entered promiscuous mode [ 487.491895][T16783] debugfs: 'hsr0' already exists in 'hsr' [ 487.501217][T16783] Cannot create hsr debugfs directory [ 487.657937][ T5633] Bluetooth: hci5: command tx timeout [ 487.757716][T16945] openvswitch: : Dropping previously announced user features [ 487.849440][T16945] openvswitch: : Dropping previously announced user features [ 488.080465][T16968] xfrm1: entered allmulticast mode [ 488.122845][T16968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2862'. [ 488.231109][T16974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2865'. [ 488.263898][T16975] syzkaller0: entered promiscuous mode [ 488.270312][T16975] syzkaller0: entered allmulticast mode [ 488.284386][T16975] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 488.508433][T16783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 488.564180][T16783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.575025][T16783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 488.609043][T16783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.621627][T16783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 488.642971][T16783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.683446][T16783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 488.718997][T16783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.762309][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'. [ 489.064323][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 489.065770][T17014] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.096032][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2876'. [ 489.119590][T16783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.167057][T16783] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.201119][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.208426][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.281248][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.288520][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.348390][T17030] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 489.408860][T17030] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 489.439739][T17030] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.2878'. [ 489.498437][T17033] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 489.514084][T17025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.528500][T17025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.737358][ T5633] Bluetooth: hci5: command tx timeout [ 489.883679][T17025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.916653][T17025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.072659][T17025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.100462][T17025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.246650][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.277726][T17058] ipt_rpfilter: unknown options [ 490.292133][T17025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.305159][T17025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.351163][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.386283][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.416361][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.458983][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.507780][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.544551][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.662491][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.790224][ T1174] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.809416][T17057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2884'. [ 490.818746][ T1174] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.024028][ T1174] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.032874][ T1174] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.180335][ T1174] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.197427][ T1174] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.295309][ T7024] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.311528][ T7024] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.328841][T16783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.496922][T17078] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 491.973144][T16783] veth0_vlan: entered promiscuous mode [ 491.993091][T17098] ip6tnl1: entered allmulticast mode [ 492.034546][T16783] veth1_vlan: entered promiscuous mode [ 492.095739][T16783] veth0_macvtap: entered promiscuous mode [ 492.110269][T16783] veth1_macvtap: entered promiscuous mode [ 492.152168][T16783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.179166][T16783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.218755][T11947] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.253464][T11947] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.279758][T11947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.321268][T11947] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.336782][T17108] ip6_vti0 speed is unknown, defaulting to 1000 [ 492.886842][T17115] team0: left promiscuous mode [ 492.898815][T17115] team_slave_0: left promiscuous mode [ 492.908480][T17115] team_slave_1: left promiscuous mode [ 493.074587][T17115] bridge6: port 1(veth0_to_bond) entered disabled state [ 493.155681][T17115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.667040][T17115] geneve2: left promiscuous mode [ 493.676238][T17115] bond13: left promiscuous mode [ 493.682140][T17115] bridge9: left promiscuous mode [ 493.687844][T17115] bond13: left allmulticast mode [ 493.692861][T17115] bridge9: left allmulticast mode [ 493.707587][T17115] bridge0: left allmulticast mode [ 493.718063][T17115] bond15: left promiscuous mode [ 493.723110][T17115] bridge11: left promiscuous mode [ 493.733726][T17115] ipvlan2: left allmulticast mode [ 493.739227][T17115] bond15: left allmulticast mode [ 493.744342][T17115] bridge11: left allmulticast mode [ 493.796608][ T7723] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.816650][ T7723] syz2: Port: 1 Link DOWN [ 493.865292][T17125] vlan0: entered promiscuous mode [ 493.953913][T11947] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.984196][T11947] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.030250][ T7758] ip6_vti0 speed is unknown, defaulting to 1000 [ 494.043895][T11947] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.078840][T11947] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.112102][T11947] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.139325][T11947] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.173712][T11947] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.195191][T11947] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.215520][T11947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.235537][T11947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.360872][T11947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.382866][T11947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.559393][T17156] __nla_validate_parse: 11 callbacks suppressed [ 494.559413][T17156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2815'. [ 494.606698][T17157] team0: entered promiscuous mode [ 494.616604][T17157] team_slave_0: entered promiscuous mode [ 494.629065][T17157] team_slave_1: entered promiscuous mode [ 494.774717][T17162] netlink: 'syz.4.2815': attribute type 17 has an invalid length. [ 494.806709][T17156] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.819187][T17156] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.706512][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 495.720229][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 495.734954][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 495.745806][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 495.754633][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.416741][ T7732] syz0: Port: 1 Link DOWN [ 496.417895][T11948] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.463879][T11948] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.488518][T11948] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.507491][T11948] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.771286][T17215] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2921'. [ 496.919430][T17226] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 496.933499][T17226] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 496.945919][T17191] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.096640][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2925'. [ 497.211974][T17233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.309125][T17235] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2924'. [ 497.347062][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'. [ 497.385499][T17235] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2924'. [ 497.395283][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'. [ 497.404815][T17235] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2924'. [ 497.473645][T17246] netlink: 'syz.1.2928': attribute type 1 has an invalid length. [ 497.491697][T17246] NCSI netlink: No device for ifindex 0 [ 497.730500][T17256] team0: left promiscuous mode [ 497.757014][T17256] team_slave_0: left promiscuous mode [ 497.806419][T17256] team_slave_1: left promiscuous mode [ 497.818562][ T5646] Bluetooth: hci3: command tx timeout [ 497.869224][T17256] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.904560][T17259] IPVS: Scheduler module ip_vs_None not found [ 497.928170][T17256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.021519][T17256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.053672][T17256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.104348][T17256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.116109][T17256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.150092][T17256] veth1_vlan: left promiscuous mode [ 498.169153][T17256] veth0_vlan: left promiscuous mode [ 498.186406][T17256] veth0_vlan: entered promiscuous mode [ 498.209912][T17256] veth1_vlan: entered promiscuous mode [ 498.265224][T17256] veth0_macvtap: left promiscuous mode [ 498.288874][T17256] veth0_macvtap: entered promiscuous mode [ 498.347420][T17256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.374171][T17256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.413414][T17256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.423167][T17256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.458872][T17256] bond5: left promiscuous mode [ 498.464305][T17256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.481940][T17256] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 498.496268][T17256] 8021q: adding VLAN 0 to HW filter on device bond6 [ 498.512322][T17256] ip6gretap1: left promiscuous mode [ 498.522577][T17256] bond7: left promiscuous mode [ 498.528085][T17256] 8021q: adding VLAN 0 to HW filter on device bond7 [ 498.536767][T17256] veth9: left promiscuous mode [ 498.544685][T17256] 8021q: adding VLAN 0 to HW filter on device bond8 [ 498.555598][T17256] 8021q: adding VLAN 0 to HW filter on device bond9 [ 498.568765][T17256] geneve3: left promiscuous mode [ 498.575026][T17256] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.586368][T17256] 8021q: adding VLAN 0 to HW filter on device bond10 [ 498.594807][T17256] bond11: left promiscuous mode [ 498.603471][T17256] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.614168][T17256] 8021q: adding VLAN 0 to HW filter on device eth0 [ 498.623753][T17256] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.634597][T17256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 498.642608][T17256] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.653319][T17256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 498.661588][T17256] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.673925][T17256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 498.692688][ T7740] team_slave_0: entered promiscuous mode [ 498.699800][ T7740] team_slave_1: entered promiscuous mode [ 498.723336][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.730583][ T7024] bridge0: port 1(bridge_slave_0) entered listening state [ 498.775480][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.782732][ T7024] bridge0: port 2(bridge_slave_1) entered listening state [ 498.871712][T17273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2934'. [ 498.935256][T17279] IPv6: addrconf: prefix option has invalid lifetime [ 498.946245][T11947] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.955356][T11947] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.964159][T11947] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 498.973175][T11947] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 46603 - 0 [ 498.982121][T11947] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.990661][T11947] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.999150][T11947] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 499.009296][T11947] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 46603 - 0 [ 499.062169][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2934'. [ 499.106186][T17278] nbd: device at index 64 is going down [ 499.132634][T11942] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.160600][T11942] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.196061][T11942] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 499.231896][T11942] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 46603 - 0 [ 499.282036][T11942] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.321584][T11942] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.347295][T11942] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 499.384793][T11942] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 46603 - 0 [ 499.397852][T15824] udevd[15824]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 499.572452][ T1108] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 499.685345][T17292] netlink: 'syz.1.2936': attribute type 13 has an invalid length. [ 499.701938][T17287] syzkaller0: entered promiscuous mode [ 499.707782][T17292] netlink: 'syz.1.2936': attribute type 17 has an invalid length. [ 499.715735][T17287] syzkaller0: entered allmulticast mode [ 499.898108][ T5646] Bluetooth: hci3: command tx timeout [ 499.905165][T17318] xt_connbytes: Forcing CT accounting to be enabled [ 500.171254][T17286] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.178650][T17286] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.209365][T17286] team_slave_0: left promiscuous mode [ 500.214946][T17286] team_slave_1: left promiscuous mode [ 500.571529][T17286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.605501][T17286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.500132][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.803320][T17292] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.814942][T17292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.840767][T17292] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.848076][T17292] bridge0: port 1(bridge_slave_0) entered listening state [ 501.860376][T17292] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.867552][T17292] bridge0: port 2(bridge_slave_1) entered listening state [ 501.890159][T17292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.900842][T17292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.934713][T17292] veth1_vlan: left promiscuous mode [ 501.943023][T17292] veth0_vlan: left promiscuous mode [ 501.950261][T17292] veth0_vlan: entered promiscuous mode [ 501.958826][T17292] veth1_vlan: entered promiscuous mode [ 501.972141][T17292] veth0_macvtap: left promiscuous mode [ 501.980001][T17292] veth0_macvtap: entered promiscuous mode [ 501.987343][ T5646] Bluetooth: hci3: command tx timeout [ 502.005955][T17292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.016160][T17292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.028040][T17292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.036634][T17292] 8021q: adding VLAN 0 to HW filter on device bond4 [ 502.054929][T17292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.070457][T17292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 502.082822][T17292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 502.099125][T17292] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.111293][T17292] veth9: left allmulticast mode [ 502.119209][T17292] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.129295][T17292] 8021q: adding VLAN 0 to HW filter on device bond9 [ 502.144549][T17292] 8021q: adding VLAN 0 to HW filter on device bond10 [ 502.153228][T17292] 8021q: adding VLAN 0 to HW filter on device bond11 [ 502.165861][T17292] 8021q: adding VLAN 0 to HW filter on device eth0 [ 502.174641][T17292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 502.182963][T17292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.191609][T17292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 502.209933][T17292] syzkaller0: left promiscuous mode [ 502.215190][T17292] syzkaller0: left allmulticast mode [ 503.369550][T17341] __nla_validate_parse: 1 callbacks suppressed [ 503.369566][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2949'. [ 503.439391][T17346] netlink: 'syz.0.2949': attribute type 1 has an invalid length. [ 503.447584][T17346] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2949'. [ 504.068931][ T5646] Bluetooth: hci3: command tx timeout [ 506.564682][ T7740] team_slave_0: entered promiscuous mode [ 506.570410][ T7740] team_slave_1: entered promiscuous mode [ 506.579347][T11942] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 46603 - 0 [ 506.589157][T11942] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 34482 - 0 [ 506.598079][T11942] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 46603 - 0 [ 506.608354][T11942] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 34482 - 0 [ 506.641337][T11942] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 46603 - 0 [ 506.661668][T11942] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 34482 - 0 [ 506.672468][T11942] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 46603 - 0 [ 506.684247][T11942] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 34482 - 0 [ 506.749904][ T1108] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.876515][T17354] geneve5: entered promiscuous mode [ 506.915166][T11942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 37834 - 0 [ 506.953376][T11942] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 37834 - 0 [ 506.991988][T11942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 37834 - 0 [ 507.014749][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2953'. [ 507.090290][T11942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 37834 - 0 [ 507.354891][T17191] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.362455][T17191] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.370833][T17191] bridge_slave_0: entered allmulticast mode [ 507.379311][T17191] bridge_slave_0: entered promiscuous mode [ 507.389392][T17191] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.396875][T17191] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.404696][T17191] bridge_slave_1: entered allmulticast mode [ 507.413190][T17191] bridge_slave_1: entered promiscuous mode [ 507.458080][T17191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.471429][T17191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.515185][T17191] team0: Port device team_slave_0 added [ 507.524622][T17191] team0: Port device team_slave_1 added [ 507.592110][T17191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.599551][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.626810][T17191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.641081][T17191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.649625][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.695307][T17191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.807616][T17191] hsr_slave_0: entered promiscuous mode [ 507.829428][T17191] hsr_slave_1: entered promiscuous mode [ 507.838176][T17191] debugfs: 'hsr0' already exists in 'hsr' [ 507.844141][T17191] Cannot create hsr debugfs directory [ 507.888205][T17389] x_tables: duplicate underflow at hook 1 [ 511.098972][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.059153][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.789414][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 522.801283][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 522.810067][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 522.821250][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 522.840121][T17409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.847905][T17407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 522.862415][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 522.871456][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 522.883359][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 522.891543][ T5646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 523.295976][T17408] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.440918][T17405] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.990365][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 524.005834][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 524.018312][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 524.029668][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 524.059475][T17407] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 524.070194][T17407] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 524.085172][T17407] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 524.096282][T17407] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 524.111482][T17407] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 524.122549][T17407] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 524.496686][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.517510][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.526398][T17408] bridge_slave_0: entered allmulticast mode [ 524.562476][T17408] bridge_slave_0: entered promiscuous mode [ 524.594214][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.617747][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.627978][T17408] bridge_slave_1: entered allmulticast mode [ 524.645625][T17408] bridge_slave_1: entered promiscuous mode [ 524.771306][T17408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.823495][T17408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.919038][T17408] team0: Port device team_slave_0 added [ 524.937996][T17409] Bluetooth: hci1: command tx timeout [ 524.945765][ T5646] Bluetooth: hci6: command tx timeout [ 524.963114][T17408] team0: Port device team_slave_1 added [ 525.004480][T17434] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.024663][T17405] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.035026][T17405] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.042714][T17405] bridge_slave_0: entered allmulticast mode [ 525.051684][T17405] bridge_slave_0: entered promiscuous mode [ 525.061105][T17408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.069857][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.096521][T17408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.108360][T17405] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.118125][T17405] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.125723][T17405] bridge_slave_1: entered allmulticast mode [ 525.134399][T17405] bridge_slave_1: entered promiscuous mode [ 525.143404][T17408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.150870][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.178068][T17408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.256967][T17405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.272913][T17405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.324334][T17408] hsr_slave_0: entered promiscuous mode [ 525.331603][T17408] hsr_slave_1: entered promiscuous mode [ 525.348465][T17408] debugfs: 'hsr0' already exists in 'hsr' [ 525.355020][T17408] Cannot create hsr debugfs directory [ 525.373040][T17432] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.379920][T17405] team0: Port device team_slave_0 added [ 525.389746][T17405] team0: Port device team_slave_1 added [ 525.479534][T17405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.497644][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.524324][T17405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.547681][T17405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.554719][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.581335][T17405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.765862][T17405] hsr_slave_0: entered promiscuous mode [ 525.773896][T17405] hsr_slave_1: entered promiscuous mode [ 525.781093][T17405] debugfs: 'hsr0' already exists in 'hsr' [ 525.786909][T17405] Cannot create hsr debugfs directory [ 526.217492][ T5646] Bluetooth: hci8: command tx timeout [ 526.225271][T17409] Bluetooth: hci7: command tx timeout [ 526.601423][T17434] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.609168][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.616431][T17434] bridge_slave_0: entered allmulticast mode [ 526.624674][T17434] bridge_slave_0: entered promiscuous mode [ 526.641660][T17434] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.649209][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.656471][T17434] bridge_slave_1: entered allmulticast mode [ 526.664196][T17434] bridge_slave_1: entered promiscuous mode [ 526.724973][T17434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.743840][T17434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.806949][T17434] team0: Port device team_slave_0 added [ 526.812878][T17432] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.820342][T17432] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.828685][T17432] bridge_slave_0: entered allmulticast mode [ 526.836059][T17432] bridge_slave_0: entered promiscuous mode [ 526.846165][T17434] team0: Port device team_slave_1 added [ 526.852704][T17432] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.860232][T17432] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.867905][T17432] bridge_slave_1: entered allmulticast mode [ 526.875291][T17432] bridge_slave_1: entered promiscuous mode [ 526.928947][T17434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.935964][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.965427][T17434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.984055][T17432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.994384][T17434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.001667][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.028117][T17409] Bluetooth: hci6: command tx timeout [ 527.029271][T17434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.033604][ T5646] Bluetooth: hci1: command tx timeout [ 527.051948][T17432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.102617][T17432] team0: Port device team_slave_0 added [ 527.122230][T17432] team0: Port device team_slave_1 added [ 527.156414][T17434] hsr_slave_0: entered promiscuous mode [ 527.163176][T17434] hsr_slave_1: entered promiscuous mode [ 527.169764][T17434] debugfs: 'hsr0' already exists in 'hsr' [ 527.175569][T17434] Cannot create hsr debugfs directory [ 527.194710][T17432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.203654][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.230087][T17432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.242608][T17432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.249865][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.276533][T17432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.377049][T17432] hsr_slave_0: entered promiscuous mode [ 527.383813][T17432] hsr_slave_1: entered promiscuous mode [ 527.390441][T17432] debugfs: 'hsr0' already exists in 'hsr' [ 527.396207][T17432] Cannot create hsr debugfs directory [ 528.297478][ T5646] Bluetooth: hci7: command tx timeout [ 528.297495][T17409] Bluetooth: hci8: command tx timeout [ 529.097421][T17409] Bluetooth: hci6: command tx timeout [ 529.097579][ T5646] Bluetooth: hci1: command tx timeout [ 530.377418][ T5646] Bluetooth: hci7: command tx timeout [ 530.377729][T17409] Bluetooth: hci8: command tx timeout [ 531.177736][T17409] Bluetooth: hci6: command tx timeout [ 531.177751][ T5646] Bluetooth: hci1: command tx timeout [ 532.219865][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 532.227110][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 532.457515][T17409] Bluetooth: hci8: command tx timeout [ 532.461560][ T5646] Bluetooth: hci7: command tx timeout [ 536.697855][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 555.756147][T17409] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 555.764297][T17409] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 555.776325][T17409] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 555.785572][T17409] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 555.793385][T17409] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 556.056809][T17479] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.567817][T17479] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.575006][T17479] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.582620][T17479] bridge_slave_0: entered allmulticast mode [ 556.590494][T17479] bridge_slave_0: entered promiscuous mode [ 556.599822][T17479] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.607013][T17479] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.614757][T17479] bridge_slave_1: entered allmulticast mode [ 556.623102][T17479] bridge_slave_1: entered promiscuous mode [ 556.655084][T17479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.668416][T17479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.702159][T17479] team0: Port device team_slave_0 added [ 556.710503][T17479] team0: Port device team_slave_1 added [ 556.738119][T17479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.745117][T17479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.771617][T17479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.785647][T17479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.792808][T17479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.819016][T17479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.866235][T17479] hsr_slave_0: entered promiscuous mode [ 556.872923][T17479] hsr_slave_1: entered promiscuous mode [ 556.879599][T17479] debugfs: 'hsr0' already exists in 'hsr' [ 556.885369][T17479] Cannot create hsr debugfs directory [ 557.897593][T17409] Bluetooth: hci9: command tx timeout [ 559.977402][T17409] Bluetooth: hci9: command tx timeout [ 562.057425][T17409] Bluetooth: hci9: command tx timeout [ 562.297427][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.304712][ C0] bridge0: topology change detected, propagating [ 562.312501][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.319793][ C0] bridge0: topology change detected, propagating [ 562.940686][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.137465][T17409] Bluetooth: hci9: command tx timeout [ 571.257685][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.320976][ T5646] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 583.332494][ T5646] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 583.341212][ T5646] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 583.352084][ T5646] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 583.361420][ T5646] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 583.403391][T17407] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 583.415484][T17407] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 583.431413][T17409] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 583.441605][T17409] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 583.452178][T17409] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 583.814725][T17502] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.978193][T17504] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.576395][T17502] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.584442][T17502] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.592352][T17502] bridge_slave_0: entered allmulticast mode [ 584.600181][T17502] bridge_slave_0: entered promiscuous mode [ 584.618973][T17502] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.626207][T17502] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.633869][T17502] bridge_slave_1: entered allmulticast mode [ 584.641765][T17502] bridge_slave_1: entered promiscuous mode [ 584.696346][T17502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.725294][T17502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.843759][T17502] team0: Port device team_slave_0 added [ 584.863078][T17502] team0: Port device team_slave_1 added [ 584.917375][ T5646] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 584.934496][ T5646] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 584.945914][ T5646] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 584.954403][ T5646] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 584.962882][ T5646] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 585.064604][ T5646] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 585.077002][ T5646] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 585.088091][ T5646] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 585.099929][ T5646] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 585.108241][ T5646] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 585.114890][T17502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.123382][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.153119][T17502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.242392][T17502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.265648][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.293382][T17502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.419692][T17409] Bluetooth: hci10: command tx timeout [ 585.463594][T17504] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.475577][T17504] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.483109][T17504] bridge_slave_0: entered allmulticast mode [ 585.497610][T17409] Bluetooth: hci11: command tx timeout [ 585.507488][T17504] bridge_slave_0: entered promiscuous mode [ 585.524410][T17502] hsr_slave_0: entered promiscuous mode [ 585.531471][T17502] hsr_slave_1: entered promiscuous mode [ 585.538051][T17502] debugfs: 'hsr0' already exists in 'hsr' [ 585.543828][T17502] Cannot create hsr debugfs directory [ 585.550784][T17504] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.558925][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.566911][T17504] bridge_slave_1: entered allmulticast mode [ 585.575379][T17504] bridge_slave_1: entered promiscuous mode [ 585.649015][T17504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.678332][T17504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.792518][T17504] team0: Port device team_slave_0 added [ 585.801783][T17504] team0: Port device team_slave_1 added [ 585.895901][T17504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.903498][T17504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.934062][T17504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.945296][T17538] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.976618][T17504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.988215][T17504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.015447][T17504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.144677][T17504] hsr_slave_0: entered promiscuous mode [ 586.151965][T17504] hsr_slave_1: entered promiscuous mode [ 586.159423][T17504] debugfs: 'hsr0' already exists in 'hsr' [ 586.165238][T17504] Cannot create hsr debugfs directory [ 586.275221][T17534] ip6_vti0 speed is unknown, defaulting to 1000 [ 587.021995][T17409] Bluetooth: hci12: command tx timeout [ 587.203202][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.212145][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.220289][T17538] bridge_slave_0: entered allmulticast mode [ 587.229202][T17538] bridge_slave_0: entered promiscuous mode [ 587.240086][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.247358][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.254901][T17538] bridge_slave_1: entered allmulticast mode [ 587.261592][T17409] Bluetooth: hci13: command tx timeout [ 587.270347][T17538] bridge_slave_1: entered promiscuous mode [ 587.310865][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.323930][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.395000][T17538] team0: Port device team_slave_0 added [ 587.403948][T17538] team0: Port device team_slave_1 added [ 587.469404][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.476376][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.504507][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.507878][T17409] Bluetooth: hci10: command tx timeout [ 587.543843][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.551022][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.579526][T17409] Bluetooth: hci11: command tx timeout [ 587.585191][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.676120][T17538] hsr_slave_0: entered promiscuous mode [ 587.686035][T17538] hsr_slave_1: entered promiscuous mode [ 587.692918][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 587.698783][T17538] Cannot create hsr debugfs directory [ 587.825626][T17534] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.833021][T17534] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.841114][T17534] bridge_slave_0: entered allmulticast mode [ 587.848855][T17534] bridge_slave_0: entered promiscuous mode [ 587.863280][T17534] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.870651][T17534] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.878101][T17534] bridge_slave_1: entered allmulticast mode [ 587.886230][T17534] bridge_slave_1: entered promiscuous mode [ 587.945605][T17534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.959010][T17534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.015165][T17534] team0: Port device team_slave_0 added [ 588.031978][T17534] team0: Port device team_slave_1 added [ 588.082486][T17534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.089768][T17534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.116253][T17534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.129306][T17534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.136980][T17534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.163561][T17534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.226960][T17534] hsr_slave_0: entered promiscuous mode [ 588.234216][T17534] hsr_slave_1: entered promiscuous mode [ 588.242236][T17534] debugfs: 'hsr0' already exists in 'hsr' [ 588.249494][T17534] Cannot create hsr debugfs directory [ 589.097449][T17409] Bluetooth: hci12: command tx timeout [ 589.347387][T17409] Bluetooth: hci13: command tx timeout [ 589.577509][T17409] Bluetooth: hci10: command tx timeout [ 589.657654][T17409] Bluetooth: hci11: command tx timeout [ 591.177527][T17409] Bluetooth: hci12: command tx timeout [ 591.417338][T17409] Bluetooth: hci13: command tx timeout [ 591.667528][T17409] Bluetooth: hci10: command tx timeout [ 591.737825][T17409] Bluetooth: hci11: command tx timeout [ 593.257510][T17409] Bluetooth: hci12: command tx timeout [ 593.507421][T17409] Bluetooth: hci13: command tx timeout [ 603.931676][ T137] veth0_to_bond: left allmulticast mode [ 603.937795][ T137] veth0_to_bond: left promiscuous mode [ 603.947942][ T137] bridge6: port 1(veth0_to_bond) entered disabled state [ 604.014812][ T137] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 604.100498][T11943] smc: removing ib device syz2 [ 604.152582][ T137] erspan0 (unregistering): left promiscuous mode [ 604.223407][ T137] gretap0 (unregistering): left promiscuous mode [ 604.241357][T11943] smbdirect: ib_dev[syz2] removed [ 604.945094][ T137] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 605.039653][ T137] bond13 (unregistering): (slave bridge9): Releasing backup interface [ 605.237609][ T137] bond15 (unregistering): (slave bridge11): Releasing backup interface [ 605.286506][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.320359][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.331705][ T137] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 605.356571][ T137] bond0 (unregistering): Released all slaves [ 605.401828][ T137] bond1 (unregistering): Released all slaves [ 605.467582][ T137] bond2 (unregistering): Released all slaves [ 605.495112][ T137] bond3 (unregistering): Released all slaves [ 605.538230][ T137] bond4 (unregistering): Released all slaves [ 605.592962][ T137] bond5 (unregistering): Released all slaves [ 605.635766][ T137] bond6 (unregistering): Released all slaves [ 605.674451][ T137] bond7 (unregistering): Released all slaves [ 605.726847][ T137] bond8 (unregistering): Released all slaves [ 605.765171][ T137] bond9 (unregistering): Released all slaves [ 605.802728][ T137] bond10 (unregistering): Released all slaves [ 605.867717][ T137] bond11 (unregistering): Released all slaves [ 605.897073][ T137] bond12 (unregistering): Released all slaves [ 605.977525][T17409] Bluetooth: hci5: command 0x0406 tx timeout [ 605.987367][ T137] bond13 (unregistering): Released all slaves [ 606.060934][ T137] bond14 (unregistering): Released all slaves [ 606.120846][ T137] bond15 (unregistering): Released all slaves [ 607.621577][ T137] m1Ie5nè‹Ò: left promiscuous mode [ 607.719005][ T137] tipc: Left network mode [ 607.798788][ T137] IPVS: stopping backup sync thread 11562 ... [ 608.253628][ T137] hsr_slave_0: left promiscuous mode [ 608.260381][ T137] hsr_slave_1: left promiscuous mode [ 608.266683][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.948551][ T31] INFO: task kworker/1:2H:10725 blocked for more than 143 seconds. [ 610.956591][ T31] Not tainted syzkaller #0 [ 610.962527][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 610.972005][ T31] task:kworker/1:2H state:D stack:26504 pid:10725 tgid:10725 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 610.984374][ T31] Workqueue: kblockd blk_mq_requeue_work [ 610.990287][ T31] Call Trace: [ 610.993597][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 610.996537][ T31] __schedule+0x1821/0x5740 [ 611.001265][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.006376][ T31] ? __pfx___schedule+0x10/0x10 [ 611.011429][ T31] ? schedule+0x90/0x360 [ 611.015758][ T31] schedule+0x164/0x360 [ 611.020890][ T31] schedule_timeout+0x158/0x2c0 [ 611.025839][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 611.031368][ T31] ? __pfx_process_timeout+0x10/0x10 [ 611.036711][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 611.042788][ T31] ? prepare_to_wait_event+0x436/0x480 [ 611.048410][ T31] nbd_queue_rq+0x857/0x1100 [ 611.053137][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 611.058611][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 611.064778][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 611.070509][ T31] ? sbitmap_get+0x229/0x390 [ 611.075167][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 611.082087][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 611.088217][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 611.094701][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 611.129051][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 611.145639][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 611.156183][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 611.161942][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 611.168408][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 611.174115][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 611.182050][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 611.190337][ T31] blk_mq_requeue_work+0x71c/0x780 [ 611.195550][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 611.201834][ T31] ? process_scheduled_works+0xa70/0x1860 [ 611.208181][ T31] ? process_scheduled_works+0xa70/0x1860 [ 611.213984][ T31] process_scheduled_works+0xb5d/0x1860 [ 611.220101][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 611.226200][ T31] ? assign_work+0x3d5/0x5e0 [ 611.231787][ T31] worker_thread+0xa53/0xfc0 [ 611.236491][ T31] kthread+0x389/0x470 [ 611.241520][ T31] ? __pfx_worker_thread+0x10/0x10 [ 611.246734][ T31] ? __pfx_kthread+0x10/0x10 [ 611.252091][ T31] ret_from_fork+0x514/0xb70 [ 611.256795][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 611.262375][ T31] ? __switch_to+0xc79/0x1410 [ 611.267208][ T31] ? __pfx_kthread+0x10/0x10 [ 611.272044][ T31] ret_from_fork_asm+0x1a/0x30 [ 611.277221][ T31] [ 611.280477][ T31] [ 611.280477][ T31] Showing all locks held in the system: [ 611.292304][ T31] 1 lock held by khungtaskd/31: [ 611.297592][ T31] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 611.307865][ T31] 4 locks held by kworker/u8:5/137: [ 611.313178][ T31] 2 locks held by getty/5382: [ 611.318198][ T31] #0: ffff8880324620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 611.328316][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 611.339563][ T31] 3 locks held by kworker/0:4/5769: [ 611.344838][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 611.354927][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 611.364225][ T31] #2: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 611.374119][ T31] 1 lock held by udevd/8331: [ 611.378880][ T31] #0: ffff8880274b5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 611.388281][ T31] 4 locks held by kworker/1:2H/10725: [ 611.393676][ T31] #0: ffff88801fefc140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 611.404895][ T31] #1: ffffc900065efc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 611.418230][ T31] #2: ffff888026fe2198 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 611.427993][ T31] #3: ffff8880275d0338 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 611.437081][ T31] 3 locks held by kworker/u8:21/11943: [ 611.442812][ T31] #0: ffff888031e57140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 611.454589][ T31] #1: ffffc90003347c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 611.468408][ T31] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 611.478026][ T31] 2 locks held by syz-executor/17191: [ 611.483440][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.491713][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.500866][ T31] 2 locks held by syz.0.2952/17366: [ 611.506091][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.514422][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.523514][ T31] 2 locks held by syz.4.2953/17357: [ 611.528797][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.537062][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.546355][ T31] 6 locks held by syz.4.2953/17364: [ 611.551674][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.559984][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.569147][ T31] #2: ffff888027552a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 611.581861][ T31] #3: ffff888026d35a68 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 611.591443][ T31] #4: ffff888026d35430 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 611.603613][ T31] #5: ffff888026d35468 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 611.616075][ T31] 2 locks held by syz.2.2959/17390: [ 611.621396][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.629771][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.639111][ T31] 2 locks held by syz.1.2960/17396: [ 611.644346][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.652760][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.662028][ T31] 2 locks held by syz.1.2960/17397: [ 611.667366][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.675700][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.685065][ T31] 2 locks held by syz.1.2960/17398: [ 611.690909][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.699504][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.708712][ T31] 2 locks held by syz-executor/17405: [ 611.714129][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.722558][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.731683][ T31] 2 locks held by syz-executor/17408: [ 611.737070][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.745508][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.754639][ T31] 2 locks held by syz-executor/17432: [ 611.760183][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.768525][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.777640][ T31] 2 locks held by syz-executor/17434: [ 611.783021][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.791334][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.800782][ T31] 2 locks held by syz-executor/17479: [ 611.806197][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.814709][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.824026][ T31] 2 locks held by syz-executor/17502: [ 611.830327][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.838781][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.848001][ T31] 2 locks held by syz-executor/17504: [ 611.853397][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.861720][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.870798][ T31] 2 locks held by syz-executor/17534: [ 611.876174][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.884582][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.893793][ T31] 2 locks held by syz-executor/17538: [ 611.899787][ T31] #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.908119][ T31] #1: ffffffff8fe41380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 611.917228][ T31] [ 611.933650][ T31] ============================================= [ 611.933650][ T31] [ 611.942309][ T31] NMI backtrace for cpu 0 [ 611.942331][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 611.942354][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.942366][ T31] Call Trace: [ 611.942374][ T31] [ 611.942384][ T31] dump_stack_lvl+0xe8/0x150 [ 611.942413][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 611.942439][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 611.942463][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 611.942492][ T31] sys_info+0x135/0x170 [ 611.942513][ T31] watchdog+0xfd3/0x1030 [ 611.942552][ T31] ? watchdog+0x1c9/0x1030 [ 611.942586][ T31] kthread+0x389/0x470 [ 611.942611][ T31] ? __pfx_watchdog+0x10/0x10 [ 611.942637][ T31] ? __pfx_kthread+0x10/0x10 [ 611.942666][ T31] ret_from_fork+0x514/0xb70 [ 611.942690][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 611.942712][ T31] ? __switch_to+0xc79/0x1410 [ 611.942745][ T31] ? __pfx_kthread+0x10/0x10 [ 611.942772][ T31] ret_from_fork_asm+0x1a/0x30 [ 611.942813][ T31] [ 611.942821][ T31] Sending NMI from CPU 0 to CPUs 1: [ 612.054198][ C1] NMI backtrace for cpu 1 [ 612.054216][ C1] CPU: 1 UID: 0 PID: 5363 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 612.054235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.054248][ C1] Workqueue: events drain_vmap_area_work [ 612.054280][ C1] RIP: 0010:rcu_is_watching+0x26/0xb0 [ 612.054303][ C1] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 80 82 8f 11 e8 bb 82 ff 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df <4c> 8d 34 dd 90 c7 26 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 [ 612.054318][ C1] RSP: 0018:ffffc900033d72f8 EFLAGS: 00000297 [ 612.054332][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080000001 [ 612.054343][ C1] RDX: ffffc900033d7401 RSI: ffffffff8c28afc0 RDI: ffffffff8c28af80 [ 612.054356][ C1] RBP: dffffc0000000000 R08: ffffc900033d7438 R09: 0000000000000000 [ 612.054367][ C1] R10: ffffc900033d7498 R11: fffff5200067ae95 R12: ffffc900033d7448 [ 612.054380][ C1] R13: ffffc900033d0000 R14: ffffc900033d7448 R15: dffffc0000000000 [ 612.054393][ C1] FS: 0000000000000000(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 612.054407][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.054419][ C1] CR2: 000055618b7bbee8 CR3: 000000007fca4000 CR4: 00000000003526f0 [ 612.054440][ C1] Call Trace: [ 612.054446][ C1] [ 612.054455][ C1] ? unwind_next_frame+0xa6/0x2550 [ 612.054475][ C1] unwind_next_frame+0x1b76/0x2550 [ 612.054500][ C1] ? unwind_next_frame+0xa6/0x2550 [ 612.054520][ C1] ? __unwind_start+0xf7/0x760 [ 612.054544][ C1] __unwind_start+0x5b8/0x760 [ 612.054566][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.054593][ C1] arch_stack_walk+0xe3/0x150 [ 612.054617][ C1] ? arch_stack_walk+0xe3/0x150 [ 612.054639][ C1] stack_trace_save+0xa9/0x100 [ 612.054664][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 612.054695][ C1] save_stack+0x122/0x230 [ 612.054719][ C1] ? __pfx_save_stack+0x10/0x10 [ 612.054754][ C1] __reset_page_owner+0x71/0x1f0 [ 612.054779][ C1] __free_frozen_pages+0xbc7/0xd30 [ 612.054803][ C1] ? ___free_pages+0x9a/0x1b0 [ 612.054829][ C1] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 612.054852][ C1] __apply_to_page_range+0xbdc/0x1420 [ 612.054879][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 612.054905][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 612.054930][ C1] __kasan_release_vmalloc+0xa2/0xd0 [ 612.054952][ C1] purge_vmap_node+0x220/0x960 [ 612.054985][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 612.055012][ C1] ? flush_tlb_kernel_range+0x350/0x460 [ 612.055040][ C1] __purge_vmap_area_lazy+0x779/0xb40 [ 612.055069][ C1] ? process_scheduled_works+0xa70/0x1860 [ 612.055089][ C1] drain_vmap_area_work+0x27/0x40 [ 612.055113][ C1] process_scheduled_works+0xb5d/0x1860 [ 612.055148][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.055169][ C1] ? assign_work+0x3d5/0x5e0 [ 612.055189][ C1] worker_thread+0xa53/0xfc0 [ 612.055222][ C1] kthread+0x389/0x470 [ 612.055244][ C1] ? __pfx_worker_thread+0x10/0x10 [ 612.055260][ C1] ? __pfx_kthread+0x10/0x10 [ 612.055282][ C1] ret_from_fork+0x514/0xb70 [ 612.055301][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 612.055319][ C1] ? __switch_to+0xc79/0x1410 [ 612.055345][ C1] ? __pfx_kthread+0x10/0x10 [ 612.055367][ C1] ret_from_fork_asm+0x1a/0x30 [ 612.055397][ C1] [ 612.386764][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 612.393700][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 612.402858][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.412957][ T31] Call Trace: [ 612.416278][ T31] [ 612.419259][ T31] vpanic+0x56c/0xa60 [ 612.423285][ T31] ? __pfx___schedule+0x10/0x10 [ 612.428183][ T31] ? __pfx_vpanic+0x10/0x10 [ 612.432730][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 612.438913][ T31] panic+0xc5/0xd0 [ 612.442660][ T31] ? __pfx_panic+0x10/0x10 [ 612.447213][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 612.452643][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 612.458990][ T31] watchdog+0x102c/0x1030 [ 612.463353][ T31] ? watchdog+0x1c9/0x1030 [ 612.467795][ T31] kthread+0x389/0x470 [ 612.471872][ T31] ? __pfx_watchdog+0x10/0x10 [ 612.476562][ T31] ? __pfx_kthread+0x10/0x10 [ 612.481167][ T31] ret_from_fork+0x514/0xb70 [ 612.485785][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 612.490922][ T31] ? __switch_to+0xc79/0x1410 [ 612.495629][ T31] ? __pfx_kthread+0x10/0x10 [ 612.500242][ T31] ret_from_fork_asm+0x1a/0x30 [ 612.505047][ T31] [ 612.508974][ T31] Kernel Offset: disabled [ 612.513310][ T31] Rebooting in 86400 seconds..