last executing test programs: 4.291194406s ago: executing program 0 (id=1446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffb}]}, &(0x7f0000000140)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000100)=0x7448d6d, 0x4) sendto$inet(r2, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000340000000000800024000000000080001"], 0xa0}}, 0x0) 3.752396587s ago: executing program 4 (id=1454): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x5, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x3) pselect6(0x40, &(0x7f0000000040)={0x8, 0x28, 0x7f, 0x4, 0x800, 0xfff, 0x5, 0x5}, &(0x7f0000000080)={0x2, 0x800, 0x4, 0x8, 0x0, 0x8001, 0xbe9, 0x8}, &(0x7f00000000c0)={0x1, 0x8001, 0x91d8, 0x9, 0x400, 0x77, 0x0, 0xee}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x2]}, 0x8}) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000140)=""/194) 3.395863543s ago: executing program 1 (id=1459): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4010000002000007911b0000000000006000000000000009500000c00000000aabcef7cf62747a7496294e6eba3daa2dd93e555161bc958b9e20916ec5c66164e342b07788afa2180ebb38313ad41adf33ae948e8582e43de2b67fbdd472511c398e4f2c2f0d320854919c3c36538e9f26c14a0a605cd01e16a1a431fa8c131f6d949a64cc8bae4f360d95d01dd2357ed8019bb88d0cbd0e15a7710d94f942263e9fef1bdfae0b28c0f8c9c364ef9e28fe4062b79e03dfa51d2221581ff97ce514e4e10ef6fc43d7864ffbb3cffd2d418bc568f40fa3a8f1e58629229b6f78cd501046519c442b952af518f748a87299cd4be319f5ba6a589125155986d4d5faf1cdc165903241917b2d26acad4731e4370a8d259aac1ce94c9bc49dafa6aa39663d9d706f7a1b55727f294dbc9bdc35b2121d6c4bfc183306ce4c3a152"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) (async) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 3.282578964s ago: executing program 0 (id=1461): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x30}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x8084) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4) write(r0, 0x0, 0x0) 3.260427963s ago: executing program 1 (id=1462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x100000000000000, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0) 3.244993857s ago: executing program 4 (id=1463): bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 3.089931864s ago: executing program 0 (id=1465): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x4, 0x5c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000007c0], 0x0, &(0x7f0000000080), &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"]}, 0x6b9) unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x28) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r4, 0x0, 0x4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x1) readv(r6, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1) pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="0800523f5cc3547f2cbd7000fcdbdf35140000000c0006000000c67987407ad860f8adce7ae9de546a81f0dbd9e0527cbd95c54e085dd38407dfd274c3916b1fe2a93ea61c9febc2b4e1a10c1fb61aba0ed779e7893206339eff5cc8bfc5a42ccf562f2cd1d2b838f730851e9d1985e102962b927b3b2a93af1872df1109bf216d4d0fa1957cde6690f1313f5e77a40c74077d69c0c871f0065d018c897c03ac1fc124ea7e23d26eb6df1a4167f2c581093b29e7383d6695f06f8b479c7cf0343245e15afda88f765fb83ebf1320d71589d86d8e14bbc699768fe7ae4b5d2f63d714bf287f713464683373c5ead297581424deb8c74313f7f0df3e2bbe9951e1cac4f453ae"], 0x20}, 0x1, 0x0, 0x0, 0x4004090}, 0x8081) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYRESDEC=r4, @ANYRES64=r3, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES16=r5, @ANYBLOB="21592a628df59787c6dc72d6d8b52bb760a759607dd2a7c62fdff9af80ce693635beff0095795b23faf5760330b42d14a72aafd8c9b8d2279ce29b5d5004b34ff59cb7f69e62d13cb171e0382f60f7082866741047a74f97ee01a815f32a2aea150d492df2ad5cc753fa5cc028964d9714296ad8483ce2150bdce93c9a6bd504", @ANYRES64=r0, @ANYBLOB="0800db00", @ANYRESOCT=r2, @ANYBLOB="080001002600000008000300", @ANYRES32=r1, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4f1d521f010d2c17}, 0x800) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) setsockopt$sock_linger(r8, 0x1, 0xd, 0x0, 0x0) shutdown(r8, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="100000002b0049"], 0x10}], 0x1}, 0x0) 2.955835701s ago: executing program 3 (id=1466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async, rerun: 64) r14 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (rerun: 64) ioctl$SIOCAX25CTLCON(r14, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r2, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x44}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xffff}]}]}, 0x34}}, 0x0) (async) r15 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r15, 0x0, 0x485, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000006880)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006840)={&(0x7f00000067c0)={0x4c, r11, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) (rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) 2.893768217s ago: executing program 4 (id=1467): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x21b2f54f54e24e41}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3b, 0x2, 0x200, 0x168f, 0x7ff, 0x800}, {0x3, 0x2, 0xf5f6, 0xf, 0x0, 0x1}, 0x9, 0x5, 0xafb}}, @TCA_TBF_PBURST={0x8, 0x7, 0x262}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x10, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5f0, 0xd0, 0x0, 0x3c0, 0xd0, 0x220, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@private1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'caif0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x150, 0x0, {0x5002}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x3}}, @common=@unspec=@connbytes={{0x38}, {[{0x1}, {0xfffffffffffffffa}], 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@loopback, 0x29, 0x37}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'wlan0\x00', {}, {}, 0x32, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x6, 0x1, [0x0, 0x7, 0x1ff, 0x7f, 0x7f, 0x7, 0x1, 0x799c, 0xd, 0x7, 0x2, 0x100, 0x1, 0xf6ee, 0xffff, 0x7f], 0xa}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 2.823463632s ago: executing program 3 (id=1468): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x89100061, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x5e9be000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) close(0x3) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) recvfrom$inet(r1, 0x0, 0x0, 0x89100061, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x5e9be000) (async) 2.77287437s ago: executing program 4 (id=1469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x80, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x44) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000002f00)=0x2) (async, rerun: 64) ioctl$PPPIOCSMAXCID(r3, 0x4004743c, 0x0) (rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (rerun: 32) 2.72599448s ago: executing program 3 (id=1470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x18) (async) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe(&(0x7f0000000c00)) epoll_create(0x4) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1}, 0x50) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 2.4714769s ago: executing program 3 (id=1471): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000fbdc74e37d96d745c78797a53653000000000000000000000500000000000000"], 0xfffffffffffffe43) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48}, 0x4000) 2.287596586s ago: executing program 0 (id=1473): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) socketpair(0x8, 0x4, 0x34, &(0x7f00000000c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) (async) socketpair(0x8, 0x4, 0x34, &(0x7f00000000c0)) (async) 1.999550942s ago: executing program 1 (id=1474): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/cgroup\x00') ioctl$sock_netdev_private(r0, 0x8932, &(0x7f0000000080)="61d7f5023792c1817c84c538aa3a") 1.670603065s ago: executing program 4 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0) 1.643991916s ago: executing program 1 (id=1477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10d00, 0xf) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7ffffff, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000040)=0x2000000, 0x4) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000001380)={{r8}, "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"}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000380)) syz_emit_ethernet(0x18, &(0x7f0000000340)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@llc={0x4, {@snap={0x57, 0xff, 'n', "db714d", 0xa01, "3db5"}}}}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x1, 0x4, 0xffff, 0x0, 0x1}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r10], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000006c0), 0x1, r11}, 0x38) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) socketpair(0x2a, 0x3, 0x7, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) 1.437277769s ago: executing program 1 (id=1479): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) accept4$nfc_llcp(r0, &(0x7f0000000580), &(0x7f0000000480)=0x60, 0x80000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0xb0) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xf5) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0xa9, @private1, 0x6}, @in6={0xa, 0x4e23, 0xa5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x54) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) 781.589726ms ago: executing program 2 (id=1483): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@datasec={0x4, 0x1, 0x0, 0xf, 0xfffff, [{0x3, 0xe1, 0x1000e0}], "f188"}, @datasec={0x5, 0x0, 0x0, 0xf, 0x2, [], "5ede"}]}, {0x0, [0x2e, 0x2e, 0x61, 0x30, 0x61]}}, 0x0, 0x47, 0x0, 0x1, 0x100}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xb}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000040) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x44}}, 0x0) accept4(r2, &(0x7f0000000280)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000380)=0x80, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) 515.145645ms ago: executing program 2 (id=1484): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x80) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10) r1 = socket(0x6, 0x800, 0x1) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x40, 0x20, 0x6, 0x3, {{0x27, 0x4, 0x0, 0x38, 0x9c, 0x67, 0x0, 0x8, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@lsrr={0x83, 0x1f, 0x75, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @local, @loopback, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x90, [@loopback, @dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @lsrr={0x83, 0xf, 0xfc, [@rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp={0x44, 0x1c, 0x40, 0x0, 0x7, [0x1, 0x1, 0x1, 0x405, 0xa0c, 0x585a]}, @generic={0x0, 0xd, "2843c291bb737f41a72dcc"}, @lsrr={0x83, 0x17, 0x22, [@loopback, @multicast1, @rand_addr=0x64010101, @multicast2, @loopback]}]}}}}}) sendmsg$kcm(r1, &(0x7f0000001700)={&(0x7f0000000200)=@ll={0x11, 0x0, r2, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="33fa95bcf6a5abf1753470a6cee0de7dfff9f52e9f02b39d7cfa45437fa964cc286234179d4e57163def93bef3b42bc99b6eb040dd3ed4c62832ef8081dcf85ad4e232480c51fdb8d9759eafd8d9c7376449a8baf644f9a484ba214e6745d2fe7e1493a9cf3660f809b156f5e4459fbbc5c2996795", 0x75}, {&(0x7f0000000300)="c4a673f571263361c6d11f66276ef42b13f6cd603f2c2567ddb982a092eb1d843e21a542723ed02836535a3213c75040f18e7c04bdcaea40e407c372e07dee3b774d75e20f77dd787273d21297c747279875d5d8005326f66b29378152bb63279b890359e6d5fe4896cf72ed0a616ed136a82db605138e589eca8c43e403325aa537db71", 0x84}, {&(0x7f00000003c0)="181c5b0d4bd4fa351091af33f216828ecb9cdaa73db098d346fb3c6d2f2c51f41505e199227a2aa9726ee491f23ece2de10daf516a4c65b036cd31cda17eea239ff75058808f629e00d2eb646f3dd4103fe2f87039e3da36c11310070ea74ff106d74b00f64cc6133147088b8a4a3ee3b8e10e573a45542e2c8b68cd8cdfc6d0e9eba928f16a091c1a31c7c68a4f93ffbf09a8159bb4430603e0837a602bda27d2909dd38b1f0b57a5a72c29f141163e07dfb3cac88584f7240bb5170434e9b3b82a6981db236215b136caba6eef19ac102c02d6b1fe1f5be889d19eae6c693861dc88a3031cc87904da9feb4fe57dd2b84f", 0xf2}, {&(0x7f00000004c0)="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", 0xff}], 0x4, &(0x7f0000000600)=[{0x1010, 0x0, 0x2d, "6feac7312079056206df30f6a9c576073891a75eae30da690075ce2cb40392d515836b3ffa18bee7ada0d2daa6276dcd5076fc4d2c8d4a332ae86c71367a7ffb732ea1be17090e78c172989fba26c1a0d6bdb4a0a1bb22b0aad62254a643923996fc4ee3afbd5a0d82de30b44be61ee1b566ffb1d5c6e864b3e327e39bd3d298eff3caa272d274bd7f8ad9619019bb6b80715b39d2389de9c0a4ab65aa88bcb01c7a69ce3fa130b18f851c7787d0cc1175d4fb23730fef7f8edaa22bf8e8d71c2fa490e34bf7e4ec53c5cf19cbf6cb73ada2ee2d130768a3ef8ac319bd9122a3b53b2050ac18a11e330fbf95e2851bf8e71c4126f62bf25ab85db7026461b3edeb484146dff3e44f712273ccbd84bcd572f56ebe552c2e1d663ac8e3afd32ff8e35bf3bc0fe4fb94d8ef8f7b3de105688713a3c72884ea5c951a090a3b83af10d16c3e7551072c358310653e2986b855fa540e2935fd0b2fdecddb7a0effec71ca452f6e2d95d98907fa12b272a9467edd8ed0ce2dc193fa8c358fecf8e1b543229f6bf1720597e9fa26d10a932459f6d93f3a9d08bedde24290ed6158a4ab931ceeb87124a87019b12132d29cd6d3e504cb1995791931f95eb50566bbc14882785464c7cf6993a6557c606f1cf8b550bc28a4f473778431f68874db25e60cf068363e589a2e268e6430945385152d0caae57af095f938e9669a57ae6983c10c19d4ce3d056fab25acf250c88e7f990bb7bb61f12240bc5fe0a8368889d9f7186f72dcebbe2b8ed919b00e6e5c2997000f17ecda96688ebbc06d130aef202d6e66a607ee3508db1d3a70acda2055e3d846c0a68b2d78880e9211c60a4734302740c2862fa23a60120e0fc4843f8507240371a3de9f07ffdafed626c7b5047f5c0149cecae7eba9409a5e0f351365af05b91eec987ebd39c1d167980884131fcc257bfd52a717369f54da2fa78719448150d18f5a2d47591befd475d8152f0f69e252afc953d327b3d88e6a514ddaa2fde87805398eb7cd46897c60fc42ef90a44486cb16c6e83403bbd0e905f4e0528c62c47011903818e63310963fdc42c6498713b3ba92c6abc86f8311de7f369537e015f8414cf5ee39004f1d49b0659bc9b0489face9072c1024afc2017f544ca5bb5d9feff326ce7d63ddcaccff7ecd4d3c306798f23786c2cb7f02f5900a18148ba7ccfd192862937bf173103bd343ce218707867e11c7fa3106de848f030aa31daf80db5cd158c74dd7f373586f7eea80f72eb3c29a9cd7c98d5264a8bb6c0670a510f64ed2483e5ba4694bb9c3758172f7933ea0abf2bdd237a6c18e3c681a2133a43350b347156c30543ea7748b0ec78040bcf006d061150286e8815cadedf8b221dc8be6ceb3e9677b6233021dc59c546a783f25a1c86d5b87f3209ce56ae47e24d3d4a4ca7793a83141a9a0746e7b1a3695ba0151c90865e23315af27cb15a0a82dd3c3bf0a7e74e9cda0c7b80e8b44dcc8aadf9c43b660be394166b658f1543c12246d382398998ae8e78b45b5dbf9b53a1e1ab533aef83050e12c8b7732b721fd922b21ed5c232e6c79521631e959e4d26cc54e0f85cbba0190d4dffb8a827929c63b70a7a3678f675d861c7915fa9a3f07eaab71775b464f9df0708e016dd1c41b51565c45dd984184d62ad2ad779346fe2aef82af077e89a19c9cbb421883c0b629b985cf9842edf6bf64a9dda763476eb0c5552431b594c4ae988e806b5edfc4efe0cf373cc93cec01b8af36c67d09c734266812f99d8fc7e208d6e389ede83579e7733005640b0740680ae5e1d1ccea0b431f51c350b95aee21c4400a7563dc131d419d7e3ef8622519091ec46afb01fb779799e8c537a843c5a186917e6a7f782625c0165c0129d20bfadfbd6b03fa5870f4f3829f7ec83a18a7794c0b46723601e84344370d92a876128ae671b4c33df390706e02ada20f89f747e19a31c85bfe4e5ea3146b672b9e8f43292f6231f34c955765690ebca92bd7d6b5e98d66d6680f4e422746cd6a3dadbe6906c4fca21322db48d2284b9deab67a7a75ad6e61be6a742218b95de46bbd43499e01d27e24eb8bad1dd1f1006282585d83bf19c678122d18a40d0442981986ae1f217a60c7aa5c8aa172f85907285446bdcbdb1073820d7b4456523d647ace76c78d942836b9aad6c7f348705b8a3e8a15217f3121b04fa601f72de6fce94481c76569ac7432432466c054101211bc3fa1f5e1cfae60ff144bf83ac60862f5f00abd9021419481470a7d9d0e3cef79039040a7c5d0049d25c3481e3ca894c2afe1c548c300094e26774dbcb9738cb23313457783477105593ca2755a1d153c24aa4510649fb5ae1cdd56d11e8490e47f3c53cf6916e52fe14d5199015f07d18cef08a81b0916087f92097358e27064e06798ef1d8f704609b44b7a62ced40f5f4ce272bc7043362e24a88e3cdff540bc73653d4326c7521a157a580d7a777cf29c8aaac437f06e746742fe74d09a8657733a72d1bc0c87f5cb2648232bb49fe88cbcf6cb9222898b05e5f2eff8a69351377db74ead0552edc4beb2ad193831a2d183d2448746e1043bc5a5c6757d55a3608b554a7bac6f0c6152c10dbf48d83948692a0838c0599ca313db429cebebe2d940367794719ae65311bd061922d14bcf7b4cebe421c7eede1e364001e99e3712bdd965059e888c1fda73d5c391501d2f1440ef1ae15acb91e4e53afba4a7ba8e29bd378a5fcc0b1e0629dc19634d4f8236ac405e0a67ce60168bb2a8d953ddd2613ea9044d5b408c24b2e96a6d56d6942ad6e3aeffdf48b7565b045916b6aa90153d710acee74b998bd32ccb231e6f1ea4588ad87d2cbb28d12484e5502d6680036012d3863296ba35ad3c218f038c1c70dd86f398555a1e17c333d9a62e1595fa1db4350745a14563ca5dac3cf0315309fcdb3938b36fbeb6bf15307196b462eb494b57b55e86123f083edffb2c74c4daec1cf4d836117e5aacc935148e950524799e8a453c9ef2f65040bd6b61b2706d686d303f4861d99b81199058ace66d4ead6e9c34c8c9e50b04332a466a669d7c6a4e9848c3ee4d74ea85e780d1f11311e4ef4f1af5a5c4cbaaed9df195b1781f4bfecc0ca6d688bc1565cc9266de902afb7c44fb2f2a177f5334466b8835a31b253fb35274d38d49de25751da06a1c0cad1e54b4591beb2cb1781a953a60f0a17adc27b9ebc4a16aa957bdafa25ac3ee0e6f6f085f7a0dc2d3838bb6dd1c6f281e6a29dc06c4a02d8e8fac866f6a250b8d6cf639a209a6987a9207e9057bf708b78df86c356949d49faa53ecf86397914c22a28b53c8ea16c3398cac64323f0caf813bc629c6c810b4d8d86653a0ae36aba8287cce0237c67dd87dd5fc1b51fbef0cc114d14284e5e549e750bd993027bc1672832c0d208b499a51c1fb7e693f9335b47d38048e8bd27ab17fe9cbf1f2c6e6fa085524410e81aacebfb91a5a3e191cb0a9b698b8a00d47d988d36ef2af97e07066f2f9e846c22e889dde3659dd15e09e0ce90e494dc0541ee5a39bf37c802bdd3bdf93ad001ea1b7c63bd07f5dfbc8ffaf7fea00d167ad1dc150c98aadd8043cf3c409caca47c2ba0aff2591702e6c7ad6d6c09098747c5ddf93b07eadd222b7841c93e85217f9fd035c0395fbee3c6bd5825960019dd3a8be9395913479c25bdfb7cef51d016bcd715c1708ef1c25a0cf477b990e9ba88aba13e4369f1f83086d5de3fb764cd667dcf26f108bbc9f417dd6ec1afafa567eaceb92156eb0251306b516a54f439185d78211a22c02f54f25f2ebc3dfa1790ce7765d69b38bebea13044b4496cab175ddf3ada6de0ebbbf3119d37eedd8b7be5d55bf3ed4dca461ec48a88f08e0cbb33b3b44dc5a1cc720b8c8cb956a5f528734844b84074bb11467d5cf194e81eb9b884b40185eca1973a0292c079786052288b84ee1634c4be2f45444b5abbf049eb273c8e8d5aca411e2c94cc6df30145521e890508ded7368a901ee3fe4ccbbe7e51536cba4ed85752c57a9dcc6788c179e6e7910431943f0c5f16d861179b769e21e83360b11a07b47a459399e75be1b70cc2005165f8b2eff49543e6d92265f67d6820d5409485f0e31fd118905f95cd747177b9df8b3d9e3877c85948c013f8328e29accfca891486fffeb44f9967e7e3a19a2ef4fa581a2eedc0286192d26701ab56a1934c6b114d9cd5cf86fa217c87da2e4528637378d33509afcc5558dbb78a7bb2ee09db8322fcc8d7451c81c70d46b6b99708e4b4cc6e857de04b01482b3ed8b183c002f4d6c645bebc8326a84543d32de44c521c8c56b3b894154c5dba2138cfa80fcf5998d0ce4c3f3988d722165777fb61d0b03dcb293880eb8b13357426d666d8b8052b74b3b0038eaa08a8108b34ccfcac054bf05aafb683053526eedd60c0c19f270aff23eedbf9679b9aca8310f0f4d9340516e24816130c91a965d903483d96205c0daedb2e9ef06f3175530e077c1cd7ca21950288202fcb9dbdc136ada64885b3de77d226735bfd318b916138f58884917641decafc707da954309be15ef74c91e88eb9d2fa3e73a5550558a9d3c330ff8d443a8cfd67e0a388d2ea0f1c7b50d794d4a95524302784d8d166b53f4a36e49d41cd006d79f9e8177986e8ebfb43d3889c8f85811978be01ca1160426133398b0fb259d3e0f5e31fa1b419a03f63a9c4458134000b11a9be1e7699fe1e93e411d15c58ea7d3c8b6febf9347d6d6d3cf711cf2db96ed357fdc49b91881f35521d199bdebd373ecca9a667e65436bea81c79d30008ab80ba14f512257ef0e47b4659dfdf15d49ec82947edeb421305d8d174e5495b751b1abe6ea7da8eb8363f300beba6dd0d51b2ae2fa1d65eded25257fe0c9b599a16b32eb1f2daeca297ac8c3f9f7dad118de574fc428b40a9f2ca2510392abcb38d3fb9a59694a43efbe1d5cf57ec48e0abebc62a55fd2fd4b640c095e49a22badc522b32b2653caab3d8afee2d79692c72a5ae75a1214e53d136e351815668555dab82467e7130f62a21a3a10e1267e81b2414b36d5dcb63bed01f4a96ac7b5078d01154ca278d190298a37401e69cebb29c1560fc8065714180bcf91678eaa17a8342297302292239cbc275021a2f019a0230af585ba47ce5fba7cbd62ef5558c729fd79ab43860b3055bd51df85c5665b1e2e4ad11f4d889b54992891967fd06a51fa1434fbbf240c10209f5d0d46eba9f3194d5809283d3baf2e00f7a40e5b5724dd2ec9e82642ad2ad07a48f908ec0f5909f72c46a13bd86c07b0b88e538bc487895ed476484bf09bc6d265c374e5ce318bcfdd42ac48af990b0fde6ecb822214ed421c21a079ed7e5d31e14b9fe589a2361e068adc26e82407214a0d5665e0e471fbe96a9c2e54788b21c8dd6e5fea1dc2e37cd687d8802a06d73f850eb8d60296d5d3120fc533c2449d784146c03f1b2fb63d6a2edf0a77d5cc93626c4609b7d8c162bcaac65eec27a0983e2d49991fcc9025f0d7d05b25841fa8323a7bfabdc420f9accd7b6710b5a15ba0ffb48ac1453e13af39c0a874aed191df36e0013c0697e9b3088bc9b9695fb63869478768118e5b0bd293f37e2c127bf3fb7c6a863cd265d9fc7e5f0d48ecebcb18fa25f18b5b940d5311c375c8017bd3b2148d5eaa2b4f1b55e8f03d0a05a216d73f0e58056712f5a6a6d808e91b671d152591b51b0977c9c6103baf58c57daf43e7ac050e0ba80a0ec59f6c5f27e67bed0a1874c263ccd0b457efab1efefb1b2535bc"}, {0x90, 0xff, 0x5, "1ecc9316425b85772b2dc0c646f6dc20849cce90cd7539a8f5a8d05e74d23c208d3fa4ef0ce2f346560a08156b690859ad63252997a0f011ead648f9bd3493053d071d940701be86b4a335527aeb9535664626b3ecbd45f39afcafe7bb7c5cb9206911a78cb59f0ee7b7e540624bdfb5cc3b5f9b60a2574cce9d41"}, {0x28, 0x3a, 0x1, "7ca90042b1ee2e6e4f1ace4db56b0c9ca0"}], 0x10c8}, 0x8030) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000001740)={0x0, 0x8d06, 0x7, 0x7ff, 0x7, 0x8, 0x8001, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x80}}, 0x7, 0x4, 0x9, 0x4, 0x1}}, &(0x7f0000001800)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001840)={r4, 0x1000}, &(0x7f0000001880)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b00)={r6, 0xfd, "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"}, &(0x7f0000001c40)=0x105) sendmmsg$inet_sctp(r1, &(0x7f0000003940)=[{&(0x7f00000018c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001900)="ba8b097b12ecfb5573764e35c0b4ce1a757d7f25c3a1038b2b0dd2a5f16d75ec55df8aef531ac7ad0c741b7dc1f93262afd1e7a8e5564b51e6c44ada21ab482fa7a6a4177a19af8a4708260ebd39e3101baaea314939253289bf8994d33a7680efe707596595746e5a28106cef7d264cdbf6aea169627ee6d7dbc1f915525886bd213b4b3953933054286caaa6e91cd405696eaaa296c94535650d31e20b233a242a7344557c674d0f1f660e08569b1b8285308d97e5c7e547e00f", 0xbb}, {&(0x7f00000019c0)="627bd303f55b0e4dbc09ff56fccacefcffee648db442c2ada172b69d19034eb2dffef6660a9a8fefcd1e33ea442437c768ad364efcb7f06e24cf250ee9b95257547dc6e9a2ed707cde1d953e1ea9ae7025bfe0ef483924ab9bf0603c47f3b1de816230b8d8059deecfc4517104afc576", 0x70}, {&(0x7f0000001a40)="2354c39749c3970b8147579e4e39d652bbb4dbee3b615467512e5333ce0f6d583e47952965eff784053db914fa4101a423aca8b8fddc5b8503aa1fca3a819d34dca44c4cff91245615a56c260fe737f468ab4daf501a63263a26a0aee28db8221dc3939708f0d5f875bf06f577d77e2516e517aae448b774a4b428ff", 0x7c}], 0x3, &(0x7f0000001c80)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @authinfo={0x18, 0x84, 0x6, {0x7ff}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x4, 0x1, 0xffffffc0, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x3a}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8005, 0x60, 0x2, r7}}], 0xb8, 0xc1}, {&(0x7f0000001d40)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003100)=[{&(0x7f0000001d80)="4a5fef914b91b729e7b0baae2810909412ec87cd03719fbf92e7f526652c8619cb11c7ce1a1dee0103b7db49cb59b286a1", 0x31}, {&(0x7f0000001dc0)="a2966ab8409cde051d161b9fb5c6ecdc", 0x10}, {&(0x7f0000001e00)="6f5729e65e1980db786d076e129784a3f9d28264412aabb91fe0c930b49f2fc452bcb6ffcc0550095257c448165b646974a55c5da39c3e173d1ad8987881d92b16d4b7002c2c2b9cd4211d02c2e513e58d1a9a66300e59dd79e273ff57a836f4757f3bb364d0dadc96e460733e710908d18982c578f56db36241208faf48cb64b3705afba69c31b6eb8dc39a67df5e16c08462baed3b1a477de6cf1d67384de216243b57c0ef95ad761abc0d16c0a62a2e7d8c22e5a96e151735ad1d3ba82749071fd8be6a4ddca0dc855d0b846dd9986ca89c4ebdb09635c53fc1c00ffff729711918d3be895847691723b1c2465e02b04dc7113a701884d589b615170d16fc3564ce6380c0b047764094327f9cb3235c9a1684d8bbc34da2c974a2317b0819d3fe8ac2c1a2358d1194578fd1dcb78f8fbd89a43bea4dd36e35f74220a0255ccc2effde835effabea7917477c8d3858505f4401bcb63494f47dbdaa42e9bb90a35a12017addacf24e0c48d957ca3f3fd08510e0af06d1024dab2cad6a4fa668cf06c72f0c0b2d4ad1e6be6068373bf473fb9faacbbd6ea8b4231526101890d465dab4deef74a0574e562e8f1c674621d01a37f2ce764b536d3c779f5ffc756b1a5ced91baa096f12fb26d1d6a7b45b28c58e12c37ad94b53b76bc7bda546d9212677ecf540fc224c109f2c731b2b37211d10b84876d332c727dceedb43992a5ddcea8d827a297baabc25ac71b8c6e171743d20acc9433e291d630267d1153dc0a0d55c5ade84b585f8e5142a5a31ac8abbbf4b027ed284f59225c26aaeecab8924798d370949cd4757dc607e5b70bdd9d680d04fb997a9f61b065f338c2d4a7b07945a31b3c91ac01fcebcf41c68db56326be542b2697ccd3183dfd78868e92fc8684dce5ff10245a12f44308ceb91a0e2b636bcc4a226b64aa7f37e1426351c82bfcccd7f75a42c9d125d80b24fd1eee0041e4ed49511a39c1558638535cbca00cce9bc2a852e138cdb0b511680446f59d2266862753f8324f421d6635dff823e65387c968637f42fe11245b386b2e1674226c0b6e56400a90265a007e94ca964c28cc731c1baa472e8be4ae5b63c1236af18d8296b8aeef58df967043d57637f0013c57a8350f67eee1b49357aac085a75c1376431d1197214f60419dcc8ce2c48eb239803591667cd41f6c09f17b065a58d2438819725e2c93de15fbb440426ccc8ec4ace0f0e0f6e3e590ebe53042c6fe1d5fde8a3376759e1d4a4ae060b4ede980f661b4a9602ba70eda30161d4f862bbfc633d37f59515414e42e2b86490d0ae6caccf60ce47cf2fcc4199ab3b10d2cb8820b8b4fc0877b67c2c7b5a1780101bcc29a3ca026829bad5077932c42b0ec7ea294aba08d657b1a05b7d1d34cbccc2e71b47225dff1afaa54a12953f4c2911f44371017a25825213ceb0cd008ca5312e1abc6a596382043c2469f65e5ce3ff742be7088e6beceeae023c77e1d11fbac2d1987e7605d764911b6f661ce181d38eaeb5d7186246abb0801e9bc280376b0223867de1b8ae98012f50fdd5dee4815206dada80f356a8958ffafcf4aaf327f75da43c434b8f4af6a8413cc8414779822f88e71c7101c61f7e4c7f03e988cab06aa36e9c2c7b743c165138b1ba99d106e1fb00dccbd5152fda4e9a965e8599b54630849fd205939ccef0bc8ee57110680446b58bd4a702abe98c04b2df7b147f514b88d4bac57bd2e507d18c736552de359660fb8647f1333df0a8fb3c68dd27eb2b905b281a883e9bed2e0ffb02899799320d7cf5f2890edb8f3f27ef08f68169f7adae9c83131463a09fbd049af415b32c5ff67ecbe58971e034071b469029f95a0a9569674df53e56abc1b407781d48011b936a37bdc7ff1af1948229fe6a14d6ba0709748c5f4742f00314a70811f7978726f41e4e9ffa7c0a62a86babc323b17f4d79b1a18e4bcc0d2393b3cb5162d89331c134e64f33ffa4bbc8551ce415807f660a8c5b0b8a1a44c989aab02ef23bccd0b1127f9e18df2f550aa5cd791a3b1178aa0dcbd5bee20ef03bdba9c236ed6667590fe6e3580304e35bbe5d6b360354b4ea0300115a4c903112b1510257f472e03e9caa2070eb03205b0b64b8f9702c73a6072594349fd5915de8653065231125707968cb114441ced0997f26570a00554c15beda9876ba500aba91273a2ee3b616430f4f9fbdc82fcd20571db97d3ec8202990fd02b4b45f05d330b964a352d0ed1b0799725b8b778e86ee83646a6f1abe54dd07ea944a3dcd941e41eb1650df895b985b1004437cb855c512de51e0eab8f85a7309f0ca674697dfd7aa3c4fdb3a585fa3cab3adee434e76ace9d15ea90935d601be9a1c864dabe3bba9fc98d1acb64ceb1a25ecc500e4bce3a5702d758f4923aeff16a4fe398bf7c453f4bc14cf52934bd0abe6a9e363d307766320a1f694068f3494cb462ac5408ce42d2fc5b6a0128e5dd95079b9dd71bbb5c6909f5bb2d8b071a9accdba3c1246b3fa5ce848bb270fe2cf262426f79dbb70e9b2e32b041627cbddd3373ff101736d0c85d50c4ec19866ad2989cb1f39f262b303ae8b9225e447713a3b85200e8cb42a78b500115cceedabbfe0c7d30b1be4f50e8afb6559a376905b768a081e87c561d7550d4753a88729cc3946b415884998c4ed62ac7ffc0bbfc15817ac6b884f2e586fb6ae81dc633df7d5ade6b1d921b4c1a932785d9dfa667561e5cb6bcebe0574b8d0c6fdd51ca02eaea04c05f89253f3a2563905842e0a28f17c0906a47b3ca71193ddd91e1af9794d69d54f2b85c34225c660d0ef07eddf7a6dbeb535e01994f1e6ece33a8ed94093ab47a9560d63833a5211ab9c9892a2da2469fc73e772a751b1db50f19fa10ea77377b53c81c56306f61490d5f1e1cf620fc0b9c498d7510bf311f76e2ac0c12ef58d6c3786b1c16fd80c501be506de4c4b1c2191f6e5a3324b25b2a6cf5a919546f9e8f80ce09e1ebc35b5916ec34d1dd93d13603f062a7f0454307ae7c85f3c10093e7581c5c7137abc11fc2f4179c6e3e7eb5fb73d4eeb3061ec1fb9c3df9e787eca15057de67889479b9481178d0db8eea0268c8495aec44a01cfe985ee03e8d44ec0291d10231dbdcee87966ddec42ce8df11ef3338d0dee8415986186e147412bd5066c275019ee40e30ed550cfe539bcf957c59e7c8e2614ab92b5cc12c8e46baf073eb2ae27ccee91d4ab6f8e3f8f035342a6353fe09efcb5c27567b3bed15da1e414e8269ad58a400834af38237b4c09214dda325999507171d89bb2c5d2d83037c989479009a12bf2f616ebe4361a4054a687880ffa8abdf535808829ccc7d75897850ef513e634506c185bc169409cf269c8e6d9d335a86094e7640576e89449f1f955831a7bfc58bb0f9f2d218c9b72079ac3623c54889958db34e61dda4e12badbca7d66563380f3ff64be870b8e4f7e32f699e6168930310854d0b3fa851b8b0f81141ded8860350c681c075c143200722d6a71564602359024a06846d789e3e0a6397dea8fd559b9ae9db2c96b035edbddfeabbaa42106bb0ea69702deae297ed0f4dbb41f120817b1ee34a319b47be7836525a20b31f35a1fda458795b746489b78e6231acfeb76d3ccc575d8de8b367bf473f395498182091d7296c1cc6373a0a33a78685f4152f9718b18b849dcbb6034734430054389b2339d9c17b3e7d0d999bb872350980fa4f22630bf49ffe936ea460575d55f138bd386a5d2526560cefb6ab9279a2ff6e734cf3b816baafdfc677a78a6cd19d9f51c8959035d336772dfc258398f77a5165107afc133b5fd16f0200d158e2289465e977f186eed8cff2c4f77754c8d4ee181f414399b460a13d55498d550bf711c714a7cddd9f923ecd98c6d85977c0c840c8bb7fe04c8cf1118158da453a4f8321d67d7dee8e9c755158a304bcbbe0463ed46bd8f5343c8332b06abad94f01c00963cf4cc26d4af0531340e1b621fef9cee6836a688fac34679fd0bcb8c56dcbe14e8aa8c44f5db506a4556f27a9a416742ca7bfe976aeff1c6b7d60b2e2b641bdddd2a2fe6fc8ad32d131518db74d1b94136f0decde927b17886714998b84bce764fc824d43216741c64861dba749747071f8fc7103c97ba585bdc2b0025d2bcca0cff734ae4f29df618a67b9ce405ce3b26d9bdb9d4cb776d5a704d7f000fcee328df0858b8b4e23ad6545d81967e5abfaf24617237c456d251e7d81a23f144586a886e2b849b8d2e5150e180605e9e4dfde5fee574bc96192e0506ee62b0e2a1d6d9cab8d0933c876e490e984309a6b928e6174d1bd0514b2c13707cd402d527e7dbd91a62c4ec51088f0be291682817e24136dc98f21976978a104102349ff5353fb08a69a0fcc4648cd12545f56a60ee53addb10c3d9fc24e977f935a8f80e55a92a18163bd4dd8ad6f81345dd424070e6deabde8ffff8cf2e471c2584abfed8dca825167490a79b9141350f9c0893fc28a6a00abe1af80ff9cf9f3c7db4b99de14c3a83dd3af4c0c43b7c531f5437e2b54950065527114a48bbcf1696395bc74e8da58aae5532f48dc0d58ea4f1f513e828f831ff9f28405c29bc952241d1557186c6d2f6cfc18b897208111b360393fbf40929710307a6f81dfb6a657b17a6f133325cf78c587167948e837911fa51a80d80a5f7835c8473c7212199683e383144f4da1b0ca0b2a15ffdcbb584d94c11771f1476aa30e9ddefcb53bdd97284c02b300085cba5e41d119c5d96412bad233489598ab9125208d0761d7812c238bd3c97a275d9643c60b5360da9864ecbe50c6de05956db79387be82f46737f454d1da35ad3c12406ea90670bc26304358f65a2e86cfe9db3672d9801cdb0e13e786d9c8b5b18504f027469e0a3b08f259c88b71a8593f2cacbe256e07efd216202ac35dad9824a2653242090dfe7704ca61c76cd4c26dbb44e1689115d2b41bd38bc5b1eb60c03be5e069e43dc3961512c91c36e9d4f2badb689a7eaddd533030746e8fbb7771bae229501f12890a1f154bb17fdd454e6d8bee6948e525c3ad959f0c645883269b0e2056daf7c590762a9a37cc930ed6e989acb83ff100dff51aa4cfbba91a4fb81db6e4019f20bc75883b59fec96aef9baeafb744d303817f577ec051c8602176b5091238fb4313ba8500a5877f3b10577aced8938d2c16e2a94ff6f22ccaa6f6a751b1d50575e55c08c29a6a5644a58be172b92ab9bb79833e619cf43e531532a948c638d7c3eaf34ec537e5065574d49c6fbaa02e8b216285fa49ee2ff532ed9c2ef283432cf7e0840be7ac5cad251687d7f59b53cdec04cf4cb32fb5df3c27cf573262529e1276a53e8c70929ae0c0d8dfd431c0895c752ad671590a9920fefd922ecc73f15b7f84c574d3e22c8b16459e1bb982a7457e07efa45c643075964a984654970477022f24232b5e4b072b5da9eaa9ff15dbe88f9708663890278f81aa2dc9f251391fb55b3767cbd994bf3afc6c8a58519a2c89bb6028778ff10514f798efd6f3a89c00308820cafe2969b3281c2cce7f2796cfd44d46374a473a6d7aaa93ebdbc1d8f91b413e5cd0d943d4a307ecb29c9e325ebbc2a3c610a3e75cfa38938ecb764cb687f6359fd07836bfb1aa9eb903e775c7173f5e439c983bdfefcf95399277dfb24bd94e849cacc5745ab0e7ea7b214bb15f4094e86fed93bf8d47b1c1841044fa297b3aff9eba7299a8d84f3d61b2f9fd7f074222189fd0e71f7edf6dc87cb53db54719b34ac6cdbd220136bb45", 0x1000}, {&(0x7f0000002e00)="4823226c06cef14887a728b8faac10e0cf5c781ed2ebb978b32a5c264c204b8df5d60f8b1e87ed0cc78e276c962bedb1abcdf23b2b4a02f81b28daa745826a9323ebf2de3d9476e88a1b7e146270af773a3b3d6ec6fd7cf47d3f7d1599a03e3b0d95e1a3f09a37890a0314f15ef5513106a1e1550e33d0e725b99b94cbd0dc7dc8d6ea58ac89f7fab9a5a60c6f12276db7ba8c0db5ac5197143f0c96104bcdcb77d9bf96c0462e40d2e9", 0xaa}, {&(0x7f0000002ec0)="be6c766c9fbf9954f31209b7835dc15075202ea93e05192a9353162530b65dd0d7290e4cc997d98dfacf0679b7016c3b074fa5971eba8d15d063bb60e1b013285500bf34650d9797ec3c40a2c0ac6a8e2b01b087a4770ee53762fbb0a64462b2268b8791f480cf911c56c83d22fbf6a4fe7b5c94fe11585af9ba11ab157dfa38c2c5891a6669aa6cde60cde1f94eb1c90c56c32204d88b5b2a479526e79bcb03c5063008f7cd1f6954da1503449e265ae1789f1b979f6ee35d47153ad1d7818c9bd0635f38f32dab1cf8e173b4", 0xcd}, {&(0x7f0000002fc0)="4685e83a6dda717c9db57b14efabedcdea8637b42fa2c4ed6bc3f36644fdf7a79c9ce2cee0311bfebbc0492f0315ff3fac4cfe5397a3bdc029f9575cffb72509638d41c4b3d609e08f618cb44b6e3982296e3b70e89bd6f36e68f71e12e353fc0235e5d0ef90a87c7557c93e0c45cde288bed69bcdbd8a064b901465fe9ab3fa9e1c18fe93a9aa30d2cb2c1037f93fe16dde4d89d52813bbababbdac9890c084fed7ebc826dcefbd24dbe310efe47f06e9f8a4d8cefdaf13cd9363e9fb53dead32c045915c8981493cc67f4b", 0xcc}, {&(0x7f00000030c0)="2e7f490c0b3cb8225229e86a965ca3e1d27f6f4e532a63", 0x17}], 0x7, &(0x7f0000003180)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x7, 0x200, 0x6, 0x40, 0x7, 0x800, 0x6, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @init={0x18, 0x84, 0x0, {0xff, 0x8d05, 0x2, 0xd721}}], 0x68, 0x4010041}, {&(0x7f0000003200)=@in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffa0d}, 0x1c, &(0x7f0000003380)=[{&(0x7f0000003240)="70ed9f5dfd4554ce0c6b094aa35618b05335b05a647ed1348b63fe0be06772671489b7", 0x23}, {&(0x7f0000003280)="9e43dc83af6ef94ab4029c888b8fef53a70fc2d1ed63f56097ad0d24b45f006aea8c2a549a125b2087568f90c2925c12807788f3449a0e7b33aef1f4aa9ff4206d857d6940f82af4432f2fd1b0824b9e5ab4249910dbbf56075e070143d4faf4ef4423da84b822a2974dc756450ded0f6b14ad8110bd9131e66762432ba21830f114660ab8bd4ceaa5ab7e1a358eb8042f0314bbb83fba9ab6766986a0f0c6773433795893ae0bb241e0f7306ebd7a32556090ea0f5f2ea64b6fe047918661e6b150d926b85d9abe5da043cf02bc178582f22c8a76f13ead248f965b67b41f2db323decf669abcc6ef02053ecdd178fb0114173b6f1e49e20264aea7cd", 0xfd}], 0x2, &(0x7f00000033c0), 0x0, 0x4894}, {&(0x7f0000003400)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000003680)=[{&(0x7f0000003440)="077ddf41566961e0df3ea9452d2a5d801d635e108ceef2df4e081950c6f088534925f238b28da03a370c61227db9a6d99606490671d131a19b4354df4acf2820c3b719cb", 0x44}, {&(0x7f00000034c0)="6938298b90f29f2543bd00ddff78977c649b3f63a6acf3a0b423626db894b2cb1fd47b6aefb78a57eeb10a2d176eab185c208d1926c5bdb104c4b4d2d19536849047de1c0327f3c4232fd4cf2b5bcf810883d07e74351ab65699167fda1048c2d9f7f07955d1f9fcaac2d30517c3d0790de2aee5a239ba02759578910771edb4befa241d03d923491cc99176b152a0e889cee960eabe41dc09e8701c5bcfe65954cc4c4561948a7e467305bf028616e1ad58b1db1a5a5067b16dc4cd2a31a3a402231c15d3ba323b11", 0xc9}, {&(0x7f00000035c0)="ebad60b30436f7eefd7bdd85c1feee97e9738afad347c0702eda7eaeb551e768cebb61fb9a84ec0efeaa0848962c3d150bd75e34270232f16104fe2e288aae444420c246258ac0801a20b532", 0x4c}, {&(0x7f0000003640)="7765f3bc318be0cfed559b579395d490e8ea21d5aaf61318aa9ac0680ca28c0bbe52b07f86d8b228ec21280891abf8b4f8f6ab19efa732de2ce45a6d00", 0x3d}], 0x4}, {&(0x7f00000036c0)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003800)=[{&(0x7f0000003700)="8b2be6e5c9050ec39c9cf7700788b4aff1d719d37c0f33a799244e28daaac8edc9ab0b5f049bc0713b04143348e1c34e1ef1069c6200172f195941324fc83ef099c1f5828744f31229ed8830964795ccf5f8ec8dfd07205b7c417275c10587df21e8abf9973d61c8121f1b118804b30d8c7064271d7efde6395c9da449319ee6a7b923d2d640", 0x86}, {&(0x7f00000037c0)="c01806170d75c3dde7385f8a7fa216f70f4c", 0x12}], 0x2, &(0x7f0000003840)=[@sndrcv={0x30, 0x84, 0x1, {0x7fff, 0x0, 0x8005, 0xfc, 0x6, 0xe7c4, 0x5, 0x1000, r5}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xe9b9}}, @init={0x18, 0x84, 0x0, {0x6, 0x6, 0x600, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x8001, 0x600, 0x0, 0x5, 0x7, 0x0, 0xd, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0xa, 0xffffffff, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0xe, 0x3, 0xa, 0x101, 0x3, 0x232e, 0x3, 0x5f7e47f0, r6}}, @authinfo={0x18, 0x84, 0x6, {0xe}}], 0xf8, 0x2400c8d0}], 0x5, 0x40040) sendmsg$inet_sctp(r1, &(0x7f0000003d80)={&(0x7f0000003a80)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000003ac0)="8d4eb9e2400428f932f4d8fbc5229585fc735c93ce1173e4309cfd6ee1bde0ea8f580922550c690c341f79b303a756a0e2729b0ee851d98fd3b60206fb29768e1d46b4b0f740f3ab3c68eeea711add649543a7fbf334c84cbc8e6981457e2fbac44bc48b59ace3e8f29d85d72375b7465a318cc8c1ca729a9808aa9fab819af6b86331a4ed1f8f47f018b82ced80565a9a435324d88083eec60ae1f0fb3febe138cc3ab282f3904855d7402463ab7c885e356ec77389fa4a411f1ff3ec358ada24", 0xc1}, {&(0x7f0000003bc0)="664188566aa7be43b3d0f885104e1f3d36668ba4ebeb1a2a76726f6e6b556093559564872ba1f9abbe5bf11316fcf1866527494b42bb2e385901567dbb795f6c137af0d5cbbc6a26dcf8a07097ce7a77f5011c2f1140699cd9ac5bf4107b16738ade5d7e005f4a765e2ed9cca5be4223885590a92477551f1ef34204218698ff41eeff1e0d0906e8bb482dca74b9c648ab17f439cee745a9b23bb45526a425aa712d5c1bb4fe32125658ae539de46ddf9261e2d3381bf2e9e9a395e2bbde595d8630e8f61a48c65cb046e2af1f888c8442fd0463a006", 0xd6}], 0x2, &(0x7f0000003d00)=[@sndrcv={0x30, 0x84, 0x1, {0x352, 0x0, 0x201, 0x1, 0x400, 0xf, 0x101, 0x81, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0xff81, 0x59a, 0x82f8, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x21ba, 0x203, 0x0, 0x8, r7}}], 0x80, 0x8800}, 0x80) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000003dc0)={0x0, 0x8000, 0x2, 0x9, r5}, &(0x7f0000003e00)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000003e40)={r9, @in6={{0xa, 0x4e20, 0x1, @local, 0xcef6}}, 0xffffffff, 0xe4, 0xfff, 0x1, 0x90, 0x1, 0x9}, 0x9c) r10 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000003f00)={0xb}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003f80), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000040c0)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x10000500}, 0xc, &(0x7f0000004080)={&(0x7f0000003fc0)={0xb0, r11, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x200008d0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000004200)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x14, r12, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c810}, 0x4010) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000004240)={r7, 0xe}, 0x8) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000004280)="08d73d8959b46a090fd87eecac2ba86c78e8c2bc225921cf0f802815b1eb572e0284bec8c57f15de709f5196bb86bb9dfb3fc5b11d0f5b23d5d6e295a1cf394e2fc8c556f19323b3388bc64437aec280ad7e0cc7acc5129f5b1ecd9df9beb16564638720fa5f28b791277b6377d1d1711980495d5e1a1253dfe8c1e543ee42604a0c391b5027c5c9e1d431e2627911a90d5fa3a8a1a139691b04fa6a63146e0a7755c468b9ade09d1f0a1b05eb66691b3fb14b19d451fcee18fdd901ca240cfd04352c5e2b24a11f16ba2021355241d456128a06a2c87c6c84e591d123", 0xdd) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000043c0)=@generic={&(0x7f0000004380)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$VFAT_IOCTL_READDIR_SHORT(r13, 0x82307202, &(0x7f0000004400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000004680)={0x2, &(0x7f0000004640)=[{0xffff, 0x8, 0x9, 0x3}, {0x101, 0x5, 0x8, 0x10}]}, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000047c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x44, r12, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x27}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x4) 490.778875ms ago: executing program 1 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x300000000000000, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0) 414.98164ms ago: executing program 2 (id=1486): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000090000000c00000000140000", @ANYRES32, @ANYBLOB="000000008000000000000000000083b13f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x47, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xfffffffe}, 0x10}, 0x23) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf8d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x2100, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc0189436, 0x2000141a) 355.435145ms ago: executing program 3 (id=1487): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x70000, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x8040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0xffffe000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x2000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) shutdown(r0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xc, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) unshare(0x24020400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 271.915232ms ago: executing program 2 (id=1488): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031", 0x4}], 0x1, 0xa) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd}, 0x1c}}, 0x4) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x93}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000000280)={0x0, 0xff, 0x8, 0xf}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 223.99221ms ago: executing program 3 (id=1489): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc0a, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r3, &(0x7f0000000300)="4daf", 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x78, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}]}, 0x78}}, 0x20000000) 163.500682ms ago: executing program 4 (id=1490): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="0000080008000100ac1e010108"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20040804}, 0x448c4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="0000080008000100ac1e010108"], 0x2c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20040804}, 0x448c4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async) 143.580218ms ago: executing program 2 (id=1491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe800000000000000000000000000028000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000006000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 136.323644ms ago: executing program 0 (id=1492): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001423191840834b80040d8c560a066f004597ab081378848c8ecaa8b4cf00000000000000580325010ebc000000000000008000f0effeffe809005300f6f5e700000004000000080c", 0x58}], 0x100000000000034b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x28}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) close(0x4) (async) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') unshare(0x6a040000) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001280)='freezer.parent_freezing\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000000100010000000000", @ANYRES32=r3, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400008004008000060000000000000000002e3613b8af3f24e40000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000140)="5f30c74700bf37d94805c7ad3c31439ceacd7260bd77909a524e9ce19bb7b6e60701a443fdf959a4c7057c8373dd69cd4444ac4814a6d2f8a0c6687a500a6fc186470e0b05c177ebaa0c703669c9074b1118c39f7616748671525c8d7e1090d9c46c9dc841c18cbda2e411caca9b9d35501c8df3b256725e15e62e69a93240d27b8a0cac5a03d8bba1c708b7181f44af5b563d8323d95cd08eadd4bb61686d4108a44bf1472694d3c2af8f09e2fa587144a98e1d86d97648986702a443a1bfd8a7690fb9d4d85aa267314c487b7b9336693a60c538bb62dc49fc7675921f3ee9a48d52148a7bbb9811dd3b31a4b59fffc701d9607ff2e032b6919b267b3f86128d18d484ac7c7850382bc25000eef2c8533257c3ea718ca9d083162da8b6a7edf6ec84d8c2d1e52f10505d63cb7102af6ac168ad427067319d2e4e68a3e98d40d3b6099ec02cd40dbe9914bf7a80f92d1a83e704d6d026920623823de4d1ae747f25b9703770b317ec96e9ea1d57fd32efbb333f4fad6f8cc6a85e2ec6e3bfcdeb992c45894defbc9981d982c8f5fd0780c939c86c5479e5dc9b79b1a25f146bd2b7e713d128463d659db092c38061595a05dd2cd2092dcb1407dffe1d766453ae9d227c9d9145053a8a17fddc43f0ae9f227ff3e3aeadd99f6da069c85cb03caaedcae94bc0d454727260148fa59acd56a3f3d3c4d9cb99ce731b6118b1fa14581d62ed748392e829b27305f2bbba1c0c5e199adb60fa4c08bfe7f15dc4fc1df0489d912573478b48df0698d5c5c2f0365c04142fc7de454af8aafdb4b9394e43befeab89869c0a7b5e6285b1ebcffae2dbcff4f33835516a0f18fb3195aa585de2cae7c40ea96e97ced0bf6f286e9841f28576e8c70b0565897785a2d43d043494ff3038a8513692422bd20b30b1031297e141ec5c46908302fc298c37b7844f8fd43e8ae43f24f14cd2e37baaaa268496565d2a45afb78fc12b2ea3535925c5f8ce1fee5fc6cfaf26d1aa99baabb5703c91d4d310f05aec68f3c12f1c156b39accfd9f7bc694fa0a825b8890d0c0b92e771eec3a8906302462ec27cfde7a272a1943afa59ad8d495e7dfe5c71233fbee63ae8c6eacb2a4f2b56b6a7b29461851b17ee733502617d5408636cf0fa6657510dd54c874f9187bf5598b714af677d89708f90ea5ff02385294fb353b900501d1f7d9e6ab8529b1784ddc438fd5c12b6607c706c896e7c2c5f19e9245dfe8bb5a5b45851b77af2adfc797617166484c6ca4748cdf71b56c3ec42f6a584a7c69c4141a1a0daef64e0abcebb987185b91b36a26ec16a042a97c176a98665d1073694ab0fb0764647748ab7b5291e2a4b3d068dcedd5c9b4e79ac4985a08649e1f8371dcc5eec8d770d54988e5988964e9d821b22c3cd89dcc5ebbcb62d24963472743b2d71a146eb1959c7179d79dec379fb42170ae5f601b2d9f142de5642a850ce67432724c195295c9a74c1c5d1dde163d87a0bf005b4672833fa98603483050ffb9c210ea2cf1dbed1bf1d2ca553223b599521dcc104e8d3e53d52e2050a715c35685c842e633fe74200ae68111eb20b93003052e2050e1d77997f5409ba2c513bdd6ab8912e631ebcdee6414e462846cb27a0dd005af845d23e38074dc089dbfa0f2613421301c1a0fc2ff4c766c547cbc83dab564ec7655dba8b935361891029daa312d5134293f30c54dfc2b3d21e58b9b81f0d151834fadf23c2601cd0b4ee55d9e3c224c6fe4f1dc3a5bbdde02970c61e947ed0a3e060c8405c9a2e30de6f776854508bd8ef78f36eb2732509b1fe206d959393bdfdd471c2c3fd741ad72588c6c275b72ce17c459c031c3a776fbcc70af7d4e867d3f6551f76350e6eb536e96a66dc6ea828584f0f039ae052de06b80670af4af4d548dfcb29bf8cc410fe012684de0732aa50e225f454a79fac568f16e9ce8ce03d44b323ee27f7589bd17dcc5ba10e5cc5c4292de1da25d21ac471dfcc35e636c68aacd84c99a054fe9252763265bfaf91fde7eea085d631186be56f1637c83d5075f4b53044e58542e6368190466dd2a52a95b7e7a609c106809564128e01735c7d1769536a77598676aa703312bb1191aa12f6874626e718fdbc4df53a861109f5f5a16a6c571f22ca11a10ef95e7b729bf93ac515b664d24c30e16d7ee84d4f99fe583fb9aab9b5c0af97b3dd071e74b2fe90ec0e3b7aa8a603e56110ee6475671dcce6e41472953c1ab3976fe23cff614fdeb6c5d29089d8fab6f442a25a64df8674a6380c548e0c77594c5bc9a4bcede558aaec3988072708e71c8591e123ed2e39679da57607f07eb4d87ff7e97bb10578f5cb085b3116dd6dd21009378fbf5c8a6165df34ceb7e57f819b53a50886a8d97ea0bcdbae93b42f37364d9395ce4fc9f4abf6326681c76a9d7a76b07f50235dc74ef7f0184316886395548a4a3faae9c1a2d25afce3eb4df540f220303a6359b89a93be24ae1787708d0a01e4d0e3194348d001e12823d08f083b47b10525e969d1319febeb08bcf75cc1c4d82c268d8d279fc78eadf042b680c17b415beede1bf38cc8126e79cfa4c8f63b1854d5c0f008dff069fe7fe6a786d7edb4932ac387c3c53ee25c5baf316712c29dc8a2ac78e4f6b00001414e07801b91d2584d38e7cb42be53af790decdf19c6792eafa9561e0710ae8feeca5dd4b2735d69893255a1141532cefa7588c0e6cae0d0d07cad033abe911a80434941b83190dfcf602442b8bd3a86bd562ecc9029ede752d1980a65ccd9afb9380e3f68f7e378f4441e9c4aa389f697b1382a5bb3f432741284bfa793c2960f712a72f21a4f736d8bc3e675ed1f6ec2b783db77b9aadd13b0f358ee915077244aec303d9bffcbbf839f197ae86dc6973a0757468cbca6bb552e4e567485216c9802652f66ee6ee40e3396e8a547231102d1b8f41df958c54149924d123fbcdface160da88e62a4a5d0717eff8ed254b74212e97e0e2a934952fdfe3e808f4fd69a990e3855d960268c12f49c8fc30e2aeccefcd6a2bd1b08df29285f77e02462debf4fe8e7877be9bb89299afb7b1744fdb4c3928da7a3670176a14aa514d8192e56afde62c2fae87427f94c4968cd17486ec9b1d1116537599309647cab2e00ab2f7704c16d23ffdbed2936cf4e297d6be9f208ce512b15be2c312519307aa6f312f13d664f9ab69de8c1ad9a99f04e18233a981d9acfdcef1a21b44a505ed4452d7807f4053b69151af339d2505a65c8039c3d26a4e94b42e964ce16a353034b57d07c5dde00382a4263f6fb79caad02e57ef79a69857a6b106f1e58833710643c3d824585cb27edbdc5172c05744503aec61bf58c9448da6d718d02011f5db7d5d7549e607939d66617ecfd310b0f5c66a54bcb28423908f61f6d776ec73992f8e6b0ec619afcc807e5b9766f8d1ebf6e12f16e24e37afa3978202ad36981cd6b239edbb043dbd33dca8f706acfdb3faf82d9aafcfdc276b383094c5d7dad8f4a17e6e755f4e3a41dcefe9f643c0cceaccbee97bc57c961bc5e341fbe3acf4aa71137ef66f4407fdf7d845208d7d323017faf3a73576596d184aacf42ae34e233a653960a90d2111a96055cb635c1c10e2006e6692244f9cb67c0d4ddf3eb49be931a64a5e93b2507939d5d701e6695f1031fcf851f287414cb90106c60ed54220713fec13241b8d27f410534aeaf5e2ba7c83016b0da5d6ca6ea1eae5a131807787608a184de3a720c08697b74cfc33c3e931efa15dc1ecbcd504f040a9b35af5d1432a9693572678063efb87ef445123ac64678c5af95fce909b5446a5b34bd16a16412dab3ec693906f28f9abb94a6d921b97ef9a6d9c17c5b0eb0316a644dd7d8a31b2379d57b5012dc4a886a7c7c20ba93f26ec40cdc6d46eec3c71acc1e85a36603a613428b5759af370338840e399eef82cdf5b7111a12992a120629d2dfe272355bdb8d901dde138c59e693abe57774fb31ea752a7f12a08ab6e0e14802f1740a68fe2212f2271efe4b5fc54bc7616b9fcba767662cbccdd8171179872e796f6a4bbd0145c2563a10aa89009eba24bebeae215bea86b9916418f3dcc633abdd6b8fc5f540a6793a79042226b434af2af1fcc7c7af3012abbc8ec017a3a89c712f22402e72c2c8ca09b10d70b4a6e77dc823d445d185d8e716c8e32072a4804c1190a36d5b04151f29996df9fad90c3e086bb5116df63b0811dd42817c0b678232a8d00cf1be698c19cf8dc11989a2f0f5542c6fe4e8c77193741b53533d1d2c2eff26dbe285e3b66be27678ef0ff3d8498e905ccaab822d08b8d093a7ad155f336ea13381908a7d68f551a5acac8adf6ff7d29f10995a3b9129e930ab82cccd69eee60834191e76ec97858dbd26aaaddbd3caba805711e549cd8606e683a6c85fd03b86d4ea7eb5a5bb4a22f93668ecc6cfd28e95f081a8d8458cbcb6f2502f5f80bf3bf1efe37fd725e9f1fcdd1a14ffb089915d018b473e545de0b9cea945143d21df6b3c9d82ca2314b12ab378119047a664ea12e3253af7052f87d895b8a009dca6b5229b1d95b6271ed84ad4a70cfbee10144512b3794ca1757270d1adb2e6a6272d665fb68cd1907eb00f2a61a80ec7abda41fd7d86a5053d1e2dcc4c6a2ad693e058c87fe097c93d9e197385e1de8513b4fc4b3810b717338f807406b30d7b0985c1ae01c7b45d877cd9668458da4862afdcaf4abed369af8d855fa5f2d9dd4def2365a4b3fb9665516616cf2c2debc2757af7e24e07539403509cbe43ef165611d9f648e8724194407563398655975c90f783a8d7abd51cf2dbb8ae38925d62ac64040df2bed928a22e674b6139f5e9bb14906e36b8172204ee41247dfde2ac83741079929e19a9a82b3a4900bb9487fc180a65a9eb9cabef9412d26d4d58ec27404cf3dfc3f793e9ac875456c165b72d7ec3ff368982ed5274184026d2e13eb68d8f9bb79b7355ba119bd39a8aae456730121c354cf944275c804993e82d4a6e931c072e8425b9d405ab84603e60a819c93fef48d3c84be21e659526853be017ca1b64c18eb1120c8bbe7c72682ee90fc0d9bfdf1a45c982d45b992d28d73a211958c90a4c9473292076450a1f49c236a6950928df4ef9927e8245be5309de48693163c4c47032a40738e64ce43be0f19406fef1c905f93155d496a8278918fd2b64fcae395181c98dab18a61b216dfbf69fa537ebef84ab7efbd12a574239f2c99b8cf5bc35c458af9c2d0848b862f395696a472894f02d5ee39a194c4279627acda010e40e95d25870d9923fdbeeeca8e915395c80ae8639cbd6d515fd67a700ee9b25108b8fca7c891800b0643e3031d4bde0157c2d246366b010bc5a1971f4c2ec3f4a0e13f79f7e10813a5d175d41c856fe33b3ad8279ce4b8e4cd525dab4e6d5a56fe29086b6b5628114a540253a8d94b173043382ee396153189f4c5f5f7756917f88f5d8ad4603a7e4c4a18c1e86ef7e0f79b2a0f57cd07fd0b33a1aff268590e21cdd1315f474144366beda9391422aebf80fb3280debe3b7edb1a2afa5ceb35f4072c297da2d60f09a28f59c6623c007d8df071923adf28369008161ab5390ce4140fac23e27ff1619b7b4fabbd98449504914e56dd00c1eaeda3ce9de51dc98bce575809879efb098d360f623a55bf5f101619af6b96bef928852f0b6ebd4127532dcfd853d10daffa87c477f25433c42807e1b910715e35cf7b250bb674c09cf24586eac777ba54446218c5a6cd7cbe5edb80a61db6dea268457a", &(0x7f0000001140)=""/129}, 0x20) (async) r5 = socket(0x8, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000012c0)=@gcm_256={{0x304}, "ae281fe3b4a2740a", "5fed5e2d1dead77ca8f1cb3acd48d4d9e8ef295eec7c3a720a1d8cebf846314f", "474d188f", "a38a95fde46508d1"}, 0x38) ioctl$sock_netrom_SIOCADDRT(r5, 0x61f0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 11.502849ms ago: executing program 0 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4c800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x24008800}, 0x44) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) socket$inet6(0xa, 0xa, 0x200007) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0xe0703, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x10, 0x3, 0x200) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000002c0)={'pim6reg0\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r9, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r8) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r10, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r10, @ANYRES16=r3, @ANYRESDEC=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf250b00030000000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x380533681c76ead2}, 0x80) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r11, 0x0, 0x0, 0x4001c04) 0s ago: executing program 2 (id=1494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004800010027bd7000fedbdf250a000000d54ed855ca3f6e60c059e1629876a33f2e82d1fe4a09124ac3758e15530591ed05d06b0b376402c51e95c2531c041c818082885f354e5fd61fa4e7e13df0abffaed49a1d02c5239242a0ef1027960055dda89d05e3370135b52cacdab42fec25ff5e0ccece7fb7810490bd6c2b9aff8c86077714f1273743a3f2fd76c8171422c1d5113183dca041d7f6276e925646526d26be59fdf16c991b3073de970149733151ef60854e818d1519c15785af628b635861a7e9494be114d63fcc53da378794b688be4bb822", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x8019}, 0x8800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000005280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)}}], 0x1, 0x44) listen(r1, 0x100101) r2 = accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a00001000028009000c"], 0x38}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r3], 0x5c}, 0x1, 0x6c}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1728, 0xe9, 0x2, 0x2d5, 0x8}, &(0x7f0000000280)=0x14) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket(0x2b, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x8000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0xfc}, 0x8000000, 0x2, 0x0, 0xd, 0x1, 0xc}, 0x20) kernel console output (not intermixed with test programs): 0:50:50:50:50 [ 82.442853][ T5857] veth0_vlan: entered promiscuous mode [ 82.468284][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.493108][ T5861] veth0_macvtap: entered promiscuous mode [ 82.503456][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.517878][ T5857] veth1_vlan: entered promiscuous mode [ 82.528208][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.536054][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.544289][ T5861] veth1_macvtap: entered promiscuous mode [ 82.593503][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.602061][ T3441] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.614903][ T3441] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.644569][ T3441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.649400][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.658556][ T3441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.691949][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.742055][ T5857] veth0_macvtap: entered promiscuous mode [ 82.759981][ T5851] veth0_vlan: entered promiscuous mode [ 82.768114][ T5855] Bluetooth: hci0: command tx timeout [ 82.768400][ T5853] Bluetooth: hci1: command tx timeout [ 82.826007][ T5857] veth1_macvtap: entered promiscuous mode [ 82.847071][ T5853] Bluetooth: hci2: command tx timeout [ 82.854975][ T1106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.870627][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.896299][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.916625][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.927397][ T5853] Bluetooth: hci3: command tx timeout [ 82.961892][ T5851] veth1_vlan: entered promiscuous mode [ 83.000080][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.007791][ T5853] Bluetooth: hci4: command tx timeout [ 83.035754][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.055259][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.077036][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.080146][ T1106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.129616][ T1106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.140023][ T1106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.149756][ T1106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.276556][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.284412][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.303362][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.330813][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.412475][ T5851] veth0_macvtap: entered promiscuous mode [ 83.457382][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.458246][ T5851] veth1_macvtap: entered promiscuous mode [ 83.465231][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.599741][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.613573][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.647401][ T5976] netlink: 'syz.3.7': attribute type 12 has an invalid length. [ 83.664011][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.672405][ T5976] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.7'. [ 83.684997][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.692374][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.692430][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.692476][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.692516][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.810433][ T5979] Bluetooth: MGMT ver 1.23 [ 83.870665][ T5981] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 83.888574][ T5986] Zero length message leads to an empty skb [ 83.905350][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.920180][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.003967][ T5986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 84.042358][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.068745][ T5991] gretap1: entered promiscuous mode [ 84.069588][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.241141][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.285021][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.404252][ T6008] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12'. [ 84.485235][ T6005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.500525][ T6015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'. [ 84.531710][ C0] Illegal XDP return value 16128 on prog (id 75) dev bond_slave_1, expect packet loss! [ 84.544265][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.594977][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.652916][ T6005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.684436][ T6020] x_tables: duplicate underflow at hook 1 [ 84.726161][ T6020] x_tables: duplicate underflow at hook 1 [ 84.804304][ T6005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.852061][ T5853] Bluetooth: hci1: command tx timeout [ 84.852074][ T5855] Bluetooth: hci0: command tx timeout [ 84.927546][ T5853] Bluetooth: hci2: command tx timeout [ 84.979338][ T6005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.010345][ T5853] Bluetooth: hci3: command tx timeout [ 85.090333][ T5853] Bluetooth: hci4: command tx timeout [ 85.239678][ T6040] trusted_key: syz.3.20 sent an empty control message without MSG_MORE. [ 85.308836][ T6037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18'. [ 85.389355][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.451515][ T3441] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.587810][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.625896][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 85.643440][ T194] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.654107][ T30] audit: type=1800 audit(1753028608.166:2): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18" name="cgroup.controllers" dev="tmpfs" ino=40 res=0 errno=0 [ 85.711702][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22'. [ 87.026888][ T6133] netlink: 'syz.3.27': attribute type 4 has an invalid length. [ 87.059774][ T6133] netlink: 17 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.150715][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.206714][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.462002][ T6112] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.539888][ T6112] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.587347][ T6112] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.632043][ T6112] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.685002][ T6161] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 88.060865][ T6185] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 88.076639][ T6188] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 88.093127][ T6185] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 88.146626][ T6185] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 88.174515][ T6185] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 88.181490][ T6197] syz.4.44 uses obsolete (PF_INET,SOCK_PACKET) [ 88.183319][ T6185] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 88.206244][ T6185] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 88.398381][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.406501][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.812847][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.832916][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.080382][ T6220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.104719][ T6230] pim6reg1: entered promiscuous mode [ 89.110412][ T6230] pim6reg1: entered allmulticast mode [ 89.127650][ T6105] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.145889][ T6105] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.162558][ T6105] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.204432][ T6105] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.246403][ T6105] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.283323][ T6105] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.294826][ T6237] netlink: 'syz.0.54': attribute type 10 has an invalid length. [ 89.310154][ T6237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.54'. [ 89.328574][ T6120] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.343668][ T6120] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.375678][ T6238] bridge1: entered allmulticast mode [ 89.408604][ T6237] bridge0: port 3(dummy0) entered blocking state [ 89.415739][ T6237] bridge0: port 3(dummy0) entered disabled state [ 89.489137][ T6237] dummy0: entered allmulticast mode [ 89.579802][ T6237] dummy0: entered promiscuous mode [ 89.613727][ T6237] bridge0: port 3(dummy0) entered blocking state [ 89.620281][ T6237] bridge0: port 3(dummy0) entered forwarding state [ 89.684387][ T6257] tipc: Started in network mode [ 89.691937][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 89.701249][ T6257] tipc: Node identity ea608a0942cb, cluster identity 4711 [ 89.714069][ T6257] tipc: Enabled bearer , priority 0 [ 89.749267][ T6251] netlink: 'syz.4.57': attribute type 11 has an invalid length. [ 89.789910][ T6261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.814634][ T6251] syzkaller0: entered promiscuous mode [ 89.823793][ T6251] syzkaller0: entered allmulticast mode [ 90.047452][ T6267] tipc: Resetting bearer [ 90.084478][ T6249] tipc: Resetting bearer [ 90.555850][ T6249] tipc: Disabling bearer [ 91.141817][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 91.175192][ T6314] 8021q: VLANs not supported on vxcan0 [ 91.182726][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 91.192244][ T6314] netlink: 48 bytes leftover after parsing attributes in process `syz.4.74'. [ 91.507204][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.77'. [ 91.523077][ T6326] warning: `syz.0.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.671621][ T43] cfg80211: failed to load regulatory.db [ 91.811208][ T6338] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 91.897922][ T6341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.82'. [ 91.916996][ T6340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.82'. [ 92.042634][ T6347] netlink: 'syz.2.84': attribute type 22 has an invalid length. [ 92.057835][ T6347] netlink: 148 bytes leftover after parsing attributes in process `syz.2.84'. [ 92.091198][ T6351] ipvlan1: entered promiscuous mode [ 92.099013][ T6351] ipvlan1: entered allmulticast mode [ 92.112449][ T6351] veth0_vlan: entered allmulticast mode [ 92.273517][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 92.545564][ T6376] dummy0: left allmulticast mode [ 92.553424][ T6376] dummy0: left promiscuous mode [ 92.559323][ T6376] bridge0: port 3(dummy0) entered disabled state [ 92.574303][ T6376] bridge_slave_0: left allmulticast mode [ 92.580121][ T6376] bridge_slave_0: left promiscuous mode [ 92.590406][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.603995][ T6376] bridge_slave_1: left allmulticast mode [ 92.611018][ T6376] bridge_slave_1: left promiscuous mode [ 92.618941][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.632959][ T6376] bond0: (slave bond_slave_0): Releasing backup interface [ 92.650479][ T6376] bond0: (slave bond_slave_1): Releasing backup interface [ 92.671678][ T6376] team0: Port device team_slave_0 removed [ 92.684376][ T6376] team0: Port device team_slave_1 removed [ 92.698660][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.707713][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.719311][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.731984][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.209248][ T6393] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 93.217258][ T6396] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 93.600995][ T30] audit: type=1107 audit(1753028616.116:3): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 93.623606][ T6421] netlink: 'syz.2.104': attribute type 3 has an invalid length. [ 93.634574][ T6421] netlink: 'syz.2.104': attribute type 3 has an invalid length. [ 94.081710][ T6442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.254834][ T6451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.561470][ T6458] __nla_validate_parse: 13 callbacks suppressed [ 94.561483][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 94.682709][ T6462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.115'. [ 97.243203][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'. [ 98.946055][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 99.143036][ T6504] netlink: 116 bytes leftover after parsing attributes in process `syz.3.126'. [ 99.170310][ T6504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 99.287173][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 99.490646][ T6516] af_packet: tpacket_rcv: packet too big, clamped from 9920 to 3952. macoff=96 [ 99.853241][ T6540] Bluetooth: MGMT ver 1.23 [ 99.864367][ T6547] ip6erspan0: entered allmulticast mode [ 100.048485][ T6560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.053522][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 100.218643][ T6572] xt_HMARK: proto mask must be zero with L3 mode [ 100.305016][ T6411] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 100.314693][ T6411] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 100.373318][ T6411] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 100.758963][ T6602] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 100.840128][ T6609] netlink: 32 bytes leftover after parsing attributes in process `syz.4.149'. [ 101.040416][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 101.081908][ T6619] wireguard0: entered promiscuous mode [ 101.093446][ T6619] wireguard0: entered allmulticast mode [ 101.108198][ T6618] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 102.172952][ T6660] netlink: 52 bytes leftover after parsing attributes in process `syz.1.159'. [ 102.312174][ T6661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.335845][ T6668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.161'. [ 102.339332][ T30] audit: type=1804 audit(1753028624.846:4): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.156" name="memory.events" dev="tmpfs" ino=192 res=1 errno=0 [ 102.396747][ T30] audit: type=1800 audit(1753028624.846:5): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.156" name="memory.events" dev="tmpfs" ino=192 res=0 errno=0 [ 102.418841][ T30] audit: type=1804 audit(1753028624.846:6): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.156" name="/newroot/34/memory.events" dev="tmpfs" ino=192 res=1 errno=0 [ 102.773679][ T5853] Bluetooth: hci4: command tx timeout [ 103.291640][ T6698] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 103.313021][ T6698] netlink: 'syz.4.171': attribute type 4 has an invalid length. [ 103.374013][ T6698] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.171'. [ 103.447256][ T6702] No such timeout policy "syz1" [ 103.684598][ T6708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 103.701949][ T6708] netlink: 312 bytes leftover after parsing attributes in process `syz.0.173'. [ 103.753379][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'. [ 104.059976][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 104.432669][ T6744] tap0: tun_chr_ioctl cmd 1074025677 [ 104.495514][ T6744] tap0: linktype set to 825 [ 104.664930][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.076107][ T6764] ip6gre1: entered allmulticast mode [ 105.495993][ T6780] team0: Device gtp0 is of different type [ 105.665448][ T6790] __nla_validate_parse: 3 callbacks suppressed [ 105.665465][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 106.261365][ T6815] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 106.359803][ T6815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.462464][ T6815] ipvlan2: entered allmulticast mode [ 106.510736][ T6815] bond1: entered allmulticast mode [ 106.796258][ T6840] netlink: 248 bytes leftover after parsing attributes in process `syz.0.207'. [ 107.770325][ T6894] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 107.781016][ T6884] tipc: Started in network mode [ 107.786975][ T6884] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 107.799747][ T6884] tipc: Enabled bearer , priority 0 [ 108.043552][ T6903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.219'. [ 108.649636][ T6928] netlink: 'syz.2.225': attribute type 21 has an invalid length. [ 108.918122][ T6414] tipc: Node number set to 11578026 [ 109.094345][ T6953] raw_sendmsg: syz.3.229 forgot to set AF_INET. Fix it! [ 109.687063][ T6973] wg1 speed is unknown, defaulting to 1000 [ 109.709928][ T6973] wg1 speed is unknown, defaulting to 1000 [ 109.753116][ T6973] wg1 speed is unknown, defaulting to 1000 [ 109.794965][ T6973] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.861885][ T6973] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 110.012116][ T6973] wg1 speed is unknown, defaulting to 1000 [ 110.087344][ T6973] wg1 speed is unknown, defaulting to 1000 [ 110.120268][ T6973] wg1 speed is unknown, defaulting to 1000 [ 110.157941][ T6973] wg1 speed is unknown, defaulting to 1000 [ 110.218404][ T6973] wg1 speed is unknown, defaulting to 1000 [ 110.319428][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 110.324155][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.338030][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 110.347486][ T6999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.241'. [ 110.633828][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 110.634460][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 110.718969][ T7020] netlink: 76 bytes leftover after parsing attributes in process `syz.0.244'. [ 110.745717][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 110.757893][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 110.830845][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 110.858076][ T7029] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000 [ 110.914222][ T7032] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 110.938537][ T7022] IPv6: addrconf: prefix option has invalid lifetime [ 110.945315][ T7022] IPv6: addrconf: prefix option has invalid lifetime [ 110.952040][ T7022] IPv6: addrconf: prefix option has invalid lifetime [ 111.024966][ T7035] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 111.051042][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 111.073307][ T7036] bond1: (slave gretap1): making interface the new active one [ 111.087081][ T7036] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 111.097235][ T7025] wg1 speed is unknown, defaulting to 1000 [ 111.155793][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.166667][ T7029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.175051][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.183438][ T7029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.280814][ T7040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.249'. [ 111.289701][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 111.303402][ T7040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.249'. [ 111.312720][ T7040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.249'. [ 111.395448][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 112.242396][ T7071] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.361313][ T7075] gretap0: entered promiscuous mode [ 113.200851][ T7113] netlink: 'syz.2.275': attribute type 3 has an invalid length. [ 113.248513][ T7113] tipc: Enabling of bearer rejected, failed to enable media [ 113.550821][ T7112] wg1 speed is unknown, defaulting to 1000 [ 113.845697][ T7139] netlink: 'syz.2.285': attribute type 13 has an invalid length. [ 113.876914][ T7139] netlink: 'syz.2.285': attribute type 17 has an invalid length. [ 114.120075][ T7139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.144461][ T7152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.289758][ T7139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.405007][ T7139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.657299][ T7142] wg1 speed is unknown, defaulting to 1000 [ 114.673300][ T7158] ¾x9ÿ: renamed from bridge_slave_0 [ 114.701040][ T7147] wg1 speed is unknown, defaulting to 1000 [ 114.998250][ T7162] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 115.065923][ T7162] dummy0: entered promiscuous mode [ 115.112156][ T7162] bridge0: port 3(dummy0) entered blocking state [ 115.136844][ T7162] bridge0: port 3(dummy0) entered disabled state [ 115.150722][ T7139] syz.2.285 (7139) used greatest stack depth: 18888 bytes left [ 115.152357][ T7162] dummy0: entered allmulticast mode [ 115.340177][ T7172] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 115.361091][ T7172] netlink: 'syz.2.292': attribute type 3 has an invalid length. [ 115.512555][ T7176] tipc: Enabled bearer , priority 0 [ 115.635233][ T7178] syzkaller0: entered promiscuous mode [ 115.663260][ T7178] syzkaller0: entered allmulticast mode [ 115.743045][ T7183] netlink: 'syz.4.296': attribute type 8 has an invalid length. [ 115.757210][ T7185] batadv_slave_1: entered promiscuous mode [ 115.763768][ T7176] tipc: Resetting bearer [ 115.819771][ T7176] __nla_validate_parse: 16 callbacks suppressed [ 115.819785][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 115.889946][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.297'. [ 115.947047][ T7175] tipc: Resetting bearer [ 116.002712][ T7175] tipc: Disabling bearer [ 116.031916][ T7184] batadv_slave_1: left promiscuous mode [ 116.090766][ T7194] tipc: Enabling of bearer rejected, failed to enable media [ 116.199066][ T7201] x_tables: duplicate underflow at hook 2 [ 116.222736][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 116.282498][ T7203] IPVS: Error joining to the multicast group [ 116.802482][ T7229] wg1 speed is unknown, defaulting to 1000 [ 116.960336][ T7236] netlink: 96 bytes leftover after parsing attributes in process `syz.2.310'. [ 117.430365][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 117.501371][ T7220] delete_channel: no stack [ 117.508159][ T7241] wg1 speed is unknown, defaulting to 1000 [ 117.637118][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 117.675406][ T7247] tipc: Enabled bearer , priority 0 [ 117.682894][ T7244] tipc: Enabling of bearer rejected, already enabled [ 117.692081][ T7247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.702260][ T7244] syzkaller0: entered promiscuous mode [ 117.711744][ T7244] syzkaller0: entered allmulticast mode [ 117.737825][ T7248] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.313'. [ 117.767282][ T7252] x_tables: duplicate underflow at hook 2 [ 117.774114][ T7242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.785800][ T7243] tipc: Resetting bearer [ 117.858273][ T7243] tipc: Disabling bearer [ 117.892949][ T7241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.909331][ T7259] netlink: 'syz.0.314': attribute type 10 has an invalid length. [ 117.928665][ T7260] netlink: 'syz.0.314': attribute type 10 has an invalid length. [ 118.240730][ T7265] wg1 speed is unknown, defaulting to 1000 [ 118.338761][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.317'. [ 118.657588][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.319'. [ 118.710475][ T7283] netlink: 'syz.1.321': attribute type 2 has an invalid length. [ 118.748361][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 118.858254][ T7284] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 118.866097][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.909010][ T7284] netlink: 'syz.4.322': attribute type 4 has an invalid length. [ 119.241714][ T7312] x_tables: duplicate underflow at hook 1 [ 119.355804][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.365350][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.403657][ T7269] wg1 speed is unknown, defaulting to 1000 [ 120.079654][ T7332] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 120.102910][ T7332] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 120.179895][ T7339] netlink: 'syz.4.337': attribute type 4 has an invalid length. [ 120.228940][ T7339] netlink: 'syz.4.337': attribute type 4 has an invalid length. [ 120.269037][ T7334] wg1 speed is unknown, defaulting to 1000 [ 120.573489][ T7355] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 120.585249][ T7344] IPVS: stopping master sync thread 7355 ... [ 120.881588][ T7362] syzkaller0: entered promiscuous mode [ 120.890905][ T7362] syzkaller0: entered allmulticast mode [ 120.955674][ T7357] wg1 speed is unknown, defaulting to 1000 [ 120.967528][ T7374] sock: sock_timestamping_bind_phc: sock not bind to device [ 121.379022][ T7389] __nla_validate_parse: 4 callbacks suppressed [ 121.379068][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 121.409325][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 121.422163][ T7389] netlink: 'syz.4.350': attribute type 15 has an invalid length. [ 122.686948][ T6522] wlan1: Trigger new scan to find an IBSS to join [ 122.858812][ T7419] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.358'. [ 122.899250][ T7423] xt_HMARK: spi-set and port-set can't be combined [ 123.272016][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 123.435812][ T7453] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.454882][ T7446] wg1 speed is unknown, defaulting to 1000 [ 123.577594][ T7461] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 123.786565][ T7467] netlink: 10 bytes leftover after parsing attributes in process `syz.2.367'. [ 123.806627][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 123.919994][ T7477] netlink: 52 bytes leftover after parsing attributes in process `syz.3.368'. [ 123.930710][ T7476] netlink: 'syz.0.369': attribute type 11 has an invalid length. [ 123.943438][ T7473] bond0: entered promiscuous mode [ 123.952996][ T7471] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 123.963256][ T7473] bond_slave_0: entered promiscuous mode [ 123.969380][ T7471] netlink: 172 bytes leftover after parsing attributes in process `syz.3.368'. [ 123.978981][ T7473] bond_slave_1: entered promiscuous mode [ 123.987774][ T7471] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 123.995541][ T7473] bond0: left promiscuous mode [ 124.000775][ T7473] bond_slave_0: left promiscuous mode [ 124.006873][ T7473] bond_slave_1: left promiscuous mode [ 124.423514][ T7487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.550122][ T7507] syzkaller1: entered promiscuous mode [ 124.555832][ T7507] syzkaller1: entered allmulticast mode [ 124.565588][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 124.581479][ T7507] netlink: 108 bytes leftover after parsing attributes in process `syz.1.378'. [ 124.671603][ T7510] IPv6: Can't replace route, no match found [ 124.689761][ T7510] bridge2: entered promiscuous mode [ 125.394140][ T7537] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.554186][ T7544] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 125.586812][ T7546] netlink: 'syz.4.390': attribute type 12 has an invalid length. [ 125.851921][ T7552] bond1: entered promiscuous mode [ 126.097521][ T7579] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 126.619021][ T7615] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 126.692531][ T7615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.910936][ T7633] __nla_validate_parse: 3 callbacks suppressed [ 126.910953][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 126.939302][ T7631] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 126.991449][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 127.014803][ T7636] netlink: 'syz.1.413': attribute type 2 has an invalid length. [ 127.023367][ T7636] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 127.038231][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 127.182329][ T7644] wg1 speed is unknown, defaulting to 1000 [ 127.329541][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 127.383027][ T7658] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 127.391841][ T7656] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 127.429139][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.416'. [ 127.500094][ T7664] netlink: 'syz.4.416': attribute type 29 has an invalid length. [ 127.542150][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 127.578662][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 127.641593][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020b54400: rx timeout, send abort [ 127.650891][ T6522] wlan1: Trigger new scan to find an IBSS to join [ 127.736820][ T7671] netlink: 108 bytes leftover after parsing attributes in process `syz.0.422'. [ 127.764550][ T7673] tipc: Started in network mode [ 127.778538][ T7673] tipc: Node identity 322e007993c, cluster identity 4711 [ 127.792587][ T7673] tipc: Enabled bearer , priority 0 [ 127.800097][ T7674] syzkaller0: entered promiscuous mode [ 127.816782][ T7674] syzkaller0: entered allmulticast mode [ 127.855897][ T7674] tipc: Resetting bearer [ 127.875502][ T7674] tipc: Disabling bearer [ 128.141700][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020b54800: rx timeout, send abort [ 128.150255][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020b54400: abort rx timeout. Force session deactivation [ 128.251802][ T7699] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 128.287701][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 128.437953][ T7699] bond2: (slave geneve2): making interface the new active one [ 128.446413][ T7699] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 128.487706][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.432'. [ 128.566757][ T7712] netlink: 248 bytes leftover after parsing attributes in process `syz.2.435'. [ 128.640126][ T6520] wlan1: Creating new IBSS network, BSSID 1a:ce:c7:af:bd:99 [ 128.650008][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020b54800: abort rx timeout. Force session deactivation [ 128.667035][ T6522] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.690210][ T7710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.730298][ T6522] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.741760][ T6522] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.806372][ T7723] sctp: [Deprecated]: syz.1.438 (pid 7723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.806372][ T7723] Use struct sctp_sack_info instead [ 128.826714][ T6522] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.509505][ T7763] validate_nla: 3 callbacks suppressed [ 129.509526][ T7763] netlink: 'syz.0.452': attribute type 7 has an invalid length. [ 129.558977][ T7763] tipc: Enabling of bearer rejected, failed to enable media [ 129.573259][ T7769] openvswitch: netlink: EtherType 10 is less than min 600 [ 129.632433][ T7769] openvswitch: netlink: EtherType 10 is less than min 600 [ 129.766962][ T7774] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 129.768382][ T7772] wg1 speed is unknown, defaulting to 1000 [ 129.907340][ T7789] v: renamed from ip6_vti0 [ 129.977608][ T7791] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20004 [ 130.215883][ T7807] tipc: Cannot configure node identity twice [ 130.254506][ T7772] netlink: 'syz.0.455': attribute type 2 has an invalid length. [ 130.303700][ T7813] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 130.607644][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 130.801849][ T7834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 130.868666][ T5853] Bluetooth: hci4: link tx timeout [ 130.908094][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.035014][ T7854] xt_TCPMSS: Only works on TCP SYN packets [ 131.103276][ T7856] syzkaller1: entered promiscuous mode [ 131.111410][ T7856] syzkaller1: entered allmulticast mode [ 131.297329][ T7869] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 131.520732][ T7879] netlink: 'syz.2.483': attribute type 3 has an invalid length. [ 131.631348][ T7883] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 131.749200][ T7883] sctp: [Deprecated]: syz.1.485 (pid 7883) Use of int in maxseg socket option. [ 131.749200][ T7883] Use struct sctp_assoc_value instead [ 132.237029][ T7906] netlink: 'syz.1.491': attribute type 4 has an invalid length. [ 132.336165][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.381358][ T7906] bond0: (slave rose0): Enslaving as an active interface with an up link [ 132.612297][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932461][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 133.437079][ T7965] __nla_validate_parse: 19 callbacks suppressed [ 133.437098][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 133.487143][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 133.497449][ T7965] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 133.505796][ T7965] netlink: 10 bytes leftover after parsing attributes in process `syz.3.504'. [ 133.544535][ T7965] block nbd0: Unsupported socket: shutdown callout must be supported. [ 133.793926][ T7975] syz.0.505: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.858287][ T7975] CPU: 0 UID: 0 PID: 7975 Comm: syz.0.505 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 133.858313][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.858330][ T7975] Call Trace: [ 133.858338][ T7975] [ 133.858346][ T7975] dump_stack_lvl+0x189/0x250 [ 133.858380][ T7975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.858402][ T7975] ? __pfx__printk+0x10/0x10 [ 133.858426][ T7975] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.858450][ T7975] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 133.858476][ T7975] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 133.858502][ T7975] warn_alloc+0x214/0x310 [ 133.858519][ T7975] ? stack_depot_save_flags+0x40/0x900 [ 133.858542][ T7975] ? __pfx_warn_alloc+0x10/0x10 [ 133.858560][ T7975] ? kasan_save_track+0x4f/0x80 [ 133.858583][ T7975] ? xskq_create+0x56/0x170 [ 133.858606][ T7975] ? xsk_init_queue+0xb0/0x110 [ 133.858626][ T7975] ? xsk_setsockopt+0x4dc/0x8d0 [ 133.858647][ T7975] ? do_sock_setsockopt+0x179/0x1b0 [ 133.858664][ T7975] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 133.858681][ T7975] ? do_syscall_64+0xfa/0x3b0 [ 133.858696][ T7975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.858721][ T7975] __vmalloc_node_range_noprof+0x125/0x12f0 [ 133.858776][ T7975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.858809][ T7975] ? __kasan_kmalloc+0x93/0xb0 [ 133.858835][ T7975] vmalloc_user_noprof+0xad/0xf0 [ 133.858861][ T7975] ? xskq_create+0xbf/0x170 [ 133.858888][ T7975] xskq_create+0xbf/0x170 [ 133.858916][ T7975] xsk_init_queue+0xb0/0x110 [ 133.858944][ T7975] xsk_setsockopt+0x4dc/0x8d0 [ 133.858970][ T7975] ? __pfx_xsk_setsockopt+0x10/0x10 [ 133.858994][ T7975] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.859027][ T7975] ? aa_sock_opt_perm+0x74/0x110 [ 133.859046][ T7975] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 133.859064][ T7975] ? __pfx_xsk_setsockopt+0x10/0x10 [ 133.859097][ T7975] do_sock_setsockopt+0x179/0x1b0 [ 133.859120][ T7975] __x64_sys_setsockopt+0x13f/0x1b0 [ 133.859145][ T7975] do_syscall_64+0xfa/0x3b0 [ 133.859165][ T7975] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.859191][ T7975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.859208][ T7975] ? clear_bhb_loop+0x60/0xb0 [ 133.859230][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.859248][ T7975] RIP: 0033:0x7f24c878e9a9 [ 133.859268][ T7975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.859283][ T7975] RSP: 002b:00007f24c65f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.859302][ T7975] RAX: ffffffffffffffda RBX: 00007f24c89b6080 RCX: 00007f24c878e9a9 [ 133.859315][ T7975] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 133.859325][ T7975] RBP: 00007f24c8810d69 R08: 0000000000000004 R09: 0000000000000000 [ 133.859336][ T7975] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.859347][ T7975] R13: 0000000000000000 R14: 00007f24c89b6080 R15: 00007fff95c496a8 [ 133.859375][ T7975] [ 133.917576][ T7975] Mem-Info: [ 134.029726][ T7982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.508'. [ 134.076870][ T7985] netlink: 'syz.3.506': attribute type 2 has an invalid length. [ 134.117012][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.192521][ T7975] active_anon:4588 inactive_anon:0 isolated_anon:0 [ 134.192521][ T7975] active_file:1431 inactive_file:39867 isolated_file:0 [ 134.192521][ T7975] unevictable:768 dirty:267 writeback:0 [ 134.192521][ T7975] slab_reclaimable:11205 slab_unreclaimable:111014 [ 134.192521][ T7975] mapped:29100 shmem:1382 pagetables:1119 [ 134.192521][ T7975] sec_pagetables:0 bounce:0 [ 134.192521][ T7975] kernel_misc_reclaimable:0 [ 134.192521][ T7975] free:1306073 free_pcp:24279 free_cma:0 [ 134.193199][ T7985] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 134.333037][ T7975] Node 0 active_anon:18452kB inactive_anon:0kB active_file:5724kB inactive_file:159268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120500kB dirty:1064kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13436kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.335712][ T7989] wg1 speed is unknown, defaulting to 1000 [ 134.367708][ T7985] netlink: 224 bytes leftover after parsing attributes in process `syz.3.506'. [ 134.381873][ T7975] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.415055][ T7975] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.549139][ T7975] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 134.561437][ T7975] Node 0 DMA32 free:1313260kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18204kB inactive_anon:0kB active_file:5724kB inactive_file:157692kB unevictable:1536kB writepending:1064kB present:3129332kB managed:2558348kB mlocked:0kB bounce:0kB free_pcp:74672kB local_pcp:42956kB free_cma:0kB [ 134.598379][ T7975] lowmem_reserve[]: 0 0 1 1 1 [ 134.603224][ T7975] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 134.628916][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 134.655318][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.512'. [ 134.676577][ T7970] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 134.683501][ T7975] lowmem_reserve[]: 0 0 0 0 0 [ 134.690437][ T7975] Node 1 Normal free:3895444kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22692kB local_pcp:13664kB free_cma:0kB [ 134.746126][ T7975] lowmem_reserve[]: 0 0 0 0 0 [ 134.773569][ T7975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.955308][ T7975] Node 0 DMA32: 1050*4kB (UME) 898*8kB (UME) 466*16kB (UM) 415*32kB (UM) 88*64kB (UM) 23*128kB (UM) 4*256kB (M) 4*512kB (UME) 2*1024kB (UM) 6*2048kB (UME) 308*4096kB (UM) = 1319672kB [ 135.028745][ T7975] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 135.070396][ T7975] Node 1 Normal: 215*4kB (UME) 51*8kB (UME) 58*16kB (UME) 66*32kB (UME) 33*64kB (UME) 9*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895444kB [ 135.104351][ T7975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.114961][ T8026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.130908][ T7975] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.155710][ T7975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.166358][ T7975] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.181535][ T7975] 42661 total pagecache pages [ 135.186237][ T7975] 0 pages in swap cache [ 135.190879][ T7975] Free swap = 124996kB [ 135.195154][ T7975] Total swap = 124996kB [ 135.200976][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 135.212643][ T7975] 2097051 pages RAM [ 135.217482][ T7975] 0 pages HighMem/MovableOnly [ 135.239156][ T7975] 425422 pages reserved [ 135.259539][ T7975] 0 pages cma reserved [ 135.314735][ T8022] bridge0: port 3(vlan2) entered blocking state [ 135.331226][ T8022] bridge0: port 3(vlan2) entered disabled state [ 135.342265][ T8022] vlan2: entered allmulticast mode [ 135.351200][ T8022] bond0: entered allmulticast mode [ 135.356358][ T8022] bond_slave_0: entered allmulticast mode [ 135.362368][ T8022] bond_slave_1: entered allmulticast mode [ 135.371253][ T8022] vlan2: entered promiscuous mode [ 135.376541][ T8022] bond0: entered promiscuous mode [ 135.381585][ T8022] bond_slave_0: entered promiscuous mode [ 135.396399][ T8022] bond_slave_1: entered promiscuous mode [ 135.512765][ T8034] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.640726][ T8048] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 135.651771][ T8048] netlink: 168 bytes leftover after parsing attributes in process `syz.2.521'. [ 135.689799][ T8048] NCSI netlink: No device for ifindex 0 [ 136.012515][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 136.310187][ T8082] netlink: 'syz.2.528': attribute type 13 has an invalid length. [ 136.414096][ T8082] netlink: 'syz.2.528': attribute type 17 has an invalid length. [ 136.600519][ T8082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.729894][ T8096] netlink: 'syz.4.531': attribute type 2 has an invalid length. [ 136.767113][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 136.773949][ T8084] wg1 speed is unknown, defaulting to 1000 [ 137.072157][ T8109] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 137.117298][ T8107] tap0: tun_chr_ioctl cmd 1074025677 [ 137.122746][ T8107] tap0: linktype set to 774 [ 137.193274][ T8112] lo speed is unknown, defaulting to 1000 [ 137.200341][ T8112] lo speed is unknown, defaulting to 1000 [ 137.206842][ T8112] lo speed is unknown, defaulting to 1000 [ 137.255436][ T8112] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.345316][ T8112] lo speed is unknown, defaulting to 1000 [ 137.379936][ T8112] lo speed is unknown, defaulting to 1000 [ 137.416326][ T8112] lo speed is unknown, defaulting to 1000 [ 137.489657][ T8112] lo speed is unknown, defaulting to 1000 [ 137.524962][ T8112] lo speed is unknown, defaulting to 1000 [ 137.664874][ T8127] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 138.129797][ T8141] wg1 speed is unknown, defaulting to 1000 [ 138.140153][ T8141] lo speed is unknown, defaulting to 1000 [ 138.460216][ T8152] __nla_validate_parse: 8 callbacks suppressed [ 138.460235][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 138.480499][ T8151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 138.506258][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 138.584729][ T8159] netlink: 'syz.4.547': attribute type 3 has an invalid length. [ 138.624068][ T8159] netlink: 'syz.4.547': attribute type 6 has an invalid length. [ 138.646826][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.549'. [ 138.672595][ T8163] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 138.715755][ T8165] x_tables: duplicate underflow at hook 1 [ 138.820603][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.553'. [ 138.846784][ T8175] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 138.945961][ T8178] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 139.116047][ T8189] x_tables: unsorted underflow at hook 3 [ 139.143513][ T8183] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 139.262085][ T8178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.278260][ T6525] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.369715][ T8183] veth3: entered promiscuous mode [ 139.380424][ T8183] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 139.427824][ T6120] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.442475][ T8203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.561'. [ 139.465734][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.560'. [ 139.474888][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 139.565309][ T8206] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 139.913134][ T8225] wg1 speed is unknown, defaulting to 1000 [ 139.961465][ T8236] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.973543][ T8225] lo speed is unknown, defaulting to 1000 [ 140.867980][ T8270] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18) [ 141.075964][ T8284] validate_nla: 1 callbacks suppressed [ 141.075981][ T8284] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 141.095148][ T8278] can: request_module (can-proto-0) failed. [ 141.523267][ T8284] veth5: entered promiscuous mode [ 141.714060][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.580'. [ 141.769521][ T8323] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 141.838183][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.583'. [ 141.857159][ T8321] wg1 speed is unknown, defaulting to 1000 [ 141.898979][ T8321] lo speed is unknown, defaulting to 1000 [ 142.193406][ T8341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.240381][ T8338] netlink: 'syz.2.587': attribute type 32 has an invalid length. [ 142.248239][ T8338] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 142.439785][ T8352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.447127][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 142.454416][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 142.938054][ T8375] netlink: 'syz.0.594': attribute type 5 has an invalid length. [ 143.003770][ T8374] wg1 speed is unknown, defaulting to 1000 [ 143.091051][ T8385] netlink: 'syz.1.598': attribute type 83 has an invalid length. [ 143.118429][ T8374] lo speed is unknown, defaulting to 1000 [ 143.589095][ T8408] __nla_validate_parse: 2 callbacks suppressed [ 143.589115][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.602'. [ 143.640759][ T8401] wg1 speed is unknown, defaulting to 1000 [ 143.648828][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.650935][ T8408] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 143.685110][ T8408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.602'. [ 143.687734][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.704857][ T8401] lo speed is unknown, defaulting to 1000 [ 144.199715][ T8432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.328208][ T8434] netlink: 'syz.3.606': attribute type 7 has an invalid length. [ 144.365512][ T8434] : entered promiscuous mode [ 144.495641][ T8445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.610'. [ 144.511989][ T8449] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 144.576035][ T8448] pimreg3: entered allmulticast mode [ 144.603156][ T8456] x_tables: duplicate underflow at hook 1 [ 144.605749][ T8453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.641382][ T8455] xt_cgroup: xt_cgroup: no path or classid specified [ 144.662065][ T8454] wg1 speed is unknown, defaulting to 1000 [ 144.671489][ T8446] pimreg3: left allmulticast mode [ 144.744398][ T8454] lo speed is unknown, defaulting to 1000 [ 145.094155][ T8478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.621'. [ 145.096081][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.618'. [ 145.121654][ T8473] dvmrp8: entered allmulticast mode [ 145.161704][ T8478] wg1 speed is unknown, defaulting to 1000 [ 145.171135][ T8478] lo speed is unknown, defaulting to 1000 [ 145.237708][ T8472] dvmrp8: left allmulticast mode [ 145.391447][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 145.517798][ T8493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.625'. [ 145.614308][ T8498] xt_hashlimit: size too large, truncated to 1048576 [ 145.746368][ T8495] infiniband syz!: set active [ 145.751747][ T8495] infiniband syz!: added team_slave_0 [ 145.847462][ T8495] RDS/IB: syz!: added [ 145.854412][ T8495] smc: adding ib device syz! with port count 1 [ 145.873666][ T8495] smc: ib device syz! port 1 has pnetid [ 145.969712][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 145.990913][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'. [ 146.004792][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 146.032982][ T8520] netlink: 'syz.3.633': attribute type 13 has an invalid length. [ 148.804784][ T8601] __nla_validate_parse: 39 callbacks suppressed [ 148.804802][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 149.674244][ T8629] openvswitch: netlink: Message has 16 unknown bytes. [ 149.929312][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 149.970144][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'. [ 150.121122][ T8651] netlink: 'syz.2.662': attribute type 42 has an invalid length. [ 150.155398][ T8635] wireguard0: entered promiscuous mode [ 150.168809][ T8638] netlink: 116 bytes leftover after parsing attributes in process `syz.3.656'. [ 150.174929][ T8635] wireguard0: entered allmulticast mode [ 150.645615][ T8613] wg1 speed is unknown, defaulting to 1000 [ 150.671221][ T8613] lo speed is unknown, defaulting to 1000 [ 150.796735][ T8668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.668'. [ 151.601840][ T8709] netlink: 'syz.1.679': attribute type 10 has an invalid length. [ 151.635031][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.652885][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.766083][ T8702] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.784305][ T8703] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.803329][ T8709] dummy0: left allmulticast mode [ 151.816474][ T8709] dummy0: left promiscuous mode [ 151.821505][ T8709] bridge0: port 3(dummy0) entered disabled state [ 151.841749][ T8709] team0: Port device dummy0 added [ 151.850451][ T6115] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.859780][ T6115] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.879325][ T6115] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.899920][ T6115] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.922039][ T6115] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.945892][ T6115] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.977221][ T6115] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.996239][ T6115] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.122836][ T8723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.684'. [ 152.383836][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 152.579524][ T8753] tipc: Enabled bearer , priority 0 [ 152.589063][ T8750] syzkaller0: entered promiscuous mode [ 152.594556][ T8750] syzkaller0: entered allmulticast mode [ 152.624682][ T8752] wg1 speed is unknown, defaulting to 1000 [ 152.667055][ T8752] lo speed is unknown, defaulting to 1000 [ 152.668880][ T8751] tipc: Resetting bearer [ 152.688609][ T8749] tipc: Resetting bearer [ 152.712870][ T8749] tipc: Disabling bearer [ 152.762569][ T8759] xt_CT: No such helper "snmp" [ 152.805738][ T8763] syzkaller1: entered promiscuous mode [ 152.812475][ T8763] syzkaller1: entered allmulticast mode [ 152.977551][ T8769] netlink: 'syz.2.696': attribute type 3 has an invalid length. [ 152.987610][ T8769] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.696'. [ 153.087603][ T8776] netlink: 9 bytes leftover after parsing attributes in process `syz.2.698'. [ 153.104031][ T8776] 0·: renamed from hsr_slave_1 (while UP) [ 153.120768][ T8776] 0·: entered allmulticast mode [ 153.127776][ T8776] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 153.320064][ T8785] netlink: 'syz.2.701': attribute type 2 has an invalid length. [ 153.333509][ T8785] þ: entered promiscuous mode [ 153.484093][ T8794] tipc: Started in network mode [ 153.489325][ T8794] tipc: Node identity c6c0a2a066f3, cluster identity 4711 [ 153.496853][ T8794] tipc: Enabled bearer , priority 0 [ 153.513257][ T8795] gtp0: entered promiscuous mode [ 153.518472][ T8795] gtp0: entered allmulticast mode [ 154.146568][ T43] IPVS: starting estimator thread 0... [ 154.233369][ T8836] netlink: 'syz.4.714': attribute type 10 has an invalid length. [ 154.246798][ T8829] IPVS: using max 29 ests per chain, 69600 per kthread [ 154.292163][ T8837] wg1 speed is unknown, defaulting to 1000 [ 154.319820][ T8837] lo speed is unknown, defaulting to 1000 [ 154.329201][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 154.346380][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 154.359700][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 154.373509][ T8833] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 154.415985][ T8796] tipc: Disabling bearer [ 154.722613][ T8857] netlink: 666 bytes leftover after parsing attributes in process `syz.4.718'. [ 154.749455][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 155.178925][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.721'. [ 155.189307][ T8875] netlink: 84 bytes leftover after parsing attributes in process `syz.3.720'. [ 155.220912][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.720'. [ 155.237771][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 155.254364][ T8876] wg1 speed is unknown, defaulting to 1000 [ 155.268724][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 155.444793][ T8873] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 155.837919][ T8884] bridge4: entered promiscuous mode [ 155.843186][ T8884] bridge4: entered allmulticast mode [ 155.863831][ T8884] team0: Port device bridge4 added [ 155.881432][ T8885] bridge5: entered promiscuous mode [ 155.892239][ T8885] bridge5: entered allmulticast mode [ 155.901827][ T8885] team0: Port device bridge5 added [ 156.021952][ T8908] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 156.065905][ T8911] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 156.450314][ T8935] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 156.850004][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.858529][ T8951] bridge0: port 1(1¾x9ÿ) entered disabled state [ 157.115784][ T8978] xt_hashlimit: size too large, truncated to 1048576 [ 157.130113][ T8978] syz.4.743: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 157.147640][ T8978] CPU: 1 UID: 0 PID: 8978 Comm: syz.4.743 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 157.147667][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.147679][ T8978] Call Trace: [ 157.147687][ T8978] [ 157.147695][ T8978] dump_stack_lvl+0x189/0x250 [ 157.147730][ T8978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.147755][ T8978] ? __pfx__printk+0x10/0x10 [ 157.147783][ T8978] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 157.147810][ T8978] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 157.147839][ T8978] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 157.147869][ T8978] warn_alloc+0x214/0x310 [ 157.147896][ T8978] ? __pfx_warn_alloc+0x10/0x10 [ 157.147926][ T8978] ? __get_vm_area_node+0x28f/0x300 [ 157.147957][ T8978] ? htable_create+0xfc/0x7a0 [ 157.147989][ T8978] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 157.148077][ T8978] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 157.148129][ T8978] ? rcu_is_watching+0x15/0xb0 [ 157.148152][ T8978] ? htable_create+0xfc/0x7a0 [ 157.148172][ T8978] ? htable_create+0xfc/0x7a0 [ 157.148207][ T8978] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 157.148232][ T8978] ? htable_create+0xfc/0x7a0 [ 157.148250][ T8978] ? hashlimit_pernet+0x23/0x240 [ 157.148277][ T8978] htable_create+0xfc/0x7a0 [ 157.148304][ T8978] hashlimit_mt_check_common+0x719/0xa10 [ 157.148334][ T8978] xt_check_match+0x3ce/0xab0 [ 157.148353][ T8978] ? __pfx___mutex_lock+0x10/0x10 [ 157.148373][ T8978] ? __pfx_xt_check_match+0x10/0x10 [ 157.148395][ T8978] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 157.148429][ T8978] ? xt_find_match+0x1f7/0x250 [ 157.148455][ T8978] translate_table+0x1553/0x2040 [ 157.148496][ T8978] ? __pfx_translate_table+0x10/0x10 [ 157.148517][ T8978] ? __might_fault+0xb0/0x130 [ 157.148560][ T8978] ? _copy_from_user+0x94/0xb0 [ 157.148590][ T8978] do_ip6t_set_ctl+0x970/0xce0 [ 157.148616][ T8978] ? rcu_is_watching+0x15/0xb0 [ 157.148635][ T8978] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 157.148674][ T8978] ? __pfx___mutex_lock+0x10/0x10 [ 157.148691][ T8978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.148718][ T8978] ? __lock_acquire+0xab9/0xd20 [ 157.148742][ T8978] nf_setsockopt+0x26c/0x290 [ 157.148768][ T8978] rawv6_setsockopt+0x23b/0x5b0 [ 157.148793][ T8978] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 157.148813][ T8978] ? aa_sock_opt_perm+0x74/0x110 [ 157.148832][ T8978] ? sock_common_setsockopt+0x36/0xc0 [ 157.148858][ T8978] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 157.148886][ T8978] do_sock_setsockopt+0x179/0x1b0 [ 157.148910][ T8978] __x64_sys_setsockopt+0x13f/0x1b0 [ 157.148935][ T8978] do_syscall_64+0xfa/0x3b0 [ 157.148950][ T8978] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.148976][ T8978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.148992][ T8978] ? clear_bhb_loop+0x60/0xb0 [ 157.149014][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.149030][ T8978] RIP: 0033:0x7fee1f38e9a9 [ 157.149046][ T8978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.149060][ T8978] RSP: 002b:00007fee2022b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.149086][ T8978] RAX: ffffffffffffffda RBX: 00007fee1f5b6080 RCX: 00007fee1f38e9a9 [ 157.149098][ T8978] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 157.149108][ T8978] RBP: 00007fee1f410d69 R08: 00000000000005c0 R09: 0000000000000000 [ 157.149118][ T8978] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 157.149128][ T8978] R13: 0000000000000000 R14: 00007fee1f5b6080 R15: 00007ffe134709c8 [ 157.149156][ T8978] [ 157.149188][ T8978] Mem-Info: [ 157.519579][ T8978] active_anon:4523 inactive_anon:0 isolated_anon:0 [ 157.519579][ T8978] active_file:1448 inactive_file:39881 isolated_file:0 [ 157.519579][ T8978] unevictable:768 dirty:176 writeback:0 [ 157.519579][ T8978] slab_reclaimable:11313 slab_unreclaimable:114111 [ 157.519579][ T8978] mapped:29122 shmem:1365 pagetables:1194 [ 157.519579][ T8978] sec_pagetables:0 bounce:0 [ 157.519579][ T8978] kernel_misc_reclaimable:0 [ 157.519579][ T8978] free:1308423 free_pcp:16412 free_cma:0 [ 157.565307][ T8978] Node 0 active_anon:18192kB inactive_anon:0kB active_file:5792kB inactive_file:159324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116488kB dirty:700kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13572kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.599858][ T8978] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.692878][ T8978] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.783086][ T8978] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 157.831297][ T8978] Node 0 DMA32 free:1330104kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18100kB inactive_anon:0kB active_file:5792kB inactive_file:157748kB unevictable:1536kB writepending:776kB present:3129332kB managed:2558348kB mlocked:0kB bounce:0kB free_pcp:45512kB local_pcp:24456kB free_cma:0kB [ 157.899046][ T8978] lowmem_reserve[]: 0 0 1 1 1 [ 157.945102][ T8978] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 158.010992][ T8978] lowmem_reserve[]: 0 0 0 0 0 [ 158.051995][ T8978] Node 1 Normal free:3896240kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21984kB local_pcp:8544kB free_cma:0kB [ 158.087392][ T9004] tipc: Enabled bearer , priority 10 [ 158.124156][ T8978] lowmem_reserve[]: 0 0 0 0 0 [ 158.137875][ T8978] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 158.155425][ T6414] IPVS: starting estimator thread 0... [ 158.162049][ T8978] Node 0 DMA32: 623*4kB (UM) 450*8kB (M) 138*16kB (UM) 492*32kB (UME) 212*64kB (UM) 46*128kB (UME) 17*256kB (UM) 15*512kB (UME) 7*1024kB (UME) 6*2048kB (UM) 305*4096kB (UM) = 1324268kB [ 158.191849][ T9004] tipc: Resetting bearer [ 158.198074][ T8978] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 158.216308][ T8978] Node 1 Normal: 214*4kB (UME) 51*8kB (UME) 58*16kB (UME) 83*32kB (UME) 37*64kB (UME) 9*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3896240kB [ 158.251418][ T8978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.270837][ T9012] IPVS: using max 29 ests per chain, 69600 per kthread [ 158.279209][ T9003] tipc: Resetting bearer [ 158.288943][ T8978] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.291848][ T9014] netlink: 'syz.2.749': attribute type 21 has an invalid length. [ 158.312959][ T8978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.323069][ T8978] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.335432][ T8978] 42691 total pagecache pages [ 158.342309][ T8978] 0 pages in swap cache [ 158.346978][ T8978] Free swap = 124996kB [ 158.351154][ T8978] Total swap = 124996kB [ 158.355312][ T8978] 2097051 pages RAM [ 158.383735][ T8978] 0 pages HighMem/MovableOnly [ 158.393874][ T8978] 425422 pages reserved [ 158.404023][ T8978] 0 pages cma reserved [ 158.740234][ T6027] IPVS: starting estimator thread 0... [ 158.740661][ T9033] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 158.753046][ T9036] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 158.856623][ T9037] IPVS: using max 30 ests per chain, 72000 per kthread [ 159.885305][ T9003] tipc: Disabling bearer [ 159.896864][ T9014] __nla_validate_parse: 10 callbacks suppressed [ 159.896879][ T9014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.749'. [ 159.922994][ T9026] vlan2: entered promiscuous mode [ 159.933620][ T9026] bridge0: entered promiscuous mode [ 160.183512][ T9073] tipc: Cannot configure node identity twice [ 160.332330][ T30] audit: type=1800 audit(1753028682.826:7): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.762" name="blkio.bfq.time_recursive" dev="tmpfs" ino=857 res=0 errno=0 [ 160.592228][ T9095] ip6tnl3: entered promiscuous mode [ 160.752803][ T9105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.788705][ T9105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.859606][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 160.893048][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 160.988360][ T6520] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.006508][ T6520] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.046546][ T6520] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.089720][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 161.091421][ T6520] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.150205][ T9113] wg1 speed is unknown, defaulting to 1000 [ 161.195788][ T9113] lo speed is unknown, defaulting to 1000 [ 161.450703][ T9147] netlink: 'syz.4.779': attribute type 4 has an invalid length. [ 161.721067][ T9171] syzkaller1: entered promiscuous mode [ 161.735965][ T9171] syzkaller1: entered allmulticast mode [ 161.755695][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'. [ 162.550023][ T9204] wg1 speed is unknown, defaulting to 1000 [ 162.569549][ T9204] lo speed is unknown, defaulting to 1000 [ 162.843264][ T9222] openvswitch: netlink: Duplicate or invalid key (type 0). [ 162.860919][ T9222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.210191][ T9235] netlink: 32 bytes leftover after parsing attributes in process `syz.1.797'. [ 163.266510][ T9235] netlink: 32 bytes leftover after parsing attributes in process `syz.1.797'. [ 163.509338][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 163.538013][ T9242] Cannot find add_set index 2 as target [ 163.583223][ T9248] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.767913][ T9253] vlan2: entered promiscuous mode [ 163.796603][ T9253] bridge0: entered promiscuous mode [ 163.801975][ T9253] vlan2: entered allmulticast mode [ 163.828755][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 163.829737][ T9253] bridge0: entered allmulticast mode [ 163.920187][ T9264] netlink: 'syz.1.807': attribute type 10 has an invalid length. [ 163.939356][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.807'. [ 164.190577][ T9274] bridge_slave_1: left allmulticast mode [ 164.196813][ T9274] bridge_slave_1: left promiscuous mode [ 164.202567][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.225418][ T9274] bridge_slave_0: left allmulticast mode [ 164.232089][ T9274] bridge_slave_0: left promiscuous mode [ 164.238432][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.399529][ T9285] x_tables: duplicate underflow at hook 1 [ 164.642985][ T9295] netlink: 'syz.1.814': attribute type 5 has an invalid length. [ 164.664106][ T9295] netlink: 'syz.1.814': attribute type 5 has an invalid length. [ 164.720997][ T9298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.775237][ T9295] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 165.001640][ T9319] __nla_validate_parse: 1 callbacks suppressed [ 165.001659][ T9319] netlink: 148 bytes leftover after parsing attributes in process `syz.0.822'. [ 165.040959][ T9325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.823'. [ 165.246609][ T9340] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.295518][ T9346] netlink: 'syz.3.829': attribute type 83 has an invalid length. [ 165.454558][ T9354] netlink: 140 bytes leftover after parsing attributes in process `syz.3.831'. [ 165.507447][ T9360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.833'. [ 165.513190][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.834'. [ 165.649052][ T13] wlan0: Trigger new scan to find an IBSS to join [ 165.653061][ T9373] netlink: 52 bytes leftover after parsing attributes in process `syz.4.836'. [ 165.766473][ T9378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.843499][ T9381] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 165.890061][ T9382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.953725][ T9383] bond3 (unregistering): Released all slaves [ 166.022578][ T9382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.108781][ T9382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.231577][ T9382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.236700][ T9387] netlink: 36 bytes leftover after parsing attributes in process `syz.0.841'. [ 166.281591][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.841'. [ 166.406227][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.455369][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.543845][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.595343][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.273653][ T9429] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 167.295402][ T9429] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 167.381147][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 167.401269][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 167.553507][ T9441] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 167.846122][ T9460] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 168.686623][ T13] wlan0: Trigger new scan to find an IBSS to join [ 168.846719][ T9501] delete_channel: no stack [ 169.084385][ T9513] mac80211_hwsim hwsim4 ªªªªª": renamed from wlan0 [ 169.900946][ T9538] wg1 speed is unknown, defaulting to 1000 [ 169.922044][ T9538] lo speed is unknown, defaulting to 1000 [ 169.964482][ T9548] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 170.217504][ T9560] __nla_validate_parse: 3 callbacks suppressed [ 170.217522][ T9560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.895'. [ 170.494764][ T9579] x_tables: duplicate underflow at hook 1 [ 170.598825][ T9585] netlink: 'syz.2.902': attribute type 8 has an invalid length. [ 170.736392][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'. [ 170.956361][ T9602] Unknown status report in ack skb [ 171.446619][ T9620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.909'. [ 171.466228][ T9620] batadv_slave_0: entered promiscuous mode [ 171.475754][ T9620] batadv_slave_0: entered allmulticast mode [ 171.651142][ T6519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.951629][ T9638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'. [ 172.481977][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.919'. [ 173.130171][ T9677] wg1 speed is unknown, defaulting to 1000 [ 173.153032][ T9677] lo speed is unknown, defaulting to 1000 [ 173.232082][ T9673] syz.2.924 (9673) used greatest stack depth: 17864 bytes left [ 173.392568][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.929'. [ 173.662886][ T9704] wg1 speed is unknown, defaulting to 1000 [ 173.710812][ T9713] netlink: 'syz.4.931': attribute type 4 has an invalid length. [ 173.712567][ T9704] lo speed is unknown, defaulting to 1000 [ 174.006954][ T9722] netlink: 248 bytes leftover after parsing attributes in process `syz.0.935'. [ 174.165657][ T9735] netlink: 'syz.1.939': attribute type 3 has an invalid length. [ 175.285278][ T9781] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.949'. [ 175.305803][ T9778] tipc: Enabling of bearer rejected, failed to enable media [ 175.491347][ T9790] wg1 speed is unknown, defaulting to 1000 [ 175.524129][ T9790] lo speed is unknown, defaulting to 1000 [ 175.617010][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 175.769359][ T9813] netlink: 'syz.4.958': attribute type 9 has an invalid length. [ 175.783354][ T9813] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.958'. [ 176.050090][ T9830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.965'. [ 176.196759][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 176.264681][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 176.508227][ T9833] wg1 speed is unknown, defaulting to 1000 [ 176.599370][ T9833] lo speed is unknown, defaulting to 1000 [ 176.621810][ T9854] netlink: 80 bytes leftover after parsing attributes in process `syz.0.973'. [ 176.655111][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 176.667993][ T9856] netlink: 'syz.4.974': attribute type 11 has an invalid length. [ 176.728530][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 176.980751][ T9870] C: renamed from team_slave_0 (while UP) [ 176.997798][ T9870] netlink: 'syz.3.979': attribute type 3 has an invalid length. [ 177.005747][ T9870] netlink: 152 bytes leftover after parsing attributes in process `syz.3.979'. [ 177.019511][ T9866] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 177.036606][ T9870] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 177.668328][ T9890] wg1 speed is unknown, defaulting to 1000 [ 177.748509][ T9890] lo speed is unknown, defaulting to 1000 [ 177.942759][ T9905] tipc: Enabled bearer , priority 0 [ 177.957344][ T9905] syzkaller0: entered promiscuous mode [ 177.965077][ T9905] syzkaller0: entered allmulticast mode [ 177.995518][ T9905] tipc: Resetting bearer [ 178.013501][ T9904] tipc: Resetting bearer [ 178.083000][ T9904] tipc: Disabling bearer [ 178.351457][ T9894] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 178.431493][ T9920] wg1 speed is unknown, defaulting to 1000 [ 178.479741][ T9920] lo speed is unknown, defaulting to 1000 [ 178.494813][ T9922] bridge6: entered promiscuous mode [ 178.527124][ T9926] sctp: [Deprecated]: syz.2.994 (pid 9926) Use of int in max_burst socket option deprecated. [ 178.527124][ T9926] Use struct sctp_assoc_value instead [ 178.678346][ T9932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.235164][ T9949] syzkaller1: entered promiscuous mode [ 179.245621][ T9949] syzkaller1: entered allmulticast mode [ 179.269855][ T9951] netlink: 'syz.4.998': attribute type 13 has an invalid length. [ 179.330169][ T9951] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 179.718009][ T9964] netlink: 'syz.3.1001': attribute type 10 has an invalid length. [ 179.739501][ T9964] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 179.767809][ T9965] wg1 speed is unknown, defaulting to 1000 [ 179.839135][ T9965] lo speed is unknown, defaulting to 1000 [ 180.000824][ T9976] FAULT_INJECTION: forcing a failure. [ 180.000824][ T9976] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.063851][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz.3.1005 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 180.063884][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.063894][ T9976] Call Trace: [ 180.063901][ T9976] [ 180.063909][ T9976] dump_stack_lvl+0x189/0x250 [ 180.063935][ T9976] ? __pfx____ratelimit+0x10/0x10 [ 180.063963][ T9976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.063983][ T9976] ? __pfx__printk+0x10/0x10 [ 180.064007][ T9976] ? __might_fault+0xb0/0x130 [ 180.064042][ T9976] should_fail_ex+0x414/0x560 [ 180.064065][ T9976] _copy_from_user+0x2d/0xb0 [ 180.064090][ T9976] core_sys_select+0x4b7/0xa20 [ 180.064127][ T9976] ? __pfx_core_sys_select+0x10/0x10 [ 180.064175][ T9976] ? __pfx_set_user_sigmask+0x10/0x10 [ 180.064207][ T9976] __se_sys_pselect6+0x27a/0x300 [ 180.064237][ T9976] ? __pfx___se_sys_pselect6+0x10/0x10 [ 180.064262][ T9976] ? __pfx_ksys_write+0x10/0x10 [ 180.064283][ T9976] ? rcu_is_watching+0x15/0xb0 [ 180.064309][ T9976] ? __x64_sys_pselect6+0x21/0xf0 [ 180.064336][ T9976] do_syscall_64+0xfa/0x3b0 [ 180.064352][ T9976] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.064377][ T9976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.064394][ T9976] ? clear_bhb_loop+0x60/0xb0 [ 180.064415][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.064432][ T9976] RIP: 0033:0x7fc0ebd8e9a9 [ 180.064447][ T9976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.064460][ T9976] RSP: 002b:00007fc0ecc83038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 180.064478][ T9976] RAX: ffffffffffffffda RBX: 00007fc0ebfb6080 RCX: 00007fc0ebd8e9a9 [ 180.064490][ T9976] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 180.064501][ T9976] RBP: 00007fc0ecc83090 R08: 0000000000000000 R09: 0000000000000000 [ 180.064510][ T9976] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 180.064521][ T9976] R13: 0000000000000000 R14: 00007fc0ebfb6080 R15: 00007fff62717bb8 [ 180.064548][ T9976] [ 180.449601][ T9971] netlink: 'syz.4.1003': attribute type 4 has an invalid length. [ 181.123220][ T9999] __nla_validate_parse: 9 callbacks suppressed [ 181.123239][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 181.458583][T10012] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 181.544746][T10018] FAULT_INJECTION: forcing a failure. [ 181.544746][T10018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.598343][T10018] CPU: 0 UID: 0 PID: 10018 Comm: syz.3.1016 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 181.598368][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.598378][T10018] Call Trace: [ 181.598385][T10018] [ 181.598393][T10018] dump_stack_lvl+0x189/0x250 [ 181.598418][T10018] ? __pfx____ratelimit+0x10/0x10 [ 181.598445][T10018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.598466][T10018] ? __pfx__printk+0x10/0x10 [ 181.598490][T10018] ? __might_fault+0xb0/0x130 [ 181.598525][T10018] should_fail_ex+0x414/0x560 [ 181.598547][T10018] _copy_from_user+0x2d/0xb0 [ 181.598572][T10018] core_sys_select+0x604/0xa20 [ 181.598608][T10018] ? __pfx_core_sys_select+0x10/0x10 [ 181.598657][T10018] ? __pfx_set_user_sigmask+0x10/0x10 [ 181.598689][T10018] __se_sys_pselect6+0x27a/0x300 [ 181.598729][T10018] ? __pfx___se_sys_pselect6+0x10/0x10 [ 181.598753][T10018] ? __pfx_ksys_write+0x10/0x10 [ 181.598774][T10018] ? rcu_is_watching+0x15/0xb0 [ 181.598799][T10018] ? __x64_sys_pselect6+0x21/0xf0 [ 181.598826][T10018] do_syscall_64+0xfa/0x3b0 [ 181.598842][T10018] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.598867][T10018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.598884][T10018] ? clear_bhb_loop+0x60/0xb0 [ 181.598906][T10018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.598922][T10018] RIP: 0033:0x7fc0ebd8e9a9 [ 181.598937][T10018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.598951][T10018] RSP: 002b:00007fc0ecc83038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 181.598969][T10018] RAX: ffffffffffffffda RBX: 00007fc0ebfb6080 RCX: 00007fc0ebd8e9a9 [ 181.598981][T10018] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 181.598992][T10018] RBP: 00007fc0ecc83090 R08: 0000000000000000 R09: 0000000000000000 [ 181.599002][T10018] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 181.599013][T10018] R13: 0000000000000000 R14: 00007fc0ebfb6080 R15: 00007fff62717bb8 [ 181.599040][T10018] [ 181.971671][T10020] wg1 speed is unknown, defaulting to 1000 [ 182.011227][T10020] lo speed is unknown, defaulting to 1000 [ 182.404792][T10041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'. [ 182.476797][T10041] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 182.484726][T10041] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1022'. [ 182.498733][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 182.505425][T10046] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 182.515730][T10046] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1022'. [ 182.763818][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1024'. [ 182.991746][T10064] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 183.033552][T10064] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 183.070702][T10066] syz.2.1027 uses old SIOCAX25GETINFO [ 183.161154][T10070] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1028'. [ 183.173286][T10074] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 183.230867][T10064] bond0: (slave ip6erspan0): Releasing backup interface [ 183.276577][T10064] bond2: (slave ip6gretap1): Removing an active aggregator [ 183.290065][T10064] bond2: (slave ip6gretap1): Releasing backup interface [ 183.297249][T10064] bond2: (slave ip6gretap1): the permanent HWaddr of slave - a2:b7:4c:f9:ec:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 183.324884][T10064] bond2: (slave veth3): Releasing backup interface [ 183.341617][T10070] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1028'. [ 183.362759][T10074] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 183.385602][T10074] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.504315][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 183.569882][T10084] vlan3: entered allmulticast mode [ 183.579722][T10084] bond3: entered allmulticast mode [ 183.829067][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 183.840975][T10106] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 183.882933][T10107] wg1 speed is unknown, defaulting to 1000 [ 183.906218][T10107] lo speed is unknown, defaulting to 1000 [ 183.906379][T10110] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 184.029394][T10077] FAULT_INJECTION: forcing a failure. [ 184.029394][T10077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.067117][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.1.1029 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 184.067151][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.067163][T10077] Call Trace: [ 184.067172][T10077] [ 184.067181][T10077] dump_stack_lvl+0x189/0x250 [ 184.067214][T10077] ? __pfx____ratelimit+0x10/0x10 [ 184.067246][T10077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.067272][T10077] ? __pfx__printk+0x10/0x10 [ 184.067302][T10077] ? __might_fault+0xb0/0x130 [ 184.067343][T10077] should_fail_ex+0x414/0x560 [ 184.067371][T10077] core_sys_select+0x724/0xa20 [ 184.067415][T10077] ? __pfx_core_sys_select+0x10/0x10 [ 184.067473][T10077] ? __pfx_set_user_sigmask+0x10/0x10 [ 184.067519][T10077] __se_sys_pselect6+0x27a/0x300 [ 184.067556][T10077] ? __pfx___se_sys_pselect6+0x10/0x10 [ 184.067586][T10077] ? __pfx_ksys_write+0x10/0x10 [ 184.067611][T10077] ? rcu_is_watching+0x15/0xb0 [ 184.067642][T10077] ? __x64_sys_pselect6+0x21/0xf0 [ 184.067675][T10077] do_syscall_64+0xfa/0x3b0 [ 184.067694][T10077] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.067725][T10077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.067745][T10077] ? clear_bhb_loop+0x60/0xb0 [ 184.067771][T10077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.067791][T10077] RIP: 0033:0x7fe41c18e9a9 [ 184.067810][T10077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.067827][T10077] RSP: 002b:00007fe419fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 184.067848][T10077] RAX: ffffffffffffffda RBX: 00007fe41c3b6080 RCX: 00007fe41c18e9a9 [ 184.067863][T10077] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 184.067876][T10077] RBP: 00007fe419fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 184.067888][T10077] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 184.067901][T10077] R13: 0000000000000000 R14: 00007fe41c3b6080 R15: 00007fffb73f60f8 [ 184.067934][T10077] [ 184.138907][T10115] gtp1: entered promiscuous mode [ 184.282863][T10115] gtp1: entered allmulticast mode [ 184.666318][T10141] netlink: 'syz.1.1049': attribute type 15 has an invalid length. [ 184.841453][T10153] netlink: 'syz.1.1050': attribute type 1 has an invalid length. [ 185.115477][T10172] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 186.653930][ T6521] wlan0: failed to finalize CSA on link 0, disconnecting [ 187.634533][T10237] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 187.651783][T10237] __nla_validate_parse: 12 callbacks suppressed [ 187.651800][T10237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1071'. [ 187.675664][T10239] sctp: [Deprecated]: syz.0.1072 (pid 10239) Use of int in max_burst socket option. [ 187.675664][T10239] Use struct sctp_assoc_value instead [ 187.682245][T10237] dummy0: entered promiscuous mode [ 187.695888][T10237] dummy0: entered allmulticast mode [ 187.704893][T10237] bridge0: port 3(dummy0) entered blocking state [ 187.712380][T10237] bridge0: port 3(dummy0) entered disabled state [ 187.742050][T10242] wg1 speed is unknown, defaulting to 1000 [ 187.754560][T10242] lo speed is unknown, defaulting to 1000 [ 187.854570][T10246] wg1 speed is unknown, defaulting to 1000 [ 187.878985][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 187.897890][T10247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.904098][T10246] lo speed is unknown, defaulting to 1000 [ 188.191364][T10244] pim6reg1: entered promiscuous mode [ 188.206758][T10244] pim6reg1: entered allmulticast mode [ 188.394407][T10256] netlink: 'syz.4.1076': attribute type 10 has an invalid length. [ 188.402665][T10256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1076'. [ 188.691190][T10256] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 188.808958][T10271] wg1 speed is unknown, defaulting to 1000 [ 188.833938][T10271] lo speed is unknown, defaulting to 1000 [ 188.970032][T10274] wg1 speed is unknown, defaulting to 1000 [ 189.024850][T10267] wg1 speed is unknown, defaulting to 1000 [ 189.025215][T10274] lo speed is unknown, defaulting to 1000 [ 189.051285][T10267] lo speed is unknown, defaulting to 1000 [ 189.461890][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 189.479316][T10302] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1086'. [ 189.745748][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1089'. [ 189.833822][T10314] netlink: 'syz.2.1093': attribute type 8 has an invalid length. [ 189.844255][T10314] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1093'. [ 189.956955][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1094'. [ 189.965959][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1094'. [ 189.983993][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1094'. [ 190.450740][T10338] xt_CT: No such helper "snmp" [ 190.652564][T10353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.714473][T10353] veth1_macvtap: left promiscuous mode [ 190.734473][T10353] macsec0: entered promiscuous mode [ 190.768229][T10362] Cannot find set identified by id 1 to match [ 190.918134][T10353] veth1_macvtap: entered promiscuous mode [ 190.924252][T10353] macsec0: left promiscuous mode [ 191.405825][T10385] tipc: Enabled bearer , priority 0 [ 191.447486][T10388] syzkaller0: entered promiscuous mode [ 191.454467][T10388] syzkaller0: entered allmulticast mode [ 191.553516][T10380] tipc: Resetting bearer [ 191.570071][T10380] netlink: 'syz.1.1109': attribute type 10 has an invalid length. [ 191.612425][T10380] team0: Port device netdevsim0 added [ 191.643035][T10379] tipc: Resetting bearer [ 191.724166][T10379] tipc: Disabling bearer [ 192.691850][T10455] __nla_validate_parse: 5 callbacks suppressed [ 192.691868][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1130'. [ 192.810862][T10467] tap0: tun_chr_ioctl cmd 1074025677 [ 192.816555][T10467] tap0: linktype set to 823 [ 192.822899][T10467] netlink: 'syz.4.1136': attribute type 11 has an invalid length. [ 193.011133][T10477] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 193.046710][T10477] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 193.069665][T10477] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 193.099204][T10477] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1140'. [ 193.226256][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 193.231922][T10492] Cannot find add_set index 0 as target [ 193.549351][T10510] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1150'. [ 193.829699][T10531] tipc: New replicast peer: 255.255.255.255 [ 193.863610][T10531] tipc: Enabled bearer , priority 10 [ 193.987480][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 193.996386][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1156'. [ 194.076205][T10544] syzkaller0: entered promiscuous mode [ 194.103530][T10544] syzkaller0: entered allmulticast mode [ 194.243271][T10545] wg1 speed is unknown, defaulting to 1000 [ 194.264936][T10545] lo speed is unknown, defaulting to 1000 [ 194.365254][T10562] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.424272][T10564] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1165'. [ 194.555480][T10569] wg1 speed is unknown, defaulting to 1000 [ 194.588489][T10569] lo speed is unknown, defaulting to 1000 [ 194.683996][T10584] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1169'. [ 194.976779][ T43] tipc: Node number set to 2687738528 [ 195.250907][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 195.328011][T10609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.351487][T10609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.672519][T10626] syzkaller1: entered promiscuous mode [ 195.692187][T10626] syzkaller1: entered allmulticast mode [ 195.808609][T10623] wg1 speed is unknown, defaulting to 1000 [ 195.975103][T10623] lo speed is unknown, defaulting to 1000 [ 196.085708][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 196.128697][T10639] netlink: 'syz.3.1184': attribute type 4 has an invalid length. [ 196.159018][T10645] team0: Port device dummy0 removed [ 196.187895][T10645] ¾x9ÿ: left allmulticast mode [ 196.192833][T10645] ¾x9ÿ: left promiscuous mode [ 196.199261][T10645] bridge0: port 1(1¾x9ÿ) entered disabled state [ 196.258441][T10635] netlink: 'syz.1.1182': attribute type 10 has an invalid length. [ 196.300513][T10645] bridge_slave_1: left allmulticast mode [ 196.306190][T10645] bridge_slave_1: left promiscuous mode [ 196.367031][T10645] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.410876][T10645] bond0: (slave bond_slave_0): Releasing backup interface [ 196.427477][T10645] bond0: (slave bond_slave_1): Releasing backup interface [ 196.484196][T10645] team0: Port device team_slave_0 removed [ 196.499106][T10658] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 196.510955][T10645] team0: Port device team_slave_1 removed [ 196.541811][T10645] team0: Port device netdevsim0 removed [ 196.562761][T10645] team0: Port device bridge4 removed [ 196.575677][T10645] team0: Port device bridge5 removed [ 196.581991][T10635] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 196.595630][T10635] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.780152][T10669] warn_alloc: 1 callbacks suppressed [ 196.780168][T10669] syz.2.1192: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 196.839342][T10669] CPU: 1 UID: 0 PID: 10669 Comm: syz.2.1192 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 196.839365][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.839376][T10669] Call Trace: [ 196.839383][T10669] [ 196.839390][T10669] dump_stack_lvl+0x189/0x250 [ 196.839419][T10669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.839441][T10669] ? __pfx__printk+0x10/0x10 [ 196.839465][T10669] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 196.839488][T10669] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 196.839513][T10669] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 196.839538][T10669] warn_alloc+0x214/0x310 [ 196.839561][T10669] ? __pfx_warn_alloc+0x10/0x10 [ 196.839586][T10669] ? __get_vm_area_node+0x28f/0x300 [ 196.839612][T10669] ? htable_create+0xfc/0x7a0 [ 196.839642][T10669] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 196.839697][T10669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.839728][T10669] ? rcu_is_watching+0x15/0xb0 [ 196.839750][T10669] ? htable_create+0xfc/0x7a0 [ 196.839769][T10669] ? htable_create+0xfc/0x7a0 [ 196.839787][T10669] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 196.839812][T10669] ? htable_create+0xfc/0x7a0 [ 196.839830][T10669] ? hashlimit_pernet+0x23/0x240 [ 196.839856][T10669] htable_create+0xfc/0x7a0 [ 196.839883][T10669] hashlimit_mt_check_common+0x719/0xa10 [ 196.839913][T10669] hashlimit_mt_check_v1+0x221/0x360 [ 196.839936][T10669] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 196.839963][T10669] ? xt_find_match+0x1f7/0x250 [ 196.839988][T10669] xt_check_match+0x3ce/0xab0 [ 196.840006][T10669] ? __pfx___mutex_lock+0x10/0x10 [ 196.840027][T10669] ? __pfx_xt_check_match+0x10/0x10 [ 196.840049][T10669] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 196.840083][T10669] ? xt_find_match+0x1f7/0x250 [ 196.840108][T10669] translate_table+0x150b/0x2000 [ 196.840156][T10669] ? __pfx_translate_table+0x10/0x10 [ 196.840184][T10669] ? __might_fault+0xb0/0x130 [ 196.840227][T10669] ? _copy_from_user+0x94/0xb0 [ 196.840256][T10669] do_ipt_set_ctl+0x967/0xcd0 [ 196.840290][T10669] ? rcu_is_watching+0x15/0xb0 [ 196.840311][T10669] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 196.840356][T10669] ? __pfx___mutex_lock+0x10/0x10 [ 196.840373][T10669] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.840389][T10669] ? aa_sk_perm+0x81e/0x950 [ 196.840421][T10669] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.840454][T10669] nf_setsockopt+0x26c/0x290 [ 196.840476][T10669] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 196.840504][T10669] do_sock_setsockopt+0x179/0x1b0 [ 196.840529][T10669] __x64_sys_setsockopt+0x13f/0x1b0 [ 196.840554][T10669] do_syscall_64+0xfa/0x3b0 [ 196.840570][T10669] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.840596][T10669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.840614][T10669] ? clear_bhb_loop+0x60/0xb0 [ 196.840641][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.840658][T10669] RIP: 0033:0x7f75d678e9a9 [ 196.840673][T10669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.840688][T10669] RSP: 002b:00007f75d7690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 196.840706][T10669] RAX: ffffffffffffffda RBX: 00007f75d69b5fa0 RCX: 00007f75d678e9a9 [ 196.840719][T10669] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 196.840730][T10669] RBP: 00007f75d6810d69 R08: 0000000000000518 R09: 0000000000000000 [ 196.840741][T10669] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 196.840752][T10669] R13: 0000000000000000 R14: 00007f75d69b5fa0 R15: 00007fffdcd85118 [ 196.840779][T10669] [ 196.840787][T10669] Mem-Info: [ 197.200346][T10669] active_anon:4389 inactive_anon:0 isolated_anon:0 [ 197.200346][T10669] active_file:1465 inactive_file:39903 isolated_file:0 [ 197.200346][T10669] unevictable:768 dirty:279 writeback:0 [ 197.200346][T10669] slab_reclaimable:11862 slab_unreclaimable:115146 [ 197.200346][T10669] mapped:29077 shmem:1385 pagetables:1149 [ 197.200346][T10669] sec_pagetables:0 bounce:0 [ 197.200346][T10669] kernel_misc_reclaimable:0 [ 197.200346][T10669] free:1305942 free_pcp:20280 free_cma:0 [ 197.245979][T10669] Node 0 active_anon:17656kB inactive_anon:0kB active_file:5860kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116308kB dirty:1112kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13672kB pagetables:4572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.285937][T10669] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.325431][T10669] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.460957][T10669] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 197.469224][T10669] Node 0 DMA32 free:1310808kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17608kB inactive_anon:0kB active_file:5860kB inactive_file:157836kB unevictable:1536kB writepending:1112kB present:3129332kB managed:2558348kB mlocked:0kB bounce:0kB free_pcp:61264kB local_pcp:38448kB free_cma:0kB [ 197.520739][T10669] lowmem_reserve[]: 0 0 1 1 1 [ 197.525548][T10669] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 197.624298][T10699] xt_l2tp: v2 sid > 0xffff: 262144 [ 197.650672][T10669] lowmem_reserve[]: 0 0 0 0 0 [ 197.655416][T10669] Node 1 Normal free:3897276kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20992kB local_pcp:12960kB free_cma:0kB [ 197.720563][T10669] lowmem_reserve[]: 0 0 0 0 0 [ 197.725334][T10669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.762846][T10669] Node 0 DMA32: 1531*4kB (UME) 1215*8kB (UME) 341*16kB (UME) 285*32kB (UME) 211*64kB (UME) 81*128kB (UME) 36*256kB (UM) 23*512kB (UME) 14*1024kB (UME) 9*2048kB (UME) 295*4096kB (UM) = 1316372kB [ 197.822627][T10669] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 197.859896][T10669] Node 1 Normal: 215*4kB (UME) 52*8kB (UME) 58*16kB (UME) 105*32kB (UME) 42*64kB (UME) 9*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3897276kB [ 197.909501][T10669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.927811][T10669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.939801][T10669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.949730][T10669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.961662][T10669] 42729 total pagecache pages [ 197.967790][T10669] 0 pages in swap cache [ 197.973237][T10669] Free swap = 124996kB [ 197.995918][T10669] Total swap = 124996kB [ 198.006021][T10669] 2097051 pages RAM [ 198.016133][T10669] 0 pages HighMem/MovableOnly [ 198.026247][T10669] 425422 pages reserved [ 198.035757][T10669] 0 pages cma reserved [ 198.348046][T10736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.503827][T10747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.547558][T10744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.564501][T10748] __nla_validate_parse: 2 callbacks suppressed [ 198.564515][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'. [ 198.592193][T10760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1215'. [ 198.614600][T10752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.698696][T10752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.737679][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1221'. [ 198.738839][T10747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.794127][T10752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.859196][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 198.881965][T10747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.956490][T10747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.010353][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1224'. [ 199.080406][T10785] C: renamed from lo [ 199.090908][T10785] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 199.110564][T10786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1225'. [ 199.138366][T10783] sctp: [Deprecated]: syz.4.1224 (pid 10783) Use of int in maxseg socket option. [ 199.138366][T10783] Use struct sctp_assoc_value instead [ 199.156107][T10788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1225'. [ 199.199614][ T6521] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.234594][ T6521] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.257461][ T6517] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.280145][ T6517] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.345859][T10793] netlink: 'syz.2.1226': attribute type 3 has an invalid length. [ 199.387466][T10793] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 199.442625][T10799] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1228'. [ 199.453017][T10799] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1228'. [ 199.475852][T10803] bond2: (slave gretap1): making interface the new active one [ 199.490282][T10803] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 199.502314][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 199.666309][T10815] wg1 speed is unknown, defaulting to 1000 [ 199.690816][T10815] lo speed is unknown, defaulting to 1000 [ 200.538775][T10844] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 200.611058][ T5852] block nbd0: Receive control failed (result -32) [ 201.043094][T10864] netlink: 'syz.3.1246': attribute type 11 has an invalid length. [ 201.248521][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 201.254613][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 201.255375][ T5167] Bluetooth: hci2: command 0x0406 tx timeout [ 201.324945][T10872] wg1 speed is unknown, defaulting to 1000 [ 201.380181][T10872] lo speed is unknown, defaulting to 1000 [ 201.702832][T10875] netlink: 'syz.3.1249': attribute type 2 has an invalid length. [ 201.712708][T10875] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 202.331115][T10935] hsr_slave_0: left promiscuous mode [ 202.361420][T10935] 0·: left promiscuous mode [ 202.795447][T10955] tipc: Enabling of bearer rejected, failed to enable media [ 203.444159][T10993] wg1 speed is unknown, defaulting to 1000 [ 203.485291][T10993] lo speed is unknown, defaulting to 1000 [ 203.551974][T11001] openvswitch: netlink: IP tunnel TTL not specified. [ 203.570977][T11001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.573570][T11004] __nla_validate_parse: 18 callbacks suppressed [ 203.573587][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 203.657792][ T6112] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.695725][T11004] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.730649][T11001] vlan3: entered promiscuous mode [ 203.792026][T10998] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1280'. [ 203.877671][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 203.930284][T11016] xfrm1: entered promiscuous mode [ 203.947250][T11016] xfrm1: entered allmulticast mode [ 204.317175][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 204.326337][T11044] netlink: 'syz.3.1289': attribute type 2 has an invalid length. [ 204.338506][T11044] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 204.347749][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 205.069889][T11067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1295'. [ 205.164861][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 205.271351][T11079] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1298'. [ 205.291004][T11079] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1298'. [ 205.348155][T11085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.488938][T11088] netlink: 'syz.2.1301': attribute type 1 has an invalid length. [ 205.501079][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1302'. [ 205.702732][T11102] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 205.759808][T11105] tipc: Enabled bearer , priority 10 [ 206.103543][T11121] netlink: 'syz.4.1311': attribute type 6 has an invalid length. [ 206.113480][T11121] netlink: 'syz.4.1311': attribute type 5 has an invalid length. [ 206.236727][T11127] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 206.575102][T11138] wg1 speed is unknown, defaulting to 1000 [ 206.615737][T11138] lo speed is unknown, defaulting to 1000 [ 206.876517][ T43] tipc: Node number set to 2716729465 [ 206.891700][T11155] pimreg: entered allmulticast mode [ 206.926298][T11155] pimreg: left allmulticast mode [ 207.194167][T11166] syzkaller1: entered promiscuous mode [ 207.200014][T11166] syzkaller1: entered allmulticast mode [ 207.469790][T11172] wg1 speed is unknown, defaulting to 1000 [ 207.478762][T11172] lo speed is unknown, defaulting to 1000 [ 207.870202][T11192] wg1 speed is unknown, defaulting to 1000 [ 207.894383][T11200] netlink: 'syz.3.1335': attribute type 1 has an invalid length. [ 207.907318][T11192] lo speed is unknown, defaulting to 1000 [ 208.412210][ T43] IPVS: starting estimator thread 0... [ 208.435312][T11211] IPVS: rr: UDP 224.0.0.2:20004 - no destination available [ 208.508082][T11221] IPVS: using max 30 ests per chain, 72000 per kthread [ 208.534487][T11214] wg1 speed is unknown, defaulting to 1000 [ 208.642145][T11214] lo speed is unknown, defaulting to 1000 [ 209.055536][T11244] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 209.150895][T11247] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 209.162708][T11247] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 209.200765][T11244] gretap2: entered promiscuous mode [ 209.234531][T11244] bond2: (slave gretap2): making interface the new active one [ 209.258896][T11244] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 209.292755][T11247] macvlan2: entered promiscuous mode [ 209.310380][T11247] macvlan2: entered allmulticast mode [ 209.328897][T11247] bond2: entered promiscuous mode [ 209.350340][T11247] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.368824][T11247] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 209.389477][T11247] bond2: left promiscuous mode [ 210.060848][T11288] __nla_validate_parse: 14 callbacks suppressed [ 210.060865][T11288] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1349'. [ 210.103927][T11288] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1349'. [ 210.158623][T11291] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1350'. [ 210.423696][T11304] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 210.457971][T11302] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1354'. [ 210.684402][T11322] wg1 speed is unknown, defaulting to 1000 [ 210.709899][T11322] lo speed is unknown, defaulting to 1000 [ 210.783935][T11325] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1358'. [ 211.947942][T11356] tipc: Started in network mode [ 211.953690][T11356] tipc: Node identity ee681cec91e7, cluster identity 4711 [ 211.969976][T11356] tipc: Enabled bearer , priority 0 [ 212.031791][T11347] wg1 speed is unknown, defaulting to 1000 [ 212.041452][T11364] syzkaller0: entered promiscuous mode [ 212.056906][T11364] syzkaller0: entered allmulticast mode [ 212.090902][T11356] tipc: Resetting bearer [ 212.170041][T11353] tipc: Resetting bearer [ 212.241289][T11353] tipc: Disabling bearer [ 212.263937][T11347] lo speed is unknown, defaulting to 1000 [ 212.662360][T11385] netlink: 'syz.1.1375': attribute type 7 has an invalid length. [ 212.675650][T11385] netlink: 'syz.1.1375': attribute type 8 has an invalid length. [ 213.555419][T11430] tun0: tun_chr_ioctl cmd 35111 [ 213.562685][T11428] tipc: Enabled bearer , priority 0 [ 213.607741][T11428] syzkaller0: entered promiscuous mode [ 213.619693][T11428] syzkaller0: entered allmulticast mode [ 213.658389][T11428] tipc: Resetting bearer [ 213.676177][T11427] tipc: Resetting bearer [ 213.708866][T11427] tipc: Disabling bearer [ 213.730887][T11439] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1386'. [ 213.741168][T11439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1386'. [ 213.796832][T11438] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1386'. [ 213.833203][T11439] bridge0: port 3(dummy0) entered blocking state [ 213.839745][T11439] bridge0: port 3(dummy0) entered listening state [ 213.846490][T11439] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.853629][T11439] bridge0: port 2(bridge_slave_1) entered listening state [ 213.861050][T11439] bridge0: port 1(1¾x9ÿ) entered blocking state [ 213.867583][T11439] bridge0: port 1(1¾x9ÿ) entered listening state [ 213.879567][T11443] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 213.916817][T11439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.546079][T11487] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 215.006654][T11498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1402'. [ 215.330331][T11521] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1409'. [ 215.421982][T11525] team0: No ports can be present during mode change [ 215.562595][T11531] syzkaller0: entered promiscuous mode [ 215.575999][T11531] syzkaller0: entered allmulticast mode [ 216.344369][T11556] wg1 speed is unknown, defaulting to 1000 [ 216.371149][T11556] lo speed is unknown, defaulting to 1000 [ 216.498729][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 216.549685][T11569] wg1 speed is unknown, defaulting to 1000 [ 216.584076][T11569] lo speed is unknown, defaulting to 1000 [ 216.713256][T11575] wg1 speed is unknown, defaulting to 1000 [ 216.730386][T11575] lo speed is unknown, defaulting to 1000 [ 217.083685][T11579] tipc: Enabled bearer , priority 0 [ 217.114652][T11579] syzkaller0: entered promiscuous mode [ 217.131089][T11579] syzkaller0: entered allmulticast mode [ 217.172916][T11579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1425'. [ 217.373357][T11585] tipc: Resetting bearer [ 217.507113][T11578] tipc: Resetting bearer [ 217.607059][T11578] tipc: Disabling bearer [ 218.100083][T11616] wg1 speed is unknown, defaulting to 1000 [ 218.454276][T11626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1435'. [ 218.488755][T11619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.517235][T11619] bridge0: port 1(bond4) entered blocking state [ 218.523580][T11619] bridge0: port 1(bond4) entered disabled state [ 218.566769][T11619] bond4: entered allmulticast mode [ 218.585991][T11619] bond4: entered promiscuous mode [ 218.980985][T11646] netlink: 'syz.1.1439': attribute type 13 has an invalid length. [ 219.003778][T11646] netlink: 'syz.1.1439': attribute type 17 has an invalid length. [ 219.182197][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1439'. [ 219.528903][T11646] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.573810][T11646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.685459][ T24] lo speed is unknown, defaulting to 1000 [ 219.692172][ T24] syz2: Port: 1 Link ACTIVE [ 219.707717][T11651] wg1 speed is unknown, defaulting to 1000 [ 219.729913][T11651] lo speed is unknown, defaulting to 1000 [ 219.926656][T11669] netlink: 'syz.0.1443': attribute type 2 has an invalid length. [ 219.955038][T11669] : entered promiscuous mode [ 220.430784][T11686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1446'. [ 220.740142][ T5853] Bluetooth: hci4: link tx timeout [ 220.745302][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 220.761532][T11701] nftables ruleset with unbound chain [ 220.884331][T11706] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1453'. [ 220.972269][T11709] No such timeout policy "syz1" [ 221.038097][T11716] Bluetooth: MGMT ver 1.23 [ 221.050472][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 221.158400][T11714] xt_CT: No such helper "pptp" [ 221.222078][T11722] veth1_to_bond: entered allmulticast mode [ 221.242754][T11728] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 221.282020][T11728] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 221.372456][T11731] veth1_to_bond: left allmulticast mode [ 221.486669][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 221.672926][T11756] wg1 speed is unknown, defaulting to 1000 [ 221.693694][T11756] lo speed is unknown, defaulting to 1000 [ 221.761652][T11764] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 221.774626][T11764] xt_connbytes: Forcing CT accounting to be enabled [ 221.784419][T11764] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 221.889229][T11772] syz.4.1469 (11772) used obsolete PPPIOCDETACH ioctl [ 222.252946][T11783] wg1 speed is unknown, defaulting to 1000 [ 222.519950][T11783] lo speed is unknown, defaulting to 1000 [ 222.748636][T11790] wg1 speed is unknown, defaulting to 1000 [ 222.767581][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 222.816334][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 222.958688][T11795] tipc: Enabling of bearer rejected, already enabled [ 223.183290][T11805] syzkaller1: entered promiscuous mode [ 223.201393][T11805] syzkaller1: entered allmulticast mode [ 223.364687][T11790] lo speed is unknown, defaulting to 1000 [ 223.404344][T11808] veth0: entered promiscuous mode [ 223.588825][T11813] x_tables: ip_tables: CT target: only valid in raw table, not [ 223.670425][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 223.682035][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 224.032267][T11806] veth0: left promiscuous mode [ 224.718904][T11840] [ 224.721272][T11840] ====================================================== [ 224.728286][T11840] WARNING: possible circular locking dependency detected [ 224.735305][T11840] 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 Not tainted [ 224.742398][T11840] ------------------------------------------------------ [ 224.749414][T11840] syz.3.1489/11840 is trying to acquire lock: [ 224.755465][T11840] ffffffff8e223988 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 224.765024][T11840] [ 224.765024][T11840] but task is already holding lock: [ 224.772381][T11840] ffff88814331bb58 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0 [ 224.782671][T11840] [ 224.782671][T11840] which lock already depends on the new lock. [ 224.782671][T11840] [ 224.793060][T11840] [ 224.793060][T11840] the existing dependency chain (in reverse order) is: [ 224.802071][T11840] [ 224.802071][T11840] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 224.810662][T11840] lock_acquire+0x120/0x360 [ 224.815673][T11840] blk_alloc_queue+0x538/0x620 [ 224.820948][T11840] __blk_mq_alloc_disk+0x162/0x340 [ 224.826580][T11840] nbd_dev_add+0x476/0xb00 [ 224.831523][T11840] nbd_init+0x21a/0x2d0 [ 224.836227][T11840] do_one_initcall+0x233/0x820 [ 224.841506][T11840] do_initcall_level+0x137/0x1f0 [ 224.846981][T11840] do_initcalls+0x69/0xd0 [ 224.851945][T11840] kernel_init_freeable+0x3d9/0x570 [ 224.857688][T11840] kernel_init+0x1d/0x1d0 [ 224.862542][T11840] ret_from_fork+0x3fc/0x770 [ 224.867653][T11840] ret_from_fork_asm+0x1a/0x30 [ 224.872966][T11840] [ 224.872966][T11840] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 224.880183][T11840] lock_acquire+0x120/0x360 [ 224.885203][T11840] fs_reclaim_acquire+0x72/0x100 [ 224.890668][T11840] prepare_alloc_pages+0x153/0x610 [ 224.896290][T11840] __alloc_frozen_pages_noprof+0x123/0x370 [ 224.902609][T11840] __alloc_pages_noprof+0xa/0x30 [ 224.908063][T11840] pcpu_populate_chunk+0x182/0xb30 [ 224.913708][T11840] pcpu_alloc_noprof+0xcbf/0x16b0 [ 224.919334][T11840] xt_percpu_counter_alloc+0x161/0x220 [ 224.925310][T11840] translate_table+0x12e9/0x2000 [ 224.930774][T11840] do_ipt_set_ctl+0x967/0xcd0 [ 224.935971][T11840] nf_setsockopt+0x26c/0x290 [ 224.941074][T11840] do_sock_setsockopt+0x179/0x1b0 [ 224.946611][T11840] __x64_sys_setsockopt+0x13f/0x1b0 [ 224.952343][T11840] do_syscall_64+0xfa/0x3b0 [ 224.957359][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.963775][T11840] [ 224.963775][T11840] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 224.971524][T11840] validate_chain+0xb9b/0x2140 [ 224.976816][T11840] __lock_acquire+0xab9/0xd20 [ 224.982018][T11840] lock_acquire+0x120/0x360 [ 224.987035][T11840] __mutex_lock+0x182/0xe80 [ 224.992050][T11840] pcpu_alloc_noprof+0x286/0x16b0 [ 224.997619][T11840] sbitmap_init_node+0x1e1/0x630 [ 225.003080][T11840] sbitmap_queue_init_node+0x41/0x660 [ 225.008974][T11840] blk_mq_init_tags+0x110/0x280 [ 225.014352][T11840] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 225.020333][T11840] blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 225.026669][T11840] nbd_start_device+0x16c/0xac0 [ 225.032072][T11840] nbd_genl_connect+0x135b/0x18f0 [ 225.037631][T11840] genl_family_rcv_msg_doit+0x215/0x300 [ 225.043700][T11840] genl_rcv_msg+0x60e/0x790 [ 225.048715][T11840] netlink_rcv_skb+0x208/0x470 [ 225.053998][T11840] genl_rcv+0x28/0x40 [ 225.058506][T11840] netlink_unicast+0x82c/0x9e0 [ 225.063786][T11840] netlink_sendmsg+0x805/0xb30 [ 225.069058][T11840] __sock_sendmsg+0x219/0x270 [ 225.074257][T11840] ____sys_sendmsg+0x505/0x830 [ 225.079544][T11840] ___sys_sendmsg+0x21f/0x2a0 [ 225.084742][T11840] __x64_sys_sendmsg+0x19b/0x260 [ 225.090216][T11840] do_syscall_64+0xfa/0x3b0 [ 225.095242][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.101654][T11840] [ 225.101654][T11840] other info that might help us debug this: [ 225.101654][T11840] [ 225.111871][T11840] Chain exists of: [ 225.111871][T11840] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 225.111871][T11840] [ 225.125525][T11840] Possible unsafe locking scenario: [ 225.125525][T11840] [ 225.132962][T11840] CPU0 CPU1 [ 225.138312][T11840] ---- ---- [ 225.143667][T11840] lock(&q->q_usage_counter(io)#50); [ 225.149040][T11840] lock(fs_reclaim); [ 225.155535][T11840] lock(&q->q_usage_counter(io)#50); [ 225.163426][T11840] lock(pcpu_alloc_mutex); [ 225.167929][T11840] [ 225.167929][T11840] *** DEADLOCK *** [ 225.167929][T11840] [ 225.176065][T11840] 7 locks held by syz.3.1489/11840: [ 225.181248][T11840] #0: ffffffff8f583d70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 225.189423][T11840] #1: ffffffff8f583b88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 225.198381][T11840] #2: ffff888025312230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 225.208378][T11840] #3: ffff888025312188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 225.219766][T11840] #4: ffff8880253120d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0 [ 225.230741][T11840] #5: ffff88814331bb58 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0 [ 225.241439][T11840] #6: ffff88814331bb90 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xac0 [ 225.252310][T11840] [ 225.252310][T11840] stack backtrace: [ 225.258187][T11840] CPU: 1 UID: 0 PID: 11840 Comm: syz.3.1489 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 225.258206][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.258214][T11840] Call Trace: [ 225.258221][T11840] [ 225.258229][T11840] dump_stack_lvl+0x189/0x250 [ 225.258248][T11840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.258265][T11840] ? __pfx__printk+0x10/0x10 [ 225.258285][T11840] ? print_lock_name+0xde/0x100 [ 225.258305][T11840] print_circular_bug+0x2ee/0x310 [ 225.258325][T11840] check_noncircular+0x134/0x160 [ 225.258345][T11840] validate_chain+0xb9b/0x2140 [ 225.258371][T11840] __lock_acquire+0xab9/0xd20 [ 225.258387][T11840] ? pcpu_alloc_noprof+0x286/0x16b0 [ 225.258407][T11840] lock_acquire+0x120/0x360 [ 225.258420][T11840] ? pcpu_alloc_noprof+0x286/0x16b0 [ 225.258445][T11840] __mutex_lock+0x182/0xe80 [ 225.258459][T11840] ? pcpu_alloc_noprof+0x286/0x16b0 [ 225.258482][T11840] ? kasan_save_track+0x4f/0x80 [ 225.258499][T11840] ? kasan_save_track+0x3e/0x80 [ 225.258516][T11840] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 225.258536][T11840] ? pcpu_alloc_noprof+0x286/0x16b0 [ 225.258555][T11840] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 225.258571][T11840] ? blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 225.258591][T11840] ? __pfx___mutex_lock+0x10/0x10 [ 225.258602][T11840] ? genl_rcv+0x28/0x40 [ 225.258618][T11840] ? __sock_sendmsg+0x219/0x270 [ 225.258636][T11840] ? ____sys_sendmsg+0x505/0x830 [ 225.258657][T11840] pcpu_alloc_noprof+0x286/0x16b0 [ 225.258683][T11840] sbitmap_init_node+0x1e1/0x630 [ 225.258702][T11840] ? __kasan_kmalloc+0x93/0xb0 [ 225.258722][T11840] sbitmap_queue_init_node+0x41/0x660 [ 225.258741][T11840] ? __raw_spin_lock_init+0x45/0x100 [ 225.258761][T11840] blk_mq_init_tags+0x110/0x280 [ 225.258784][T11840] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 225.258804][T11840] ? blk_mq_update_nr_hw_queues+0x678/0x14c0 [ 225.258823][T11840] ? kfree+0x18e/0x440 [ 225.258841][T11840] blk_mq_update_nr_hw_queues+0x76a/0x14c0 [ 225.258866][T11840] nbd_start_device+0x16c/0xac0 [ 225.258886][T11840] ? __nla_parse+0x40/0x60 [ 225.258901][T11840] ? device_create_file+0xf4/0x1c0 [ 225.258927][T11840] nbd_genl_connect+0x135b/0x18f0 [ 225.258948][T11840] ? __pfx_nbd_genl_connect+0x10/0x10 [ 225.258970][T11840] ? __nla_parse+0x40/0x60 [ 225.258987][T11840] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 225.259009][T11840] genl_family_rcv_msg_doit+0x215/0x300 [ 225.259030][T11840] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 225.259053][T11840] ? stack_trace_save+0x9c/0xe0 [ 225.259075][T11840] genl_rcv_msg+0x60e/0x790 [ 225.259093][T11840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.259110][T11840] ? __pfx_nbd_genl_connect+0x10/0x10 [ 225.259132][T11840] netlink_rcv_skb+0x208/0x470 [ 225.259154][T11840] ? __lock_acquire+0xab9/0xd20 [ 225.259168][T11840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.259186][T11840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.259215][T11840] ? down_read+0x1ad/0x2e0 [ 225.259229][T11840] genl_rcv+0x28/0x40 [ 225.259244][T11840] netlink_unicast+0x82c/0x9e0 [ 225.259268][T11840] ? __pfx_netlink_unicast+0x10/0x10 [ 225.259288][T11840] ? netlink_sendmsg+0x642/0xb30 [ 225.259300][T11840] ? skb_put+0x11b/0x210 [ 225.259315][T11840] netlink_sendmsg+0x805/0xb30 [ 225.259331][T11840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.259345][T11840] ? aa_sock_msg_perm+0x94/0x160 [ 225.259361][T11840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.259376][T11840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.259389][T11840] __sock_sendmsg+0x219/0x270 [ 225.259409][T11840] ____sys_sendmsg+0x505/0x830 [ 225.259426][T11840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.259445][T11840] ? import_iovec+0x74/0xa0 [ 225.259466][T11840] ___sys_sendmsg+0x21f/0x2a0 [ 225.259482][T11840] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.259510][T11840] ? __fget_files+0x2a/0x420 [ 225.259522][T11840] ? __fget_files+0x3a0/0x420 [ 225.259537][T11840] __x64_sys_sendmsg+0x19b/0x260 [ 225.259554][T11840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.259573][T11840] ? rcu_is_watching+0x15/0xb0 [ 225.259591][T11840] ? do_syscall_64+0xbe/0x3b0 [ 225.259606][T11840] do_syscall_64+0xfa/0x3b0 [ 225.259618][T11840] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.259639][T11840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.259654][T11840] ? clear_bhb_loop+0x60/0xb0 [ 225.259669][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.259683][T11840] RIP: 0033:0x7fc0ebd8e9a9 [ 225.259697][T11840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.259710][T11840] RSP: 002b:00007fc0ecca4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.259725][T11840] RAX: ffffffffffffffda RBX: 00007fc0ebfb5fa0 RCX: 00007fc0ebd8e9a9 [ 225.259735][T11840] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 225.259745][T11840] RBP: 00007fc0ebe10d69 R08: 0000000000000000 R09: 0000000000000000 [ 225.259754][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.259762][T11840] R13: 0000000000000000 R14: 00007fc0ebfb5fa0 R15: 00007fff62717bb8 [ 225.259778][T11840] [ 225.800778][ T51] block nbd1: Receive control failed (result -32) [ 225.800797][ T5853] block nbd1: Receive control failed (result -32) [ 225.808915][ T51] block nbd1: Receive control failed (result -32) [ 225.814070][ T5855] block nbd1: Receive control failed (result -32) [ 225.828081][ T5855] block nbd1: Receive control failed (result -32) [ 225.846890][T11840] nbd1: detected capacity change from 0 to 127