last executing test programs: 57.945440937s ago: executing program 2 (id=1461): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000008000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x106, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffe5c, 0x20000048, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r7, 0x7) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd700000f8ffff1200000008000300", @ANYRES32=r9, @ANYBLOB="06001200004000000a000600ffffffffffff0000040013000400ac"], 0x48}}, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f", 0x26}], 0x1) r10 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r10, r3, 0x0, 0xe47) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 47.042790418s ago: executing program 2 (id=1461): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000008000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x106, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffe5c, 0x20000048, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r7, 0x7) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd700000f8ffff1200000008000300", @ANYRES32=r9, @ANYBLOB="06001200004000000a000600ffffffffffff0000040013000400ac"], 0x48}}, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f", 0x26}], 0x1) r10 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r10, r3, 0x0, 0xe47) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 36.949106029s ago: executing program 2 (id=1461): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000008000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x106, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffe5c, 0x20000048, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r7, 0x7) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd700000f8ffff1200000008000300", @ANYRES32=r9, @ANYBLOB="06001200004000000a000600ffffffffffff0000040013000400ac"], 0x48}}, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f", 0x26}], 0x1) r10 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r10, r3, 0x0, 0xe47) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 23.425711345s ago: executing program 2 (id=1461): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000008000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x106, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffe5c, 0x20000048, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r7, 0x7) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd700000f8ffff1200000008000300", @ANYRES32=r9, @ANYBLOB="06001200004000000a000600ffffffffffff0000040013000400ac"], 0x48}}, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f", 0x26}], 0x1) r10 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r10, r3, 0x0, 0xe47) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 22.00907319s ago: executing program 2 (id=1461): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000008000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x106, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffe5c, 0x20000048, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r7, 0x7) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd700000f8ffff1200000008000300", @ANYRES32=r9, @ANYBLOB="06001200004000000a000600ffffffffffff0000040013000400ac"], 0x48}}, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f", 0x26}], 0x1) r10 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r10, r3, 0x0, 0xe47) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 9.681312441s ago: executing program 2 (id=1461): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000000001010400000000000000000a000000440001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000008000180006801400040020010000000000000000000000000001"], 0xb4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x106, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffe5c, 0x20000048, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r7, 0x7) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd700000f8ffff1200000008000300", @ANYRES32=r9, @ANYBLOB="06001200004000000a000600ffffffffffff0000040013000400ac"], 0x48}}, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f", 0x26}], 0x1) r10 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r10, r3, 0x0, 0xe47) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 3.888409609s ago: executing program 0 (id=1800): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r8) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="1e03ac024d8c71ef288563"], 0x2b6) 3.41070139s ago: executing program 0 (id=1804): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x7, 0x2}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "460e361d50bda3fece02e28ec1969901"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "71c1097ec6e43f6a1eff97106a091abe"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e243f00c578985927cc9fe8f3a4b977d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "fa16616139fca1bff72116eb8ba0cafc"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ba08154ef7161f633610afa03745c456"}, @NL80211_ATTR_PMK={0x14, 0xfe, "57e4beb1832a1a47deba4078faa888ae"}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = socket$inet6(0xa, 0x1, 0x800) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000240)={0x4b2f, {{0xa, 0x4e21, 0x401, @empty, 0x10}}}, 0x88) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x6}}, 0x8, 0x5, 0x1, 0x2, 0x88, 0x0, 0x5}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400)={r5, 0x99, "c65657d4345cdb67ec7e711b25059ade5408528204c16f194be3fc7a29661db03b0cd7d9c2c2c1d932f10bd846075622b84706fd5b5fc659de524ffc5b75fec0e4cced0f887479afc2c4030c9de156407c7dc8298c859da469380f7259dd33995ca28224c2a9190c609286227bff5312a8467d3dac5b8cac281d9505c6befbb76702ea6a84383e031e84d3cf6200df1ff56f57c811846759fc"}, &(0x7f00000004c0)=0xa1) connect$inet(r1, &(0x7f0000000500)={0x2, 0x4e24, @remote}, 0x10) openat$cgroup_devices(r1, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffa, 0x45}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c5bdef0052e453f21449b03ba4"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x10) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @local}}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x1, 0x80, 0xa23, 0x5, {{0x7, 0x4, 0x3, 0x37, 0x1c, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, r1, 0x5, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xe, '\x00', 0x0, r1, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x18, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x21, '\x00', r8, @fallback=0x8, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x3, 0xd, 0xfffffff5, 0x2}, 0x10, 0xffffffffffffffff, r1, 0x5, &(0x7f0000000ac0)=[r9, r1, r1, r1, r10], &(0x7f0000000b00)=[{0x2, 0x4, 0x6, 0xc}, {0x2, 0x5, 0xe, 0x5}, {0x0, 0x2, 0xf, 0x8}, {0x4, 0x2, 0x6, 0x8}, {0x4, 0x1, 0x5}], 0x10, 0x1ff, @void, @value}, 0x94) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000c40)={'IDLETIMER\x00'}, &(0x7f0000000c80)=0x1e) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r12, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r13, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff8, 0x32}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000f40)=@gcm_128={{0x304}, "bd98ba7580b288b6", "702d6481728afb205c5220d081eef83c", "6a9896d9", "aee921f85f6fbd3f"}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r1, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)=r11}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r14, 0x58, &(0x7f0000001040)}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000001100)) 3.227597115s ago: executing program 3 (id=1805): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) unshare(0x400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 3.002833216s ago: executing program 0 (id=1807): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendto$inet(r3, &(0x7f0000002640)="01", 0x1, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x11) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r5, 0x5000000}, &(0x7f00000001c0)=0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006b000000660000000000000016000000000000009500800000000000992e5b33961de526f9f9ccc0122eefba0ec0bd98ac30e28f0144d0287eaea2adc8e2d091f40fb9fda345dec00897a901ed0a784ad06c5cd1475d9ee2119314eb81a2b701fe178829b6699fa23f54a48dd1f23a1aaa99e03c653f5db95cb3eb5f4d98038902afaaf30d03f4bf9b0982ad98e18c4498bb5927c734a60db7f1adf846d166c1e7b06711aebc2d60ded9148605558bfc96388a88fa918836c5f0fd9f6085fd"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000040)={r4, 0x9, 0x37d, 0x9}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x52}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) 2.843731474s ago: executing program 4 (id=1809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b000000850000001900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x2, 0x25dfdbfb, {0x0, 0x48, 0x0, 0x0, 0x21eae, 0x4000}, [@IFLA_LINKMODE={0x5, 0x11, 0x10}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x10000, 0x4}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000580)={&(0x7f00000007c0)={0xe4, r6, 0x101, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x0, 0x94, {0x2000, 0x0, 0x6, 0x0, {0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x7, 0x9}}, @NL80211_ATTR_IE={0xab, 0x2a, [@rann={0x7e, 0x15, {{0x1}, 0x7, 0x4, @broadcast, 0x81, 0xf50c, 0xdb}}, @preq={0x82, 0x7d, {{0x0, 0x1}, 0x4, 0x0, 0x6, @device_b, 0x9, @void, 0x100, 0x6, 0x9, [{{}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0xffffff00}, {{0x1}, @device_a, 0x660d}, {{}, @broadcast, 0x5}, {{}, @broadcast, 0xc01}, {{0x1}, @broadcast, 0x10001}, {{}, @device_b, 0x6}, {{0x1}, @device_a, 0x10}, {{0x0, 0x0, 0x1}, @broadcast, 0xfffffff7}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x84, 0x6}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_HIDDEN_SSID={0xd, 0x7e, @random="711bc66442ce23d132"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x60, 0x1402, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x6e}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.564829307s ago: executing program 4 (id=1811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$inet(0x2, 0x80000, 0x4) 2.518932407s ago: executing program 1 (id=1812): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0) r2 = accept(r0, &(0x7f0000000000)=@alg, &(0x7f0000000100)=0x80) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000080)="c588", 0x2, 0x814, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 2.27847832s ago: executing program 1 (id=1813): unshare(0x62040200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0x1d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES64, @ANYRESHEX=r1, @ANYRES64=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r4) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000d00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000680)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9fe}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048050) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=ANY=[@ANYBLOB="0001000010001fff000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050026000000000008002c00feffffffa80018803c00018008000100090000000500060009000000140005005798212ffad5745fe120feb59d16b4a2e313cb596a95792eda7b1fc816c623f814000400ccc42c33921a4a03474fe8503269db801800018014000400d9a7e4259f2ccf929c0000000800010000000002140005008f48135a5b43f7e830f6469c96c109f50c0002004e46515545554d0014000500c635f6b20b7bc8f6dd1fd4172d2d74c10500020000000000140012800900010076657460000000000400028000"/248], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x4, 0x6db22e68, 0x40, r1, 0x4, '\x00', r7, r8, 0x2, 0x3, 0x5, 0xc, @void, @value, @void, @value}, 0x50) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="18270000", @ANYRES32=0x1, @ANYBLOB="000000000000010008120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000005d054000fcffffff878b00011000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000000)='GPL\x00', 0xa7a, 0xcf, &(0x7f0000000280)=""/207, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x7, 0xc, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x1, 0x9, 0xa}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='snd_soc_dapm_connected\x00', r10}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32, @ANYBLOB="14000200776731"], 0x34}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 2.256808712s ago: executing program 4 (id=1814): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/241, 0xf1}], 0x1, &(0x7f0000000280)=""/82, 0x52}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="f5c53a862952d1ac4508ae4a37cd127d4c01a90df03b03577ff7417bed282e7c5fd4655c9f05724695d3c7e0b76e113b178db7", 0x33}, {&(0x7f0000000240)="f5", 0x1}], 0x2, 0x0, 0x0, 0x4000000}, 0x840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x7, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x4, 0x18c, {{0x8, 0x4, 0x1, 0x33, 0x20, 0x66, 0x0, 0x2a, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@generic={0x8e, 0x9, "df5a2ca8b2d16f"}]}}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10d, 0xb, &(0x7f0000000000)=r6, 0x4) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r4}, 0x14) 2.216713869s ago: executing program 3 (id=1815): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010000000000060003400000000014000180080001007f00000108000200000000000c001980080001000d"], 0x54}}, 0x8004) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0xd88, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x6dc, 0x24, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x6a8, 0xc, 0x0, 0x1, [@typed={0x6e, 0xdc, 0x0, 0x0, @binary="fa7e8989a3c15d45738336419e1cfac17f8c78049b189c8bba3d33fe486e4c4938639b6c55ef9adcd9424457e9f9ab39d187c6aeeb32c98bfdc2e4f1c31fe9ed319ea8c6ebe943965c3b183a60a72fc4cf1f6235253ba8c83c677bac202f3582a5fba0a648a581f53387"}, @nested={0x44, 0x12a, 0x0, 0x1, [@generic="a4b6fbfcea2fc49ecc0765b453fc3873a9db119b5e919cf0e95471244e7a2ac80e51bf8b2eefde5429ebcf8358be1be1b22e5718ec85b0dc", @nested={0x8, 0x85, 0x0, 0x1, [@nested={0x4, 0x95}]}]}, @typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@private0}, @nested={0x318, 0xaa, 0x0, 0x1, [@nested={0xad, 0x125, 0x0, 0x1, [@typed={0x4, 0xf4}, @nested={0x4, 0x6c}, @nested={0x4, 0x62}, @typed={0xc, 0xf5, 0x0, 0x0, @u64=0x5}, @generic="1165b729c410a417dfe40d563524a7879b3f012fe267c97b91cf3f577a6386c6c281056960b8599240d8e06408a77357e095c4f1a4c8203a562fb4e6cc464313e8c4e297fec211cbd2bf53d19ad16dc92794ba67e0b8dde283976083cc92a6f711b5f52e1c392f31dd3fb905481350d4569115245c2286ab920b6727f95fe4fb04ec12ef070c02e81a9986fc77", @nested={0x4, 0x3a}]}, @nested={0x156, 0x40, 0x0, 0x1, [@typed={0x14, 0x45, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xfa}, @generic="71282115fce0e701377b92855bdebd8d102d83f99073c32a998008597ab625cfb78de2fa7fb40e7b9ee8858206a8ad6b2d4434593638045297c563f47ff7a181e896cbd8fc3c7af507e4c6b8862070a8b5152e5227be40fc69e71428a175273f892672042666331a25ab1cf1f842de", @generic="35c1c3f5fc3b5769edab68d19d5419fa3343e41bfbd6bc2ceb685fdf9ea302159547315d140b23ef3eefc107a600d7ffbfc9b2881c541e2631b7c56f820f77da20e058191f0ede61cb34fd936ab3cc2e5ebcc9b670622bc95d1f9b8cc341538e9b273c376bbf9427a2c0cd842510c91b5f88dc78c459eb5e9174182dcbba5a", @nested={0x4, 0x3c}, @nested={0x4, 0x8e}, @typed={0x38, 0xc8, 0x0, 0x0, @binary="11ec06feeb4477c06fbc6746707f405027cbb975e1d34b3052566eb35f1be8676a830fe5b1a9eae6a212c03231177ce13218223c"}, @nested={0x4, 0x36}, @typed={0x8, 0x148, 0x0, 0x0, @fd=r0}]}, @nested={0x10b, 0x11, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @uid}, @nested={0x4, 0xa7}, @generic="bafdd073f6714556cdc7263a5e114222615813e5775c46a730b966894544585bab988ab87e88f18879d892797298f20072e6083f8cdd292fa471f67ef620e62448f810a1328451a5d85250adf20ef7be912ff91089f419e078aad43d6a601024ddb7f1376b2ae3c1e87792f1be86001e2c6deb357c7330994cc805d61ef36bdd2aafc9a5b070da6fdfc93db6391f73bb0d642e021b21b9c1a54503f4250d445aa5e3b2ff74e9f08e17f8e7af267506da9bd8304cc2287bb856278ff6b630ddd9cf7f13ff88d5daf84051a7ee64e6beec2873268843c05b", @typed={0xc, 0x5c, 0x0, 0x0, @u64=0x3ff}, @typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x4, 0x107}]}]}, @nested={0x2c1, 0x3c, 0x0, 0x1, [@nested={0x84, 0x13b, 0x0, 0x1, [@nested={0x4, 0x6a}, @generic="5f7e07c88a83fb5cd2e407ae9a566e6fd4496a609271102a31422ad7b5da99f2f7a25133606f81d12753bb6e99820b07191aadd01fba172ff5f0df387487c586b42e4b0f6fb6a7ee395b9b0858eb0ade94de80f8a1e8c8e726fdc8ab85cf8c8e5696a687ce653274b12dfd7af079eda4df08e3b024fc8740", @nested={0x4, 0x127}]}, @generic="e8da8590708c9c2ab280804deb4651e89ca69af1552c339343903480ede4c59c29f4a1adc998f7abf2265f6aff042f1783dba3f82cf3cf5b63a8f320b1dd0b8464ffc82f60fc3f6b5ed99c", @typed={0x8, 0x26, 0x0, 0x0, @u32=0x1}, @generic="87b5e300f10cc409daa4fecfe9e5b9239ecec979c82afdb30951169ef56c1412995e22e9c68384f99f84c4766fb53dde9978f339420cb66bb287b8235a698da49692ee2f78c03202c1cab1a021a756e1c627f41ae1a9f8934d2a7b73c0b597175ed625aa46c1b9cb1ee25fc7d6c7ed3e9877b2342d82ca84fdde06c488372dc6f216cb6fbe2a7bf073b39f8eb72801e9831a8a804e28e388e5627038dcc0aef0a020aa2db14238407d0f44e6aa6ec3f410018cc27bcb441671abc9979eb6fdc11be09eb0a27cb8e5c1095d420d36e5f0c754a46566aadacc3d54", @nested={0x80, 0xd0, 0x0, 0x1, [@nested={0x4, 0x73}, @generic="09a16c237c4cafefa566d6db438e255f4dd4355a001c883ef5cc5122ff1119c498b580f635a8df70aac7c7cc72f67129797eba63fcf2b5cca543b28429eb5b18cd3f8faa8bfc3d1859e2ef77aef0dd4b9ea465d849e6b3a3d7d38d6400f1ca6b2a58049176f4c4e6", @nested={0x4, 0xbe}, @typed={0x5, 0x2e, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x106}]}, @nested={0x4b, 0x130, 0x0, 0x1, [@generic="486657fa4857f83441a32499c46ee71604d3ef27a9d210d7d5f91ad133eba1ff10415897d8dde691ffe2a23908bff4ac5b53566115b22d6c9c941b66d622ab502bc139877fe5e8"]}, @nested={0xc, 0x8d, 0x0, 0x1, [@nested={0x4, 0x148}, @nested={0x4, 0x1e}]}, @nested={0x34, 0x6c, 0x0, 0x1, [@nested={0x4, 0x63}, @nested={0x4, 0x95}, @nested={0x4, 0x30}, @typed={0x6, 0xb7, 0x0, 0x0, @str='-\x00'}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0x7f}, @typed={0x8, 0xda, 0x0, 0x0, @uid}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0xfffffc00}, @nested={0x4, 0x112}]}]}]}, @nested={0x1d, 0x1, 0x0, 0x1, [@nested={0x18, 0x1f, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@empty}]}, @generic="ed"]}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0300ae464d3554103aaf497fec090000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf2534000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x801) r6 = accept4(r4, 0x0, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)="1c9d", 0x2}, {0x0}, {&(0x7f0000000280)}], 0x3}, 0x0) recvmmsg(r9, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 2.034704975s ago: executing program 0 (id=1816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @netrom}, [@default, @netrom, @netrom, @rose, @null, @null, @remote, @netrom]}, &(0x7f00000003c0)=0x48, 0x80000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xfffc}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) r3 = socket$inet(0x2, 0x3, 0x6) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket(0xf, 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0x8, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r10 = accept$netrom(r5, &(0x7f0000000140)={{0x3, @null}, [@netrom, @remote, @null, @remote, @rose, @null, @netrom, @netrom]}, &(0x7f0000000400)=0xf) bind$netrom(r10, &(0x7f00000001c0)={{0x3, @default, 0x1}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x3, 0x10]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x8c6}, 0x8) 1.337145126s ago: executing program 1 (id=1817): syz_emit_ethernet(0xfc0, &(0x7f0000001900)=ANY=[@ANYBLOB="757e938fd660aaaaaaaaaabb86dd601200080f8a3afffe8000000000000000000000000000bbff0200000000000000000000000000018800907808000000ff01000000000000000000000000000104ee96fd4a0428d78485059d278ffcf8f231c694a7649146915b3ef652325e71ef0f78640708a7a479a974d15527620128e3090eff30274fe56db9b4620b1d2195bb074f7f372c3c17cfcaa8007684506e16446e71a511027268ad1afa509b3eee3d8b9c2384640cc5ab8a1739113ececf1a2e4dd8442a65e9bb1e3baf0a54c24585430b1c2c12ae4129a24d5666dc342d99cd7974600345a721a756cfda9370b699248ac87076fe50c571752481e395d1991a40930fbbe5dd0cdf54c6e32c857fba75d9cb0272752393253e81c809d6eef8fddae8d38c4bdf2adf673f38be7d26efb065363ef7a789ca242a49ff7ffb133422d792548bd16d728f07a1610c487a566b005deded4c9682f71662cf449dec8dbd0968bf099129a789bc828936d06217d71aad0348bf3b7838481f9eaf3bc378752a9aeac35c5d6cbfaffbcf68a6c4e3303818b3f00679fec5f33866746cb6103a8829bb3a822084c8e9733e8979efc0f05ccfc3b4c3190c477872c85f7f70fcc67bedbb47b5d16428fe6c4c0e6f8ae697a012b11b3ca5acc432f42a25abd8bf862a4f16c51b67469eef5811a2da95284857cc58cfdc089c74860e01ed07c07229f52b24ff70b84600bc0312a557afd3fa19d23a0d1d993839e870340fe001a038f61138d24e1c3058247e260277df7217b0568a81e12fa9beb2965227a4cdb98d13d80b2bb92be77655d8fc100afac587d8edd2512c5b145e78f64059a303d650dcec0fa8f34c4df6ce0048ead5bff44aac10ad2efaee37fc053140be6bc2d390665293a08cbe4b2eea2da0c66a3a72cf0ee5129f64b4f4c2deae01215e2e6d9d7311c1bf679bc09ed389735961bf4d0d848d5193bf082521ef7970377babb55497c06009451f57039aaad13a4f8fe861cd849460c05f45367e26ce4e365393f496d0390001aa5f61263d114cba67df0e06627b53ddea31ee9e65dd6111f0da97b9fcde5b4245b5b76fd6a93fdc444c0e4c799030c51c435e39cd42e07472dd21d35dfda0f6d9b773e9f3c5f6556645ab542324e61477be7daf8b5b5b3011adec8c1059d02802d7008e8d29c3de3df24356834e097b7f9d5d9ad7bb91e1a414051be7a9b82e383a69255c23c6d95d78af1cdf5f84cc87728c7797091ed9cdbdce32809cf80e24ce9e3c3ef0bde45a7238c7a54a3b2a56e27678e9ac9cd99f5c49616270e40cd644fb6340bb4a9cb4996efa61ff0d56e992d700a3cd1146ef7d57754396e3bc6691e1a479af40999283d0029b082045be57a02238590cfdc70413fbb747f0bd2c1ef5324d8f75131a83cb0c4ac1407aff6f539a8cb27e02cba16837c19cfd7361b31a62ddee5651d1e136677cb1a1754e8c2e29373529b0d80ac8fb08c146022a4541ca86dbb26b5b0a7d3385793946a39dea67141971cf14ec6ffa6be9404e5b16add6c12e36f0595905b8e5df36d8c5775e0e8f7b31845067e76f7a83bfc2c27f5960ac7c1340b59f2ed856f5c652666123d9596b03c879966fc154b1ada0fcdf960b9e9981fd4ce56d25bd017d28b7e381358e66948b9ee88511d2d0046711cd384f75f9b7969f26353734b49c402035bdf2a49a5e4d7205765b0909f25aa3df61d7488da2d13a392a67237291d1f3639713e4381a036d23e922953c95de91ed41cdc3fec3476f9713f80e57aba5b2effda3336feda380b7f7ddce0a28dc3b9e43dc0de6133e50d825f589545c059983a394d2156901072678f7c886f6c0cc5127d9fa7284b8993ad84d906881a54761c36899d41205fe4fa04e6d857ae4a504c3277960d4d8ae23f2d176bec62b7f4ab512b3233f26cbf012029740217b8e7ce634b7cf5775d15fb36100ab49dc0520b927a38df1861dd6728bd5f6ec9f09da5b179e50c16a0d24eb93e53bc6255e798f2166f9ca92ab38717d7f8d2a8000b7710e5e5144d17de23e085fdc4c83046f67100b06db5caba4421de0ede2d57b8a5b19156a73bcc6222156ba8ed579cc2f57f8e16767708e096caa031c80b5a0919fd503a21c7575a6eb8f6dd166ecc108652b7a5fd862a4b9f97569f36382e9ae533d5f7d0ba13deeb258dcdc60126f129fe6aa1e2c02bba74e698c6c11c3977b281d4313affc84d7281400e8ccb5186d745f32076f4cbdac3590948026aec43c9311f80ee72c89ca5ceb0fad007a53f99e50d9f7629f79165bb46e743128df9aac93000a74100702578fb339b67008bda51e6ae17f2f80995abc2246ad742246eb3f0255f84c909b0af7050f3c8f3cf3426f300f1fd6567d1f567c2589213b0c5050509cea23ecb0f1565db666eff75ec6008a90d695386551b98c1f9e0e035ed0148d1f4790fbd97d9812a63f49479e63b4841933ec5235e37508682ed259623bf5926265b456fb2e29ac8144389822c62d3b982dbb5dfab7be5f713878b9fa57da2432f67789d9f12e29063384b8a6a0f7d8bdcb7ea7b449bc61ce3604f2d0e9e8744def673be60e71db1d3e04262e8f0c555e161c206efabe5095c65da2593a385ef64edfe3d0a544e74026d99ec2e0c780e5b168e480a82af638893b1997d5ac36ed35b3779f0ce408cb7acbab822e7fa86a0b7b3680f91f15a9fa83c12f96a090ef99186959e6ea25a4ecf5d5e5af8414155af79c31e9787d80f3e294001bbbcf04e8cef9494e95144251086bf11f03738fc3b513ffb288977f31f56cde937ecfe105a7f4ecc65264d6fca32fbc8573a27ea564676e65528ffe454923a2b50205468340113dc9c9b1ce8d8d4be884a2ef5cf510ecc779aeb7d60145f00a30257f8069ab9d9c03179aacf43de7210a63e1008ea11cccf7d11b0cdbae0e13bfb5624b7991a1c80a044a3748023449c8ca4fdbbe7d71a891128d5cd3de96c50392ae72d48cc30bfd678fb78288660884b5983759f299dd460e374ac20f87f10040458c87ef5797d98406564bf94db87d80ca63f0f15ac50898501a8e1146d3a07293576790525f95f908e15f12f0368fc8a7003c57c59fe97b6b4c53b13269f7a793fc42e4c2f91cf9267dfa47db3350f5b332a361e554fdbd0a466b30a318841f0de89fcbb86b8e65c14def3ab212fcfe5f4f1186404fa9e899124a1eea1bfc88c89bcb350072666a62cb8e823d6612e611241cdabd309445ef3af0c99a9c39d43fd97fe1c0dd1dd6641ec6f9a4b60abbb55615a210ef55903639bbf89bb735978228918a7a99640a785b55224d71c844cf9538ccc7843e126c7909a1656f3f5a2db48f14789fd13d93d2946c005df33f2bdc2d31867ac95dd8c82f3b82bee3a9e78eaee3cc8a0b6f146bcf7bb527e8d8fd110b2ea3a0533a533d5b3dc937a0f1cdbacb2cd86837e4b58e1eb440d5e0f5d0aa7487ff4d1de68fcf3f026c2b6eeebff6e020286ae3d0bb9225f1731330788d456426656b231232b0b813deb1df87e2e9e51b01f1390688841116b3d1982c8a1963d64bb18ba40fbcd0b16a48b28deef9687adf273ace8d85071f049aa0119d23936766eaeae3ea55ad23825921e1eafaf215230cc6a88840435cbab9a0ac64028f93e07266b455961332d73834da9cbbfd098fd641b96633ddebb5202bd716278df8f8dfecf309bda579c50374cd8a53d6490a914eefe0f907558aea112eb722c47cdbf14e891495188576318273bf9487cbce8a91640acd06175c8d21c5a9762fcbafc45c277cf01add8e74dd4b2377a2acf7ada59e729b408f879202f0cd8b373cd4697ac540886db47a43688f68a4363792fdb4ad9d1157a50af1e0062518e879fd6f791b1b7ea1ace2745376041534bbbd3eef2a697da906cc5c31aaead2da3fe009898a20179658ea53432b84f2aab635e0ab93856ecec0e7f911598d2a502d1ac9a2a61ae0373988fb41330ddf08556083e41161e59d8956d24ed5148e5bd86a21cad0eff370e6743fd9ad9503cd47fe6ed8280244d0c644d436942aad423e5938bfdaccb051c806b1a9f473e15c8e6b5e4a4ebf9740e2e0d7e986f2a62d947a9ed63d2ad1c3a1f2c3bf50073604855af9c8b2a8da8ebc3c81ec38c9d43797ba231ac89dc5c5a1cf9225a3ed3a01aa6413ced483d212674f57b9ace15c446a3135bf11187c3da5ffc6ed2fa55da0b0dca6a70e98d5f56e126e83936b96d6bdb15c5a8d75cd4cda63ee9ac894d4fbb50409df8d87eaf957d3cb4c51871044d75c11794268c4bb723d6d4dff64b6feb3a818ee3f183fccd62eca4914d5f879aa0353c63a62c5703aeb55e8d14f6e4b7997fe9a5e3840d1ab4cb973cf7972066dc0849616c11af97b3a365931bef9a95cc9a4275355010a23b80d6c64c7f9da19f98912e7e4d2f63a0ff661258d9228226593074d60d3d05562a6c346170649c378564234a36dbac23b01b9d480e5bc51a040475f7d6d2d7e5b9270235397c9e4f8c1ad1d48bb0d66f4705c89f4c6dec66efcdd80fb7ab07ac2fa6a3bca7b33fa8a5007d792284bd86bc3254300b7a54efb7f24a00b1fd2c79011f5a4526ada7ba22a2fbba4b05a6b9f95e14228f362a44743c0645a7be5a96885b3443ec49faa7960305b7da1c888ccb11670c92abc3b8401b0ebdea8544304405e1b8a9cf2d31c23dd2ec886f4461a9759b2b90c2f0ca7b800644bba6b7b2bcc5c0eea38e748e81019b5ddd9ecb41fa03078e4ad2ec4acb0af00946a20c5d76be0440399398a66532e486aec59f477fc38f05672af10faa41d9856b393dd342150ef4fdebf42eb0839222d980d5950a4dad126205baa475c67a31a41f611948ad7cd62dbbd27726b113652ee54a2bd3440052720dec853d0e9b0621882523b2b058636370437fe2ed7a9314d43b72c6befdd1d27099e58d49ec66fd20b2baf554917ea2d4b1fedd2bd4e71cec1c48b4f61fddb56ef34746adcd896326d96ed8ccdab175f8a1dc8610c5e2a201db43c8d28a17f406f04be4734b32d900918e0855ef7cc0d95ee704413c8681c4e530af16f03782a4cce79c4327504bdf406b49d2ac5488fc9e168024676319894cf69c694f1e2e5eeec52c79ea0a0d630c07f6bf1b78829858bd525f318c450dd5e33256a45fa024ce2a25492478736c288bfc0100ee9cf1cb363c0de7f5ec7ed7e331cf2a05d9a57574085667262ff435a12c47353432c8e1c2fdd7328be13bc3047eebb96c70b3886cb9abe67375d120daf299807fe023ad75165b8ce82595391499d5092195f596acb057b387d01a2a55df0b207e367eb81f49b0942332a94472d6929cafda67fec6034313abc9e4c1c56fb73b594a53ae7f522882493a49962074915c272f525f919a6e207d9da9be0afa6c9f31cb23af954c51fc7db796874db05c85eaf725c906d95e41ee83ae4de64ff96c26d52a6eff8a97fd6265e29949b96e053b8aa3410242967a1f11742fc541c0bd3b68290674c82221c42695ffc7195dbbae245640a8c8611d2c01993e19e9140f5e1ecd5690580835bcd7c7ddd1f1972c91b18dcc36c63252a3ac943194b902adcd945e340685a3b434c4eb362fa423c580172f03acddfdd0792ded9949c2833bf2f01959fdaf9e2295391518909e81aee7aae12347c6efe0e81153687b3998ca070d9a145720565ae7ee01ab3aa3c0df589a454c0cf8e3cca10b5b4d2b5b3efe8c0f47d82ccd78c1211ea47437bdc59b3a6db11eefd14e0149f1fa65dd0d68c0a23063f1d6adb04d6092d3922aa446d1806c40f61b0b51d82c05a725604f04db8b8870fe7a01d4c3135819a8f4d3732befd5b33c934794fdabe0fd71f4c6153293d1c77bad3a239027a9e448d5cb2a1f601eb96e2f51407c6be17746e82c1098d54f812d902bc98bfe0cb72ad337b"], 0x0) 1.241853076s ago: executing program 4 (id=1818): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRESHEX=r3], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r8, 0x0) close(r8) connect$vsock_stream(r5, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r10, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x20000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, 0xffffffffffffffff, &(0x7f0000000300)) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r11, &(0x7f0000000f80)={@val={0xa}, @void, @eth={@broadcast, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0xb, 0x6, "9e87ae", 0x0, 0x4, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2}}}}}, 0x42) 1.150978376s ago: executing program 1 (id=1819): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000040)={@private=0xa010102, @rand_addr=0x64010101}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e7", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1", 0x56}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c40)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea", 0x86}], 0x1}}], 0x3, 0x8001) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xcfa, 0x4) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', 0x0}) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x810, 0x0, 0x0) 1.074597433s ago: executing program 3 (id=1820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 999.514112ms ago: executing program 0 (id=1821): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x6e, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='mm_vmscan_node_reclaim_begin\x00', r2}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000009f333b05715d95a9fb36ef04e8241483ed00"], 0x18}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x8, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 842.553613ms ago: executing program 3 (id=1822): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xbc, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x3, @empty, 0xff}, @in6={0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x2, @empty, 0x7}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xb76, @remote, 0xfffffffa}, @in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000001c0)=0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}}, 0x4000000) recvmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/229, 0xe5}], 0x1, &(0x7f0000000500)=""/7, 0x7}, 0x8f75}, {{&(0x7f0000000540)=@tipc=@name, 0x80, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/95, 0x5f}, {&(0x7f0000000900)=""/90, 0x5a}, {&(0x7f0000000980)=""/34, 0x22}], 0x6, &(0x7f0000000a40)=""/253, 0xfd}, 0x7}, {{&(0x7f0000000b40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000bc0)}}], 0x3, 0x2122, &(0x7f0000000cc0)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000d00)={r1, 0x7}, 0x8) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001800)=[{{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000dc0)=""/140, 0x8c}, {&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f0000000f40)=""/153, 0x99}, {&(0x7f0000001000)=""/113, 0x71}, {&(0x7f0000001080)=""/48, 0x30}], 0x5, &(0x7f0000001140)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000011c0)=@abs, 0x6e, &(0x7f0000001240), 0x0, &(0x7f0000001280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001300)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001380)}], 0x1, &(0x7f0000001400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000001780)=[{&(0x7f00000014c0)=""/121, 0x79}, {&(0x7f0000001540)=""/97, 0x61}, {&(0x7f00000015c0)=""/213, 0xd5}, {&(0x7f00000016c0)=""/131, 0x83}], 0x4, &(0x7f00000017c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x4, 0x40, &(0x7f0000001940)={r3, r4+60000000}) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000001980)=@req3={0x59d3, 0x1ff, 0x41, 0x10001, 0x7, 0x6, 0x10001}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) write(r5, &(0x7f00000019c0)="bfc820686af0ddc7168e9eb2777baeb632d865333b6d1f0fecbea0867afeef986286816ac572fd6aa073944225ca015b1948a96db58d5882d99d4c1c97ff34fd53c8f1a4888ad2b40ec9814be1f39e288c96feb88e4496cb5c4d8fef721ccdc88fd29a4a4dba3e8e50f69ede9bd3c823f03a3e3bcaabed4fe9438c337a6d3023ac8befbd04fcbacf05bd872f97cf893741682a4a3b5319d8ce15853d8532ef7ecd0af7d3d47b41", 0xa7) preadv(r10, &(0x7f0000001c40)=[{&(0x7f0000001a80)=""/193, 0xc1}, {&(0x7f0000001b80)=""/20, 0x14}, {&(0x7f0000001bc0)=""/128, 0x80}], 0x3, 0x0, 0x6) bind$bt_l2cap(r0, &(0x7f0000001c80)={0x1f, 0x291, @any, 0x1, 0x1}, 0xe) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000001cc0)={0x3, "b522836fafb133439e4ef96a69627a58b1917efcfb5767727dfd5fcda69ce078a77f172fdd7cd64347741f48e85b316aaf42fc94edae31060cdd6110386e45704ef2b593171b112be55e4c85cf4fb8f449a026e410aadcce73971bc686c2b97d2a750eeb31c14f21cd2886fdf58179bfb87af4c0bdcb585490d9e8dc300d2328"}) writev(r10, &(0x7f0000001d80), 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000001dc0)={'wlan0\x00', @multicast}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f0000001e00), &(0x7f0000001e40)=0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xc) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001e80)={r9}, 0x8) r13 = openat$cgroup_ro(r12, &(0x7f0000001ec0)='memory.events.local\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001f40)={&(0x7f0000001f00)='block_split\x00', r12, 0x0, 0x3}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000001f80), 0x10200, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000001fc0)={0x14, 0x6, {0x5, @usage=0xffffffff, 0x0, 0x10001, 0xfffffffffffffffd, 0x1, 0x3, 0xfffffffffffffffa, 0xb0, @usage=0x2, 0xf9, 0x7fffffff, [0x4, 0x1, 0x10000, 0x3, 0x0, 0x5]}, {0x748, @usage=0x9, 0x0, 0x10000, 0x1, 0x101, 0x8, 0xfffffffffffff46f, 0x1, @usage=0x8, 0x0, 0x5, [0x8001, 0x3, 0x2, 0x73d, 0x8, 0x7fffffffffffffff]}, {0x81, @usage=0x9, 0x0, 0xf, 0x1, 0xcc5, 0x6, 0x1ff, 0x8, @usage, 0x9, 0xc5, [0x6, 0x5, 0xf, 0xce, 0x10, 0xffffffffffffff00]}, {0x3, 0x7fffffffffffffff, 0x31000000000000}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f00000023c0)={r14, 0x8329, 0x84, 0x1}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000027c0)={'ip_vti0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg$can_j1939(r6, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002800)=""/249, 0xf9}, {&(0x7f0000002900)=""/45, 0x2d}, {&(0x7f0000002940)=""/181, 0xb5}, {&(0x7f0000002a00)=""/249, 0xf9}, {&(0x7f0000002b00)=""/199, 0xc7}], 0x5}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000002cc0)) 617.369401ms ago: executing program 3 (id=1823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x44084) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x15c, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xdcf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc5f}, {0x6, 0x11, 0x8}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r1, 0x600, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40080) sendmsg$inet(r3, &(0x7f0000001b80)={&(0x7f0000000940)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="79d21c6182f1d9be62cab2e14dde5e8d49e72c0e84eb02ff5b5bc78c2dbf88548b412f49def571981c08b4f6b512de4c4662cece41e52680b1a97a8e9881ba39a3994a46d150ec29d89c077719a2ae6f03925ae0e2d076e565cf8fed7a5d93cfa7a99b771d3de34da97c5b0f8a0b9e472198055753f715fbaffbfcc35d498d7260f594a7703e0d5424b9ff15daed9a2cc7d2948a92660be6b1c5964c2e63ab3b9ded701ba206e4e53d633d5a91c8abb339cecb7db0a0c285dee93508396a483355ce3aeb", 0xc4}, {&(0x7f0000001ac0)="a7334f0997245bb932e1f80609fbba3de7d11b1c84864b04a0f2f8499a7fdc71d0da8947359f90eeff3e2d9b6c5953f6d9ecd96665605078fd6b404acc366b9badf8e11a1f791d96ec929929302463de9bf5d161c04c2054c534a877ded18d35a2cb1e13d9c6b8c5c9", 0x69}], 0x4}, 0x4000802) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x68, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x101, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc824}, 0x20000000) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, r4, 0x10, 0x70bd2d, 0x6, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '[[#&\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008095}, 0x24000100) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000001f40)={@empty, @loopback, @mcast1, 0x2, 0x8, 0x5, 0x100, 0x80, 0x52}) write$cgroup_devices(r8, &(0x7f0000001fc0)={'a', ' *:* ', 'w\x00'}, 0x8) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x54, 0x1, 0x4, 0x703, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x200}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xe}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x51) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002140)={'team0\x00', 0x0}) r12 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet6(r8, &(0x7f0000002180)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x100010}, 0x1c) ioctl$FIOCLEX(r12, 0x5451) syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r8) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000002800)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000027c0)={&(0x7f0000002380)={0x418, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r11}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7f, 0x5, 0xb4, 0xffff8396}, {0xff, 0x0, 0x1, 0x8}, {0x6c, 0x5, 0x4, 0xfff}]}}}]}}]}, 0x418}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 388.922046ms ago: executing program 4 (id=1824): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x7, 0x97e00000}) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 135.009341ms ago: executing program 1 (id=1825): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x3, 0xd7}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0xfffffffd, 0x0, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 133.042808ms ago: executing program 3 (id=1826): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x806, 0x0) (async) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, r9, 0x201, 0x10000000, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100000}}, {0x8, 0x6, r4}}}]}}]}, 0x60}, 0x1, 0xf000}, 0x8080) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r1, @ANYBLOB="000000000040000014001614e30000802c0009000500000004000000089d0000000000009d7867ef15adf2e10539b62e07416d359f701b3947a99ab24180cbaffd1d334e48e7fb4870a0412c1d0e1a866d438099c1c5587ee69f25933bfcee3bfce102161e8df99c7fee3c9e91b23a927bbdebb2766a4f1ed746e1542841b5d7f00d4d4a861b12a5640f5e2af87db4a7674ff589bc4595d67bb0c3dd8e99d83ac104f2e7a06ed98c57edd7df337cf03e0562428d761cd674c8ca4342934a51b5f6928d95dc9519bf0964942d89dfb457f344911b94742593785005ca1a5e7e8eeeaf9aaf3a69da757a5944b18e2184f230819cfd065618f2996e5fa2cc99bc1d44fe3da79d5a07a47a7ecb9e35b0396768bd89ca57690b97b0b1a7277c"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x3c}}, 0x0) 129.153694ms ago: executing program 4 (id=1827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x2691, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @dev, {[@end, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@remote}, {@multicast1}, {@loopback, 0x200}, {@local}, {}]}]}}}}}}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000000028890081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 5.333611ms ago: executing program 0 (id=1828): socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20) sendmsg(r0, &(0x7f0000001940)={&(0x7f0000000400)=@caif=@dbg={0x25, 0xb, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x1260}, 0x40011) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r1, &(0x7f0000000400), 0x20000000}, 0x20) socket$qrtr(0x2a, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x401, 0x0, 0x2000000, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffff8}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x100}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x47cb}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x1ff}]}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r11, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000440), 0x4, r11}, 0x38) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r12, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r12, 0x1) getsockopt$bt_hci(r12, 0x84, 0x85, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000180)) 0s ago: executing program 1 (id=1829): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x7fff, 0x80000001}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x263f) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x2b, 0x6, 0x4, 0x3, 0x1c, @empty, @mcast2, 0x80, 0x7, 0x25de3771, 0xfffffbff}}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x9, @local, 0xd}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e23, 0x10, @empty, 0xffffffff}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r4, 0x80000001}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e20, 0x6, 0x4e22, 0x4, 0x2, 0x20, 0x20, 0x16, r3, r6}, {0x100000000, 0x200000000, 0x3, 0xc93, 0x4, 0x8, 0x7e5, 0x2}, {0x9, 0xf1, 0xffffffffffffe948}, 0x9, 0x6e6bb6, 0x2, 0x1, 0x3, 0x2}, {{@in6=@mcast1, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x0, 0x3, 0x0, 0x3, 0x2aa4, 0x5, 0x1}}, 0xe8) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000580)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000005c0)={r4, 0x3}, 0x8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000600)={0xffffffffffffff01, 0x5, 0x4}) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/26, 0x1a}, {&(0x7f0000000680)=""/156, 0x9c}], 0x2, &(0x7f0000000780)=""/30, 0x1e}, 0xff}], 0x1, 0x0, &(0x7f0000000840)={r10, r11+60000000}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000880)=0x6, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000940)={@none, 0xfffff19d}) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f00000009c0)={0x40, 0x20, '\x00', 0x1, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0]}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r12) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r13, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r14, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x79}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000b80), r12) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', r2, 0x2f, 0x9, 0x1, 0x1ff, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x10, 0x8, 0x9}}) getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000c80)={@empty, 0x0}, &(0x7f0000000cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f00000011c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d40)={0x414, r15, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6e5, 0x2, 0x6, 0xc}, {0x2234, 0xd, 0xe, 0x3}, {0xfff9, 0x3f, 0x9, 0x6}, {0x5, 0x5, 0x4, 0xd60}, {0x4, 0x5, 0x5, 0x6}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x40000d5}, 0x20000811) kernel console output (not intermixed with test programs): e 13 has an invalid length. [ 185.437239][ T9381] syz_tun: refused to change device tx_queue_len [ 185.448293][ T9381] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 185.484731][ T9387] batadv_slave_1: entered promiscuous mode [ 185.530728][ T9386] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 185.922428][ T5857] block nbd12: Receive control failed (result -107) [ 185.948478][ T9404] nbd12: detected capacity change from 0 to 256 [ 185.972843][ T9369] block nbd12: Dead connection, failed to find a fallback [ 186.421855][ T9429] __nla_validate_parse: 11 callbacks suppressed [ 186.421876][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 186.587763][ T9433] netlink: 60 bytes leftover after parsing attributes in process `syz.4.889'. [ 186.597132][ T9433] netlink: 60 bytes leftover after parsing attributes in process `syz.4.889'. [ 186.862293][ T9451] netlink: 224 bytes leftover after parsing attributes in process `syz.4.889'. [ 187.106983][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 187.251233][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 187.272103][ T9458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.895'. [ 187.330924][ T5857] block nbd13: Receive control failed (result -107) [ 187.402322][ T9467] netlink: 88 bytes leftover after parsing attributes in process `syz.0.896'. [ 187.419065][ T9458] nbd13: detected capacity change from 0 to 256 [ 187.441881][ T9391] block nbd13: Dead connection, failed to find a fallback [ 187.644642][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 187.654717][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 188.292355][ T9500] bridge0: port 3(vlan0) entered blocking state [ 188.324375][ T9500] bridge0: port 3(vlan0) entered disabled state [ 188.331854][ T9500] vlan0: entered allmulticast mode [ 188.339388][ T9500] vlan0: left allmulticast mode [ 188.361139][ T9498] ip6gretap0: entered promiscuous mode [ 188.375895][ T9498] batadv_slave_0: entered promiscuous mode [ 188.459159][ T9498] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 188.467085][ T9498] Cannot create hsr debugfs directory [ 188.772600][ T5857] block nbd14: Receive control failed (result -107) [ 188.815277][ T9528] vlan3: entered allmulticast mode [ 188.818807][ T9518] nbd14: detected capacity change from 0 to 256 [ 188.832820][ T5855] block nbd14: Dead connection, failed to find a fallback [ 188.888110][ T5855] schedule_timeout: wrong timeout value c800000000000000 [ 188.895217][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: udevd Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 188.905485][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.915583][ T5855] Call Trace: [ 188.918906][ T5855] [ 188.921867][ T5855] dump_stack_lvl+0x241/0x360 [ 188.926599][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.931844][ T5855] ? __pfx__printk+0x10/0x10 [ 188.936508][ T5855] schedule_timeout+0x21b/0x290 [ 188.941412][ T5855] ? __pfx_schedule_timeout+0x10/0x10 [ 188.946851][ T5855] ? prepare_to_wait_event+0x3bd/0x400 [ 188.952365][ T5855] nbd_queue_rq+0x7d9/0x2ef0 [ 188.957029][ T5855] ? validate_chain+0x11e/0x5920 [ 188.962028][ T5855] ? mark_lock+0x9a/0x360 [ 188.966406][ T5855] ? __pfx_nbd_queue_rq+0x10/0x10 [ 188.971569][ T5855] ? __lock_acquire+0x1397/0x2100 [ 188.976676][ T5855] ? __pfx_autoremove_wake_function+0x10/0x10 [ 188.982811][ T5855] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 188.988415][ T5855] ? sbitmap_get+0x289/0x3f0 [ 188.993061][ T5855] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 188.999084][ T5855] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 189.004936][ T5855] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 189.011301][ T5855] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 189.018081][ T5855] ? __pfx_lock_acquire+0x10/0x10 [ 189.023134][ T5855] ? __pfx___might_resched+0x10/0x10 [ 189.028439][ T5855] ? sbitmap_any_bit_set+0x155/0x190 [ 189.033741][ T5855] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 189.039473][ T5855] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 189.045465][ T5855] ? blk_mq_run_hw_queue+0x32b/0x500 [ 189.050767][ T5855] blk_mq_run_hw_queue+0x354/0x500 [ 189.055907][ T5855] blk_mq_flush_plug_list+0x118e/0x1870 [ 189.061465][ T5855] ? __pfx_update_io_ticks+0x10/0x10 [ 189.066774][ T5855] ? blk_add_rq_to_plug+0x308/0x4b0 [ 189.072004][ T5855] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 189.077911][ T5855] ? blk_mq_submit_bio+0xf74/0x2390 [ 189.083135][ T5855] __blk_flush_plug+0x420/0x500 [ 189.087999][ T5855] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.093993][ T5855] ? __pfx___blk_flush_plug+0x10/0x10 [ 189.099379][ T5855] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.105727][ T5855] __submit_bio+0x46a/0x560 [ 189.110244][ T5855] ? __pfx___submit_bio+0x10/0x10 [ 189.115297][ T5855] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 189.120953][ T5855] ? bio_associate_blkg_from_css+0x182/0xc70 [ 189.127056][ T5855] ? __pfx___might_resched+0x10/0x10 [ 189.132359][ T5855] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 189.138547][ T5855] block_read_full_folio+0x9b3/0xae0 [ 189.143859][ T5855] ? __pfx_blkdev_get_block+0x10/0x10 [ 189.149252][ T5855] ? __pfx_block_read_full_folio+0x10/0x10 [ 189.155088][ T5855] filemap_read_folio+0x148/0x3b0 [ 189.160130][ T5855] ? __pfx_blkdev_read_folio+0x10/0x10 [ 189.165608][ T5855] ? __pfx_filemap_read_folio+0x10/0x10 [ 189.171177][ T5855] ? __filemap_get_folio+0x848/0x940 [ 189.176495][ T5855] do_read_cache_folio+0x373/0x5b0 [ 189.181620][ T5855] ? __pfx_blkdev_read_folio+0x10/0x10 [ 189.187109][ T5855] read_part_sector+0xb3/0x260 [ 189.191893][ T5855] adfspart_check_ICS+0xd9/0x9a0 [ 189.196856][ T5855] ? __pfx_vsnprintf+0x10/0x10 [ 189.201649][ T5855] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 189.207214][ T5855] ? snprintf+0xda/0x120 [ 189.211475][ T5855] ? alloc_pages_mpol_noprof+0x417/0x680 [ 189.217122][ T5855] ? vsnprintf+0x1cc3/0x1da0 [ 189.221728][ T5855] ? vsnprintf+0x184/0x1da0 [ 189.226247][ T5855] ? __pfx_snprintf+0x10/0x10 [ 189.230944][ T5855] ? __kasan_kmalloc+0x98/0xb0 [ 189.235726][ T5855] bdev_disk_changed+0x72c/0x13f0 [ 189.240766][ T5855] ? __pfx___might_resched+0x10/0x10 [ 189.246073][ T5855] ? __pfx_bdev_disk_changed+0x10/0x10 [ 189.251549][ T5855] ? wait_on_inode+0xc1/0x230 [ 189.256247][ T5855] ? __pfx_wait_on_inode+0x10/0x10 [ 189.261373][ T5855] ? do_raw_spin_unlock+0x13c/0x8b0 [ 189.266612][ T5855] blkdev_get_whole+0x2d2/0x450 [ 189.271491][ T5855] bdev_open+0x2d4/0xc50 [ 189.275764][ T5855] blkdev_open+0x389/0x4f0 [ 189.280205][ T5855] ? __pfx_blkdev_open+0x10/0x10 [ 189.285172][ T5855] do_dentry_open+0xbe1/0x1b70 [ 189.289971][ T5855] vfs_open+0x3e/0x330 [ 189.294057][ T5855] path_openat+0x2c84/0x3590 [ 189.298703][ T5855] ? __pfx_path_openat+0x10/0x10 [ 189.303666][ T5855] do_filp_open+0x27f/0x4e0 [ 189.308176][ T5855] ? __pfx_do_filp_open+0x10/0x10 [ 189.313290][ T5855] ? do_raw_spin_lock+0x14f/0x370 [ 189.318372][ T5855] do_sys_openat2+0x13e/0x1d0 [ 189.323065][ T5855] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.328479][ T5855] __x64_sys_openat+0x247/0x2a0 [ 189.333371][ T5855] ? __pfx___x64_sys_openat+0x10/0x10 [ 189.338785][ T5855] ? do_syscall_64+0x100/0x230 [ 189.343584][ T5855] ? do_syscall_64+0xb6/0x230 [ 189.348375][ T5855] do_syscall_64+0xf3/0x230 [ 189.352988][ T5855] ? clear_bhb_loop+0x35/0x90 [ 189.357688][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.363605][ T5855] RIP: 0033:0x7f71db7169a4 [ 189.368036][ T5855] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 189.387736][ T5855] RSP: 002b:00007ffe54421140 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.396175][ T5855] RAX: ffffffffffffffda RBX: 000056397ae34e80 RCX: 00007f71db7169a4 [ 189.404171][ T5855] RDX: 00000000000a0800 RSI: 000056397ae15460 RDI: 00000000ffffff9c [ 189.412343][ T5855] RBP: 000056397ae15460 R08: 0000000000000001 R09: 7fffffffffffffff [ 189.420348][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 189.428346][ T5855] R13: 000056397ae1d8a0 R14: 0000000000000001 R15: 000056397ae14910 [ 189.436440][ T5855] [ 189.442395][ T5855] block nbd14: shutting down sockets [ 189.447758][ T5855] blk_print_req_error: 95 callbacks suppressed [ 189.447776][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.463546][ T5855] buffer_io_error: 93 callbacks suppressed [ 189.463564][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.478058][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.487259][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.495337][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.504634][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.512847][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.522137][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.530233][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.539646][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.549228][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.558466][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.566476][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.575752][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.583930][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.593243][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.601277][ T5855] ldm_validate_partition_table(): Disk read failed. [ 189.608094][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.617308][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.625513][ T5855] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.635137][ T5855] Buffer I/O error on dev nbd14, logical block 0, async page read [ 189.643623][ T5855] Dev nbd14: unable to read RDB block 0 [ 189.649888][ T5855] nbd14: unable to read partition table [ 189.733628][ T5855] ldm_validate_partition_table(): Disk read failed. [ 189.740855][ T5855] Dev nbd14: unable to read RDB block 0 [ 189.747046][ T5855] nbd14: unable to read partition table [ 190.171109][ T9561] nr0: entered allmulticast mode [ 190.214119][ T9564] pimreg: entered allmulticast mode [ 190.236549][ T9564] pimreg: left allmulticast mode [ 190.344759][ T9569] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.363575][ T9569] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.375656][ T9569] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.391757][ T9569] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.490947][ T9569] xt_l2tp: v2 sid > 0xffff: 262144 [ 191.216350][ T9602] netlink: 'syz.0.933': attribute type 6 has an invalid length. [ 191.288896][ T9602] netlink: 'syz.0.933': attribute type 5 has an invalid length. [ 191.666089][ T9620] netlink: 'syz.4.937': attribute type 2 has an invalid length. [ 191.707509][ T9620] netlink: 'syz.4.937': attribute type 9 has an invalid length. [ 192.368233][ T9644] tipc: Failed to remove unknown binding: 66,1,1/0:3819961185/3819961187 [ 192.636167][ T9652] __nla_validate_parse: 14 callbacks suppressed [ 192.636190][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.945'. [ 192.858995][ T9664] tipc: Failed to remove unknown binding: 66,1,1/0:3915413585/3915413587 [ 192.888303][ T9664] tipc: Failed to remove unknown binding: 66,1,1/0:3915413585/3915413587 [ 193.085881][ T9674] ipt_REJECT: TCP_RESET invalid for non-tcp [ 194.318939][ T9722] delete_channel: no stack [ 194.422922][ T9726] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 194.509149][ T9729] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 194.528106][ T9726] bond0: (slave netdevsim0): Releasing backup interface [ 194.664887][ T9726] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 194.738666][ T9726] team0: Failed to send options change via netlink (err -105) [ 194.759526][ T9745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.963'. [ 194.789404][ T9726] team0: Port device netdevsim0 added [ 194.826918][ T9731] netlink: 1136 bytes leftover after parsing attributes in process `syz.1.961'. [ 194.836957][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.859060][ T9731] netlink: 5 bytes leftover after parsing attributes in process `syz.1.961'. [ 194.913489][ T9729] team0: Failed to send options change via netlink (err -105) [ 194.968214][ T9729] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 195.023985][ T9729] team0: Port device netdevsim0 removed [ 195.061195][ T9729] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 195.556899][ T9759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.966'. [ 195.652431][ T9764] netlink: 2 bytes leftover after parsing attributes in process `syz.2.967'. [ 196.015897][ T9777] xt_ecn: cannot match TCP bits for non-tcp packets [ 196.295391][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 196.800359][ T9806] netlink: 84 bytes leftover after parsing attributes in process `syz.2.977'. [ 197.270676][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 199.726938][ T9819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.735136][ T9819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.753376][ T9819] batadv0 (unregistering): left promiscuous mode [ 199.855496][ T9846] wg2: entered promiscuous mode [ 199.870188][ T9846] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 200.231382][ T9873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.290274][ T9853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.315419][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.992'. [ 200.400577][ T9883] netlink: 3 bytes leftover after parsing attributes in process `syz.0.994'. [ 200.413464][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.417254][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 200.421348][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.431516][ T9883] netlink: 3 bytes leftover after parsing attributes in process `syz.0.994'. [ 200.454198][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 200.465939][ T9883] netlink: 3 bytes leftover after parsing attributes in process `syz.0.994'. [ 200.497722][ T9876] wg2: left promiscuous mode [ 200.624517][ T9876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.634373][ T9876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.643838][ T9876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.653126][ T9876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.665940][ T9876] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 200.686622][ T9876] syz_tun: left promiscuous mode [ 200.693578][ T9876] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 200.701446][ T9876] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 200.710346][ T9876] ipvlan2: left promiscuous mode [ 201.395255][ T9924] vlan4: entered promiscuous mode [ 201.570609][ T9937] netlink: 'syz.0.1009': attribute type 10 has an invalid length. [ 201.745049][ T9943] xt_hashlimit: max too large, truncated to 1048576 [ 201.778463][ T9943] No such timeout policy "syz1" [ 201.930470][ T9951] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1012'. [ 201.966060][ T9951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1012'. [ 202.085021][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 202.178034][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 202.213461][ T9966] netlink: 'syz.1.1017': attribute type 5 has an invalid length. [ 202.230573][ T5857] block nbd15: Receive control failed (result -107) [ 202.268717][ T9958] nbd15: detected capacity change from 0 to 256 [ 202.298389][ T5855] block nbd15: Dead connection, failed to find a fallback [ 202.307763][ T5855] block nbd15: shutting down sockets [ 202.314816][ T5855] blk_print_req_error: 27 callbacks suppressed [ 202.314837][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.331285][ T5855] buffer_io_error: 27 callbacks suppressed [ 202.331304][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.388375][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.397586][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.408194][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.444269][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.474225][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.510746][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.539446][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.580305][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.598884][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.611989][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.623089][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.711042][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.751766][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.753284][ T9981] netlink: 'syz.1.1022': attribute type 10 has an invalid length. [ 202.776777][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.805417][ T5855] ldm_validate_partition_table(): Disk read failed. [ 202.839640][ T9981] team0: Device ipvlan1 failed to register rx_handler [ 202.842920][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.878172][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.893924][ T5855] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.924127][ T5855] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.946442][ T5855] Dev nbd15: unable to read RDB block 0 [ 202.963625][ T5855] nbd15: unable to read partition table [ 203.034226][ T5855] ldm_validate_partition_table(): Disk read failed. [ 203.078877][ T5855] Dev nbd15: unable to read RDB block 0 [ 203.094678][ T5855] nbd15: unable to read partition table [ 203.227363][ T9992] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 203.349186][ T9997] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 203.505882][ T9997] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 203.550639][ T9997] bond3: (slave batadv2): Enslaving as a backup interface with an up link [ 203.746749][T10000] bond3 (unregistering): (slave batadv2): Releasing backup interface [ 203.816845][T10000] bond3 (unregistering): Released all slaves [ 203.847103][T10009] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 204.214974][T10031] lo speed is unknown, defaulting to 1000 [ 204.259744][T10031] lo speed is unknown, defaulting to 1000 [ 204.301969][T10031] lo speed is unknown, defaulting to 1000 [ 204.605135][T10031] infiniband syz0: set down [ 204.611703][ T8834] lo speed is unknown, defaulting to 1000 [ 204.628763][T10031] infiniband syz0: added lo [ 204.721002][T10031] RDS/IB: syz0: added [ 204.725900][T10031] smc: adding ib device syz0 with port count 1 [ 204.733611][T10031] smc: ib device syz0 port 1 has pnetid [ 204.792402][ T5840] lo speed is unknown, defaulting to 1000 [ 204.804381][T10031] lo speed is unknown, defaulting to 1000 [ 204.958789][T10052] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 204.967075][T10052] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 204.997630][T10052] tap0: tun_chr_ioctl cmd 1074025673 [ 205.016212][T10054] tap0: tun_chr_ioctl cmd 1074025677 [ 205.026408][T10054] tap0: linktype set to 768 [ 205.038923][T10052] tap0: tun_chr_ioctl cmd 1074025673 [ 205.044376][T10052] tap0: tun_chr_ioctl cmd 1074025673 [ 205.073402][T10031] lo speed is unknown, defaulting to 1000 [ 205.143265][T10057] netlink: 'syz.4.1044': attribute type 3 has an invalid length. [ 205.462972][T10031] lo speed is unknown, defaulting to 1000 [ 205.636573][T10057] lo speed is unknown, defaulting to 1000 [ 205.649242][T10075] No such timeout policy "syz0" [ 205.717360][T10066] sctp: [Deprecated]: syz.2.1048 (pid 10066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.717360][T10066] Use struct sctp_sack_info instead [ 205.821214][T10031] lo speed is unknown, defaulting to 1000 [ 206.013845][T10031] lo speed is unknown, defaulting to 1000 [ 206.120516][T10031] lo speed is unknown, defaulting to 1000 [ 206.175370][T10084] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 206.272871][T10031] lo speed is unknown, defaulting to 1000 [ 206.544508][T10094] __nla_validate_parse: 12 callbacks suppressed [ 206.544531][T10094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1055'. [ 206.573568][T10031] lo speed is unknown, defaulting to 1000 [ 206.614867][T10094] tun0: tun_chr_ioctl cmd 1074025673 [ 206.638390][T10097] tun0: tun_chr_ioctl cmd 1074025677 [ 206.649114][T10097] tun0: linktype set to 512 [ 206.659805][T10094] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1055'. [ 206.684954][T10094] 0ªX¹¦Dö»: renamed from gretap0 [ 206.715905][T10094] 0ªX¹¦Dö»: entered allmulticast mode [ 206.743650][T10101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1059'. [ 206.784787][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 206.932477][T10031] lo speed is unknown, defaulting to 1000 [ 207.091601][T10115] bridge0: port 3(gretap0) entered blocking state [ 207.112198][T10115] bridge0: port 3(gretap0) entered disabled state [ 207.122646][T10115] gretap0: entered allmulticast mode [ 207.152613][T10115] gretap0: entered promiscuous mode [ 207.180610][T10117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1065'. [ 207.192580][T10115] bridge0: port 3(gretap0) entered blocking state [ 207.199556][T10115] bridge0: port 3(gretap0) entered listening state [ 207.250962][T10118] gretap0: left allmulticast mode [ 207.280447][T10118] gretap0: left promiscuous mode [ 207.309916][T10118] bridge0: port 3(gretap0) entered disabled state [ 207.743632][T10137] netlink: 'syz.0.1069': attribute type 21 has an invalid length. [ 207.778836][T10137] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.828476][T10137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.836406][T10137] IPv6: NLM_F_CREATE should be set when creating new route [ 207.843785][T10137] IPv6: NLM_F_CREATE should be set when creating new route [ 207.851101][T10137] IPv6: NLM_F_CREATE should be set when creating new route [ 207.879666][T10150] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 207.887654][T10150] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1073'. [ 208.065292][T10157] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1075'. [ 208.433382][T10161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.616375][T10161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.726240][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 208.835620][T10161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.853915][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 209.001967][T10161] bond0: (slave netdevsim0): Releasing backup interface [ 209.044854][T10161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.325429][T10161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.375290][T10161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.445301][T10161] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.494507][T10161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.834890][T10225] lo speed is unknown, defaulting to 1000 [ 210.232221][T10240] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1095'. [ 210.854514][T10255] netlink: 'syz.3.1102': attribute type 1 has an invalid length. [ 211.729832][T10315] __nla_validate_parse: 2 callbacks suppressed [ 211.729855][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 211.758840][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 211.835106][T10321] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 211.960054][T10322] lo speed is unknown, defaulting to 1000 [ 212.029128][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 212.268395][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 212.270849][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 212.274652][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 212.394274][T10342] netlink: 632 bytes leftover after parsing attributes in process `syz.2.1120'. [ 212.413729][T10342] tc_dump_action: action bad kind [ 212.436367][ T9661] bond2: (slave ip6gretap1): link status up again after 0 ms [ 212.444633][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 212.558112][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 212.636667][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 212.662168][T10347] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1122'. [ 212.698151][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 212.750448][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 212.771419][T10354] ax25_connect(): syz.2.1124 uses autobind, please contact jreuter@yaina.de [ 212.979307][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.042675][T10322] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 213.123920][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.268034][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.389983][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.519610][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.638688][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 214.050137][T10391] lo speed is unknown, defaulting to 1000 [ 214.177298][T10397] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1136'. [ 214.463802][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1140'. [ 214.629578][T10409] vcan0: entered promiscuous mode [ 214.634846][T10409] vcan0: entered allmulticast mode [ 214.808871][T10418] lo speed is unknown, defaulting to 1000 [ 214.949412][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 215.033980][T10428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1144'. [ 215.066767][T10428] netlink: 'syz.2.1144': attribute type 4 has an invalid length. [ 215.122024][T10419] nbd: socks must be embedded in a SOCK_ITEM attr [ 215.351467][T10391] lo speed is unknown, defaulting to 1000 [ 215.706469][T10441] hsr0: entered promiscuous mode [ 216.087494][T10468] macsec2: entered promiscuous mode [ 216.111617][T10468] hsr0: entered promiscuous mode [ 216.146002][T10472] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 216.158888][T10468] hsr0: left promiscuous mode [ 216.379380][T10472] bond5: entered promiscuous mode [ 216.384840][T10472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.481555][T10479] batadv2: entered promiscuous mode [ 216.498295][T10479] batadv2: entered allmulticast mode [ 216.516954][T10479] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 216.574935][T10479] bond5: (slave batadv2): making interface the new active one [ 216.619219][T10479] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 216.650604][ T5847] block nbd16: Receive control failed (result -107) [ 216.669336][T10491] nbd16: detected capacity change from 0 to 256 [ 216.732812][ T5855] block nbd16: Dead connection, failed to find a fallback [ 216.741383][ T5855] block nbd16: shutting down sockets [ 216.747069][ T5855] blk_print_req_error: 27 callbacks suppressed [ 216.747105][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.764155][ T5855] buffer_io_error: 27 callbacks suppressed [ 216.764250][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 216.795391][T10487] lo speed is unknown, defaulting to 1000 [ 216.804455][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.819418][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 216.840817][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.855483][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 216.875065][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.927775][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 216.969194][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.006236][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 217.041987][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.090750][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 217.121946][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.151404][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 217.181731][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.201332][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 217.233021][ T5855] ldm_validate_partition_table(): Disk read failed. [ 217.255448][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.316806][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 217.346956][ T5855] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.388680][ T5855] Buffer I/O error on dev nbd16, logical block 0, async page read [ 217.408599][ T5855] Dev nbd16: unable to read RDB block 0 [ 217.414761][ T5855] nbd16: unable to read partition table [ 217.433233][ T5855] ldm_validate_partition_table(): Disk read failed. [ 217.440527][ T5855] Dev nbd16: unable to read RDB block 0 [ 217.446736][ T5855] nbd16: unable to read partition table [ 217.699875][ T1316] net_ratelimit: 22 callbacks suppressed [ 217.699896][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 217.864132][T10524] __nla_validate_parse: 6 callbacks suppressed [ 217.864150][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 217.884453][T10518] veth0_to_team: entered promiscuous mode [ 217.893564][T10518] veth0_to_team: entered allmulticast mode [ 218.004406][T10524] veth4: entered allmulticast mode [ 218.084454][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 218.238558][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 218.388207][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 218.533598][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 218.606349][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 218.670112][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 218.809987][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 218.938649][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 219.058240][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 219.168672][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 219.255536][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 219.264693][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 219.273914][T10591] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1189'. [ 219.362063][T10595] bond0: entered allmulticast mode [ 219.493329][T10598] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1191'. [ 219.557683][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 219.722201][T10613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1197'. [ 219.761501][T10613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1197'. [ 219.811995][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1197'. [ 220.025082][T10626] syz.4.1202: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 220.040812][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.4.1202 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 220.051635][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.061739][T10626] Call Trace: [ 220.065054][T10626] [ 220.068030][T10626] dump_stack_lvl+0x241/0x360 [ 220.072774][T10626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.078026][T10626] ? __pfx__printk+0x10/0x10 [ 220.082672][T10626] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 220.089144][T10626] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 220.095701][T10626] warn_alloc+0x278/0x410 [ 220.100085][T10626] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 220.106174][T10626] ? __pfx_warn_alloc+0x10/0x10 [ 220.111043][T10626] ? kasan_save_track+0x3f/0x80 [ 220.115910][T10626] ? __kasan_kmalloc+0x98/0xb0 [ 220.120689][T10626] ? xsk_setsockopt+0x4ea/0x950 [ 220.125561][T10626] ? do_sock_setsockopt+0x3af/0x720 [ 220.130781][T10626] ? __x64_sys_setsockopt+0x1ee/0x280 [ 220.136169][T10626] ? do_syscall_64+0xf3/0x230 [ 220.140887][T10626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.146981][T10626] __vmalloc_node_range_noprof+0x126/0x1380 [ 220.152916][T10626] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.159273][T10626] ? __kasan_kmalloc+0x98/0xb0 [ 220.164056][T10626] vmalloc_user_noprof+0x74/0x80 [ 220.169006][T10626] ? xskq_create+0xb6/0x170 [ 220.173551][T10626] xskq_create+0xb6/0x170 [ 220.177910][T10626] xsk_init_queue+0xa1/0x100 [ 220.182522][T10626] xsk_setsockopt+0x4ea/0x950 [ 220.187221][T10626] ? __pfx_xsk_setsockopt+0x10/0x10 [ 220.192442][T10626] ? __pfx_aa_sk_perm+0x10/0x10 [ 220.197315][T10626] ? aa_sock_opt_perm+0x79/0x120 [ 220.202269][T10626] ? __pfx_xsk_setsockopt+0x10/0x10 [ 220.207485][T10626] do_sock_setsockopt+0x3af/0x720 [ 220.212531][T10626] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 220.218095][T10626] ? __fget_files+0x395/0x410 [ 220.222788][T10626] ? __fget_files+0x2a/0x410 [ 220.227399][T10626] __x64_sys_setsockopt+0x1ee/0x280 [ 220.232617][T10626] do_syscall_64+0xf3/0x230 [ 220.237132][T10626] ? clear_bhb_loop+0x35/0x90 [ 220.241829][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.247741][T10626] RIP: 0033:0x7f1dd1d85d29 [ 220.252178][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.271802][T10626] RSP: 002b:00007f1dd2b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 220.280236][T10626] RAX: ffffffffffffffda RBX: 00007f1dd1f75fa0 RCX: 00007f1dd1d85d29 [ 220.288222][T10626] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 220.296202][T10626] RBP: 00007f1dd1e01aa8 R08: 0000000000000004 R09: 0000000000000000 [ 220.304184][T10626] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.312179][T10626] R13: 0000000000000000 R14: 00007f1dd1f75fa0 R15: 00007ffdd7e14868 [ 220.320173][T10626] [ 220.324063][T10626] Mem-Info: [ 220.327512][T10626] active_anon:6861 inactive_anon:0 isolated_anon:0 [ 220.327512][T10626] active_file:1486 inactive_file:38315 isolated_file:0 [ 220.327512][T10626] unevictable:768 dirty:84 writeback:0 [ 220.327512][T10626] slab_reclaimable:10470 slab_unreclaimable:107691 [ 220.327512][T10626] mapped:28819 shmem:1433 pagetables:886 [ 220.327512][T10626] sec_pagetables:0 bounce:0 [ 220.327512][T10626] kernel_misc_reclaimable:0 [ 220.327512][T10626] free:1329385 free_pcp:551 free_cma:0 [ 220.372857][T10626] Node 0 active_anon:27444kB inactive_anon:0kB active_file:5944kB inactive_file:153184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115276kB dirty:336kB writeback:0kB shmem:4196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12736kB pagetables:3544kB sec_pagetables:0kB all_unreclaimable? no [ 220.405891][T10626] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 220.440728][T10626] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 220.469866][T10626] lowmem_reserve[]: 0 2465 2466 0 0 [ 220.475517][T10626] Node 0 DMA32 free:1400300kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:27312kB inactive_anon:0kB active_file:5944kB inactive_file:152356kB unevictable:1536kB writepending:336kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:1852kB local_pcp:836kB free_cma:0kB [ 220.506221][T10626] lowmem_reserve[]: 0 0 0 0 0 [ 220.511575][T10626] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 220.538874][T10626] lowmem_reserve[]: 0 0 0 0 0 [ 220.544229][T10626] Node 1 Normal free:3902220kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 220.573537][T10626] lowmem_reserve[]: 0 0 0 0 0 [ 220.578739][T10626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 220.592119][T10626] Node 0 DMA32: 98*4kB (UME) 5*8kB (UE) 34*16kB (UME) 103*32kB (UME) 157*64kB (UME) 104*128kB (UME) 37*256kB (UM) 13*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 329*4096kB (M) = 1400560kB [ 220.611121][T10626] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 220.624861][T10626] Node 1 Normal: 253*4kB (UE) 59*8kB (UME) 44*16kB (UME) 214*32kB (UME) 93*64kB (UME) 35*128kB (UME) 15*256kB (UME) 8*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3902220kB [ 220.643524][T10626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.653278][T10626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.662937][T10626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 220.673813][T10626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 220.683405][T10626] 41245 total pagecache pages [ 220.688328][T10626] 0 pages in swap cache [ 220.692592][T10626] Free swap = 124996kB [ 220.696846][T10626] Total swap = 124996kB [ 220.701282][T10626] 2097051 pages RAM [ 220.705204][T10626] 0 pages HighMem/MovableOnly [ 220.710074][T10626] 427012 pages reserved [ 220.714389][T10626] 0 pages cma reserved [ 221.556650][T10661] netlink: 'syz.2.1210': attribute type 1 has an invalid length. [ 221.893438][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.908071][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.556962][T10720] bridge0: port 3(ip6gretap0) entered blocking state [ 222.563954][T10720] bridge0: port 3(ip6gretap0) entered disabled state [ 222.572048][T10720] ip6gretap0: entered allmulticast mode [ 222.582290][T10720] ip6gretap0: left allmulticast mode [ 222.719192][ T11] net_ratelimit: 26 callbacks suppressed [ 222.719215][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 222.868096][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 222.988590][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 223.128026][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 223.238280][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 223.388501][T10749] netlink: 'syz.2.1237': attribute type 2 has an invalid length. [ 223.405527][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 223.431773][T10749] netlink: 'syz.2.1237': attribute type 9 has an invalid length. [ 223.447609][T10749] __nla_validate_parse: 7 callbacks suppressed [ 223.447633][T10749] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1237'. [ 223.525914][T10749] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1237'. [ 223.550152][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 223.680458][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 223.750046][T10763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1239'. [ 223.812497][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 223.948264][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 224.132414][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.472907][T10769] sctp: [Deprecated]: syz.2.1241 (pid 10769) Use of int in maxseg socket option. [ 224.472907][T10769] Use struct sctp_assoc_value instead [ 224.708181][T10774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1243'. [ 224.828494][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1245'. [ 224.874454][T10783] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 224.971316][T10784] sctp: [Deprecated]: syz.1.1245 (pid 10784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.971316][T10784] Use struct sctp_sack_info instead [ 225.062469][T10790] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 225.341880][T10797] gretap0: entered promiscuous mode [ 225.347742][T10797] macsec1: entered promiscuous mode [ 225.429618][T10797] gretap0: left promiscuous mode [ 225.490962][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 225.515549][T10802] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 227.365839][T10868] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1272'. [ 227.430529][T10871] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1272'. [ 227.799096][ T1316] net_ratelimit: 31 callbacks suppressed [ 227.799122][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 227.938636][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 228.049628][T10907] sock: sock_timestamping_bind_phc: sock not bind to device [ 228.063167][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 228.122669][ T8834] hid-generic 0005:0C45:0058.0002: item fetching failed at offset 0/1 [ 228.149454][ T8834] hid-generic 0005:0C45:0058.0002: probe with driver hid-generic failed with error -22 [ 228.212282][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 228.284912][T10918] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1287'. [ 228.332753][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 228.380438][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1287'. [ 228.424086][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.433681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.468563][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 228.598097][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 228.647845][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 228.674137][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 228.690965][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1291'. [ 228.709265][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 228.740202][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 228.878194][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 228.916864][T10942] netlink: 'syz.3.1294': attribute type 3 has an invalid length. [ 228.997319][T10948] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1297'. [ 229.007115][T10948] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1297'. [ 229.016850][T10948] netlink: 'syz.4.1297': attribute type 5 has an invalid length. [ 229.025506][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 229.048103][T10948] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1297'. [ 229.772701][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 229.916980][T10985] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1308'. [ 230.016192][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 230.143306][T10995] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 230.211113][T10996] batadv0: entered promiscuous mode [ 230.216400][T10996] batadv0: entered allmulticast mode [ 230.311730][T10995] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 231.571416][T11044] lo speed is unknown, defaulting to 1000 [ 232.087169][ T5847] block nbd17: Receive control failed (result -107) [ 232.157177][T11046] nbd17: detected capacity change from 0 to 256 [ 232.267098][ T5855] block nbd17: Dead connection, failed to find a fallback [ 232.282072][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.287335][ T5855] block nbd17: shutting down sockets [ 232.309024][ T5855] blk_print_req_error: 27 callbacks suppressed [ 232.309044][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.355867][ T5855] buffer_io_error: 27 callbacks suppressed [ 232.355892][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.391197][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.412618][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.428964][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.448749][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.472021][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.493499][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.516006][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.535810][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.554768][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.570593][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.588561][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.608195][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.627616][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.648883][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.661768][ T5855] ldm_validate_partition_table(): Disk read failed. [ 232.687388][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.705670][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.760076][ T5855] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.769903][ T5855] Buffer I/O error on dev nbd17, logical block 0, async page read [ 232.778601][ T5855] Dev nbd17: unable to read RDB block 0 [ 232.785041][ T5855] nbd17: unable to read partition table [ 232.793856][ T5855] ldm_validate_partition_table(): Disk read failed. [ 232.831918][ T5855] Dev nbd17: unable to read RDB block 0 [ 232.849242][ T5855] nbd17: unable to read partition table [ 232.858769][ T9659] net_ratelimit: 26 callbacks suppressed [ 232.858791][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 233.135802][T11076] 0ªX¹¦À: renamed from caif0 [ 233.183929][T11076] 0ªX¹¦À: entered allmulticast mode [ 233.199848][T11076] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 233.260373][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 233.393994][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 233.508143][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 233.625824][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 233.652372][T11100] __nla_validate_parse: 14 callbacks suppressed [ 233.652392][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1342'. [ 233.699909][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1342'. [ 233.735517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.748122][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 233.774006][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.813469][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 233.825612][T11107] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1344'. [ 233.861833][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 233.882571][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 234.006572][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1345'. [ 234.033444][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1345'. [ 234.038430][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 234.084456][T11115] batadv0: entered promiscuous mode [ 234.134722][T11115] batadv0: left promiscuous mode [ 234.209090][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 234.235918][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1348'. [ 234.754862][T11150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1357'. [ 234.919097][T11160] veth1_virt_wifi: entered promiscuous mode [ 235.183499][T11165] pim6reg1: entered promiscuous mode [ 235.196798][T11165] pim6reg1: entered allmulticast mode [ 235.234737][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1364'. [ 239.547006][T11238] »»»»»»: renamed from veth1_vlan (while UP) [ 239.562668][T11240] ipvlan1: entered promiscuous mode [ 239.604898][ T9661] net_ratelimit: 16 callbacks suppressed [ 239.604920][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 239.758923][T11252] __nla_validate_parse: 12 callbacks suppressed [ 239.758945][T11252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1388'. [ 239.848776][T11239] ipvlan1: left promiscuous mode [ 239.859804][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 239.989004][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 240.107768][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 240.137441][T11268] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 240.175662][T11259] delete_channel: no stack [ 240.260239][T11268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1393'. [ 240.274290][T11275] SET target dimension over the limit! [ 240.280439][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 240.292733][T11273] SET target dimension over the limit! [ 240.408192][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 240.410023][T11279] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1398'. [ 240.470152][T11279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1398'. [ 240.544626][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 240.666566][T11293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.674800][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 240.699734][T11292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1403'. [ 240.730908][T11292] unsupported nlmsg_type 40 [ 240.779071][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 240.918145][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 240.976647][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 241.006900][T11304] lo speed is unknown, defaulting to 1000 [ 241.151804][T11305] lo speed is unknown, defaulting to 1000 [ 241.188710][T11316] netlink: 'syz.1.1411': attribute type 10 has an invalid length. [ 241.196600][T11316] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1411'. [ 241.206953][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 241.257170][T11316] team0: entered promiscuous mode [ 241.258262][T11306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1409'. [ 241.264374][T11316] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.313683][T11316] batman_adv: batadv0: Interface activated: team0 [ 241.333008][T11316] batman_adv: batadv0: Interface deactivated: team0 [ 241.340682][ T5847] block nbd18: Receive control failed (result -107) [ 241.352865][T11316] batman_adv: batadv0: Removing interface: team0 [ 241.382211][T11316] bridge0: port 1(team0) entered blocking state [ 241.398459][T11306] nbd18: detected capacity change from 0 to 256 [ 241.408274][T11316] bridge0: port 1(team0) entered disabled state [ 241.414761][T11316] team0: entered allmulticast mode [ 241.420667][T11316] vlan0: entered allmulticast mode [ 241.428427][T11316] veth0_vlan: entered allmulticast mode [ 241.444155][T11316] bridge0: port 1(team0) entered blocking state [ 241.450636][T11316] bridge0: port 1(team0) entered forwarding state [ 241.505203][T11308] lo speed is unknown, defaulting to 1000 [ 241.842677][T11319] lo speed is unknown, defaulting to 1000 [ 242.855779][T11358] ip6gretap0: entered promiscuous mode [ 242.884453][T11358] batadv_slave_0: entered promiscuous mode [ 242.911222][T11358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.928145][T11358] Cannot create hsr debugfs directory [ 243.584467][T11381] lo speed is unknown, defaulting to 1000 [ 243.605017][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 244.459532][ T5847] block nbd19: Receive control failed (result -107) [ 244.578970][T11384] nbd19: detected capacity change from 0 to 256 [ 244.848096][ T52] net_ratelimit: 13 callbacks suppressed [ 244.848122][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 244.987619][ T8807] IPVS: starting estimator thread 0... [ 244.998326][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 245.089122][T11401] IPVS: using max 19 ests per chain, 45600 per kthread [ 245.139202][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 245.358364][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 245.479468][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 246.059347][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 246.213381][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 246.348849][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 246.471347][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 246.608355][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 247.503759][T11487] FAULT_INJECTION: forcing a failure. [ 247.503759][T11487] name failslab, interval 1, probability 0, space 0, times 0 [ 247.527986][T11487] CPU: 1 UID: 0 PID: 11487 Comm: syz.1.1451 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 247.538824][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.548932][T11487] Call Trace: [ 247.552242][T11487] [ 247.555200][T11487] dump_stack_lvl+0x241/0x360 [ 247.559936][T11487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.565183][T11487] ? __pfx__printk+0x10/0x10 [ 247.569835][T11487] should_fail_ex+0x3b0/0x4e0 [ 247.574562][T11487] should_failslab+0xac/0x100 [ 247.579303][T11487] ? skb_clone+0x20c/0x390 [ 247.583762][T11487] kmem_cache_alloc_noprof+0x70/0x380 [ 247.589200][T11487] skb_clone+0x20c/0x390 [ 247.593487][T11487] __netlink_deliver_tap+0x3cc/0x7f0 [ 247.598826][T11487] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.604065][T11487] netlink_deliver_tap+0x19d/0x1b0 [ 247.609223][T11487] netlink_unicast+0x7c4/0x990 [ 247.614049][T11487] ? __pfx_netlink_unicast+0x10/0x10 [ 247.619375][T11487] ? __virt_addr_valid+0x45f/0x530 [ 247.624617][T11487] ? __phys_addr_symbol+0x2f/0x70 [ 247.629683][T11487] ? __check_object_size+0x47a/0x730 [ 247.635015][T11487] netlink_sendmsg+0x8e4/0xcb0 [ 247.639834][T11487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.645163][T11487] ? aa_sock_msg_perm+0x91/0x160 [ 247.650148][T11487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.655471][T11487] __sock_sendmsg+0x221/0x270 [ 247.660201][T11487] ____sys_sendmsg+0x52a/0x7e0 [ 247.665017][T11487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.670344][T11487] ? __fget_files+0x2a/0x410 [ 247.674986][T11487] ? __fget_files+0x2a/0x410 [ 247.679641][T11487] __sys_sendmsg+0x269/0x350 [ 247.684290][T11487] ? __pfx_lock_release+0x10/0x10 [ 247.689381][T11487] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.694560][T11487] ? __pfx_vfs_write+0x10/0x10 [ 247.699390][T11487] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.705761][T11487] ? do_syscall_64+0x100/0x230 [ 247.710588][T11487] ? do_syscall_64+0xb6/0x230 [ 247.715310][T11487] do_syscall_64+0xf3/0x230 [ 247.719858][T11487] ? clear_bhb_loop+0x35/0x90 [ 247.724588][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.730534][T11487] RIP: 0033:0x7fb779185d29 [ 247.734987][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.754638][T11487] RSP: 002b:00007fb77a029038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.763107][T11487] RAX: ffffffffffffffda RBX: 00007fb779375fa0 RCX: 00007fb779185d29 [ 247.771125][T11487] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 247.779138][T11487] RBP: 00007fb77a029090 R08: 0000000000000000 R09: 0000000000000000 [ 247.787152][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.795166][T11487] R13: 0000000000000000 R14: 00007fb779375fa0 R15: 00007ffd2b62d798 [ 247.803198][T11487] [ 247.974916][T11492] __nla_validate_parse: 3 callbacks suppressed [ 247.974941][T11492] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1453'. [ 247.996909][T11492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1453'. [ 248.015704][T11495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1455'. [ 248.028296][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 248.267837][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 248.536602][T11518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1462'. [ 248.879810][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.892023][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.902106][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.903854][T11526] netlink: 'syz.1.1465': attribute type 10 has an invalid length. [ 248.920693][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.930818][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.933622][T11526] netlink: 'syz.1.1465': attribute type 4 has an invalid length. [ 248.946265][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.015566][T11523] lo speed is unknown, defaulting to 1000 [ 249.169030][T11528] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 249.263663][T11528] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 249.375421][T11523] chnl_net:caif_netlink_parms(): no params data found [ 249.400021][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 249.416813][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 249.444714][T11543] macsec2: entered allmulticast mode [ 249.454205][T11543] veth1_macvtap: entered allmulticast mode [ 249.472088][T11543] veth1_macvtap: left allmulticast mode [ 249.520643][T11552] pimreg: entered allmulticast mode [ 249.644436][T11523] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.663754][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.693817][T11523] bridge_slave_0: entered allmulticast mode [ 249.707059][T11523] bridge_slave_0: entered promiscuous mode [ 249.717604][T11523] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.758077][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.767794][T11523] bridge_slave_1: entered allmulticast mode [ 249.780922][T11523] bridge_slave_1: entered promiscuous mode [ 249.872775][T11523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.895770][T11523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.918317][ T11] net_ratelimit: 24 callbacks suppressed [ 249.918339][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.011619][T11523] team0: Port device team_slave_0 added [ 250.032179][T11523] team0: Port device team_slave_1 added [ 250.125841][T11523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.134037][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.165781][T11523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.180503][T11523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.187762][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.246942][T11584] netlink: 'syz.3.1478': attribute type 8 has an invalid length. [ 250.258003][T11523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.329124][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.431036][T11592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1480'. [ 250.435715][T11523] hsr_slave_0: entered promiscuous mode [ 250.460391][T11523] hsr_slave_1: entered promiscuous mode [ 250.485890][T11523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.501412][T11523] Cannot create hsr debugfs directory [ 250.758758][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 250.888126][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.050837][ T54] Bluetooth: hci0: command tx timeout [ 251.259822][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.292101][T11618] macsec2: entered allmulticast mode [ 251.304602][T11618] macvlan0: entered allmulticast mode [ 251.319148][T11618] macvlan0: left allmulticast mode [ 251.437085][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.573124][T11627] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.581901][T11627] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.585488][T11631] sctp: [Deprecated]: syz.3.1490 (pid 11631) Use of int in max_burst socket option. [ 251.585488][T11631] Use struct sctp_assoc_value instead [ 251.590225][T11627] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.590288][T11627] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.604438][T11627] vxlan0: entered promiscuous mode [ 251.668389][T11627] vxlan0: entered allmulticast mode [ 251.729774][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 251.739080][T11627] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.747551][T11627] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.756527][T11627] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.765136][T11627] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.854469][T11637] lo speed is unknown, defaulting to 1000 [ 252.028869][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.150272][T11523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.173645][T11523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.210122][T11523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.236417][T11523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.500259][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.541432][T11664] tun0: tun_chr_ioctl cmd 1074025677 [ 252.555068][T11664] tun0: linktype set to 823 [ 252.568642][T11670] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20000 [ 252.628312][T11523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.698629][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.723440][T11523] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.769579][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.776747][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.874052][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.881391][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.069204][ T54] Bluetooth: hci0: command tx timeout [ 253.159223][T11679] __nla_validate_parse: 2 callbacks suppressed [ 253.159248][T11679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1500'. [ 253.223053][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 253.235540][T11684] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1502'. [ 253.246440][T11675] bridge0: port 1(team0) entered disabled state [ 253.585586][T11675] veth0_vlan: left allmulticast mode [ 253.725264][T11675] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.744421][T11675] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.777976][T11675] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.786963][T11675] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.864645][T11675] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 253.897468][T11675] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.907300][T11675] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.917151][T11675] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 253.926919][T11675] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.080743][T11677] infiniband syz0: set active [ 254.091000][T11677] infiniband syz0: set active [ 254.109735][T11677] infiniband syz0: set active [ 254.166497][T11677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.189228][T11677] bridge0: port 1(team0) entered blocking state [ 254.195648][T11677] bridge0: port 1(team0) entered forwarding state [ 254.210308][T11677] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.237873][T11677] 0ªX¹¦À: left allmulticast mode [ 254.243837][T11677] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 254.304142][ T12] bridge0: port 1(team0) entered disabled state [ 254.375007][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 254.442511][T11693] sctp: [Deprecated]: syz.0.1503 (pid 11693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.442511][T11693] Use struct sctp_sack_info instead [ 254.498152][ T8834] lo speed is unknown, defaulting to 1000 [ 254.526722][T11700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.579587][ T8834] lo speed is unknown, defaulting to 1000 [ 254.593699][ T2150] lo speed is unknown, defaulting to 1000 [ 254.623216][T11704] lo speed is unknown, defaulting to 1000 [ 254.632401][ T8] lo speed is unknown, defaulting to 1000 [ 254.742550][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 254.784019][T11714] netlink: 'syz.1.1510': attribute type 11 has an invalid length. [ 254.818051][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 254.893587][T11708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1506'. [ 254.971082][ T3022] net_ratelimit: 6 callbacks suppressed [ 254.971104][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.108506][T11523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.148586][ T54] Bluetooth: hci0: command tx timeout [ 255.198498][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.300212][T11523] veth0_vlan: entered promiscuous mode [ 255.394268][T11523] veth1_vlan: entered promiscuous mode [ 255.470524][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.738124][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.762549][T11523] veth0_macvtap: entered promiscuous mode [ 255.798597][T11740] lo speed is unknown, defaulting to 1000 [ 255.820116][T11523] veth1_macvtap: entered promiscuous mode [ 255.853954][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.864751][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.883482][T11523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.918187][T11523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.958998][T11523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.996640][T11523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.030477][T11523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.047297][T11523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.067139][T11523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.076555][T11523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.283358][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.306436][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 256.384207][T11756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.403200][T11756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.429542][ T9659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.468196][ T9659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.480044][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 256.505599][T11756] xt_hashlimit: size too large, truncated to 1048576 [ 256.708621][T11759] vlan0: entered promiscuous mode [ 256.867058][T11759] team0: Port device vlan0 added [ 256.920494][ T9660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.934564][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.948623][ T9660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.104016][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 257.262872][ T54] Bluetooth: hci0: command tx timeout [ 257.288383][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 257.452926][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 257.557815][T11794] netlink: 'syz.1.1522': attribute type 2 has an invalid length. [ 257.588860][T11794] netlink: 'syz.1.1522': attribute type 9 has an invalid length. [ 257.598376][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 257.680840][T11792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'. [ 257.719211][T11794] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1522'. [ 257.853786][T11796] netlink: 'syz.0.1524': attribute type 1 has an invalid length. [ 258.156792][T11796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.260121][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 258.325400][T11804] bond3: (slave ip6gretap2): making interface the new active one [ 258.386679][T11804] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 258.452819][T11810] vlan0: entered allmulticast mode [ 258.474699][T11810] bond3: entered allmulticast mode [ 258.488998][T11810] ip6gretap2: entered allmulticast mode [ 259.280863][T11826] ieee802154 phy0 wpan0: encryption failed: -126 [ 259.440989][T11823] lo speed is unknown, defaulting to 1000 [ 259.585927][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.990209][ T3574] net_ratelimit: 10 callbacks suppressed [ 259.990233][ T3574] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 259.998009][T11837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1532'. [ 260.168151][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.241798][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1534'. [ 260.298172][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.408511][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.545635][T11847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1536'. [ 260.558959][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.614692][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.624765][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.633264][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.644276][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.652255][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.661267][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.670620][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.719818][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.738428][T11850] lo speed is unknown, defaulting to 1000 [ 260.810639][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.839780][T11854] gretap0: entered promiscuous mode [ 260.846182][T11854] vlan4: entered promiscuous mode [ 260.896004][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.048182][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.165612][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 261.190196][ T11] bridge_slave_1: left allmulticast mode [ 261.201942][ T11] bridge_slave_1: left promiscuous mode [ 261.212428][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.237257][ T11] bridge_slave_0: left allmulticast mode [ 261.243152][ T11] bridge_slave_0: left promiscuous mode [ 261.249221][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.760794][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.772287][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.784622][ T11] bond0 (unregistering): Released all slaves [ 261.796942][T11864] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1541'. [ 261.808574][T11864] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 261.861560][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 262.056816][T11883] netlink: 'syz.1.1545': attribute type 5 has an invalid length. [ 262.066163][T11882] netlink: 'syz.1.1545': attribute type 5 has an invalid length. [ 262.161011][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 262.396472][T11850] chnl_net:caif_netlink_parms(): no params data found [ 262.451749][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 262.599633][T11901] veth7: entered promiscuous mode [ 262.681707][ T11] hsr_slave_0: left promiscuous mode [ 262.710039][ T11] hsr_slave_1: left promiscuous mode [ 262.723501][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.740543][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.759228][ T5847] Bluetooth: hci0: command tx timeout [ 262.779672][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.787135][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.861140][ T11] veth1_macvtap: left promiscuous mode [ 262.867575][ T11] veth0_macvtap: left promiscuous mode [ 262.874456][ T11] veth1_vlan: left promiscuous mode [ 262.892192][ T11] veth0_vlan: left promiscuous mode [ 263.049188][T11923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1556'. [ 263.238461][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 263.811593][ T11] team0 (unregistering): Port device team_slave_1 removed [ 263.932282][ T11] team0 (unregistering): Port device team_slave_0 removed [ 264.407731][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.415722][T11850] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.423164][T11850] bridge_slave_0: entered allmulticast mode [ 264.431111][T11850] bridge_slave_0: entered promiscuous mode [ 264.439842][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 264.535309][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.543516][T11850] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.551106][T11850] bridge_slave_1: entered allmulticast mode [ 264.563875][T11850] bridge_slave_1: entered promiscuous mode [ 264.669692][T11936] netlink: 'syz.4.1559': attribute type 11 has an invalid length. [ 264.685588][T11850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.727035][T11850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.807374][T11850] team0: Port device team_slave_0 added [ 264.828408][ T5847] Bluetooth: hci0: command tx timeout [ 264.846883][T11850] team0: Port device team_slave_1 added [ 265.010007][T11850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.027442][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.037607][T11949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1563'. [ 265.081654][T11850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.114287][T11850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.128222][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.177539][T11850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.214123][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 265.239789][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 265.289851][T11850] hsr_slave_0: entered promiscuous mode [ 265.299251][T11850] hsr_slave_1: entered promiscuous mode [ 265.305962][T11850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.318088][T11850] Cannot create hsr debugfs directory [ 265.513709][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 265.525366][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 265.540977][T11966] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1569'. [ 265.552145][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 265.568051][T11966] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1569'. [ 265.571460][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 265.717499][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 265.764124][T11977] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 265.773376][ T3574] net_ratelimit: 3 callbacks suppressed [ 265.773397][ T3574] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 265.948359][ T3574] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.042592][T11990] xt_CT: No such helper "netbios-ns" [ 266.132698][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.308921][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.317300][T11850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.342168][T11850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.357306][T11850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.402080][T12005] lo speed is unknown, defaulting to 1000 [ 266.410532][T11850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.478321][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.908631][ T5847] Bluetooth: hci0: command tx timeout [ 267.078146][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.088373][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 267.123851][T11850] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.164569][T12021] lo speed is unknown, defaulting to 1000 [ 267.179459][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.186809][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.201534][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.208805][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.479440][ T3574] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 267.597013][ T3574] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 267.750801][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 267.889608][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 267.946471][T11850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.996217][T11850] veth0_vlan: entered promiscuous mode [ 268.009229][T11850] veth1_vlan: entered promiscuous mode [ 268.037741][T11850] veth0_macvtap: entered promiscuous mode [ 268.055021][T11850] veth1_macvtap: entered promiscuous mode [ 268.085184][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.104491][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.127088][T11850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.150949][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.171140][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.190053][T11850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.221110][T11850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.238868][T11850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.255723][T11850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.279444][T11850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.411982][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.420302][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.467822][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.486095][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.696477][T12053] hsr0: left promiscuous mode [ 268.773005][T12053] team0: Device ipvlan2 failed to register rx_handler [ 269.038989][T12055] lo speed is unknown, defaulting to 1000 [ 269.685625][T12072] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 270.088772][T12085] __nla_validate_parse: 6 callbacks suppressed [ 270.088798][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 270.132238][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 270.249059][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.259731][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.268796][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.281098][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.290656][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.298370][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.464287][ T9659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.651285][ T9659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.795886][ T9659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.832412][T12088] lo speed is unknown, defaulting to 1000 [ 271.080124][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1605'. [ 272.350223][ T54] Bluetooth: hci0: command tx timeout [ 273.302806][ T9659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.334181][T12116] tap0: tun_chr_ioctl cmd 2184212994 [ 273.379120][ T52] net_ratelimit: 10 callbacks suppressed [ 273.379143][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 273.510459][T12124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 273.608204][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 273.694854][T12130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.727831][T12130] bond0: (slave bond3): Enslaving as an active interface with an up link [ 273.749432][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 273.850785][ T9659] bridge_slave_1: left allmulticast mode [ 273.856508][ T9659] bridge_slave_1: left promiscuous mode [ 273.862404][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.939703][ T9659] bridge_slave_0: left allmulticast mode [ 273.945452][ T9659] bridge_slave_0: left promiscuous mode [ 273.962185][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.979313][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1612'. [ 273.982712][T12151] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1611'. [ 273.998018][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1612'. [ 274.428816][ T54] Bluetooth: hci0: command tx timeout [ 274.541398][T12166] x_tables: duplicate underflow at hook 2 [ 274.630641][ T9659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.642689][ T9659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.655249][ T9659] bond0 (unregistering): Released all slaves [ 274.720589][T12150] batadv0: entered promiscuous mode [ 274.750359][T12150] dummy0: entered promiscuous mode [ 274.779900][T12160] lo: entered allmulticast mode [ 274.796691][T12160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.938537][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 274.946785][T12088] chnl_net:caif_netlink_parms(): no params data found [ 275.067633][T12173] can: request_module (can-proto-4) failed. [ 275.379041][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 275.622152][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.649106][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.656631][T12088] bridge_slave_0: entered allmulticast mode [ 275.683856][T12088] bridge_slave_0: entered promiscuous mode [ 275.717750][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.725094][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.735262][T12088] bridge_slave_1: entered allmulticast mode [ 275.803632][T12088] bridge_slave_1: entered promiscuous mode [ 275.863185][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 275.875460][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 275.908796][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 275.978399][T12185] hsr_slave_0: left promiscuous mode [ 275.991705][T12185] hsr_slave_1: left promiscuous mode [ 276.128207][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 276.243908][ T9659] hsr_slave_0: left promiscuous mode [ 276.250609][ T9659] hsr_slave_1: left promiscuous mode [ 276.256974][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.264761][ T9659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.289168][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.307764][ T9659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.368474][ T9659] veth1_macvtap: left promiscuous mode [ 276.374161][ T9659] veth0_macvtap: left promiscuous mode [ 276.388071][ T9659] veth1_vlan: left promiscuous mode [ 276.393472][ T9659] veth0_vlan: left promiscuous mode [ 276.527400][ T54] Bluetooth: hci0: command tx timeout [ 276.989493][T12240] x_tables: duplicate underflow at hook 2 [ 277.138304][ T9659] team0 (unregistering): Port device team_slave_1 removed [ 277.200487][ T9659] team0 (unregistering): Port device team_slave_0 removed [ 277.818367][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 277.863919][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.909800][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.995771][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 278.075841][T12249] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1634'. [ 278.170166][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 278.188798][T12088] team0: Port device team_slave_0 added [ 278.195998][T12244] netlink: 'syz.3.1635': attribute type 2 has an invalid length. [ 278.222012][T12088] team0: Port device team_slave_1 added [ 278.303535][T12249] pimreg: entered allmulticast mode [ 278.399959][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.406986][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.452579][T12264] netlink: 'syz.1.1639': attribute type 3 has an invalid length. [ 278.488436][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.536916][T12256] pimreg: left allmulticast mode [ 278.555526][T12256] dvmrp8: left allmulticast mode [ 278.588148][ T54] Bluetooth: hci0: command tx timeout [ 278.721428][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 278.736044][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.766288][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.815010][ T8834] IPVS: starting estimator thread 0... [ 278.825726][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.848602][T12262] lo speed is unknown, defaulting to 1000 [ 278.850340][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 278.908260][T12276] IPVS: using max 20 ests per chain, 48000 per kthread [ 279.035244][T12088] hsr_slave_0: entered promiscuous mode [ 279.057710][T12088] hsr_slave_1: entered promiscuous mode [ 279.548894][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.710148][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.722950][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 279.755615][T12301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1649'. [ 279.838180][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 279.937646][T12305] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 279.968600][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.104150][T12307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1650'. [ 280.124435][T12311] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 280.132563][T12311] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 280.169729][T12088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.186156][T12088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.197740][T12088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.216345][T12088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.238116][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.320272][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.340979][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.374896][T12088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.385515][T12088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.411262][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.418519][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.454187][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.461445][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.481916][T12314] netlink: 'syz.3.1652': attribute type 3 has an invalid length. [ 280.519437][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.571483][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.700031][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.751370][T12088] veth0_vlan: entered promiscuous mode [ 280.784405][T12088] veth1_vlan: entered promiscuous mode [ 280.818515][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 280.856951][T12088] veth0_macvtap: entered promiscuous mode [ 280.942132][T12088] veth1_macvtap: entered promiscuous mode [ 280.995894][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'. [ 281.022465][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.048362][T12342] sctp: [Deprecated]: syz.4.1658 (pid 12342) Use of int in maxseg socket option. [ 281.048362][T12342] Use struct sctp_assoc_value instead [ 281.058101][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.117733][T12088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.131697][T12088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.154561][T12088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.179161][T12088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.249562][T12088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.278349][T12088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.287151][T12088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.305088][T12088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.421064][ T9660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.437227][ T9660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.502594][T12349] ªªªªªª9: renamed from vlan0 (while UP) [ 281.532878][ T9661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.542262][ T9661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.716594][T12357] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 282.007149][T12371] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1670'. [ 282.056567][T12365] netlink: 'syz.4.1670': attribute type 10 has an invalid length. [ 282.178029][T12382] vlan0: entered promiscuous mode [ 282.183258][T12382] gretap0: entered promiscuous mode [ 282.188968][T12382] vlan0: entered allmulticast mode [ 282.194253][T12382] gretap0: entered allmulticast mode [ 282.324557][T12388] bridge0: port 1(team0) entered disabled state [ 282.467736][T12388] team0 (unregistering): left allmulticast mode [ 282.474374][T12388] vlan0: left allmulticast mode [ 282.480057][T12388] team0 (unregistering): left promiscuous mode [ 282.486504][T12388] bridge0: port 1(team0) entered disabled state [ 282.498951][T12388] team0 (unregistering): Port device vlan0 removed [ 282.522680][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 282.674725][T12395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.711013][T12395] netlink: 'syz.1.1679': attribute type 10 has an invalid length. [ 282.779806][T12392] team0 (unregistering): Port device team_slave_0 removed [ 282.788982][T12392] team0 (unregistering): Port device team_slave_1 removed [ 282.815148][T12392] team0 (unregistering): Port device bridge0 removed [ 282.829853][T12392] team0 (unregistering): Port device netdevsim0 removed [ 282.893637][T12395] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 282.980414][ T9659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.558334][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 283.748282][ T9661] net_ratelimit: 21 callbacks suppressed [ 283.748309][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 283.878254][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.888369][ T9661] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 283.898196][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.912654][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.970565][T12409] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1682'. [ 283.980062][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.997157][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.998986][T12409] xt_time: unknown flags 0x4 [ 284.009965][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.012932][T12409] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 284.029926][T12409] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 284.041873][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.060330][T12406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.092394][ T9659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.111425][T12411] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3696. macoff=96 [ 284.121937][T12411] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1683'. [ 284.159280][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.289448][ T9659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.328327][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.336806][T12418] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 284.473335][ T9659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.518138][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 284.586410][ T9659] bridge_slave_1: left allmulticast mode [ 284.592729][ T9659] bridge_slave_1: left promiscuous mode [ 284.599339][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.609147][ T9659] bridge_slave_0: left allmulticast mode [ 284.614844][ T9659] bridge_slave_0: left promiscuous mode [ 284.620758][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.966300][ T9659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.978687][ T9659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.998269][ T9659] bond0 (unregistering): Released all slaves [ 285.018163][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.129524][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.279572][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 285.437338][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1691'. [ 285.565448][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.575596][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.589731][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.601577][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.611749][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.620485][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.706770][T12444] lo speed is unknown, defaulting to 1000 [ 285.744069][ T9659] hsr_slave_0: left promiscuous mode [ 285.758708][ T9659] hsr_slave_1: left promiscuous mode [ 285.769627][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.788913][ T9659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.805962][ T9659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.825201][ T9659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.839461][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1693'. [ 285.886837][ T9659] veth1_macvtap: left promiscuous mode [ 285.900016][ T9659] veth0_macvtap: left promiscuous mode [ 285.905684][ T9659] veth1_vlan: left promiscuous mode [ 285.918162][ T9659] veth0_vlan: left promiscuous mode [ 286.113646][T12456] x_tables: duplicate underflow at hook 1 [ 286.242619][T12462] Bluetooth: MGMT ver 1.23 [ 286.609235][ T9659] team0 (unregistering): Port device team_slave_1 removed [ 286.658391][ T9659] team0 (unregistering): Port device team_slave_0 removed [ 287.130382][T12453] tun0: tun_chr_ioctl cmd 1074025673 [ 287.408521][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1700'. [ 287.470341][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1700'. [ 287.551883][T12477] bond3: entered promiscuous mode [ 287.596017][T12485] bond3 (unregistering): Released all slaves [ 287.657332][T12444] chnl_net:caif_netlink_parms(): no params data found [ 287.708194][ T5847] Bluetooth: hci0: command tx timeout [ 287.784627][T12480] lo speed is unknown, defaulting to 1000 [ 287.791150][T12487] veth0_to_bridge: entered promiscuous mode [ 287.924709][T12498] netem: change failed [ 287.963506][T12444] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.988319][T12444] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.995895][T12444] bridge_slave_0: entered allmulticast mode [ 288.008664][T12444] bridge_slave_0: entered promiscuous mode [ 288.023632][T12499] netem: change failed [ 288.038121][T12444] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.059218][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.069924][T12444] bridge_slave_1: entered allmulticast mode [ 288.106209][T12444] bridge_slave_1: entered promiscuous mode [ 288.213542][T12444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.244864][T12444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.441584][T12479] veth0_to_bridge: left promiscuous mode [ 288.478201][T12444] team0: Port device team_slave_0 added [ 288.534412][T12444] team0: Port device team_slave_1 added [ 288.685939][T12444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.721289][T12444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.794169][T12444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.821577][T12444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.848012][T12444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.900516][T12444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.432099][T12523] bond0 (unregistering): (slave bond2): Releasing backup interface [ 289.442455][T12523] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 289.467372][T12523] bond0 (unregistering): Released all slaves [ 289.509086][ T3022] net_ratelimit: 5 callbacks suppressed [ 289.509110][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 289.640767][T12444] hsr_slave_0: entered promiscuous mode [ 289.658473][T12444] hsr_slave_1: entered promiscuous mode [ 289.819852][ T5847] Bluetooth: hci0: command tx timeout [ 289.823287][T12530] x_tables: duplicate underflow at hook 1 [ 289.892489][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 289.954710][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 290.009427][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.229769][T12535] lo speed is unknown, defaulting to 1000 [ 290.237692][T12536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1719'. [ 290.248750][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 290.347533][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'. [ 290.598606][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'. [ 290.607696][T12537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1718'. [ 290.648940][T12542] netlink: 'syz.0.1720': attribute type 21 has an invalid length. [ 290.657346][T12542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.664699][T12542] IPv6: NLM_F_CREATE should be set when creating new route [ 290.672075][T12542] IPv6: NLM_F_CREATE should be set when creating new route [ 290.679365][T12542] IPv6: NLM_F_CREATE should be set when creating new route [ 290.719102][ T5847] block nbd20: Receive control failed (result -107) [ 290.729611][T12537] nbd20: detected capacity change from 0 to 256 [ 290.865350][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.029489][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.136730][T12555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1724'. [ 291.158470][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.185475][T12555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1724'. [ 291.298397][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.476847][T12567] tipc: Started in network mode [ 291.482002][T12567] tipc: Node identity 080211000001, cluster identity 4711 [ 291.519347][T12567] tipc: Enabled bearer , priority 0 [ 291.568128][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 291.599494][T12444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.606461][T12570] netlink: 'syz.0.1727': attribute type 10 has an invalid length. [ 291.678197][T12444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.729712][T12444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.816729][T12444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 291.851988][T12582] netlink: 'syz.0.1730': attribute type 29 has an invalid length. [ 291.868270][ T5847] Bluetooth: hci0: command tx timeout [ 291.882642][T12582] netlink: 'syz.0.1730': attribute type 10 has an invalid length. [ 292.011987][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 292.133901][T12444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.190086][ T1316] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 292.230512][T12444] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.275233][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.282433][ T9659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.344012][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.351257][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.520876][ T25] tipc: Node number set to 134418688 [ 292.524396][T12593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.272502][T12444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.540389][T12444] veth0_vlan: entered promiscuous mode [ 293.634267][T12444] veth1_vlan: entered promiscuous mode [ 293.652157][T12601] ieee802154 phy0 wpan0: encryption failed: -126 [ 293.750453][T12604] lo speed is unknown, defaulting to 1000 [ 293.781544][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 293.801310][T12444] veth0_macvtap: entered promiscuous mode [ 293.846579][T12444] veth1_macvtap: entered promiscuous mode [ 293.875955][T12444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.886772][T12444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.898354][T12444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.908323][T12444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.918953][T12444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.930082][T12444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.940290][T12444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.949314][T12444] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.958570][T12444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.967316][T12444] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.969589][ T5847] Bluetooth: hci0: command tx timeout [ 294.072915][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1735'. [ 294.096286][T12605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1735'. [ 294.163926][ T5847] block nbd21: Receive control failed (result -107) [ 294.209820][T12605] nbd21: detected capacity change from 0 to 256 [ 294.404562][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.421380][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.527666][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.543806][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.773953][T12646] net_ratelimit: 14 callbacks suppressed [ 294.773979][T12646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.798790][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 294.912143][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.050630][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.139517][T12656] ipt_ECN: cannot use operation on non-tcp rule [ 295.146045][T12656] ipt_ECN: cannot use operation on non-tcp rule [ 295.165281][T12656] ipt_ECN: cannot use operation on non-tcp rule [ 295.172229][T12656] ipt_ECN: cannot use operation on non-tcp rule [ 295.185110][T12656] ipt_ECN: cannot use operation on non-tcp rule [ 295.192660][T12656] ipt_ECN: cannot use operation on non-tcp rule [ 295.399908][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.509660][ T3022] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.570778][T12672] lo speed is unknown, defaulting to 1000 [ 295.618275][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.631334][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 295.723864][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 295.741314][T12677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1751'. [ 295.759511][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.872349][ T5847] block nbd22: Receive control failed (result -107) [ 295.898163][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 295.908249][T12677] nbd22: detected capacity change from 0 to 256 [ 296.008239][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 296.146505][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 296.450691][T12704] netlink: 900 bytes leftover after parsing attributes in process `syz.0.1762'. [ 296.591956][T12711] lo speed is unknown, defaulting to 1000 [ 296.952757][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.102555][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.201804][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.213337][T12715] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 297.224599][T12715] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1763'. [ 297.302992][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.429474][ T52] bridge_slave_1: left allmulticast mode [ 297.435226][ T52] bridge_slave_1: left promiscuous mode [ 297.441379][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.455323][ T52] bridge_slave_0: left allmulticast mode [ 297.461351][ T52] bridge_slave_0: left promiscuous mode [ 297.467066][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.137843][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.169847][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.199297][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.224280][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.232340][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.238102][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.248799][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.265144][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.277823][ T52] bond0 (unregistering): Released all slaves [ 298.296012][T12733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.569445][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 298.702286][T12750] lo speed is unknown, defaulting to 1000 [ 298.768145][T12764] Bluetooth: MGMT ver 1.23 [ 298.818342][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 298.829901][T12756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1769'. [ 298.874332][T12753] lo speed is unknown, defaulting to 1000 [ 298.893763][ T5848] block nbd23: Receive control failed (result -107) [ 298.933052][T12756] nbd23: detected capacity change from 0 to 256 [ 299.010652][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 299.417079][T12750] chnl_net:caif_netlink_parms(): no params data found [ 299.814254][T12805] sctp: [Deprecated]: syz.1.1780 (pid 12805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.814254][T12805] Use struct sctp_sack_info instead [ 299.863187][ T52] hsr_slave_0: left promiscuous mode [ 299.877300][ T52] hsr_slave_1: left promiscuous mode [ 299.933106][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.941220][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.950704][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.959411][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.992822][ T52] veth1_macvtap: left promiscuous mode [ 300.003408][ T52] veth0_macvtap: left promiscuous mode [ 300.012313][ T52] veth1_vlan: left promiscuous mode [ 300.017668][ T52] veth0_vlan: left promiscuous mode [ 300.268676][ T5848] Bluetooth: hci0: command tx timeout [ 300.696729][ T52] team0 (unregistering): Port device team_slave_1 removed [ 300.751082][ T52] team0 (unregistering): Port device team_slave_0 removed [ 301.298891][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.306048][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.338367][T12750] bridge_slave_0: entered allmulticast mode [ 301.345556][T12750] bridge_slave_0: entered promiscuous mode [ 301.380165][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.386222][T12821] netlink: 'syz.3.1787': attribute type 11 has an invalid length. [ 301.387317][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.402777][T12821] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1787'. [ 301.408553][T12750] bridge_slave_1: entered allmulticast mode [ 301.425109][T12750] bridge_slave_1: entered promiscuous mode [ 301.439191][ T9659] net_ratelimit: 15 callbacks suppressed [ 301.439208][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.615256][T12750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.649536][T12750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.700910][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 301.751384][T12834] netlink: 'syz.3.1791': attribute type 7 has an invalid length. [ 301.866566][T12750] team0: Port device team_slave_0 added [ 301.876625][T12750] team0: Port device team_slave_1 added [ 302.021612][T12750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.048695][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.101999][T12750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.116084][T12750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.123608][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.150167][T12750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.188535][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.327080][T12750] hsr_slave_0: entered promiscuous mode [ 302.358513][ T5848] Bluetooth: hci0: command tx timeout [ 302.388497][T12750] hsr_slave_1: entered promiscuous mode [ 302.416404][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.589763][T12874] lo speed is unknown, defaulting to 1000 [ 302.650071][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 302.755640][T12872] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 302.790164][T12872] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 302.813901][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.885797][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 302.903323][T12875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1803'. [ 302.984097][ T5848] block nbd24: Receive control failed (result -107) [ 303.029222][T12875] nbd24: detected capacity change from 0 to 256 [ 303.069304][ T52] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.188201][ T11] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.319017][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.438333][ T9660] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 303.521181][T12895] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1809'. [ 303.683786][T12750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.715316][T12750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 303.740758][T12750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 303.763103][T12750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.969358][T12750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.008476][T12750] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.031611][T12907] lo speed is unknown, defaulting to 1000 [ 304.060146][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.067266][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.106213][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.113440][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.129219][T12912] netlink: 'syz.3.1815': attribute type 12 has an invalid length. [ 304.148216][T12912] netlink: 'syz.3.1815': attribute type 1 has an invalid length. [ 304.176778][T12910] netlink: 'syz.1.1813': attribute type 1 has an invalid length. [ 304.428168][ T5848] Bluetooth: hci0: command tx timeout [ 304.642219][T12750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.865751][T12750] veth0_vlan: entered promiscuous mode [ 305.050108][T12750] veth1_vlan: entered promiscuous mode [ 305.150354][T12930] lo speed is unknown, defaulting to 1000 [ 305.176342][T12750] veth0_macvtap: entered promiscuous mode [ 305.231528][T12750] veth1_macvtap: entered promiscuous mode [ 305.294753][T12750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.327051][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.362739][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.387630][T12750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.417300][T12750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.431619][T12750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.444524][T12750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.456073][T12750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.732135][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.763962][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.866971][ T9659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.893565][ T9659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.188340][ T30] INFO: task udevd:5860 blocked for more than 143 seconds. [ 306.200042][ T30] Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 306.207766][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.258232][ T30] task:udevd state:D stack:20312 pid:5860 tgid:5860 ppid:1 flags:0x00004002 [ 306.294053][ T30] Call Trace: [ 306.306246][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 306.313271][ T30] [ 306.318794][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 306.349064][ T30] __schedule+0x1850/0x4c30 [ 306.353707][ T30] ? __pfx___schedule+0x10/0x10 [ 306.377131][ T30] ? __blk_flush_plug+0x449/0x500 [ 306.396987][ T30] ? __pfx_lock_release+0x10/0x10 [ 306.416062][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.422911][ T30] ? schedule+0x90/0x320 [ 306.445447][ T30] schedule+0x14b/0x320 [ 306.468748][ T30] schedule_timeout+0x15a/0x290 [ 306.473703][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 306.495770][ T30] ? __pfx_process_timeout+0x10/0x10 [ 306.501364][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 306.506904][ T30] nbd_queue_rq+0x7d9/0x2ef0 [ 306.511864][ T30] ? validate_chain+0x11e/0x5920 [ 306.516888][ T30] ? mark_lock+0x9a/0x360 [ 306.521477][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 306.526563][ T30] ? __lock_acquire+0x1397/0x2100 [ 306.531848][ T5848] Bluetooth: hci0: command tx timeout [ 306.537266][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 306.537323][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 306.549201][ T30] ? sbitmap_get+0x289/0x3f0 [ 306.553839][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 306.559931][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 306.565781][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 306.572260][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 306.579283][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 306.584608][ T30] ? __pfx___might_resched+0x10/0x10 [ 306.590259][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 306.595623][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 306.601644][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 306.607690][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 306.613126][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 306.618450][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 306.624065][ T30] ? __pfx_update_io_ticks+0x10/0x10 [ 306.629645][ T30] ? blk_add_rq_to_plug+0x308/0x4b0 [ 306.635064][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 306.641145][ T30] ? blk_mq_submit_bio+0xf74/0x2390 [ 306.646416][ T30] __blk_flush_plug+0x420/0x500 [ 306.651476][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 306.657519][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 306.663204][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.669695][ T30] __submit_bio+0x46a/0x560 [ 306.674263][ T30] ? __pfx___submit_bio+0x10/0x10 [ 306.679493][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 306.685486][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 306.691635][ T30] ? __pfx___might_resched+0x10/0x10 [ 306.697024][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 306.703342][ T30] block_read_full_folio+0x9b3/0xae0 [ 306.708797][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 306.714228][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 306.720206][ T30] filemap_read_folio+0x148/0x3b0 [ 306.725286][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 306.730854][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 306.736469][ T30] ? __filemap_get_folio+0x848/0x940 [ 306.741967][ T30] do_read_cache_folio+0x373/0x5b0 [ 306.747132][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 306.752749][ T30] read_part_sector+0xb3/0x260 [ 306.757579][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 306.762653][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 306.767522][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 306.773230][ T30] ? snprintf+0xda/0x120 [ 306.777541][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 306.783299][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 306.788190][ T30] ? vsnprintf+0x184/0x1da0 [ 306.792753][ T30] ? __pfx_snprintf+0x10/0x10 [ 306.797485][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 306.802620][ T30] bdev_disk_changed+0x72c/0x13f0 [ 306.807694][ T30] ? __pfx___might_resched+0x10/0x10 [ 306.813092][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 306.818666][ T30] ? wait_on_inode+0xc1/0x230 [ 306.823387][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 306.828717][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 306.833977][ T30] blkdev_get_whole+0x2d2/0x450 [ 306.838975][ T30] bdev_open+0x2d4/0xc50 [ 306.843267][ T30] blkdev_open+0x389/0x4f0 [ 306.847702][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 306.852739][ T30] do_dentry_open+0xbe1/0x1b70 [ 306.857572][ T30] vfs_open+0x3e/0x330 [ 306.861822][ T30] path_openat+0x2c84/0x3590 [ 306.866492][ T30] ? __pfx_path_openat+0x10/0x10 [ 306.871566][ T30] do_filp_open+0x27f/0x4e0 [ 306.876107][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 306.881203][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 306.886286][ T30] do_sys_openat2+0x13e/0x1d0 [ 306.891314][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 306.896591][ T30] __x64_sys_openat+0x247/0x2a0 [ 306.901732][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 306.907181][ T30] ? do_syscall_64+0x100/0x230 [ 306.912190][ T30] ? do_syscall_64+0xb6/0x230 [ 306.916909][ T30] do_syscall_64+0xf3/0x230 [ 306.921577][ T30] ? clear_bhb_loop+0x35/0x90 [ 306.926305][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.932320][ T30] RIP: 0033:0x7f71db7169a4 [ 306.936775][ T30] RSP: 002b:00007ffe54421140 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 306.945322][ T30] RAX: ffffffffffffffda RBX: 000056397ae3a8f0 RCX: 00007f71db7169a4 [ 306.953462][ T30] RDX: 00000000000a0800 RSI: 000056397ae2c760 RDI: 00000000ffffff9c [ 306.961575][ T30] RBP: 000056397ae2c760 R08: 0000000000000001 R09: 7fffffffffffffff [ 306.969727][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 306.977733][ T30] R13: 000056397ae1fce0 R14: 0000000000000001 R15: 000056397ae14910 [ 306.985937][ T30] [ 306.989252][ T30] INFO: task udevd:6637 blocked for more than 144 seconds. [ 306.996805][ T30] Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 307.004812][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.013767][ T30] task:udevd state:D stack:21584 pid:6637 tgid:6637 ppid:1 flags:0x00004002 [ 307.024285][ T30] Call Trace: [ 307.027615][ T30] [ 307.030834][ T30] __schedule+0x1850/0x4c30 [ 307.036763][ T30] ? __pfx___schedule+0x10/0x10 [ 307.041978][ T30] ? __blk_flush_plug+0x449/0x500 [ 307.047067][ T30] ? __pfx_lock_release+0x10/0x10 [ 307.052430][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.059160][ T30] ? schedule+0x90/0x320 [ 307.063458][ T30] schedule+0x14b/0x320 [ 307.067641][ T30] schedule_timeout+0x15a/0x290 [ 307.072862][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 307.078591][ T30] ? __pfx_process_timeout+0x10/0x10 [ 307.083956][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 307.089788][ T30] nbd_queue_rq+0x7d9/0x2ef0 [ 307.096083][ T30] ? validate_chain+0x11e/0x5920 [ 307.101365][ T30] ? mark_lock+0x9a/0x360 [ 307.105747][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 307.111081][ T30] ? __lock_acquire+0x1397/0x2100 [ 307.116175][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 307.122610][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 307.128510][ T30] ? sbitmap_get+0x289/0x3f0 [ 307.133300][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 307.139419][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 307.145282][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 307.151833][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 307.158759][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 307.163852][ T30] ? __pfx___might_resched+0x10/0x10 [ 307.169337][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 307.174684][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 307.180530][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 307.186562][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 307.191982][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 307.197415][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 307.203154][ T30] ? __pfx_update_io_ticks+0x10/0x10 [ 307.208643][ T30] ? blk_add_rq_to_plug+0x308/0x4b0 [ 307.213914][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 307.220041][ T30] ? blk_mq_submit_bio+0xf74/0x2390 [ 307.225316][ T30] __blk_flush_plug+0x420/0x500 [ 307.230568][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.236667][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 307.242308][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.248831][ T30] __submit_bio+0x46a/0x560 [ 307.253411][ T30] ? __pfx___submit_bio+0x10/0x10 [ 307.258626][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 307.264339][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 307.270621][ T30] ? __pfx___might_resched+0x10/0x10 [ 307.275987][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 307.282347][ T30] block_read_full_folio+0x9b3/0xae0 [ 307.287707][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 307.293295][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 307.299485][ T30] filemap_read_folio+0x148/0x3b0 [ 307.304761][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 307.310410][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 307.316009][ T30] ? __filemap_get_folio+0x848/0x940 [ 307.321432][ T30] do_read_cache_folio+0x373/0x5b0 [ 307.326703][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 307.332313][ T30] read_part_sector+0xb3/0x260 [ 307.337140][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 307.342269][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 307.347099][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 307.352767][ T30] ? snprintf+0xda/0x120 [ 307.357072][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 307.362864][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 307.367554][ T30] ? vsnprintf+0x184/0x1da0 [ 307.372204][ T30] ? __pfx_snprintf+0x10/0x10 [ 307.376932][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 307.381849][ T30] bdev_disk_changed+0x72c/0x13f0 [ 307.386940][ T30] ? __pfx___might_resched+0x10/0x10 [ 307.392505][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 307.398153][ T30] ? wait_on_inode+0xc1/0x230 [ 307.403262][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 307.408734][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 307.413987][ T30] blkdev_get_whole+0x2d2/0x450 [ 307.418963][ T30] bdev_open+0x2d4/0xc50 [ 307.423286][ T30] blkdev_open+0x389/0x4f0 [ 307.427757][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 307.432836][ T30] do_dentry_open+0xbe1/0x1b70 [ 307.437709][ T30] vfs_open+0x3e/0x330 [ 307.441898][ T30] path_openat+0x2c84/0x3590 [ 307.446552][ T30] ? __pfx_path_openat+0x10/0x10 [ 307.451665][ T30] do_filp_open+0x27f/0x4e0 [ 307.456231][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 307.461413][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 307.466504][ T30] do_sys_openat2+0x13e/0x1d0 [ 307.473658][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.479340][ T30] __x64_sys_openat+0x247/0x2a0 [ 307.484247][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.489777][ T30] ? do_syscall_64+0x100/0x230 [ 307.494579][ T30] ? do_syscall_64+0xb6/0x230 [ 307.499376][ T30] do_syscall_64+0xf3/0x230 [ 307.504160][ T30] ? clear_bhb_loop+0x35/0x90 [ 307.509002][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.514956][ T30] RIP: 0033:0x7f71db7169a4 [ 307.519491][ T30] RSP: 002b:00007ffe54421140 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.528079][ T30] RAX: ffffffffffffffda RBX: 000056397ae46730 RCX: 00007f71db7169a4 [ 307.536113][ T30] RDX: 00000000000a0800 RSI: 000056397ae38780 RDI: 00000000ffffff9c [ 307.544238][ T30] RBP: 000056397ae38780 R08: 0000000000000001 R09: 7fffffffffffffff [ 307.552465][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 307.560586][ T30] R13: 000056397ae2b890 R14: 0000000000000001 R15: 000056397ae14910 [ 307.568725][ T30] [ 307.571826][ T30] [ 307.571826][ T30] Showing all locks held in the system: [ 307.579955][ T30] 3 locks held by kworker/0:0/8: [ 307.584933][ T30] 3 locks held by kworker/u8:0/11: [ 307.590232][ T30] #0: ffff888031030148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 307.602421][ T30] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 307.615970][ T30] #2: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xd0/0x16f0 [ 307.626016][ T30] 2 locks held by kworker/u8:1/12: [ 307.632081][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 307.644394][ T30] #1: ffffc90000117d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 307.656620][ T30] 1 lock held by khungtaskd/30: [ 307.662011][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 307.672451][ T30] 4 locks held by kworker/u8:3/52: [ 307.678061][ T30] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 307.689577][ T30] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 307.700720][ T30] #2: ffffffff8fca7450 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 307.710999][ T30] #3: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe9/0xaa0 [ 307.721831][ T30] 3 locks held by kworker/1:2/2150: [ 307.727050][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 307.738523][ T30] #1: ffffc90005197d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 307.750145][ T30] #2: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 307.760645][ T30] 2 locks held by getty/5597: [ 307.765380][ T30] #0: ffff888034d3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 307.775687][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 307.786254][ T30] 3 locks held by udevd/5839: [ 307.791586][ T30] #0: ffff888025bef4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 307.801212][ T30] #1: ffff888143b71610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 307.811423][ T30] #2: ffff888025e20178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 307.821077][ T30] 3 locks held by udevd/5851: [ 307.825795][ T30] #0: ffff888025c354c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 307.835640][ T30] #1: ffff888025b7a610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 307.845688][ T30] #2: ffff888025e57178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 307.857054][ T30] 3 locks held by udevd/5859: [ 307.862197][ T30] #0: ffff888025beb4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 307.871872][ T30] #1: ffff888143b71110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 307.881789][ T30] #2: ffff888025dfe178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 307.891241][ T30] 3 locks held by udevd/5860: [ 307.895927][ T30] #0: ffff8880259cf4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 307.905626][ T30] #1: ffff8880258e4a10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 307.915688][ T30] #2: ffff888025cae178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 307.925276][ T30] 3 locks held by udevd/6637: [ 307.930400][ T30] #0: ffff888025c334c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 307.940137][ T30] #1: ffff888025b5bc10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 307.950084][ T30] #2: ffff888025cde178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 307.959482][ T30] 3 locks held by udevd/9369: [ 307.967125][ T30] #0: ffff888025d154c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 307.976849][ T30] #1: ffff888143b71e90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 307.986800][ T30] #2: ffff888025ec51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 307.996256][ T30] 3 locks held by udevd/9391: [ 308.001315][ T30] #0: ffff888025e814c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 308.010932][ T30] #1: ffff888143b92390 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 308.021063][ T30] #2: ffff888025ee7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xfe/0x2ef0 [ 308.030617][ T30] 3 locks held by kworker/u8:18/9659: [ 308.036026][ T30] #0: ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 308.046351][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 308.058242][ T30] #2: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 308.067668][ T30] 3 locks held by syz-executor/12750: [ 308.073423][ T30] #0: ffff8880640acd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 308.083794][ T30] #1: ffff8880640ac078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 308.094059][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 308.116483][ T30] 1 lock held by syz.4.1827/12965: [ 308.126921][ T30] #0: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 308.140464][ T30] 2 locks held by syz.0.1828/12975: [ 308.145707][ T30] #0: ffff88805f73fa08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 308.156975][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 308.168443][ T30] 1 lock held by syz.0.1828/12978: [ 308.173590][ T30] #0: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 308.189172][ T30] 1 lock held by dhcpcd/12981: [ 308.194101][ T30] #0: ffff88805d6ae258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 308.215658][ T30] [ 308.218167][ T30] ============================================= [ 308.218167][ T30] [ 308.227185][ T30] NMI backtrace for cpu 1 [ 308.231578][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 308.242241][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.252330][ T30] Call Trace: [ 308.255637][ T30] [ 308.258599][ T30] dump_stack_lvl+0x241/0x360 [ 308.263335][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.268551][ T30] ? __pfx__printk+0x10/0x10 [ 308.273197][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 308.278178][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 308.283682][ T30] ? _printk+0xd5/0x120 [ 308.287876][ T30] ? __pfx__printk+0x10/0x10 [ 308.292500][ T30] ? __wake_up_klogd+0xcc/0x110 [ 308.297372][ T30] ? __pfx__printk+0x10/0x10 [ 308.302012][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 308.307073][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.313078][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 308.319089][ T30] watchdog+0xff6/0x1040 [ 308.323351][ T30] ? watchdog+0x1ea/0x1040 [ 308.327789][ T30] ? __pfx_watchdog+0x10/0x10 [ 308.332490][ T30] kthread+0x2f0/0x390 [ 308.336601][ T30] ? __pfx_watchdog+0x10/0x10 [ 308.341320][ T30] ? __pfx_kthread+0x10/0x10 [ 308.345945][ T30] ret_from_fork+0x4b/0x80 [ 308.350466][ T30] ? __pfx_kthread+0x10/0x10 [ 308.355078][ T30] ret_from_fork_asm+0x1a/0x30 [ 308.360333][ T30] [ 308.364612][ T30] Sending NMI from CPU 1 to CPUs 0: [ 308.370276][ C0] NMI backtrace for cpu 0 [ 308.370291][ C0] CPU: 0 UID: 0 PID: 9659 Comm: kworker/u8:18 Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 308.370314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.370327][ C0] Workqueue: bat_events batadv_nc_worker [ 308.370360][ C0] RIP: 0010:lock_acquire+0x1a3/0x550 [ 308.370384][ C0] Code: 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 42 80 3c 2b 00 74 08 4c 89 ff e8 4a 24 8b 00 48 8d 5c 24 60 4c 8b bc 24 80 00 00 00 48 c7 c7 a0 a4 0a 8c e8 10 e9 50 0a 65 ff 05 89 da 87 7e 45 31 [ 308.370401][ C0] RSP: 0018:ffffc900031e79e0 EFLAGS: 00000246 [ 308.370416][ C0] RAX: 0000000000000000 RBX: ffffc900031e7a40 RCX: ffffffff817aaf14 [ 308.370430][ C0] RDX: 0000000000000000 RSI: ffffffff8c5faec0 RDI: ffffffff8c5fae80 [ 308.370443][ C0] RBP: ffffc900031e7b40 R08: ffffffff901a3337 R09: 1ffffffff2034666 [ 308.370457][ C0] R10: dffffc0000000000 R11: fffffbfff2034667 R12: 1ffff9200063cf44 [ 308.370471][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 308.370484][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 308.370500][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.370513][ C0] CR2: 0000560faff57ca3 CR3: 000000000e736000 CR4: 00000000003526f0 [ 308.370530][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.370541][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.370553][ C0] Call Trace: [ 308.370559][ C0] [ 308.370568][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 308.370596][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 308.370619][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 308.370645][ C0] ? nmi_handle+0x2a/0x5a0 [ 308.370677][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 308.370695][ C0] ? nmi_handle+0x14f/0x5a0 [ 308.370716][ C0] ? nmi_handle+0x2a/0x5a0 [ 308.370739][ C0] ? lock_acquire+0x1a3/0x550 [ 308.370759][ C0] ? default_do_nmi+0x63/0x160 [ 308.370785][ C0] ? exc_nmi+0x123/0x1f0 [ 308.370811][ C0] ? end_repeat_nmi+0xf/0x53 [ 308.370839][ C0] ? lock_acquire+0xd4/0x550 [ 308.370860][ C0] ? lock_acquire+0x1a3/0x550 [ 308.370882][ C0] ? lock_acquire+0x1a3/0x550 [ 308.370903][ C0] ? lock_acquire+0x1a3/0x550 [ 308.370924][ C0] [ 308.370930][ C0] [ 308.370941][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 308.370964][ C0] ? batadv_nc_worker+0xcb/0x610 [ 308.370989][ C0] ? __pfx_lock_release+0x10/0x10 [ 308.371012][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 308.371044][ C0] batadv_nc_worker+0xec/0x610 [ 308.371069][ C0] ? batadv_nc_worker+0xcb/0x610 [ 308.371093][ C0] ? batadv_nc_worker+0xcb/0x610 [ 308.371119][ C0] ? process_scheduled_works+0x976/0x1840 [ 308.371139][ C0] process_scheduled_works+0xa66/0x1840 [ 308.371172][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 308.371196][ C0] ? assign_work+0x364/0x3d0 [ 308.371217][ C0] worker_thread+0x870/0xd30 [ 308.371245][ C0] ? __kthread_parkme+0x169/0x1d0 [ 308.371267][ C0] ? __pfx_worker_thread+0x10/0x10 [ 308.371286][ C0] kthread+0x2f0/0x390 [ 308.371307][ C0] ? __pfx_worker_thread+0x10/0x10 [ 308.371325][ C0] ? __pfx_kthread+0x10/0x10 [ 308.371348][ C0] ret_from_fork+0x4b/0x80 [ 308.371366][ C0] ? __pfx_kthread+0x10/0x10 [ 308.371387][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.371412][ C0] [ 308.389632][ T9659] net_ratelimit: 17 callbacks suppressed [ 308.389658][ T9659] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.648113][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 308.648138][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00691-gae418e95dd93 #0 [ 308.648167][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.648183][ T30] Call Trace: [ 308.648194][ T30] [ 308.648206][ T30] dump_stack_lvl+0x241/0x360 [ 308.648251][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.648286][ T30] ? __pfx__printk+0x10/0x10 [ 308.648315][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 308.648354][ T30] ? vscnprintf+0x5d/0x90 [ 308.648392][ T30] panic+0x349/0x880 [ 308.648425][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 308.648464][ T30] ? __pfx_panic+0x10/0x10 [ 308.648492][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 308.648531][ T30] ? __irq_work_queue_local+0x137/0x410 [ 308.648563][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 308.648593][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 308.648629][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 308.648669][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 308.648709][ T30] watchdog+0x1035/0x1040 [ 308.648740][ T30] ? watchdog+0x1ea/0x1040 [ 308.648775][ T30] ? __pfx_watchdog+0x10/0x10 [ 308.648808][ T30] kthread+0x2f0/0x390 [ 308.648838][ T30] ? __pfx_watchdog+0x10/0x10 [ 308.648864][ T30] ? __pfx_kthread+0x10/0x10 [ 308.648897][ T30] ret_from_fork+0x4b/0x80 [ 308.648922][ T30] ? __pfx_kthread+0x10/0x10 [ 308.648952][ T30] ret_from_fork_asm+0x1a/0x30 [ 308.648990][ T30] [ 308.652717][ T30] Kernel Offset: disabled