last executing test programs: 7.411301259s ago: executing program 1 (id=7255): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x10, 0xfffffff8, 0x0, 0x0, 0x1, 0x10000, 0x7f, 0x20000000}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40002f6cdc70f65c585a9374e99fb8bf68a15971f3ee9c197e1341a8785dbb8a67c5bf8d0e523d8bb50771f793", @ANYBLOB="bb5239fceb49626ea5dbf39925d6da4c82c22cc77f288bc935e395b90d195c873b91d1753e741032ecea1f9a72f33ea2e6873160eb0a19bd899b4fab3881caf9a6049eaab6588da9e9c8aa5b5672c28ad57b66d8ad774bcd885467e8119ad3fecdbab6d792331f7258a5817dfae821b12bae00"/124, @ANYBLOB="6a52bf22f8b72186c84e2ea69c985bf0b087b90845a4260d0e8a0b3439a0a5f5251d449375a60e6a62a2cc7ba1c6a099f278bb4d8ada8ddefe142141cf13452eb7e6a933cb7980ec", @ANYRESHEX=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r6, 0x5}, 0x8) unshare(0x66000080) 6.948071531s ago: executing program 4 (id=7259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0x8000) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000000c0)=0xfffffffd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x4, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x2, 0xc}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0x10, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x5}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private0}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x4}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0xc}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00684ec39c672b63fc44eec490000000", @ANYRES16=r11, @ANYBLOB="01002cbd700000000000010000001c000180060001000200000008000300ac14141c0800060003000000"], 0x30}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="070000000000000000000200e5000c00010000000100010000007f3e0980ddf250ec3535758b1676e0834337d12994c6df1434027840f70f92ef04"], 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="04000000020000000000000000"], 0x50) 4.708064076s ago: executing program 4 (id=7261): setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x1}, @mss={0x2, 0x81}, @mss={0x2, 0x39cb6843}, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0x1d08, 0x6}, @window={0x3, 0x7, 0x1}, @timestamp], 0x9) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'bridge_slave_1\x00', {0x2, 0x0, @initdev}}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'bridge_slave_0\x00', {0x2, 0x0, @multicast2}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000100)=""/140, &(0x7f00000001c0)=0x8c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) getsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x6, {0x0, 0x4, 0xff, 0xa, 0xfb, 0x0, 0x6, 0x5, 0x61, "e17c006b7dcb1a6d1abf80f85afb1c2920462bc83e1e4f65d31315bff80f30be59a0bb54a1a5a76702225f57c1f18cb2bf6ddb90097d96080968206c5d24727ec5bdc96792e7a3bdf4ae3476e8ce4832534214794c4015c8e63114dbf2891ae56d"}}, 0x72) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r5, 0x104, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40e8f11d966618f4, &(0x7f0000000440), &(0x7f0000000480)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000540)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(r4, 0x5451) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) recvmsg(r7, &(0x7f0000000b40)={&(0x7f0000000680)=@ax25={{}, [@bcast, @remote, @netrom, @null, @rose, @bcast, @netrom, @default]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/13, 0xd}, {&(0x7f0000000740)=""/173, 0xad}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/31, 0x1f}, {&(0x7f0000000940)=""/62, 0x3e}, {&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f00000009c0)=""/13, 0xd}], 0x7, &(0x7f0000000a80)=""/161, 0xa1}, 0x40000023) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002c80)={&(0x7f0000000b80)="0f670c2aa3f7bbe394337cd68bbb35d2", &(0x7f0000000bc0)=""/4096, &(0x7f0000001bc0)="0db80be581c1197c1c70bbf0bbfd07c452c9dec785833d4ee54b5bb0f6fd8108adf952b5438e1356da2314635f78f6c22ddaa4fb13c086b689f87d2152853dde36eca256a30b8d6c409c92994a0623ff84d7d2e6edf153ea5cbc074128914820b8d2739f913092c67b56c192a2502f7b202e8d1f2291e6290a812dfa1bd37b121d94bf28f3f5ff2a97ac0a52465e55", &(0x7f0000001c80)="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", 0x8, r5, 0x4}, 0x38) sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x20000800) 4.704463922s ago: executing program 0 (id=7262): unshare(0x20000480) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) 4.703712544s ago: executing program 1 (id=7263): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a74000000060a030400000000000000000a00000a0900010073797a3100000000400004803c0001800a00010071756575650000002c000280060002400fea000006000140000100000600034000010000060002400800000006000240000900000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000085000000bc000000150000003425ff00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x3}}, 0x2e) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r8, 0xffffffffffffffff, 0x60000000}, 0xc) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd700000020000050000000600010005000000080009000200000008000b000000000008000c00a80a0000140000006d6163736563300000000000000000000c001000ff"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r11, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a0000000000000000000b8008001e0001000000080008"], 0x2c}}, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'syzkaller1\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x101, 0x3, "6f0227dfd30c"}}) 4.474402051s ago: executing program 0 (id=7267): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) (async) r2 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x80800) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000800280012800b0001006d61631800029e0c0001000800000000000000050003000800f6e408000500633317d18d648bdef50bfa658e7e51bc5b9c29a50639106f6dc58af725705b38b469674a1e5a8c39420ad708649861b128cf314836f412232f650847cd6a4e00adbf5e6f1ddc851ff6184e07587b5ce523c022ff143ffe9f478bf59cb02399143c11261ed0cd55166b7ae19fa847b57adf98d6bd80abf49730571bad36640a117e5900"/191, @ANYRES32=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async) r3 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x3, 0xfffffff4, 0xb5a3664e6e5b4adc) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80004481}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000000c1400012bbdfe478f14f379c4da01000000000000003d0002000000080001000000000008000300040000234000010000000000f66f29505dd7015ea36e27b05a62bf3a0e998eaf8553cf8e1f504be9de6bf4c22d6214e66f17eded793521a8e6e748a7355b2c2a7c860ad06fc994fa7795e0c210077852cd7dbfb23497f5416947d9c63c67c8ccaf6d2e790da11d64d75f5dce0826777f29d76c16fae05b51dc1617a73bed69c98deffbafc2f7b204881808d0b0f95dbe6be5a6ad270ecae78666c54b"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10000804) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000600)=""/163, &(0x7f00000006c0)=0xa3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r0, 0x5, 0xbc}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x58, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc4}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000080) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r7, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd700000000000020cf200ff00000700020000080002000a0101000800010fac14143308000300", @ANYRES8=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008811}, 0xea5bc50b659997ee) (async) socket$inet(0x2, 0x0, 0x80000000) 4.245664861s ago: executing program 0 (id=7268): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) setsockopt(r1, 0x1, 0x2, &(0x7f0000000100)="8cf878b61f7c842b0674e1187ceec75abdb1ec385c975484ca40ab9dd676522f7f868fd6804d1d4db0d34e2065f620e6d891ffbe35ec5bc47f2d9e056a745a345729b7ced8ebbcfa7e748fc847303b0e37a38ab2b27ab1406b2ae6ce6d9fa65320e4625407c9c1d9f0ddb9308dc34c32ffd27d6ed5d75f8ad18fd709a298e4020dfe6ce6f5f90e3a33006d9074e32a004d7bcaf56ae17fb585bfa20f317cae6ca961a40f8ce5d6470bfa7ebec3191df4c8932bd454c7ad6f6597f719daecfc5db6ed2cd55975392dce28b8cd5eeeced994967f9ae0174c6493091aa7a26f97735174561a5e1688916108d2b181697dab103e", 0xf2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3e}}, "00186371ae9b1c03"}}}}}, 0x0) 4.215531228s ago: executing program 0 (id=7269): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14}}, 0x8c}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r3, 0x1, 0xffffbffe, 0x4, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffd}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c0d0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x48, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="32b2451a25da98d9279504d0c75efc3f67a606201bad4264a921e670c2ab79a5cc28de98f92c410b95a9c11835509af9c49537a137089baa3eb31f6f213c5d81d55f0f423490a07c03683c966b0bab1cf255215edbae672a93d5c72ade8a6c1e71864701b63cf58552425d4e000f78c9975be9463696c40b8ff248f2b2f285c08141f8c33201dfa755e2a56986ebbd5fed8e23a70b0a6c404f726272f1b8b92f32b1f9293dfb0ff054f1eaf321d7e172ce042416f87ca8e52918540a73c559a6dd1a394d21a6d39d2f", 0xc9}], 0x1, &(0x7f0000000680)=[{0x80, 0x1, 0xce, "18b687b1cf28ee38fb6b201338e10e3a6a76a38b15a8f41b6ff0d8b7f17af7c754b3dbfc9ecc84ba97ececd946ace207530cfb78f3de616bd61c3eed1d946161c3577f45d2063ae07fc603f54b1329259d9296831ebf5758f922c851f9ce7bf06ffb9d82a5840df8c6"}, {0x20, 0x107, 0x9, "e0a23fdf533da2e656d188bc"}, {0xc8, 0x112, 0x1, "822fd44a11798455700f3247d1eb594ea32c3edc61c22bc8fec58ce0e4f0bf669335def2bdbdded0ec3387c6dc17ab1d29dba260dd2b4de2679c2a54b27b5ff881a7f9d772ecf34bfefec73115bd018e114cf7635ccae21096828aefe7b41186aabf6d3c8a2c585a60d6d10427334f965d24f373d2079738426e02491c3211247c13f2bd7b33dc8e816724d69ffb69b3b1bc6d0558a07ff8a9cd528493c70b3dde5acd62aaa72a98d270fc8d898ef4bc8a0fa8a133"}, {0x110, 0x3a, 0x9, "a37fb3465f4112191dd3e695e505811bc941fdc156577d5effcaf79d7b4eb07825b57a8642e886ebd09580b33d67eda7f72d83d713884e689c86e486811808110582bd0c316a61e4ae807dbaf676275c45bba34b818c7522a53be0d1dec076b8812c3b266b1d6d58d58916fadc7addb5549e346ce68d67fc92ef5c55c3235eed0a2d6b0f3201592fb61efd083600cf6eb419e083a83e9c80c81329dd529e332f88d512023459e11d256ee5829968b04b6c6ff0f5040196bc4aa35388c48ae8b5908e2057f452795d7adeabf4ee077c209f47241efc29bc834ff0f359dc8fce2d1aacdafa691449f570e29dee296506960f61f5524a0a8fd042"}, {0x60, 0x10b, 0x6, "74d1395b990119a61e03df3f6bdb17bb16aa2bcfa485b6bed43d7d86ea5535a36491e7d4a3560d456f692069fe6d6c0039b0da9fab911f7fc1228493e406ca83f58fa27497fed765e383df2d4470"}, {0xd0, 0x119, 0x4, "3056a72349b0ef5faab213b43bbefe91361870da497e34f4e60ddc53730bbb7fea72a499eeb284a79eae46119ecffe94a2769c8ff1833d98ef19d5dba8b677f12c9f85f1e4ed2b9521c3f1f0d74670ae3ef781d2b514ee63f785a91beafac566892716dfa24ee2b3c1e066a97e2a1965db3506de6c31803520a05cc5170900a76a6674a24740fb90e81c08824db7246e9a915d3f66a43e5633f7598bf36d8cd5de778c40cfcf31dd7762ea3119bee10cf536c6c833e94a03560c097bc99c4a36"}, {0x20, 0x88, 0x6, "7aa6fec3cccf17a76349ad0f"}], 0x3c8}, 0x80) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.89443032s ago: executing program 0 (id=7270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x1000000000000000}, 0x20000000) 3.581866925s ago: executing program 4 (id=7271): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0000ec00000584ae910000000000"], 0x18}, 0x440e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000240)="c99b57381801238c09d25f95b10dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x80000) recvmmsg(r5, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000400)=""/192, 0xc0}], 0x2}, 0x2}], 0x1, 0x40000180, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000040)=r2, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000780), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x484, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x458, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x408, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9b, 0x6, 0x1, 0x0, "eb6cb48e149094dc5ea0c513bd6e953c9b9e4eafb34963fecdcd83b05965b4c7ed1d72ed25bac369e379581c48ce3c66d819424b3af31176ce826228bfd918328af2ffb908e8fc1f17a1fc2c4e2ec7c601c6334618c3172f516b73314516a8000bdb4acd7383a088a22840ab7016085b1078559f034499d28d71974fe3fdc92d92049825e9f6e9575f78d4c83a7e4aaba99bb93fd0a829"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_USERDATA={0xe1, 0x6, 0x1, 0x0, "ccfb9456ba89cb27d996e8f2606b36177f6490caa00a19c2849ccad7f4d06b676f0abbfc84254817f28cbd24c9ee97ed0ba3189212bd6f0df7e6a1f68faa430d53f6726a0b4d780f88abe5a883cc1e82d040cebff03d979d5daf5d99f596bdf3fa378b03cae732f8af18f97b2aafb4dbd45c736a1c47eea26834e45fa199af7081861fbad7f890a2216b12a3cbbe5987ab5059e740b49f4ca027e0725356e2fbf62ecc6150c665dab5f62cd14b5488fe00ed7e44af306bd0e122de829ad75b1c7ad1406728252bf2970f31a703b3dcc2c243d59e9f8d590bcbb9730187"}, @NFTA_SET_ELEM_KEY={0x278, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "27d1d58563462ec434c6d697d63f48755cafe66bede625609ea9829818fabfda0c94a51784da1985c8b9064ef10868039401090cdf0b7fce58911ae09af1b900e85d5803d617a481129a221626adc416c83aafbb9979dd34614e10f56784fd40a054d4be0f9222595cf87d860f48078e9ef7dbf4762cc0e9ed232a032602347a5b1cf9ac4837a931ee7bc5e6447ff6e06af30acd3bdb07ba963768104265fd32d849a35c3a8d53edf83760e5a0d175a67e364d70f7b7f4d8dc9a525c8ba3dac161739f322f6751d9534699"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "66456530f325c59e064a3c90f6ff2e051676cc11dac8aec1facab55761189b2462bcae09657665fa64797ceaa10c5179de0d3fefe0fddd641e4b05808342f9c06e03f9e7635c9470586eb2817a7f64c3adad49ff268d248fc5bd48d15e9e15"}, @NFTA_DATA_VALUE={0xc8, 0x1, "791b6603915ac6d072dc688d2c1f04a38f93f1a33e941da196761f2b7a9d55ead0a240031c2982e5968a5fa5f65283430b29d578bba2e6408afe301dfe30058a56570adcc31f8dbff855a03bc1f75e6a932b4b931858ffd04e8fc85de8964741d0579162737eb52a0de8c1b5b8e4c7eef92fd9a003cef0e75067892776ffd8dd91959a5dffe5e8b9842af59d5ae403b6496478bff117066fcd26311e40b20565579a2dd0e55e98dc810b3eabbbcd6430e1a30a4d36b60c7118ddb09feed1e88cac0816e9"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x4ac}}, 0x4048010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}}, 0x0) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r10, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e762400"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 3.42876097s ago: executing program 0 (id=7273): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09dea4afb76288fa135537845f3188b4cb061c94084050d49b5f9dc271450ebc85f9479e56e3800f492b76e4254daff0a408", 0x32}, {&(0x7f0000000000)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e22, @loopback}}, 0x5, 0x9}, 0x90) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000180)=@hci, 0xe0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f03) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) write$cgroup_devices(r1, 0x0, 0x9) 2.698512742s ago: executing program 4 (id=7283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000) 2.569577201s ago: executing program 4 (id=7286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5f02ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/4089, 0xff9}, {&(0x7f0000000300)=""/90, 0x5a}, {&(0x7f00000001c0)=""/39, 0x27}], 0x3}, 0x2000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000", @ANYRES16, @ANYBLOB="200027bd7000fcdbdf252100000044002d8005000400000000000500010004000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.462270733s ago: executing program 4 (id=7288): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) socket$inet6(0xa, 0x6, 0xe) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000080000000000001000000097000100ffffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) (async, rerun: 64) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (rerun: 64) 2.250558824s ago: executing program 3 (id=7289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000077deff00850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x10, 0x6, {{0x36, 0x4, 0x3, 0x37, 0xd8, 0x64, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_addr={0x44, 0xc, 0xe8, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x83, 0x1, 0x1, [{@multicast2, 0x8}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa2c}, {@loopback, 0x6c014cfd}, {@empty, 0x7}]}, @cipso={0x86, 0x49, 0xffffffffffffffff, [{0x2, 0x10, "1d8f57267ea65251f270ee3dd69d"}, {0x0, 0x8, "7627825c0071"}, {0x0, 0x12, "e45592308454431becaa5a770a2371ac"}, {0x1, 0x8, "4447e146b86e"}, {0x1, 0xf, "ed9db1dd9e5ff309c85ea49d1f"}, {0x6, 0x2}]}, @cipso={0x86, 0x1e, 0x3, [{0x6, 0x9, "9a4775c0a3c1de"}, {0x2, 0xf, "f06ea7e5d8cf4aea85e76adb32"}]}, @timestamp={0x44, 0x24, 0x1c, 0x0, 0xe, [0x6, 0x3, 0x2, 0x3, 0x9, 0x8, 0x5, 0x1]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x18) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, 0x0}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x15, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5df, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @generic={0xb6, 0xa, 0x8, 0x4, 0x9}, @jmp={0x5, 0x0, 0x9, 0x5, 0x1, 0x40, 0x4}, @call={0x85, 0x0, 0x0, 0xbd}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x13, &(0x7f0000000200)=""/19, 0x40f00, 0x14, '\x00', r3, @fallback=0x26, r4, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x6, 0xff}, 0x10, r6, r2, 0x6, &(0x7f0000000640)=[r7, r1], &(0x7f0000000680)=[{0x1, 0x3, 0xb, 0x1}, {0x5, 0x5, 0xa, 0x4}, {0x1, 0x1, 0x7, 0x1}, {0x3, 0x3, 0xf, 0x5}, {0x5, 0x4, 0x8, 0xa}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x4}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x21, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) 2.164065893s ago: executing program 3 (id=7290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000004c4c284210814c6180001801400020069705f76746930"], 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="aff60000e974e2cdb71e4638dc0ace4a1459a170a646288c10310a0a71b1143691e3dd45cf16d2182ff75df09588027af8df", @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="0c002f800800010000000000"], 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r5) 2.067772292s ago: executing program 3 (id=7292): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x108, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x12}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1c}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x40000100, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, &(0x7f0000000340)=@ax25={{0x3, @rose}, [@bcast, @null, @rose, @bcast, @remote, @netrom, @netrom, @bcast]}, &(0x7f00000003c0)=0x80, 0xc00) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(0x3) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000800)="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", 0x18d}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRES32=r6], 0x20, 0x6044}, 0xc086) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={r6, 0x40}, &(0x7f0000000140)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000740)={r1, &(0x7f0000000280)='%\\)\x00', 0xc0000, &(0x7f0000000540)={@align=0xfffffffffffffffe, {0x7fff, 0x4, 0x4, 0x8000}}, 0x1ff, &(0x7f00000006c0), &(0x7f0000000700)=0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x301000, 0x0) ioctl$TUNGETVNETLE(r8, 0x40047451, &(0x7f00000001c0)) r9 = socket$nl_rdma(0x10, 0x3, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x402c00, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x24, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4850) close(r7) 1.618305752s ago: executing program 1 (id=7297): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa963bffff5, 0x13012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0x24000812) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) close(0xffffffffffffffff) sendmmsg(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1.494211584s ago: executing program 2 (id=7298): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_AUTORATE={0x4, 0x9, 0xff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x6c}}, 0x0) 1.475733006s ago: executing program 2 (id=7299): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000089000000ef00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x0, 0x2}, 0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r5, 0x6}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x1, 0xb, 0x0, 0x2}, 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x7, 0x4, 0x0, @multicast2, @private=0xa010102}}}}) bind$inet6(r0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x1, 0x0, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) 1.444320773s ago: executing program 1 (id=7300): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.297876443s ago: executing program 1 (id=7301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000020200000040004"], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x2}, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000002200000009"], 0x33) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r6, 0x0, &(0x7f00000003c0)=""/61}, 0x20) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r9, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)="2c8fefb14851c7f16fa7e6413708fbb72d6b292c579d84012c5571a0b127d4d7f484938aff6de992", 0x28}], 0x1}, 0x20008110) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@fwd={0x4}, @float={0x8, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e, 0x61, 0x61, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000400)=""/98, 0x3c, 0x62, 0x1, 0x1}, 0x28) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8ca1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x96, &(0x7f0000000280)=""/150, 0x40f00, 0x13, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[r11], &(0x7f00000005c0)=[{0x3, 0x4, 0x6, 0xa}, {0x0, 0x3, 0xe, 0x1}, {0x0, 0x3, 0xc, 0x3}, {0x2, 0x2, 0x9}, {0x2, 0x2, 0x5}, {0x4, 0x5, 0xc, 0x1e9f87a1bdbed6f0}, {0x0, 0x5, 0x9, 0xa}, {0x1, 0x1, 0xf, 0xc}], 0x10, 0xba}, 0x94) 1.215844385s ago: executing program 3 (id=7302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'wlan1\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001500190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5) r7 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0xfffffffffffffc5d}}, 0x20000000) 1.067485466s ago: executing program 3 (id=7303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="170000000000008004000000ff10ca9b303506d4074f0000f29b727323b008fb2dd95e0e36d74e6d477506999490d8b96048944886cd487e9334c86e1845b67fe40c703814f9c12b6900"/85], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000013c0)=0xc7f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000240)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 549.440376ms ago: executing program 2 (id=7304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7338}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}}, 0x40880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25010000000800010003000000240004800500030005ffffff0400030002040000000000000000000005000300060000000800020002"], 0x48}}, 0x40080) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) 538.062935ms ago: executing program 2 (id=7305): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x8, 0x8000, 0x1ff, 0xfffffff9, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x66, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xde, 0x1, 0x8, [{@empty, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0x84, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x3}, {@multicast2, 0x4}, {@empty, 0xfffffff7}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x110) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffffffffffff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000001) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x14}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4001) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4000040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r9 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000840)=r9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000880)=0x7, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x8010, r0, 0xc93d6000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x0) close(r4) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, r10, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x26fd727c8d202eb}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000881) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000e40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x1ec, r11, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "16e89f0f7f725934a9e31476b85e1d451c184c30"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_ID={0x1d, 0x3, "f51cf4c97833851bcca1f2fe8fcc9c3345ab5b5c37f8ab4d8e"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "36097613f7e459717f2543025b5be6221004f496673134e314cc60b7ed4d16"}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x172d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a6e07dd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1ec}}, 0x4010845) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x154, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x800) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000010c0)) r13 = accept4(r0, &(0x7f0000001100)=@tipc=@name, &(0x7f0000001180)=0x80, 0x800) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000001200)={0x8, &(0x7f00000011c0)=[{0x81, 0xff, 0x6, 0x8}, {0x4755, 0xe0, 0x80, 0xbed}, {0xff, 0x3, 0xfb, 0x81}, {0x6, 0x2, 0x38}, {0x5, 0x10, 0x8, 0xffffffff}, {0x9, 0x5, 0xff, 0x6}, {0xd06d, 0xcd, 0x4, 0xdb32}, {0xffff, 0x40, 0x0, 0x100000}]}, 0x10) 483.41867ms ago: executing program 2 (id=7306): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRESOCT, @ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) (async) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 414.345686ms ago: executing program 1 (id=7307): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x803}]}, 0x18}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) shutdown(r0, 0x1) unshare(0x6a040000) 345.857281ms ago: executing program 2 (id=7308): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000001000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000003800250825bd7000f9dbdf250f000000100007800c00028008003400", @ANYRES32=0x0, @ANYBLOB="6456b1e93d91d4adfb12527469862cd2185f1f5a72bec82ee8c8570fc63d19305bbc678a49e6"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100063d12dbd700000000000ff0100000000000000000000000000010000000000000000000000000000000100000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000007000000000000005b06000000000000040000000000000000000000000000000b00000000000000000000000000000005000000000000000000000000000000ffffff7f00000000080600000000000000080000000000000000000000000000000000000000000000000000030000000000000002000000000000000000000048000100636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012006d6f727573313238302d6176783200"/316], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c0000000506010100000000000000010700f39d00040900030073797a320000000005000100070000000900030073797a320000000005000100070000000900020073797a30000000000900030073797a32000000000900020073797a30000000000900020073797a31731921c0ba292043b92500000000acceebc8d4ff76e81135bdd0614f9dca9f176fa3ee3b90190428b0cbd414e718bd0bdf42eeb736d704dc12cae317e18e654e88f5a47c43ba26c2e3b2d9986d05d85b729e25e6ada15a31cbe8ac0e1bd067d9e313e3f2717fffd21bbcc0570bf5b672cba212032a0a88c8c300de384b812c50169ba9d58b900eed05408468d3b9aeefaa6ce16e1eaa9453991f8db1b38f48e07cc8dfa2b5b5a0d6c22c4b1c2cb7f463b7305f2e5d101590f6dadccc2a40ae0f86235e3bd34aa088e14e888ffc94654fc761744c3a7931525d9e47bbf2ff970ed73888fd702c353b649d64c038e3ed0046899397b3b63f92dc9765ec904a1b3d6118cc1a62145c65d18a6a3b93a9019b778d98540ab17a85117e132778f66d82a84c862f26237387ea4a59554a03758ff5f2c95cafba0792f23e857e4fdc2c68e32d510213ce7e619ce89808803eaa6c4329000246239ec7b5cff1c6da8f50730d60083b0b486f35b6b5b3cf42f96b31432742501a48c729287a0d5d666e1cc924e34b4aa79872e599436ca203245b17388d0c05bc1c7ba1af8654217eb2f021e7a48bd052f29edb87e967215aacb18634ff9a9b39f09925ae8f085200611c1f298c9d9b1fb00a02416a450cf8f5e6f1"], 0x6c}, 0x1, 0x0, 0x0, 0x2000000}, 0x804) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socket$alg(0x26, 0x5, 0x0) bind$can_raw(r3, &(0x7f0000000080), 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x5, 0x0) 0s ago: executing program 3 (id=7309): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000003"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYRESDEC], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): `syz.4.6010'. [ 808.201853][T29355] bond12 (unregistering): Released all slaves [ 808.550425][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 808.724658][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.740091][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.767810][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.784577][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.793082][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.880282][T29387] ip6tnl1: entered allmulticast mode [ 808.903963][T29379] lo speed is unknown, defaulting to 1000 [ 808.948542][T29379] lo speed is unknown, defaulting to 1000 [ 809.067874][T29400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6024'. [ 809.226511][ T1100] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.240893][ T1100] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.329225][ T1100] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.355338][ T1100] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.451623][T29410] netlink: 'syz.4.6029': attribute type 32 has an invalid length. [ 809.467133][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6030'. [ 809.488349][T29412] netlink: 'syz.3.6028': attribute type 1 has an invalid length. [ 809.500090][ T1100] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.511065][ T1100] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.587187][T29379] syzkaller0 speed is unknown, defaulting to 1000 [ 809.645251][T29419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6031'. [ 809.672253][ T1100] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.682378][ T1100] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.702759][T29421] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6032'. [ 810.119226][T25975] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.192076][T29432] lo speed is unknown, defaulting to 1000 [ 810.225126][T29441] ip6tnl6: entered promiscuous mode [ 810.230976][T29441] ip6tnl6: entered allmulticast mode [ 810.277231][T25975] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.329763][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.346342][T29432] lo speed is unknown, defaulting to 1000 [ 810.390764][T29447] : renamed from veth0_to_bond (while UP) [ 810.455080][T25975] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.866770][ T1100] erspan0 (unregistering): left promiscuous mode [ 810.875408][ T51] Bluetooth: hci1: command tx timeout [ 810.955137][ T1100] gretap0 (unregistering): left promiscuous mode [ 811.107435][ T1100] bond7 (unregistering): (slave geneve3): Releasing active interface [ 811.334677][ T1100] team0: Port device bridge2 removed [ 811.504873][ T1100] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 811.515092][ T1100] bond0 (unregistering): Released all slaves [ 811.532358][ T1100] bond1 (unregistering): (slave bond2): Releasing backup interface [ 811.541763][ T1100] bond2 (unregistering): left promiscuous mode [ 811.549523][ T1100] bond1 (unregistering): Released all slaves [ 811.571593][ T1100] bond2 (unregistering): Released all slaves [ 811.593558][ T1100] bond3 (unregistering): (slave veth7): Releasing backup interface [ 811.601697][ T1100] veth7: left promiscuous mode [ 811.612919][ T1100] bond3 (unregistering): Released all slaves [ 811.638717][ T1100] bond4 (unregistering): Released all slaves [ 811.659441][ T1100] bond5 (unregistering): Released all slaves [ 811.686666][ T1100] bond6 (unregistering): Released all slaves [ 811.704511][ T1100] bond7 (unregistering): Released all slaves [ 811.731325][ T1100] bond8 (unregistering): Released all slaves [ 811.754546][ T1100] bond9 (unregistering): Released all slaves [ 811.778852][ T1100] bond10 (unregistering): Released all slaves [ 811.800855][T29432] syzkaller0 speed is unknown, defaulting to 1000 [ 812.010053][ T1100] !: left promiscuous mode [ 812.049546][T29379] chnl_net:caif_netlink_parms(): no params data found [ 812.170856][T29479] netlink: 'syz.1.6043': attribute type 13 has an invalid length. [ 812.188210][T29479] netlink: 'syz.1.6043': attribute type 12 has an invalid length. [ 812.220225][ T1100] tipc: Left network mode [ 812.386733][ T1100] IPVS: stopping backup sync thread 19249 ... [ 812.815683][T29379] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.837574][T29379] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.846155][T29379] bridge_slave_0: entered allmulticast mode [ 812.870881][T29379] bridge_slave_0: entered promiscuous mode [ 812.917732][T29379] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.939621][ T51] Bluetooth: hci1: command tx timeout [ 812.954429][T29379] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.965361][T29379] bridge_slave_1: entered allmulticast mode [ 812.973736][T29379] bridge_slave_1: entered promiscuous mode [ 813.157285][T29379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.226203][T29379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.443056][T29379] team0: Port device team_slave_0 added [ 813.478071][T29533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.560549][T29379] team0: Port device team_slave_1 added [ 813.737440][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.745542][ C0] lec:lec_tx_timeout: lec0 [ 813.773182][ T1100] hsr_slave_0: left promiscuous mode [ 813.782011][ T1100] hsr_slave_1: left promiscuous mode [ 813.828409][T29549] tipc: Failed to remove unknown binding: 66,0,0/0:2520182733/2520182735 [ 813.847207][T29549] tipc: Failed to remove unknown binding: 66,0,0/0:2520182733/2520182734 [ 813.856920][T29549] tipc: Failed to remove unknown binding: 66,0,0/0:2520182733/2520182735 [ 813.865793][T29549] tipc: Failed to remove unknown binding: 66,0,0/0:2520182733/2520182734 [ 814.536191][T29379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.569295][T29379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.608670][T29379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.646740][T29515] lo speed is unknown, defaulting to 1000 [ 814.659188][T29515] lo speed is unknown, defaulting to 1000 [ 814.948225][T29379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.961614][T29379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.019029][ T51] Bluetooth: hci1: command tx timeout [ 815.048442][T29379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.094999][T29515] syzkaller0 speed is unknown, defaulting to 1000 [ 815.124304][T29379] hsr_slave_0: entered promiscuous mode [ 815.131410][T29379] hsr_slave_1: entered promiscuous mode [ 815.137920][T29379] debugfs: 'hsr0' already exists in 'hsr' [ 815.141475][T29570] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6063'. [ 815.143931][T29379] Cannot create hsr debugfs directory [ 815.299165][T29575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6065'. [ 815.569803][T29582] macsec1: entered promiscuous mode [ 815.584842][T29582] virt_wifi0: entered promiscuous mode [ 815.601632][ T1100] IPVS: stop unused estimator thread 0... [ 815.816160][T29594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6069'. [ 816.169140][T29598] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.177000][T29598] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.275075][T29598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.290936][T29598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.376209][T29598] virt_wifi0: left promiscuous mode [ 816.381713][T29598] macsec1: left promiscuous mode [ 816.412457][T29379] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.506947][ T1100] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.516420][ T1100] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.583973][T29379] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.619582][ T1100] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.658824][T29605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6072'. [ 816.694982][T29610] netlink: 'syz.0.6073': attribute type 21 has an invalid length. [ 816.731320][T29379] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.769721][ T1100] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.785068][T29610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6073'. [ 816.915733][T29379] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.097910][ T51] Bluetooth: hci1: command tx timeout [ 817.335250][T29642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6078'. [ 817.393921][T29645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6078'. [ 817.934339][T29379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 817.980410][T29379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 818.009124][T29379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 818.121144][T29379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 818.187098][T29670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6083'. [ 818.226799][T25975] bond0: (slave ip6gretap1): link status down again after 0 ms [ 818.236795][T29670] bond0: left allmulticast mode [ 818.250593][T29670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.277583][ T13] bond0: (slave ip6gretap1): link status down again after 0 ms [ 818.300480][ T13] bond0: (slave ip6gretap1): link status down again after 0 ms [ 818.320584][T29670] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 818.347566][ T13] bond0: (slave ip6gretap1): link status down again after 0 ms [ 818.377947][ T13] bond0: (slave ip6gretap1): link status down again after 0 ms [ 818.409076][ T13] bond0: (slave ip6gretap1): link status definitely down, disabling slave [ 818.527897][T29379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.601142][T29379] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.631189][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.638452][ T8841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.696653][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.703854][ T8841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.395631][T29725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 819.448288][T29727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 819.484914][T29724] delete_channel: no stack [ 819.718742][T29379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.887688][T29379] veth0_vlan: entered promiscuous mode [ 819.966168][T29379] veth1_vlan: entered promiscuous mode [ 820.075005][T29758] lo speed is unknown, defaulting to 1000 [ 820.090885][T29758] lo speed is unknown, defaulting to 1000 [ 820.118958][T29379] veth0_macvtap: entered promiscuous mode [ 820.155911][T29379] veth1_macvtap: entered promiscuous mode [ 820.181729][T29772] lo speed is unknown, defaulting to 1000 [ 820.229666][T29379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.271201][T29379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.329452][ T1100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.347172][ T1100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.381961][ T1100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.412386][ T1100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.737790][T15166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.756275][T15166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.853344][T29772] lo speed is unknown, defaulting to 1000 [ 820.854004][T29758] syzkaller0 speed is unknown, defaulting to 1000 [ 820.872833][T15166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.885622][T15166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.332643][T29772] syzkaller0 speed is unknown, defaulting to 1000 [ 822.776284][T29865] netlink: 'syz.2.6110': attribute type 30 has an invalid length. [ 822.873684][T29865] bond1: option arp_missed_max: invalid value (0) [ 822.882169][T29865] bond1: option arp_missed_max: allowed values 1 - 255 [ 822.902972][T29865] bond1 (unregistering): Released all slaves [ 822.975703][T29863] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.993737][T29877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6116'. [ 823.003187][T29877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6116'. [ 823.055592][T29863] bridge_slave_0 (unregistering): left allmulticast mode [ 823.074892][T29863] bridge_slave_0 (unregistering): left promiscuous mode [ 823.093889][T29863] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.127714][T29880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6117'. [ 823.170578][T29886] netlink: 'syz.4.6119': attribute type 13 has an invalid length. [ 823.239778][T29880] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 823.409277][T29899] netlink: 'syz.2.6121': attribute type 1 has an invalid length. [ 823.471132][T29894] lo speed is unknown, defaulting to 1000 [ 823.489769][T29899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.502161][T29894] lo speed is unknown, defaulting to 1000 [ 823.584960][T29904] syzkaller0: entered promiscuous mode [ 823.590803][T29904] syzkaller0: entered allmulticast mode [ 823.695354][T29904] tipc: Started in network mode [ 823.701748][T29904] tipc: Node identity 22694f27256e, cluster identity 4711 [ 823.709793][T29904] tipc: Enabled bearer , priority 0 [ 823.721585][T29902] tipc: Resetting bearer [ 823.829689][T29902] tipc: Disabling bearer [ 823.915713][T29915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6125'. [ 824.051809][T29915] lo speed is unknown, defaulting to 1000 [ 824.148349][T29894] syzkaller0 speed is unknown, defaulting to 1000 [ 824.154839][T29915] lo speed is unknown, defaulting to 1000 [ 824.484392][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6129'. [ 824.504584][T29950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6130'. [ 824.803856][T29965] batadv_slave_0: Caught tx_queue_len zero misconfig [ 825.031734][T29915] syzkaller0 speed is unknown, defaulting to 1000 [ 825.044731][T29973] syzkaller1: entered promiscuous mode [ 825.051208][T29973] syzkaller1: entered allmulticast mode [ 825.053688][T29976] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6138'. [ 825.455889][T29990] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 825.569017][T29990] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6142'. [ 825.669059][T29998] tipc: Started in network mode [ 825.674047][T29998] tipc: Node identity bbbbbb01, cluster identity 4711 [ 825.683236][T29998] tipc: Enabled bearer , priority 10 [ 825.693032][T30001] netlink: 'syz.4.6146': attribute type 13 has an invalid length. [ 825.702982][T30001] netlink: 'syz.4.6146': attribute type 17 has an invalid length. [ 825.902875][T30001] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.937539][T30001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 826.015348][T25975] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.054769][T25975] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.091314][T25975] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.123226][T25975] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.156039][T30019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6149'. [ 826.376409][T29995] delete_channel: no stack [ 826.548967][T30038] lo speed is unknown, defaulting to 1000 [ 826.560496][T30038] lo speed is unknown, defaulting to 1000 [ 826.798011][ T9] tipc: Node number set to 3149642497 [ 826.969350][T30063] netlink: 'syz.0.6159': attribute type 14 has an invalid length. [ 827.121316][T30038] syzkaller0 speed is unknown, defaulting to 1000 [ 827.225171][T30069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6160'. [ 827.584024][T30079] netlink: 'syz.2.6164': attribute type 1 has an invalid length. [ 827.602240][T30079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.978904][T30102] netlink: 'syz.4.6170': attribute type 3 has an invalid length. [ 828.389757][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 828.401573][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 828.410712][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 828.420738][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 828.429208][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 828.495645][T30122] lo speed is unknown, defaulting to 1000 [ 828.504191][T30122] lo speed is unknown, defaulting to 1000 [ 828.904810][T30122] syzkaller0 speed is unknown, defaulting to 1000 [ 828.922133][T30135] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 828.945529][T30135] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 828.965699][T30135] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 829.415100][T30122] chnl_net:caif_netlink_parms(): no params data found [ 829.492112][ T29] audit: type=1804 audit(1776040513.263:48): pid=30172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6188" name="/newroot/599/memory.events" dev="tmpfs" ino=3087 res=1 errno=0 [ 829.528814][ T29] audit: type=1800 audit(1776040513.263:49): pid=30172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6188" name="memory.events" dev="tmpfs" ino=3087 res=0 errno=0 [ 829.553065][ T29] audit: type=1804 audit(1776040513.283:50): pid=30174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6188" name="/newroot/599/memory.events" dev="tmpfs" ino=3087 res=1 errno=0 [ 829.615825][T30176] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 829.688890][T30171] bridge0: entered promiscuous mode [ 829.731782][T30122] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.745625][T30122] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.753515][T30122] bridge_slave_0: entered allmulticast mode [ 829.763246][T30122] bridge_slave_0: entered promiscuous mode [ 829.772133][T30122] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.779573][T30122] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.786827][T30122] bridge_slave_1: entered allmulticast mode [ 829.798606][T30122] bridge_slave_1: entered promiscuous mode [ 829.855680][T30122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.876397][T30122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.920116][T30184] __nla_validate_parse: 4 callbacks suppressed [ 829.920134][T30184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6191'. [ 829.947566][T30184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6191'. [ 829.984611][T30122] team0: Port device team_slave_0 added [ 830.003261][T30122] team0: Port device team_slave_1 added [ 830.148093][T30122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.184692][T30122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.248737][T30122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.291191][T30200] netlink: 'syz.3.6195': attribute type 4 has an invalid length. [ 830.332264][T30122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.343502][T30122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.377216][T30122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.460316][ T51] Bluetooth: hci2: command tx timeout [ 830.519641][T30211] netlink: 'syz.2.6198': attribute type 1 has an invalid length. [ 830.601986][T30122] hsr_slave_0: entered promiscuous mode [ 830.609677][T30122] hsr_slave_1: entered promiscuous mode [ 830.626412][T30122] debugfs: 'hsr0' already exists in 'hsr' [ 830.642757][T30122] Cannot create hsr debugfs directory [ 831.056850][T30122] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.087630][T30122] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60973 - 0 [ 831.105494][T30122] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 831.290810][T30122] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.306477][T30122] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60973 - 0 [ 831.326860][T30122] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 831.436074][T30122] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.456848][T30122] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60973 - 0 [ 831.475882][T30122] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 831.615281][T30250] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 831.653955][T30122] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.665438][T30250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6208'. [ 831.680115][T30122] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60973 - 0 [ 831.692189][T30122] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 831.747815][T30250] bond1: entered promiscuous mode [ 831.753493][T30250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 831.768718][T30250] bond1 (unregistering): Released all slaves [ 832.001266][T30122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 832.008930][T30261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6211'. [ 832.035817][T30261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6211'. [ 832.045274][T30261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6211'. [ 832.048587][T30122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 832.078187][T30122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 832.090892][T30122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 832.202333][T30280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6215'. [ 832.320868][T30122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.397657][T30122] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.439202][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.446389][ T8841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.464187][T30295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6218'. [ 832.470917][T30293] netlink: 'syz.2.6217': attribute type 5 has an invalid length. [ 832.537686][ T51] Bluetooth: hci2: command tx timeout [ 832.572195][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.579421][ T8841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.619275][T30298] vlan2: entered allmulticast mode [ 832.626244][T30298] bridge2: entered allmulticast mode [ 832.714334][T30295] bridge2: port 1(bond3) entered blocking state [ 832.738447][T30295] bridge2: port 1(bond3) entered disabled state [ 832.755835][T30295] bond3: entered allmulticast mode [ 832.798820][T30295] bond3: entered promiscuous mode [ 832.902153][T30298] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 832.920071][T30298] bond4 (unregistering): Released all slaves [ 833.069725][T30307] syzkaller1: entered promiscuous mode [ 833.087569][T30307] syzkaller1: entered allmulticast mode [ 833.146297][T30311] syzkaller1: left promiscuous mode [ 833.160237][T30311] syzkaller1: left allmulticast mode [ 833.446356][T30337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6224'. [ 833.547777][T30122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.682602][T30347] netlink: 'syz.3.6227': attribute type 1 has an invalid length. [ 833.731208][T30122] veth0_vlan: entered promiscuous mode [ 833.785058][T30122] veth1_vlan: entered promiscuous mode [ 833.797296][T30355] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 833.856507][T30122] veth0_macvtap: entered promiscuous mode [ 833.867109][T30122] veth1_macvtap: entered promiscuous mode [ 833.938180][T30359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6231'. [ 833.947686][T30359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 833.954928][T30359] IPv6: NLM_F_CREATE should be set when creating new route [ 833.974529][T30357] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 834.014983][T30357] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 834.110214][T30122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.135407][T30122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.184484][T30366] syzkaller1: entered promiscuous mode [ 834.212602][T30366] syzkaller1: entered allmulticast mode [ 834.247416][T15166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.256657][T25975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.269909][T25975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.297790][T25975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.617782][ T51] Bluetooth: hci2: command tx timeout [ 834.650660][T13191] IPVS: starting estimator thread 0... [ 834.668395][T30383] netlink: 'syz.2.6239': attribute type 1 has an invalid length. [ 834.702204][T30376] bond9: Removing last ns target with arp_interval on [ 834.714057][T25975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.728130][T25975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.748300][T30380] IPVS: using max 27 ests per chain, 64800 per kthread [ 834.870298][T25975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.894655][T25975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.199522][T30405] rdma_rxe: rxe_newlink: failed to add lo [ 835.401571][T30412] __nla_validate_parse: 1 callbacks suppressed [ 835.401592][T30412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6248'. [ 835.453965][T30415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6248'. [ 835.489576][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 835.505103][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 835.515344][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 835.527778][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 835.538048][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 835.571427][T30420] vlan2: entered allmulticast mode [ 835.576681][T30420] erspan0: entered allmulticast mode [ 835.589578][T30420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6248'. [ 835.771569][T30414] lo speed is unknown, defaulting to 1000 [ 835.835136][T30414] lo speed is unknown, defaulting to 1000 [ 835.898020][T30431] netlink: 13 bytes leftover after parsing attributes in process `syz.0.6250'. [ 836.040027][T30436] netlink: 'syz.3.6249': attribute type 13 has an invalid length. [ 836.298047][T30414] syzkaller0 speed is unknown, defaulting to 1000 [ 836.299723][T30441] dvmrp6: entered allmulticast mode [ 836.593042][T30425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.708105][ T5838] Bluetooth: hci2: command tx timeout [ 836.772845][T30450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6256'. [ 836.802183][T30456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6256'. [ 836.924966][T15166] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.988667][T30414] chnl_net:caif_netlink_parms(): no params data found [ 837.009527][ T1100] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.034959][T30458] lo speed is unknown, defaulting to 1000 [ 837.118544][T30458] lo speed is unknown, defaulting to 1000 [ 837.137470][T25975] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.221335][T25975] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.339113][ T1314] dvmrp0: left allmulticast mode [ 837.514067][ T1314] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 837.578356][ T5838] Bluetooth: hci3: command tx timeout [ 837.744097][ T1314] gretap0 (unregistering): left promiscuous mode [ 838.065291][ T1314] team0: Port device bridge4 removed [ 838.121886][ T1314] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 838.252852][ T1314] bond5 (unregistering): (slave bridge8): Releasing active interface [ 838.307046][ T1314] bond0 (unregistering): left promiscuous mode [ 838.318712][ T1314] bond0 (unregistering): Released all slaves [ 838.333360][ T1314] bond1 (unregistering): Released all slaves [ 838.350692][ T1314] bond2 (unregistering): Released all slaves [ 838.366186][ T1314] bond3 (unregistering): Released all slaves [ 838.382796][ T1314] bond4 (unregistering): Released all slaves [ 838.396454][ T1314] bond5 (unregistering): Released all slaves [ 838.415820][ T1314] bond6 (unregistering): Released all slaves [ 838.435162][ T1314] bond7 (unregistering): (slave dummy0): Releasing active interface [ 838.447624][ T1314] bond7 (unregistering): Released all slaves [ 838.465570][ T1314] bond8 (unregistering): (slave veth9): Releasing backup interface [ 838.474089][ T1314] veth9: left promiscuous mode [ 838.484133][ T1314] bond8 (unregistering): Released all slaves [ 838.498160][ T1314] bond9 (unregistering): Released all slaves [ 838.547229][T30476] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.554968][T30476] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.674062][T30476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.693025][T30476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.832573][T30471] syzkaller0: entered promiscuous mode [ 838.838350][T30471] syzkaller0: entered allmulticast mode [ 838.895131][T30458] syzkaller0 speed is unknown, defaulting to 1000 [ 838.904159][ T1314] : left promiscuous mode [ 838.916556][T10871] lec:lec_start_xmit: lec0:No lecd attached [ 838.940226][ T8847] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.949279][ T8847] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.959222][ T8847] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.014569][ T1314] hmac(sha224): left promiscuous mode [ 839.036943][ T8847] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.048347][T30414] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.056598][T30414] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.064475][T30414] bridge_slave_0: entered allmulticast mode [ 839.075750][T30414] bridge_slave_0: entered promiscuous mode [ 839.659185][ T5838] Bluetooth: hci3: command tx timeout [ 840.649637][ T1314] !: left promiscuous mode [ 840.659898][T30414] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.667076][T30414] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.675625][T30414] bridge_slave_1: entered allmulticast mode [ 840.684225][T30414] bridge_slave_1: entered promiscuous mode [ 840.750103][T30522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.759408][T30522] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.773360][T30522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 840.807166][ T1314] tipc: Left network mode [ 840.876784][T30414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.895160][T30414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.071766][T30414] team0: Port device team_slave_0 added [ 841.165621][T30539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6271'. [ 841.283161][T30414] team0: Port device team_slave_1 added [ 841.363660][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 841.523953][T30543] macvlan2: entered allmulticast mode [ 841.544386][T30543] hsr0: entered allmulticast mode [ 841.555915][T30543] hsr_slave_0: entered allmulticast mode [ 841.566248][T30543] hsr_slave_1: entered allmulticast mode [ 841.588353][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 841.656860][T30414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.681024][T30414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.733042][T30414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.749031][T30546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6273'. [ 841.750427][ T5838] Bluetooth: hci3: command tx timeout [ 841.769271][T30543] macvlan3: entered allmulticast mode [ 841.776100][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 841.823907][T30549] lo speed is unknown, defaulting to 1000 [ 841.836573][T30543] macvlan4: entered allmulticast mode [ 841.860804][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 841.905719][T30414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.919695][T30414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.949624][T30414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.963794][T30549] lo speed is unknown, defaulting to 1000 [ 841.978291][T30543] macvlan5: entered allmulticast mode [ 841.986920][T30543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6272'. [ 842.214826][T30543] macvlan6: entered allmulticast mode [ 842.235220][T30549] syzkaller0 speed is unknown, defaulting to 1000 [ 842.480663][T30414] hsr_slave_0: entered promiscuous mode [ 842.489966][T30414] hsr_slave_1: entered promiscuous mode [ 842.496379][T30414] debugfs: 'hsr0' already exists in 'hsr' [ 842.502488][T30414] Cannot create hsr debugfs directory [ 843.481116][T30617] tc_dump_action: action bad kind [ 843.580406][T30414] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.629448][T30623] netlink: 'syz.1.6284': attribute type 1 has an invalid length. [ 843.651990][T30623] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6284'. [ 843.806571][T30634] netlink: 'syz.2.6286': attribute type 1 has an invalid length. [ 843.814793][T30634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.826239][ T5838] Bluetooth: hci3: command tx timeout [ 843.854992][T30414] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.932559][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 843.940721][ C0] lec:lec_tx_timeout: lec0 [ 844.111753][T30642] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6289'. [ 844.122802][T30642] openvswitch: netlink: Flow key attr not present in new flow. [ 844.147123][T30414] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.218718][T30641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6288'. [ 844.306773][T30414] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.506063][T30649] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.513769][T30649] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.703823][T30649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.742439][T30649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.063811][ T1100] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.082773][ T1100] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.125991][ T1100] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.150269][ T1100] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.303808][T30414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 845.398667][T30414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 845.486638][T30414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 845.536104][T30414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 845.816571][ T1314] pim6reg (unregistering): left allmulticast mode [ 846.311166][T30689] lo speed is unknown, defaulting to 1000 [ 846.374979][T30689] lo speed is unknown, defaulting to 1000 [ 846.639542][T30727] __nla_validate_parse: 1 callbacks suppressed [ 846.639561][T30727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6301'. [ 846.643383][T30414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.776593][T30414] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.826270][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.833499][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.884102][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.891325][ T8847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.907782][T30736] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6303'. [ 846.936282][ T1314] IPVS: stop unused estimator thread 0... [ 847.249107][T30689] syzkaller0 speed is unknown, defaulting to 1000 [ 847.456524][T30756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6308'. [ 847.466640][T30756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6308'. [ 847.476610][T30756] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6308'. [ 847.516631][T30756] netlink: 'syz.1.6308': attribute type 3 has an invalid length. [ 847.533418][T30756] netlink: 'syz.1.6308': attribute type 2 has an invalid length. [ 847.548676][T30756] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6308'. [ 847.588468][T30756] netlink: 'syz.1.6308': attribute type 2 has an invalid length. [ 848.040947][T30414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.426575][T30800] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6314'. [ 848.607109][T30808] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6315'. [ 848.649850][T30811] IPVS: Error connecting to the multicast addr [ 849.429681][T30414] veth0_vlan: entered promiscuous mode [ 849.480688][T30414] veth1_vlan: entered promiscuous mode [ 849.497561][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 849.603009][T30414] veth0_macvtap: entered promiscuous mode [ 849.641894][T30414] veth1_macvtap: entered promiscuous mode [ 849.706626][T30414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.887125][T30414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.906696][ T8841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.918455][ T8841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.937575][ T8841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.974968][ T8841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.038482][ T8847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.046529][ T8847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.097641][ T8847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.113342][ T8847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.184323][T30873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6326'. [ 850.653022][T30893] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.672212][T30889] bridge0: left promiscuous mode [ 850.706351][T30889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.744985][T30889] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.788767][T30889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 851.008949][T30906] netlink: 'syz.1.6333': attribute type 10 has an invalid length. [ 851.052502][T30906] team0: Port device dummy0 added [ 851.064216][T30909] netlink: 'syz.1.6333': attribute type 10 has an invalid length. [ 851.087266][T30909] team0: Port device dummy0 removed [ 851.100496][T30909] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 851.342896][T30911] netlink: 'syz.0.6335': attribute type 1 has an invalid length. [ 851.482383][T30920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6336'. [ 851.608495][T30916] bond1: (slave geneve3): making interface the new active one [ 851.668529][T30916] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 851.714256][T30923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 851.755243][T30911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 851.765563][ T1005] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.954378][ T1005] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.968758][ T1005] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 852.008098][ T1005] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 852.078002][T30934] xt_hashlimit: size too large, truncated to 1048576 [ 852.456641][T30947] __nla_validate_parse: 1 callbacks suppressed [ 852.456663][T30947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6344'. [ 853.048108][T30994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6353'. [ 853.613802][T31034] batadv_slave_1: entered promiscuous mode [ 853.614294][T31043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6366'. [ 853.630024][T31041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6365'. [ 853.631865][T31034] macsec1: entered promiscuous mode [ 853.763386][T31046] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 853.790703][T31046] bond1 (unregistering): Released all slaves [ 853.975779][T31058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6371'. [ 853.986091][T31058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6371'. [ 854.075067][T31062] IPVS: ip_vs_edit_dest(): server weight less than zero [ 854.082313][ T796] IPVS: starting estimator thread 0... [ 854.129545][T31063] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6373'. [ 854.143009][T31063] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6373'. [ 854.152776][T31063] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6373'. [ 854.207484][T31064] IPVS: using max 27 ests per chain, 64800 per kthread [ 854.241273][T31052] lo speed is unknown, defaulting to 1000 [ 854.252060][T31052] lo speed is unknown, defaulting to 1000 [ 854.335650][T31076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.386612][T31079] netlink: 'syz.2.6376': attribute type 15 has an invalid length. [ 854.394769][T31079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6376'. [ 854.647135][T31052] syzkaller0 speed is unknown, defaulting to 1000 [ 855.166513][T31107] netlink: 'syz.2.6383': attribute type 11 has an invalid length. [ 855.449204][T31124] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 855.463008][T31124] tipc: Enabling of bearer rejected, failed to enable media [ 856.433750][T31166] can: request_module (can-proto-0) failed. [ 856.520780][T31166] lo speed is unknown, defaulting to 1000 [ 856.554127][T31166] lo speed is unknown, defaulting to 1000 [ 856.851288][T15167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.861775][T15167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.884412][T31166] syzkaller0 speed is unknown, defaulting to 1000 [ 856.946244][T31198] tunl0: Caught tx_queue_len zero misconfig [ 857.263534][T31216] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 857.431015][T31226] netlink: 'syz.4.6419': attribute type 28 has an invalid length. [ 857.541532][T31231] __nla_validate_parse: 7 callbacks suppressed [ 857.541554][T31231] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6421'. [ 857.578742][T31231] nbd: must specify at least one socket [ 857.630374][T31232] syzkaller0: entered allmulticast mode [ 857.656371][T31232] tipc: Started in network mode [ 857.661531][T31232] tipc: Node identity ca424629dd91, cluster identity 4711 [ 857.668998][T31232] tipc: Enabled bearer , priority 0 [ 857.887884][T31229] tipc: Disabling bearer [ 857.959673][T31254] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6426'. [ 858.137384][T31260] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6427'. [ 858.143530][T31259] sctp: [Deprecated]: syz.2.6427 (pid 31259) Use of int in max_burst socket option. [ 858.143530][T31259] Use struct sctp_assoc_value instead [ 858.523369][T31281] syzkaller0: entered promiscuous mode [ 858.529045][T31281] syzkaller0: entered allmulticast mode [ 859.367880][T31300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6436'. [ 859.480178][T31305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6436'. [ 859.514916][T31300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 859.591569][T31300] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6436'. [ 859.603534][T31303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 859.612773][T31303] bond5: (slave bond6): Enslaving as an active interface with an up link [ 859.635764][T31311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6439'. [ 859.710076][T31305] bond5 (unregistering): (slave bond6): Releasing backup interface [ 859.746479][T31305] bond5 (unregistering): Released all slaves [ 859.903968][T31318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6442'. [ 859.974432][T31318] bond1: entered promiscuous mode [ 859.981840][T31318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 859.998833][T31320] erspan1: entered allmulticast mode [ 860.188470][T31328] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6445'. [ 860.199131][T31328] rdma_rxe: rxe_newlink: failed to add bond0 [ 860.350418][T31336] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6447'. [ 861.074351][T31363] netlink: 'syz.0.6455': attribute type 21 has an invalid length. [ 861.390660][T31374] bond5: entered promiscuous mode [ 861.409816][T31374] 8021q: adding VLAN 0 to HW filter on device bond5 [ 861.427969][T13191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.167668][ T29] audit: type=1800 audit(1776040545.913:51): pid=31407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6464" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=167 res=0 errno=0 [ 862.302104][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.311798][T13197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.321579][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.457888][T13191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.604584][T31433] xt_cgroup: invalid path, errno=-2 [ 862.700361][T31435] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 862.731787][T31435] bond2 (unregistering): Released all slaves [ 862.763455][T31437] mac80211_hwsim hwsim73 ªªªªª;: renamed from wlan0 [ 862.854131][T31443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.942909][T31447] syzkaller0: entered promiscuous mode [ 862.948517][T31447] syzkaller0: entered allmulticast mode [ 862.956388][ T88] TC_ACT_REPEAT abuse ? [ 863.210724][T31461] netlink: 'syz.0.6481': attribute type 1 has an invalid length. [ 863.234946][T31461] __nla_validate_parse: 7 callbacks suppressed [ 863.234964][T31461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6481'. [ 863.284545][T31473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6483'. [ 863.385267][T31473] tipc: Enabled bearer , priority 0 [ 863.393595][T31473] syzkaller0: entered promiscuous mode [ 863.399238][T31473] syzkaller0: entered allmulticast mode [ 863.480374][T31480] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6483'. [ 863.500078][T13191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.515666][T31472] tipc: Resetting bearer [ 863.596626][T31472] tipc: Disabling bearer [ 863.696512][T31482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6485'. [ 863.723110][T31499] netlink: 'syz.0.6488': attribute type 8 has an invalid length. [ 864.154990][T31518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6492'. [ 864.216937][T31519] syzkaller1: entered promiscuous mode [ 864.220049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.235741][T13191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.251599][T31519] syzkaller1: entered allmulticast mode [ 864.537683][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.789303][T31544] netlink: 'syz.3.6497': attribute type 1 has an invalid length. [ 864.797334][T31544] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6497'. [ 864.861164][T31552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6499'. [ 865.047718][T31529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6494'. [ 865.107009][T31546] pim6reg: entered allmulticast mode [ 865.133187][T31553] pim6reg: left allmulticast mode [ 865.545623][T31581] lo speed is unknown, defaulting to 1000 [ 865.553393][T31581] lo speed is unknown, defaulting to 1000 [ 865.597771][T31585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6508'. [ 865.780882][T31595] sock: sock_timestamping_bind_phc: sock not bind to device [ 865.869382][T31597] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6513'. [ 866.251339][T31591] bond1: left promiscuous mode [ 866.277994][T31581] syzkaller0 speed is unknown, defaulting to 1000 [ 866.702769][T31624] lo speed is unknown, defaulting to 1000 [ 866.714399][T31624] lo speed is unknown, defaulting to 1000 [ 866.929093][T31636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.936397][T31636] IPv6: NLM_F_CREATE should be set when creating new route [ 866.943734][T31636] IPv6: NLM_F_CREATE should be set when creating new route [ 867.064877][T31624] syzkaller0 speed is unknown, defaulting to 1000 [ 867.609393][T31644] net_ratelimit: 7 callbacks suppressed [ 867.609441][T31644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.663719][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.782575][T31657] lo speed is unknown, defaulting to 1000 [ 867.792662][T31657] lo speed is unknown, defaulting to 1000 [ 868.031637][T31657] syzkaller0 speed is unknown, defaulting to 1000 [ 868.597480][T31691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6541'. [ 868.698520][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.016311][T31715] openvswitch: netlink: Flow key attr not present in new flow. [ 869.371796][T31726] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6552'. [ 869.580322][T31735] lo speed is unknown, defaulting to 1000 [ 869.589731][ T5884] IPVS: starting estimator thread 0... [ 869.640036][T31735] lo speed is unknown, defaulting to 1000 [ 869.687476][T31742] IPVS: using max 28 ests per chain, 67200 per kthread [ 869.737980][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.985171][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.072794][T31757] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6558'. [ 870.163332][T31735] syzkaller0 speed is unknown, defaulting to 1000 [ 870.302083][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.594522][T31790] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6566'. [ 870.670194][T31793] netlink: 'syz.4.6567': attribute type 1 has an invalid length. [ 870.779885][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.956136][T31810] netlink: 'syz.2.6571': attribute type 83 has an invalid length. [ 871.190603][T31827] netlink: 'syz.2.6573': attribute type 1 has an invalid length. [ 871.207887][T31812] netlink: 'syz.4.6570': attribute type 3 has an invalid length. [ 871.226611][T31812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6570'. [ 871.420045][T31832] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 871.474381][T31830] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 871.490167][T31830] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 871.575373][T31839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6575'. [ 871.611671][T31849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6576'. [ 871.626000][T31827] bond2: (slave gretap1): making interface the new active one [ 871.672818][T31854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6576'. [ 871.690269][T31827] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 871.731193][T31854] nbd: device at index 64 is going down [ 871.822268][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.921472][T13197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.946537][T31040] udevd[31040]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 872.228653][T31873] syzkaller1: entered promiscuous mode [ 872.234200][T31873] syzkaller1: entered allmulticast mode [ 872.429772][T31882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6583'. [ 872.482719][T31882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6583'. [ 872.876044][T13191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.029551][T31904] netlink: 'syz.3.6587': attribute type 13 has an invalid length. [ 873.065381][T31904] netlink: 'syz.3.6587': attribute type 17 has an invalid length. [ 873.313110][T31890] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.360096][T13197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.663963][T31890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.716083][T31890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.962731][T13194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.226824][T31890] : left allmulticast mode [ 874.298967][T31887] syzkaller0: entered promiscuous mode [ 874.304507][T31887] syzkaller0: entered allmulticast mode [ 874.433332][T31904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.443517][T31904] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.456022][T31904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.480241][T15167] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.507759][T25975] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.585298][T25975] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.608279][T25975] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.654234][T31932] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 874.777944][T31944] __nla_validate_parse: 2 callbacks suppressed [ 874.777965][T31944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6593'. [ 874.903515][T31953] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 874.906593][T31954] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6597'. [ 874.941508][T31954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6597'. [ 875.012687][T31959] netlink: 'syz.4.6599': attribute type 1 has an invalid length. [ 875.021511][T31959] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6599'. [ 875.030615][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.040418][T31959] NCSI netlink: No device for ifindex 0 [ 875.115609][T31953] lo speed is unknown, defaulting to 1000 [ 875.136274][T31953] lo speed is unknown, defaulting to 1000 [ 875.166954][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6600'. [ 875.177076][T31966] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6600'. [ 875.337007][T31979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6600'. [ 875.629476][T31953] syzkaller0 speed is unknown, defaulting to 1000 [ 875.738809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 875.746923][ C0] lec:lec_tx_timeout: lec0 [ 875.771448][T31995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6608'. [ 876.061049][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.378679][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.519241][T32019] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6614'. [ 876.625527][T32021] gretap1: entered promiscuous mode [ 877.098174][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.106917][T32051] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6622'. [ 877.330616][T32048] mac80211_hwsim hwsim71 wlan1: entered allmulticast mode [ 877.370332][T32064] lo speed is unknown, defaulting to 1000 [ 877.395053][T32048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.410821][T32064] lo speed is unknown, defaulting to 1000 [ 877.439490][T32073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.591153][T32084] m1Ie5nè‹Ò: entered promiscuous mode [ 877.630631][T32088] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 877.903734][T32064] syzkaller0 speed is unknown, defaulting to 1000 [ 878.136037][T32109] netlink: 'syz.1.6636': attribute type 21 has an invalid length. [ 878.150028][ T5948] net_ratelimit: 3 callbacks suppressed [ 878.150048][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.293602][T32116] netlink: 'syz.1.6636': attribute type 1 has an invalid length. [ 878.309997][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.399212][T32120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.408125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.659968][T32109] netlink: 'syz.1.6636': attribute type 4 has an invalid length. [ 878.707797][T31926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.848877][T32124] netlink: 'syz.3.6639': attribute type 21 has an invalid length. [ 878.862049][T32124] IPv6: NLM_F_CREATE should be specified when creating new route [ 878.871859][T32124] netlink: 'syz.3.6639': attribute type 1 has an invalid length. [ 878.939434][T31926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.140029][T31924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.188243][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.246929][T32103] netlink: 'syz.2.6635': attribute type 1 has an invalid length. [ 879.330670][T32133] bond1: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 879.359863][T32133] bond1: peer notification delay (1989) is not a multiple of miimon (100), value rounded to 1900 ms [ 879.371283][T32133] bond1: option tlb_dynamic_lb: invalid value (127) [ 879.389004][T32133] bond1 (unregistering): Released all slaves [ 879.583449][T31926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.811712][T32141] syzkaller0: entered promiscuous mode [ 879.822912][T32141] syzkaller0: entered allmulticast mode [ 879.851836][T32141] __nla_validate_parse: 9 callbacks suppressed [ 879.851855][T32141] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6645'. [ 879.888768][T32141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6645'. [ 879.910303][T32141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6645'. [ 879.952708][T32141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6645'. [ 879.979236][T32141] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6645'. [ 879.988480][T32141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6645'. [ 880.011381][T32141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6645'. [ 880.057196][T32147] syzkaller0: entered promiscuous mode [ 880.073238][T32147] syzkaller0: entered allmulticast mode [ 880.237581][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.342334][T32158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.371724][T32158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.405268][T32158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6650'. [ 880.431398][T32158] block nbd1: Unsupported socket: should be TCP or UNIX. [ 880.824181][T32164] lo speed is unknown, defaulting to 1000 [ 880.883223][T32164] lo speed is unknown, defaulting to 1000 [ 881.209098][T32174] lo speed is unknown, defaulting to 1000 [ 881.381935][T32178] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6658'. [ 881.638721][T32174] lo speed is unknown, defaulting to 1000 [ 881.638730][T32164] syzkaller0 speed is unknown, defaulting to 1000 [ 881.724068][T32184] netlink: 'syz.0.6661': attribute type 11 has an invalid length. [ 881.777660][T32166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6652'. [ 882.285466][T32174] syzkaller0 speed is unknown, defaulting to 1000 [ 882.631452][T32225] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 882.646689][T32225] bond1 (unregistering): Released all slaves [ 882.831749][T32234] syzkaller0: entered promiscuous mode [ 882.838227][T32234] syzkaller0: entered allmulticast mode [ 883.322337][T32245] netlink: 'syz.0.6678': attribute type 5 has an invalid length. [ 883.331469][T32245] netlink: 'syz.0.6678': attribute type 6 has an invalid length. [ 883.340518][ T5274] net_ratelimit: 6 callbacks suppressed [ 883.340602][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.170697][T32275] netlink: 'syz.2.6688': attribute type 1 has an invalid length. [ 884.290541][T32275] bond3: entered promiscuous mode [ 884.306345][T32275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 884.379097][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.488413][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.492228][T32275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 884.537060][T32275] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 884.577528][T32275] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 884.600313][T32275] bond3: (slave ip6gre1): making interface the new active one [ 884.637561][T32275] ip6gre1: entered promiscuous mode [ 884.644698][T32275] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 885.043239][T32283] sctp: [Deprecated]: syz.3.6689 (pid 32283) Use of int in max_burst socket option. [ 885.043239][T32283] Use struct sctp_assoc_value instead [ 885.264707][T32309] __nla_validate_parse: 11 callbacks suppressed [ 885.264730][T32309] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6697'. [ 885.282915][T32309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6697'. [ 885.300424][T32311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6698'. [ 885.321269][T32313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6698'. [ 885.355802][T32311] sctp: [Deprecated]: syz.0.6698 (pid 32311) Use of int in maxseg socket option. [ 885.355802][T32311] Use struct sctp_assoc_value instead [ 885.416128][T32313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6698'. [ 885.426272][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.534015][T32311] veth7: entered promiscuous mode [ 885.593201][T32324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6701'. [ 885.633045][T32324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6701'. [ 885.800344][T32332] ip6erspan0: entered promiscuous mode [ 885.821246][T32332] ip6erspan0: entered allmulticast mode [ 885.964755][T32342] lo speed is unknown, defaulting to 1000 [ 885.975233][T32342] lo speed is unknown, defaulting to 1000 [ 886.096233][T32349] TCP: TCP_TX_DELAY enabled [ 886.140041][T32349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6707'. [ 886.352532][T32356] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 886.375958][T32356] bond4 (unregistering): Released all slaves [ 886.400557][T32342] syzkaller0 speed is unknown, defaulting to 1000 [ 886.460441][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.571793][T32369] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6712'. [ 886.630277][T32370] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 886.677104][T32374] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 886.884551][T32372] lo speed is unknown, defaulting to 1000 [ 886.907708][T32378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6714'. [ 886.951665][T32378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.044357][T32364] lo speed is unknown, defaulting to 1000 [ 887.053968][T32400] SET target dimension over the limit! [ 887.078192][T32400] SET target dimension over the limit! [ 887.114938][T32364] lo speed is unknown, defaulting to 1000 [ 887.235832][T32407] netlink: 'syz.2.6720': attribute type 21 has an invalid length. [ 887.295250][T32407] netlink: 'syz.2.6720': attribute type 6 has an invalid length. [ 887.499043][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.507374][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.616009][ T5838] block nbd1: Receive control failed (result -32) [ 887.679633][T32419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 887.748567][T32372] lo speed is unknown, defaulting to 1000 [ 887.748914][T32364] syzkaller0 speed is unknown, defaulting to 1000 [ 887.828074][T32425] netlink: 'syz.2.6726': attribute type 11 has an invalid length. [ 887.844764][T32425] netlink: 'syz.2.6726': attribute type 23 has an invalid length. [ 888.479390][T32437] dummy0: entered promiscuous mode [ 888.485061][T32437] vlan0: entered promiscuous mode [ 888.538919][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.547564][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.657995][T32372] syzkaller0 speed is unknown, defaulting to 1000 [ 889.146422][T32463] smc: net device wlan0 erased user defined pnetid SYZ0 [ 889.178350][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.261401][T32463] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 889.558475][T32470] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 889.578969][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.636418][T32473] lo speed is unknown, defaulting to 1000 [ 889.644150][T32473] lo speed is unknown, defaulting to 1000 [ 889.688742][T32470] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 889.815780][T32470] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 889.969463][T32470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 890.022766][T32486] netlink: 'syz.2.6740': attribute type 27 has an invalid length. [ 890.092412][T32486] bond4: entered promiscuous mode [ 890.098009][T32486] 8021q: adding VLAN 0 to HW filter on device bond4 [ 890.229496][T25975] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 890.248447][T32473] syzkaller0 speed is unknown, defaulting to 1000 [ 890.318731][T32492] netlink: 'syz.2.6742': attribute type 10 has an invalid length. [ 890.331792][T32492] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.341798][T32492] bond0: (slave team0): Enslaving as an active interface with an up link [ 890.364566][ T88] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 890.408512][ T88] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 890.460449][ T88] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 890.618352][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.911267][T32506] veth1_macvtap: renamed from veth0_vlan [ 890.924106][T32504] __nla_validate_parse: 12 callbacks suppressed [ 890.924127][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6745'. [ 891.054100][T32510] netlink: 'syz.4.6746': attribute type 8 has an invalid length. [ 891.092630][T32510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6746'. [ 891.161387][T32510] bond0: entered promiscuous mode [ 891.166733][T32510] bond_slave_0: entered promiscuous mode [ 891.172995][T32510] bond_slave_1: entered promiscuous mode [ 891.182067][T32510] gretap0: entered promiscuous mode [ 891.189317][T32510] debugfs: 'hsr1' already exists in 'hsr' [ 891.195390][T32510] Cannot create hsr debugfs directory [ 891.204528][T32510] hsr1: entered promiscuous mode [ 891.330069][T32517] netlink: 'syz.0.6747': attribute type 1 has an invalid length. [ 891.355384][T32517] netlink: 'syz.0.6747': attribute type 2 has an invalid length. [ 891.385857][T32521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6748'. [ 891.579854][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.668896][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.744854][T32544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6752'. [ 891.762971][T32546] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6753'. [ 892.204994][ T5492] veth1_macvtap: left promiscuous mode [ 892.272252][ T5492] veth1_macvtap: entered promiscuous mode [ 892.539870][T32593] erspan0: entered promiscuous mode [ 892.580557][T32599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6766'. [ 892.662562][T32593] erspan0: left promiscuous mode [ 892.700678][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.085702][T32619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6770'. [ 893.304365][T32646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6774'. [ 893.712931][T32669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.730421][T32670] Unsupported ieee802154 address type: 0 [ 893.747922][T13194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.756120][T13194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.866089][T32675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.875093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.936321][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6777'. [ 893.976996][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6777'. [ 894.598361][T32695] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 894.628546][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.735863][T32699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.746471][T32699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.788281][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.898384][T32702] Unsupported ieee802154 address type: 0 [ 895.044027][T32706] netlink: 'syz.1.6785': attribute type 13 has an invalid length. [ 895.689697][T32725] lo speed is unknown, defaulting to 1000 [ 895.716644][T32725] lo speed is unknown, defaulting to 1000 [ 896.026260][T32735] __nla_validate_parse: 2 callbacks suppressed [ 896.026280][T32735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6794'. [ 896.072948][T32725] syzkaller0 speed is unknown, defaulting to 1000 [ 896.440649][T32746] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6796'. [ 896.527199][T32746] tipc: Started in network mode [ 896.541967][T32746] tipc: Node identity aac90036562a, cluster identity 4711 [ 896.567758][T32746] tipc: Enabled bearer , priority 0 [ 896.596061][T32746] syzkaller0: entered promiscuous mode [ 896.623477][T32746] syzkaller0: entered allmulticast mode [ 896.652341][T32746] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 896.770144][T32746] tipc: Resetting bearer [ 896.806795][T32745] tipc: Resetting bearer [ 896.974947][T32745] tipc: Disabling bearer [ 897.364952][T32766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6803'. [ 897.402833][T32766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6803'. [ 897.469900][ T305] lo speed is unknown, defaulting to 1000 [ 897.516778][ T305] lo speed is unknown, defaulting to 1000 [ 897.539807][T32764] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6802'. [ 897.558086][T32764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6802'. [ 898.226517][ T305] syzkaller0 speed is unknown, defaulting to 1000 [ 898.673273][ T328] hsr0: left allmulticast mode [ 898.678595][ T328] hsr_slave_0: left allmulticast mode [ 898.694275][ T328] hsr_slave_1: left allmulticast mode [ 898.783687][T31926] net_ratelimit: 11 callbacks suppressed [ 898.783707][T31926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.940142][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.948622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.075787][ T342] lo speed is unknown, defaulting to 1000 [ 899.145128][ T342] lo speed is unknown, defaulting to 1000 [ 899.886918][ T342] syzkaller0 speed is unknown, defaulting to 1000 [ 899.979089][T13194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.987474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.437141][ T371] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6820'. [ 900.698628][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.029865][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.038324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.224939][ T395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6827'. [ 901.337876][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.368998][T32633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.376954][T32633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.548888][ T407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6833'. [ 901.563034][ T407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6833'. [ 901.584515][ T407] netlink: 'syz.4.6833': attribute type 1 has an invalid length. [ 901.601669][ T407] netlink: 524 bytes leftover after parsing attributes in process `syz.4.6833'. [ 901.701672][ T416] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6835'. [ 901.758399][ T418] netlink: 'syz.2.6836': attribute type 62 has an invalid length. [ 901.802886][ T418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 901.860910][ T414] syzkaller0: entered promiscuous mode [ 901.866505][ T414] syzkaller0: entered allmulticast mode [ 901.873051][ T423] netlink: 'syz.4.6838': attribute type 1 has an invalid length. [ 902.382108][T13194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.356782][T10871] lec:lec_start_xmit: lec0:No lecd attached [ 903.663112][ T430] syzkaller0: entered promiscuous mode [ 903.668930][ T430] syzkaller0: entered allmulticast mode [ 903.834495][ T447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6843'. [ 903.896826][ T450] netlink: 'syz.4.6845': attribute type 10 has an invalid length. [ 903.918369][ T451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6844'. [ 903.944912][ T450] team0: Port device dummy0 added [ 903.975518][ T450] netlink: 'syz.4.6845': attribute type 10 has an invalid length. [ 904.009467][ T450] team0: Port device dummy0 removed [ 904.048927][ T450] dummy0: entered promiscuous mode [ 904.060375][ T462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6846'. [ 904.071118][ T450] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 904.315552][ T473] netlink: 'syz.2.6850': attribute type 1 has an invalid length. [ 904.326169][ T473] netlink: 'syz.2.6850': attribute type 3 has an invalid length. [ 904.343130][ T473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6850'. [ 904.437031][ T475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.457607][ T5948] net_ratelimit: 3 callbacks suppressed [ 904.457627][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.486696][ T475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.512609][ T475] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 904.557564][ T475] bond0 (unregistering): Released all slaves [ 905.201988][ T512] netlink: 'syz.0.6858': attribute type 15 has an invalid length. [ 905.309132][ T522] netlink: 'syz.3.6861': attribute type 1 has an invalid length. [ 905.463800][ T528] m1Ie5nè‹Ò: entered promiscuous mode [ 905.502135][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.633756][ T541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.642428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.795996][ T550] tipc: MTU too low for tipc bearer [ 906.188586][ T577] netlink: 'syz.3.6876': attribute type 1 has an invalid length. [ 906.350871][ T586] __nla_validate_parse: 6 callbacks suppressed [ 906.350891][ T586] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6876'. [ 906.370064][ T586] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6876'. [ 906.403283][ T588] nbd: must specify a size in bytes for the device [ 906.538997][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.553662][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6878'. [ 906.740818][ T606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6881'. [ 906.752484][ T606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6881'. [ 906.762330][ T606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6881'. [ 906.777981][T13179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.849704][ T606] netlink: 424 bytes leftover after parsing attributes in process `syz.3.6881'. [ 906.887204][ T606] netlink: 'syz.3.6881': attribute type 1 has an invalid length. [ 906.971440][ T610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 906.981639][ T610] team0: Port device bond5 added [ 907.022794][ T627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6885'. [ 907.068181][ T624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6885'. [ 907.280548][ T638] lo speed is unknown, defaulting to 1000 [ 907.291220][ T640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6890'. [ 907.306667][ T638] lo speed is unknown, defaulting to 1000 [ 907.389229][ T647] gre1: entered promiscuous mode [ 907.578024][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.836091][ T664] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.846571][ T664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 907.891762][ T638] syzkaller0 speed is unknown, defaulting to 1000 [ 907.898729][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 907.943134][ T677] openvswitch: netlink: Message has 2 unknown bytes. [ 908.095335][ T680] lo speed is unknown, defaulting to 1000 [ 908.103035][ T680] lo speed is unknown, defaulting to 1000 [ 908.179319][ T688] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 908.194373][ T688] netlink: 'syz.0.6901': attribute type 1 has an invalid length. [ 908.361111][ T689] netlink: 'syz.4.6902': attribute type 9 has an invalid length. [ 908.419052][ T680] syzkaller0 speed is unknown, defaulting to 1000 [ 908.428381][T31923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.780128][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 908.788224][ C0] lec:lec_tx_timeout: lec0 [ 909.114026][ T721] netlink: 'syz.2.6908': attribute type 93 has an invalid length. [ 909.593091][ T720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 909.668417][ T5948] net_ratelimit: 2 callbacks suppressed [ 909.668438][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.014744][ T757] netlink: 'syz.1.6922': attribute type 1 has an invalid length. [ 910.322935][ T778] IPVS: length: 59 != 8 [ 910.399672][ T781] Bluetooth: MGMT ver 1.23 [ 911.153881][ T833] netlink: 'syz.3.6941': attribute type 1 has an invalid length. [ 911.239614][ T837] syzkaller0: entered promiscuous mode [ 911.259427][ T837] syzkaller0: entered allmulticast mode [ 911.503706][ T857] tipc: Failed to remove unknown binding: 66,0,0/0:3597034007/3597034009 [ 911.514492][ T857] tipc: Failed to remove unknown binding: 66,0,0/0:3597034007/3597034008 [ 911.955586][ T873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.269554][ T879] __nla_validate_parse: 10 callbacks suppressed [ 912.269576][ T879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6952'. [ 912.340451][ T879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6952'. [ 912.993581][ T893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6957'. [ 913.160176][ T901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6959'. [ 913.296617][ T915] netlink: 16158 bytes leftover after parsing attributes in process `syz.4.6962'. [ 913.329406][ T918] rdma_rxe: rxe_newlink: failed to add lo [ 913.435261][ T928] xt_hashlimit: max too large, truncated to 1048576 [ 913.693416][ T958] netlink: 'syz.4.6966': attribute type 4 has an invalid length. [ 913.871820][ T970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6972'. [ 913.889058][ T970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 913.896322][ T970] IPv6: NLM_F_CREATE should be set when creating new route [ 913.903691][ T970] IPv6: NLM_F_CREATE should be set when creating new route [ 914.151698][ T982] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6971'. [ 914.160843][ T982] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6971'. [ 914.171030][ T982] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6971'. [ 914.395666][ T991] ipvlan0: entered promiscuous mode [ 914.412540][ T991] bridge0: port 3(ipvlan0) entered blocking state [ 914.428880][ T991] bridge0: port 3(ipvlan0) entered disabled state [ 914.442983][ T991] ipvlan0: entered allmulticast mode [ 914.457167][ T991] bridge0: entered allmulticast mode [ 914.478283][ T991] ipvlan0: left allmulticast mode [ 914.490228][ T991] bridge0: left allmulticast mode [ 914.720370][ T1009] xt_hashlimit: size too large, truncated to 1048576 [ 914.737582][ T1009] xt_hashlimit: max too large, truncated to 1048576 [ 914.754653][ T1009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6980'. [ 914.773926][ T1009] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 915.010333][ T1016] lo speed is unknown, defaulting to 1000 [ 915.022357][ T1021] openvswitch: netlink: Key 6 has unexpected len 14 expected 2 [ 915.035715][ T1016] lo speed is unknown, defaulting to 1000 [ 915.573960][ T1057] netlink: 'syz.4.6989': attribute type 1 has an invalid length. [ 915.648975][ T1066] netlink: 'syz.3.6993': attribute type 11 has an invalid length. [ 915.663935][ T1057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.701226][ T1060] bond1: (slave gretap1): making interface the new active one [ 915.711203][ T1060] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 915.720583][ T1016] syzkaller0 speed is unknown, defaulting to 1000 [ 915.824845][ T1057] bond1 (unregistering): (slave gretap1): Releasing active interface [ 915.848590][ T1057] bond1 (unregistering): Released all slaves [ 916.112870][ T1085] geneve4: entered promiscuous mode [ 916.476760][ T1117] netlink: 'syz.3.7004': attribute type 1 has an invalid length. [ 916.532289][ T1119] vlan0: entered promiscuous mode [ 916.539035][ T1119] bridge0: entered promiscuous mode [ 916.546269][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.578931][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.965136][ T1151] sctp: [Deprecated]: syz.0.7011 (pid 1151) Use of int in max_burst socket option. [ 916.965136][ T1151] Use struct sctp_assoc_value instead [ 917.484155][ T1186] netlink: 'syz.4.7022': attribute type 21 has an invalid length. [ 917.517761][ T1186] __nla_validate_parse: 8 callbacks suppressed [ 917.517778][ T1186] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7022'. [ 917.568052][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7022'. [ 918.055087][ T1204] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 918.064966][ T1204] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 918.091607][ T1204] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 918.103463][ T1204] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 918.113257][ T1204] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 918.122972][ T1204] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 918.133725][ T1204] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 918.147680][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 918.151665][ T1204] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 918.448228][ T1217] batadv1: entered promiscuous mode [ 918.453617][ T1217] batadv1: entered allmulticast mode [ 918.920176][ T1210] openvswitch: netlink: Actions may not be safe on all matching packets [ 919.438098][ T1259] veth7: entered promiscuous mode [ 919.676868][ T1273] netlink: 'syz.3.7047': attribute type 83 has an invalid length. [ 919.846645][ T1286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.881511][ T1286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.900369][ T1286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.918663][ T1286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.189920][ T1311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 920.911985][ T1340] netlink: 'syz.3.7064': attribute type 21 has an invalid length. [ 920.930095][ T1341] netlink: 'syz.3.7064': attribute type 21 has an invalid length. [ 921.042638][ T1347] xt_connbytes: Forcing CT accounting to be enabled [ 921.058408][ T1347] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 921.256906][ T1362] netlink: 'syz.2.7065': attribute type 1 has an invalid length. [ 921.420847][ T1362] bond6: entered promiscuous mode [ 921.477825][ T1362] bond6: entered allmulticast mode [ 921.483423][ T1362] 8021q: adding VLAN 0 to HW filter on device bond6 [ 921.710769][ T1378] bridge0: port 3(vlan2) entered blocking state [ 921.723345][ T1378] bridge0: port 3(vlan2) entered disabled state [ 921.734591][ T1378] vlan2: entered allmulticast mode [ 921.762394][ T1378] geneve0: entered allmulticast mode [ 921.771472][ T1378] vlan2: entered promiscuous mode [ 921.776734][ T1378] geneve0: entered promiscuous mode [ 921.877081][ T1391] netlink: 'syz.0.7074': attribute type 2 has an invalid length. [ 921.886641][ T1391] netlink: 'syz.0.7074': attribute type 2 has an invalid length. [ 921.903148][ T1389] openvswitch: netlink: Flow actions attr not present in new flow. [ 922.498367][ T1431] Bluetooth: MGMT ver 1.23 [ 922.574378][ T1437] __nla_validate_parse: 74 callbacks suppressed [ 922.574401][ T1437] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7086'. [ 922.780540][ T1444] x_tables: duplicate underflow at hook 2 [ 922.819742][ T1446] netlink: 'syz.3.7088': attribute type 3 has an invalid length. [ 922.856458][ T1451] netlink: 'syz.3.7088': attribute type 3 has an invalid length. [ 923.167148][ T1464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 923.198957][ T1468] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7099'. [ 923.924349][ T1505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7109'. [ 923.933769][ T1505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7109'. [ 923.962684][ T1508] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7108'. [ 923.988945][ T1508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7108'. [ 924.003865][ T1511] syz.3.7109: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 924.019570][ T1511] CPU: 1 UID: 0 PID: 1511 Comm: syz.3.7109 Not tainted syzkaller #0 PREEMPT(full) [ 924.019600][ T1511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 924.019615][ T1511] Call Trace: [ 924.019625][ T1511] [ 924.019635][ T1511] dump_stack_lvl+0xe8/0x150 [ 924.019675][ T1511] warn_alloc+0x249/0x340 [ 924.019705][ T1511] ? stack_trace_save+0xa9/0x100 [ 924.019734][ T1511] ? __pfx_warn_alloc+0x10/0x10 [ 924.019771][ T1511] ? kasan_save_track+0x4f/0x80 [ 924.019797][ T1511] ? kasan_save_track+0x3e/0x80 [ 924.019821][ T1511] ? __kasan_kmalloc+0x93/0xb0 [ 924.019847][ T1511] ? __kmalloc_cache_noprof+0x31c/0x660 [ 924.019873][ T1511] ? xskq_create+0x56/0x170 [ 924.019905][ T1511] ? xsk_setsockopt+0x54c/0x990 [ 924.019933][ T1511] ? do_sock_setsockopt+0x17c/0x1b0 [ 924.019971][ T1511] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 924.020003][ T1511] ? do_syscall_64+0x14d/0xf80 [ 924.020030][ T1511] __vmalloc_node_range_noprof+0x132/0x1730 [ 924.020103][ T1511] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 924.020138][ T1511] ? __kasan_kmalloc+0x93/0xb0 [ 924.020174][ T1511] vmalloc_user_noprof+0xad/0xe0 [ 924.020201][ T1511] ? xskq_create+0xbf/0x170 [ 924.020236][ T1511] xskq_create+0xbf/0x170 [ 924.020272][ T1511] xsk_init_queue+0x8a/0xe0 [ 924.020305][ T1511] xsk_setsockopt+0x54c/0x990 [ 924.020339][ T1511] ? __pfx_xsk_setsockopt+0x10/0x10 [ 924.020370][ T1511] ? __pfx_aa_sk_perm+0x10/0x10 [ 924.020410][ T1511] ? aa_sock_opt_perm+0xff/0x1a0 [ 924.020436][ T1511] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 924.020462][ T1511] ? __pfx_xsk_setsockopt+0x10/0x10 [ 924.020494][ T1511] do_sock_setsockopt+0x17c/0x1b0 [ 924.020533][ T1511] __x64_sys_setsockopt+0x13d/0x1b0 [ 924.020585][ T1511] do_syscall_64+0x14d/0xf80 [ 924.020605][ T1511] ? trace_irq_disable+0x3b/0x150 [ 924.020623][ T1511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.020655][ T1511] ? clear_bhb_loop+0x40/0x90 [ 924.020678][ T1511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.020698][ T1511] RIP: 0033:0x7f682a99c819 [ 924.020715][ T1511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.020732][ T1511] RSP: 002b:00007f682b7b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 924.020753][ T1511] RAX: ffffffffffffffda RBX: 00007f682ac16090 RCX: 00007f682a99c819 [ 924.020767][ T1511] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 924.020779][ T1511] RBP: 00007f682aa32c91 R08: 0000000000000004 R09: 0000000000000000 [ 924.020792][ T1511] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.020805][ T1511] R13: 00007f682ac16128 R14: 00007f682ac16090 R15: 00007ffd89f70898 [ 924.020837][ T1511] [ 924.020913][ T1511] Mem-Info: [ 924.302655][ T1511] active_anon:11241 inactive_anon:0 isolated_anon:0 [ 924.302655][ T1511] active_file:2894 inactive_file:40698 isolated_file:0 [ 924.302655][ T1511] unevictable:768 dirty:124 writeback:0 [ 924.302655][ T1511] slab_reclaimable:14436 slab_unreclaimable:197756 [ 924.302655][ T1511] mapped:32737 shmem:1387 pagetables:1566 [ 924.302655][ T1511] sec_pagetables:0 bounce:0 [ 924.302655][ T1511] kernel_misc_reclaimable:0 [ 924.302655][ T1511] free:1197724 free_pcp:26084 free_cma:0 [ 924.411296][ T1511] Node 0 active_anon:45064kB inactive_anon:0kB active_file:11576kB inactive_file:162596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20452kB dirty:496kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17872kB pagetables:6156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 924.479297][ T1511] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110496kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 924.518312][ T1519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7111'. [ 924.547745][ T1511] Node 0 DMA free:11108kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:28kB free_cma:0kB [ 924.588180][ T1511] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 924.603243][ T1511] Node 0 DMA32 free:1269948kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45364kB inactive_anon:0kB active_file:11576kB inactive_file:162596kB unevictable:1536kB writepending:496kB zspages:0kB present:3129332kB managed:2552184kB mlocked:0kB bounce:0kB free_pcp:42956kB local_pcp:15040kB free_cma:0kB [ 924.614454][ T1521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7112'. [ 924.657628][ T1523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7113'. [ 924.670025][ T1511] lowmem_reserve[]: 0 0 0 0 0 [ 924.680173][ T1511] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 924.750799][ T1511] lowmem_reserve[]: 0 0 0 0 0 [ 924.762776][ T1526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7112'. [ 924.799994][ T5838] Bluetooth: hci3: link tx timeout [ 924.805774][ T5838] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 924.815786][ T5838] Bluetooth: hci3: link tx timeout [ 924.822377][ T5838] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 924.846611][ T1526] bond1: entered promiscuous mode [ 924.852315][ T1526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 924.860073][ T1526] bridge0: port 3(bond1) entered blocking state [ 924.866715][ T1526] bridge0: port 3(bond1) entered disabled state [ 924.873431][ T1526] bond1: entered allmulticast mode [ 924.882952][ T1511] Node 1 Normal free:3518144kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62672kB local_pcp:32488kB free_cma:0kB [ 924.898536][ T1526] bridge0: port 3(bond1) entered blocking state [ 924.921731][ T1526] bridge0: port 3(bond1) entered forwarding state [ 925.002499][ T1511] lowmem_reserve[]: 0 0 0 0 0 [ 925.018383][ T1511] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11108kB [ 925.044154][ T1511] Node 0 DMA32: 7531*4kB (UM) 6042*8kB (UM) 3919*16kB (UME) 227*32kB (UM) 206*64kB (UE) 406*128kB (UM) 711*256kB (UME) 485*512kB (UM) 336*1024kB (UM) 138*2048kB (UM) 0*4096kB = 1270604kB [ 925.083695][ T1511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 925.115689][ T1511] Node 1 Normal: 10*4kB (UM) 9*8kB (UM) 15*16kB (UM) 9*32kB (UM) 19*64kB (UM) 9*128kB (UM) 9*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 9*2048kB (U) 850*4096kB (UM) = 3518144kB [ 925.176923][ T1511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.218963][ T1538] FAULT_INJECTION: forcing a failure. [ 925.218963][ T1538] name failslab, interval 1, probability 0, space 0, times 0 [ 925.232631][ T1538] CPU: 1 UID: 0 PID: 1538 Comm: syz.0.7117 Not tainted syzkaller #0 PREEMPT(full) [ 925.232661][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.232676][ T1538] Call Trace: [ 925.232685][ T1538] [ 925.232695][ T1538] dump_stack_lvl+0xe8/0x150 [ 925.232732][ T1538] should_fail_ex+0x412/0x560 [ 925.232775][ T1538] should_failslab+0xa8/0x100 [ 925.232804][ T1538] ? security_inode_alloc+0x39/0x310 [ 925.232829][ T1538] kmem_cache_alloc_noprof+0x87/0x650 [ 925.232865][ T1538] security_inode_alloc+0x39/0x310 [ 925.232892][ T1538] inode_init_always_gfp+0x9ed/0xdc0 [ 925.232933][ T1538] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 925.232961][ T1538] alloc_inode+0x82/0x1b0 [ 925.233006][ T1538] new_inode+0x22/0x170 [ 925.233032][ T1538] __debugfs_create_file+0xb8/0x400 [ 925.233062][ T1538] debugfs_create_file_full+0x3f/0x60 [ 925.233091][ T1538] ref_tracker_dir_debugfs+0x197/0x360 [ 925.233116][ T1538] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 925.233170][ T1538] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 925.233197][ T1538] ? alloc_netdev_mqs+0xa6/0x11b0 [ 925.233231][ T1538] ? __raw_spin_lock_init+0x45/0x100 [ 925.233259][ T1538] alloc_netdev_mqs+0x272/0x11b0 [ 925.233281][ T1538] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 925.233310][ T1538] rtnl_create_link+0x31f/0xd70 [ 925.233342][ T1538] rtnl_newlink_create+0x277/0xb70 [ 925.233373][ T1538] ? __pfx___nla_validate_parse+0x10/0x10 [ 925.233410][ T1538] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 925.233446][ T1538] ? __pfx___mutex_lock+0x10/0x10 [ 925.233482][ T1538] ? ns_capable+0x89/0xe0 [ 925.233515][ T1538] rtnl_newlink+0x166a/0x1bb0 [ 925.233561][ T1538] ? __pfx_rtnl_newlink+0x10/0x10 [ 925.233601][ T1538] ? __lock_acquire+0x6b5/0x2cf0 [ 925.233638][ T1538] ? __lock_acquire+0x6b5/0x2cf0 [ 925.233669][ T1538] ? __lock_acquire+0x6b5/0x2cf0 [ 925.233711][ T1538] ? unwind_next_frame+0xa5/0x23c0 [ 925.233770][ T1538] ? __lock_acquire+0x6b5/0x2cf0 [ 925.233803][ T1538] ? is_bpf_text_address+0x26/0x2b0 [ 925.233832][ T1538] ? kernel_text_address+0xa5/0xe0 [ 925.233887][ T1538] ? __pfx_rtnl_newlink+0x10/0x10 [ 925.233915][ T1538] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 925.233948][ T1538] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 925.233975][ T1538] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 925.234002][ T1538] ? __lock_acquire+0x6b5/0x2cf0 [ 925.234042][ T1538] netlink_rcv_skb+0x232/0x4b0 [ 925.234075][ T1538] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 925.234105][ T1538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 925.234148][ T1538] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.234187][ T1538] netlink_unicast+0x80f/0x9b0 [ 925.234232][ T1538] ? __pfx_netlink_unicast+0x10/0x10 [ 925.234262][ T1538] ? netlink_sendmsg+0x650/0xb40 [ 925.234290][ T1538] ? skb_put+0x11b/0x210 [ 925.234324][ T1538] netlink_sendmsg+0x813/0xb40 [ 925.234366][ T1538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.234401][ T1538] ? aa_sock_msg_perm+0xf1/0x1b0 [ 925.234424][ T1538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 925.234455][ T1538] ____sys_sendmsg+0x972/0x9f0 [ 925.234499][ T1538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.234543][ T1538] ? import_iovec+0x73/0xa0 [ 925.234574][ T1538] ___sys_sendmsg+0x2a5/0x360 [ 925.234612][ T1538] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.234686][ T1538] ? __fget_files+0x2a/0x420 [ 925.234705][ T1538] ? __fget_files+0x3a0/0x420 [ 925.234737][ T1538] __x64_sys_sendmsg+0x1bd/0x2a0 [ 925.234773][ T1538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 925.234817][ T1538] ? __pfx_ksys_write+0x10/0x10 [ 925.234855][ T1538] do_syscall_64+0x14d/0xf80 [ 925.234876][ T1538] ? trace_irq_disable+0x3b/0x150 [ 925.234895][ T1538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.234918][ T1538] ? clear_bhb_loop+0x40/0x90 [ 925.234945][ T1538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.234967][ T1538] RIP: 0033:0x7ff43c19c819 [ 925.234988][ T1538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.235008][ T1538] RSP: 002b:00007ff43a3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.235031][ T1538] RAX: ffffffffffffffda RBX: 00007ff43c415fa0 RCX: 00007ff43c19c819 [ 925.235047][ T1538] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 925.235060][ T1538] RBP: 00007ff43a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 925.235074][ T1538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.235086][ T1538] R13: 00007ff43c416038 R14: 00007ff43c415fa0 R15: 00007fff197f6f18 [ 925.235123][ T1538] [ 925.235189][ T1538] debugfs: out of free dentries, can not create file 'netdev@ffff8880778ce620' [ 925.249874][ T1511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 925.715443][ T1511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 925.725277][ T1511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 925.736098][T32637] bridge0: port 3(bond1) entered disabled state [ 925.739029][ T1511] 44966 total pagecache pages [ 925.764267][ T1511] 0 pages in swap cache [ 925.807788][ T1511] Free swap = 124996kB [ 925.837358][ T1511] Total swap = 124996kB [ 925.847915][ T1511] 2097051 pages RAM [ 925.851860][ T1511] 0 pages HighMem/MovableOnly [ 925.856581][ T1511] 427172 pages reserved [ 925.897471][ T1511] 0 pages cma reserved [ 926.666376][ T1569] veth1_macvtap: left promiscuous mode [ 926.685774][ T1569] macvlan2: left allmulticast mode [ 926.698239][ T1569] vlan2: left allmulticast mode [ 926.703451][ T1569] bridge2: left allmulticast mode [ 926.709073][ T1569] macsec1: left promiscuous mode [ 926.714605][ T1569] bond5: left promiscuous mode [ 926.725795][ T1580] FAULT_INJECTION: forcing a failure. [ 926.725795][ T1580] name failslab, interval 1, probability 0, space 0, times 0 [ 926.739153][ T1580] CPU: 1 UID: 0 PID: 1580 Comm: syz.4.7130 Not tainted syzkaller #0 PREEMPT(full) [ 926.739188][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 926.739208][ T1580] Call Trace: [ 926.739218][ T1580] [ 926.739228][ T1580] dump_stack_lvl+0xe8/0x150 [ 926.739273][ T1580] should_fail_ex+0x412/0x560 [ 926.739320][ T1580] should_failslab+0xa8/0x100 [ 926.739350][ T1580] ? security_inode_alloc+0x39/0x310 [ 926.739376][ T1580] kmem_cache_alloc_noprof+0x87/0x650 [ 926.739413][ T1580] security_inode_alloc+0x39/0x310 [ 926.739441][ T1580] inode_init_always_gfp+0x9ed/0xdc0 [ 926.739483][ T1580] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 926.739510][ T1580] alloc_inode+0x82/0x1b0 [ 926.739544][ T1580] new_inode+0x22/0x170 [ 926.739571][ T1580] __debugfs_create_file+0xb8/0x400 [ 926.739603][ T1580] debugfs_create_file_full+0x3f/0x60 [ 926.739634][ T1580] ref_tracker_dir_debugfs+0x197/0x360 [ 926.739660][ T1580] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 926.739717][ T1580] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 926.739747][ T1580] ? alloc_netdev_mqs+0xa6/0x11b0 [ 926.739774][ T1580] ? __raw_spin_lock_init+0x45/0x100 [ 926.739803][ T1580] alloc_netdev_mqs+0x272/0x11b0 [ 926.739824][ T1580] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 926.739855][ T1580] rtnl_create_link+0x31f/0xd70 [ 926.739887][ T1580] rtnl_newlink_create+0x277/0xb70 [ 926.739925][ T1580] ? __mutex_lock+0x5ac/0x1300 [ 926.739956][ T1580] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 926.739993][ T1580] ? __pfx___mutex_lock+0x10/0x10 [ 926.740029][ T1580] ? ns_capable+0x89/0xe0 [ 926.740063][ T1580] rtnl_newlink+0x166a/0x1bb0 [ 926.740119][ T1580] ? __pfx_rtnl_newlink+0x10/0x10 [ 926.740145][ T1580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.740211][ T1580] ? kasan_quarantine_put+0xbb/0x1f0 [ 926.740237][ T1580] ? lockdep_hardirqs_on+0x7a/0x110 [ 926.740266][ T1580] ? kmem_cache_free+0x187/0x630 [ 926.740292][ T1580] ? nlmon_xmit+0xb0/0x100 [ 926.740338][ T1580] ? __lock_acquire+0x6b5/0x2cf0 [ 926.740375][ T1580] ? __local_bh_enable_ip+0xd0/0x130 [ 926.740406][ T1580] ? lockdep_hardirqs_on+0x7a/0x110 [ 926.740426][ T1580] ? __dev_queue_xmit+0x2b6/0x3920 [ 926.740448][ T1580] ? __local_bh_enable_ip+0xd0/0x130 [ 926.740475][ T1580] ? __dev_queue_xmit+0x2b6/0x3920 [ 926.740527][ T1580] ? __pfx_rtnl_newlink+0x10/0x10 [ 926.740556][ T1580] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 926.740601][ T1580] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 926.740629][ T1580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 926.740655][ T1580] ? ref_tracker_free+0x693/0x840 [ 926.740676][ T1580] ? __copy_skb_header+0xa3/0x4a0 [ 926.740712][ T1580] ? __pfx_ref_tracker_free+0x10/0x10 [ 926.740748][ T1580] netlink_rcv_skb+0x232/0x4b0 [ 926.740778][ T1580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 926.740808][ T1580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 926.740852][ T1580] ? netlink_deliver_tap+0x2e/0x1b0 [ 926.740891][ T1580] netlink_unicast+0x80f/0x9b0 [ 926.740927][ T1580] ? __pfx_netlink_unicast+0x10/0x10 [ 926.740957][ T1580] ? netlink_sendmsg+0x650/0xb40 [ 926.740984][ T1580] ? skb_put+0x11b/0x210 [ 926.741018][ T1580] netlink_sendmsg+0x813/0xb40 [ 926.741059][ T1580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.741101][ T1580] ? aa_sock_msg_perm+0xf1/0x1b0 [ 926.741124][ T1580] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 926.741154][ T1580] ____sys_sendmsg+0x972/0x9f0 [ 926.741198][ T1580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.741241][ T1580] ? import_iovec+0x73/0xa0 [ 926.741272][ T1580] ___sys_sendmsg+0x2a5/0x360 [ 926.741312][ T1580] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.741386][ T1580] ? __fget_files+0x2a/0x420 [ 926.741407][ T1580] ? __fget_files+0x3a0/0x420 [ 926.741440][ T1580] __x64_sys_sendmsg+0x1bd/0x2a0 [ 926.741477][ T1580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 926.741521][ T1580] ? __pfx_ksys_write+0x10/0x10 [ 926.741572][ T1580] do_syscall_64+0x14d/0xf80 [ 926.741591][ T1580] ? trace_irq_disable+0x3b/0x150 [ 926.741609][ T1580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.741629][ T1580] ? clear_bhb_loop+0x40/0x90 [ 926.741655][ T1580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.741676][ T1580] RIP: 0033:0x7f2cfe59c819 [ 926.741694][ T1580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.741712][ T1580] RSP: 002b:00007f2cff44c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.741733][ T1580] RAX: ffffffffffffffda RBX: 00007f2cfe815fa0 RCX: 00007f2cfe59c819 [ 926.741748][ T1580] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 926.741761][ T1580] RBP: 00007f2cff44c090 R08: 0000000000000000 R09: 0000000000000000 [ 926.741774][ T1580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 926.741786][ T1580] R13: 00007f2cfe816038 R14: 00007f2cfe815fa0 R15: 00007ffdc8c65328 [ 926.741819][ T1580] [ 926.741850][ T1580] debugfs: out of free dentries, can not create file 'netdev@ffff88805de78620' [ 926.897707][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 927.570781][ T1606] netlink: zone id is out of range [ 927.581177][ T1607] __nla_validate_parse: 6 callbacks suppressed [ 927.581199][ T1607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7135'. [ 927.584727][ T1606] netlink: get zone limit has 4 unknown bytes [ 927.608705][ T1607] openvswitch: netlink: EtherType 0 is less than min 600 [ 927.726587][ T1615] x_tables: unsorted underflow at hook 4 [ 928.252922][ T1628] vlan2: left allmulticast mode [ 928.269598][ T1628] erspan0: left allmulticast mode [ 928.298025][ T1645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7145'. [ 928.314270][ T1628] macvlan2: left allmulticast mode [ 928.327767][ T1628] macvlan3: left allmulticast mode [ 928.341761][ T1628] macvlan4: left allmulticast mode [ 928.353922][ T1628] macvlan5: left allmulticast mode [ 928.367879][ T1628] macvlan6: left allmulticast mode [ 928.378765][ T1628] gretap1: left promiscuous mode [ 928.400104][ T1649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7145'. [ 928.413885][ T1628] ip6erspan0: left promiscuous mode [ 928.423163][ T1628] ip6erspan0: left allmulticast mode [ 928.678183][ T1661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7148'. [ 928.688893][ T1661] hsr_slave_0: left promiscuous mode [ 928.695323][ T1661] hsr_slave_1: left promiscuous mode [ 929.051419][ T1675] lo speed is unknown, defaulting to 1000 [ 929.052101][ T1677] netlink: 'syz.4.7152': attribute type 8 has an invalid length. [ 929.068535][ T1677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7152'. [ 929.141522][ T1675] lo speed is unknown, defaulting to 1000 [ 929.174835][ T1682] lo speed is unknown, defaulting to 1000 [ 929.261590][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 929.319333][ T1687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7155'. [ 929.512195][ T1697] syzkaller1: entered promiscuous mode [ 929.518085][ T1697] syzkaller1: entered allmulticast mode [ 929.530619][ T1697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7158'. [ 929.544469][ T1700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7160'. [ 929.604673][ T1700] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7160'. [ 929.616209][ T1700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7160'. [ 929.689661][ T1700] lo speed is unknown, defaulting to 1000 [ 929.757229][ T1675] syzkaller0 speed is unknown, defaulting to 1000 [ 929.761401][ T1682] lo speed is unknown, defaulting to 1000 [ 930.180967][ T1700] lo speed is unknown, defaulting to 1000 [ 930.288674][ T1729] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002 [ 930.529967][ T1682] syzkaller0 speed is unknown, defaulting to 1000 [ 930.558027][ T1700] syzkaller0 speed is unknown, defaulting to 1000 [ 930.565301][ T1736] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 931.239943][ T1758] siw: device registration error -23 [ 931.425753][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.715345][ T1776] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 931.869862][ T1784] netlink: 'syz.2.7186': attribute type 3 has an invalid length. [ 932.015691][ T1790] netlink: 'syz.0.7188': attribute type 2 has an invalid length. [ 932.037013][ T1790] !¼Þ: entered promiscuous mode [ 932.050967][ T1790] netlink: 'syz.0.7188': attribute type 2 has an invalid length. [ 932.059312][ T1790] !¼Þ: left promiscuous mode [ 933.073027][ T1844] netlink: 'syz.0.7202': attribute type 2 has an invalid length. [ 933.092668][ T1844] l2: entered promiscuous mode [ 934.157643][ T1890] __nla_validate_parse: 6 callbacks suppressed [ 934.157662][ T1890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7216'. [ 934.409273][ T1906] openvswitch: netlink: Duplicate or invalid key (type 0). [ 934.457705][ T1906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.474215][ T1904] syzkaller0: entered promiscuous mode [ 934.508223][ T1904] syzkaller0: entered allmulticast mode [ 934.776622][ T1930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7227'. [ 936.351427][ T1944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7230'. [ 936.371119][ T1944] netlink: 'syz.4.7230': attribute type 1 has an invalid length. [ 936.430210][ T1945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7229'. [ 936.460934][ T1951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7231'. [ 936.553067][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7234'. [ 936.750074][ T1973] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7238'. [ 936.777373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 936.785461][ C0] lec:lec_tx_timeout: lec0 [ 936.797423][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 936.999978][ T1983] can: request_module (can-proto-3) failed. [ 937.096393][ T1995] netlink: 'syz.3.7242': attribute type 1 has an invalid length. [ 937.139939][ T1995] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7242'. [ 937.190405][ T2003] netlink: 'syz.2.7244': attribute type 2 has an invalid length. [ 937.203866][ T2003] netlink: 'syz.2.7244': attribute type 1 has an invalid length. [ 937.212075][ T2003] netlink: 'syz.2.7244': attribute type 2 has an invalid length. [ 937.220027][ T2003] netlink: 'syz.2.7244': attribute type 2 has an invalid length. [ 937.229582][ T2003] netlink: 'syz.2.7244': attribute type 1 has an invalid length. [ 937.237632][ T2003] netlink: 'syz.2.7244': attribute type 2 has an invalid length. [ 937.356666][ T2011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7245'. [ 937.370613][ T2011] netlink: 'syz.3.7245': attribute type 1 has an invalid length. [ 937.383857][ T2013] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7246'. [ 937.722346][ T2033] IPv6: sit2: Disabled Multicast RS [ 937.935932][ T2040] netlink: 'syz.4.7254': attribute type 8 has an invalid length. [ 938.188977][ T2053] sctp: [Deprecated]: syz.1.7255 (pid 2053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 938.188977][ T2053] Use struct sctp_sack_info instead [ 938.310940][ T2053] lo speed is unknown, defaulting to 1000 [ 938.324792][ T2053] lo speed is unknown, defaulting to 1000 [ 938.501915][ T2064] IPVS: sh: FWM 3 0x00000003 - no destination available [ 938.567095][ T2053] syzkaller0 speed is unknown, defaulting to 1000 [ 940.515950][ T2019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 940.549164][ T2067] __nla_validate_parse: 3 callbacks suppressed [ 940.549186][ T2067] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7260'. [ 940.701541][ T2074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7263'. [ 940.717651][ T2070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7264'. [ 940.950152][ T2094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7267'. [ 940.959568][ T2094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7267'. [ 940.970976][ T2093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7267'. [ 940.981970][ T2093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7267'. [ 941.054564][T32633] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.070532][T32633] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.081132][T32633] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.092650][T32633] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.358623][ T2101] nbd2: detected capacity change from 0 to 127 [ 941.372848][ T5838] block nbd2: Receive control failed (result -32) [ 941.372848][ T51] block nbd2: Receive control failed (result -32) [ 941.379920][ T1955] block nbd2: Send control failed (result -32) [ 941.393720][ T1955] block nbd2: Request send failed, requeueing [ 941.414247][ T1955] block nbd2: Dead connection, failed to find a fallback [ 941.428144][ T25] block nbd2: Dead connection, failed to find a fallback [ 941.435796][ T25] block nbd2: shutting down sockets [ 941.442318][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.453566][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.463999][ T1955] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.474969][ T1955] Buffer I/O error on dev nbd2, logical block 1, async page read [ 941.483285][ T1955] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.492986][ T1955] Buffer I/O error on dev nbd2, logical block 2, async page read [ 941.501204][ T1955] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.511036][ T1955] Buffer I/O error on dev nbd2, logical block 3, async page read [ 941.518995][ T1955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.528835][ T1955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.536653][ T1955] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.546296][ T1955] Buffer I/O error on dev nbd2, logical block 1, async page read [ 941.554200][ T1955] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.564020][ T1955] Buffer I/O error on dev nbd2, logical block 2, async page read [ 941.571931][ T1955] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.582703][ T1955] Buffer I/O error on dev nbd2, logical block 3, async page read [ 941.590663][ T1955] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.600301][ T1955] Buffer I/O error on dev nbd2, logical block 0, async page read [ 941.608528][ T1955] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 941.618976][ T1955] Buffer I/O error on dev nbd2, logical block 1, async page read [ 941.628069][ T1955] ldm_validate_partition_table(): Disk read failed. [ 941.644785][ T1955] Dev nbd2: unable to read RDB block 0 [ 941.663181][ T1955] nbd2: unable to read partition table [ 941.700632][ T1955] ldm_validate_partition_table(): Disk read failed. [ 941.729970][ T1955] Dev nbd2: unable to read RDB block 0 [ 941.746441][ T1955] nbd2: unable to read partition table [ 941.807396][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 941.815525][ C0] lec:lec_tx_timeout: lec0 [ 941.820669][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 941.883490][ T2110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7272'. [ 942.168438][ T2121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 942.175712][ T2121] IPv6: NLM_F_CREATE should be set when creating new route [ 942.183114][ T2121] IPv6: NLM_F_CREATE should be set when creating new route [ 942.798858][ T2155] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7286'. [ 942.869433][ T2160] syzkaller0: entered promiscuous mode [ 942.875309][ T2160] syzkaller0: entered allmulticast mode [ 942.885824][ T2158] tipc: Enabled bearer , priority 0 [ 942.893284][ T2160] tipc: Enabling of bearer rejected, already enabled [ 942.986997][ T2157] tipc: Resetting bearer [ 943.020972][ T2157] tipc: Disabling bearer [ 943.480150][ T2179] validate_nla: 2 callbacks suppressed [ 943.480166][ T2179] netlink: 'syz.2.7294': attribute type 8 has an invalid length. [ 943.513276][ T2179] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 943.530576][ T2179] bond7: (slave lo): Enslaving as an active interface with an up link [ 943.539551][ T2179] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 943.604921][ T2183] netlink: 'syz.2.7295': attribute type 5 has an invalid length. [ 943.828159][ T2191] netlink: 'syz.2.7298': attribute type 9 has an invalid length. [ 943.948408][ T2198] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.7299'. [ 943.965884][ T2198] netlink: 'syz.2.7299': attribute type 4 has an invalid length. [ 944.766057][ T2214] netlink: 'syz.2.7304': attribute type 3 has an invalid length. [ 944.975919][ T2223] syzkaller0: entered promiscuous mode [ 944.981738][ T2223] syzkaller0: entered allmulticast mode [ 945.017544][ T2223] lo speed is unknown, defaulting to 1000 [ 945.025283][ T2223] lo speed is unknown, defaulting to 1000 [ 945.110289][ T2228] netlink: 'syz.2.7308': attribute type 2 has an invalid length. [ 945.118939][ T2228] tipc: Cannot configure node identity twice [ 945.310560][ T2223] syzkaller0 speed is unknown, defaulting to 1000 [ 945.362497][ T2223] [ 945.365015][ T2223] ====================================================== [ 945.372151][ T2223] WARNING: possible circular locking dependency detected [ 945.379295][ T2223] syzkaller #0 Not tainted [ 945.383858][ T2223] ------------------------------------------------------ [ 945.390897][ T2223] syz.1.7307/2223 is trying to acquire lock: [ 945.396903][ T2223] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 945.406091][ T2223] [ 945.406091][ T2223] but task is already holding lock: [ 945.413468][ T2223] ffffffff8e85db48 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 945.423071][ T2223] [ 945.423071][ T2223] which lock already depends on the new lock. [ 945.423071][ T2223] [ 945.433487][ T2223] [ 945.433487][ T2223] the existing dependency chain (in reverse order) is: [ 945.442511][ T2223] [ 945.442511][ T2223] -> #7 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 945.450271][ T2223] __mutex_lock+0x19f/0x1300 [ 945.455414][ T2223] pcpu_alloc_noprof+0x218/0x19c0 [ 945.460990][ T2223] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 945.466993][ T2223] bpf_prog_alloc+0x3c/0x1a0 [ 945.472127][ T2223] __get_filter+0xff/0x400 [ 945.477129][ T2223] sk_reuseport_attach_filter+0x24/0x210 [ 945.483301][ T2223] sk_setsockopt+0x1eca/0x2e80 [ 945.488613][ T2223] do_sock_setsockopt+0x11b/0x1b0 [ 945.494206][ T2223] __x64_sys_setsockopt+0x13d/0x1b0 [ 945.499958][ T2223] do_syscall_64+0x14d/0xf80 [ 945.505087][ T2223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.511523][ T2223] [ 945.511523][ T2223] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 945.519294][ T2223] lock_sock_nested+0x41/0x100 [ 945.524606][ T2223] inet_shutdown+0x6a/0x390 [ 945.529653][ T2223] nbd_mark_nsock_dead+0x2e9/0x560 [ 945.535307][ T2223] recv_work+0x1c7f/0x1d90 [ 945.540278][ T2223] process_scheduled_works+0xb6e/0x18c0 [ 945.546368][ T2223] worker_thread+0xa53/0xfc0 [ 945.551504][ T2223] kthread+0x388/0x470 [ 945.556107][ T2223] ret_from_fork+0x51e/0xb90 [ 945.561255][ T2223] ret_from_fork_asm+0x1a/0x30 [ 945.566582][ T2223] [ 945.566582][ T2223] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 945.574250][ T2223] __mutex_lock+0x19f/0x1300 [ 945.579396][ T2223] nbd_queue_rq+0x37b/0x1100 [ 945.584535][ T2223] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 945.590627][ T2223] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 945.597498][ T2223] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 945.604053][ T2223] blk_mq_run_hw_queue+0x348/0x4f0 [ 945.609712][ T2223] blk_mq_dispatch_list+0xd16/0xe10 [ 945.615454][ T2223] blk_mq_flush_plug_list+0x48d/0x570 [ 945.621381][ T2223] __blk_flush_plug+0x3ed/0x4d0 [ 945.626778][ T2223] __submit_bio+0x28d/0x580 [ 945.631828][ T2223] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 945.638006][ T2223] block_read_full_folio+0x599/0x830 [ 945.643834][ T2223] filemap_read_folio+0x137/0x3b0 [ 945.649411][ T2223] do_read_cache_folio+0x358/0x590 [ 945.655071][ T2223] read_part_sector+0xb6/0x2b0 [ 945.660376][ T2223] adfspart_check_ICS+0xa5/0xa40 [ 945.665861][ T2223] bdev_disk_changed+0x7ba/0x1550 [ 945.671436][ T2223] blkdev_get_whole+0x380/0x510 [ 945.676838][ T2223] bdev_open+0x31e/0xd30 [ 945.681630][ T2223] blkdev_open+0x470/0x610 [ 945.686604][ T2223] do_dentry_open+0x785/0x14e0 [ 945.691908][ T2223] vfs_open+0x3b/0x340 [ 945.696521][ T2223] path_openat+0x2e08/0x3860 [ 945.701645][ T2223] do_file_open+0x23e/0x4a0 [ 945.706685][ T2223] do_sys_openat2+0x113/0x200 [ 945.711923][ T2223] __x64_sys_openat+0x138/0x170 [ 945.717334][ T2223] do_syscall_64+0x14d/0xf80 [ 945.722474][ T2223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.728907][ T2223] [ 945.728907][ T2223] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 945.736144][ T2223] __mutex_lock+0x19f/0x1300 [ 945.741278][ T2223] nbd_queue_rq+0xc6/0x1100 [ 945.746341][ T2223] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 945.752447][ T2223] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 945.759325][ T2223] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 945.765851][ T2223] blk_mq_run_hw_queue+0x348/0x4f0 [ 945.771503][ T2223] blk_mq_dispatch_list+0xd16/0xe10 [ 945.777257][ T2223] blk_mq_flush_plug_list+0x48d/0x570 [ 945.783186][ T2223] __blk_flush_plug+0x3ed/0x4d0 [ 945.788590][ T2223] __submit_bio+0x28d/0x580 [ 945.793643][ T2223] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 945.799835][ T2223] block_read_full_folio+0x599/0x830 [ 945.805673][ T2223] filemap_read_folio+0x137/0x3b0 [ 945.811259][ T2223] do_read_cache_folio+0x358/0x590 [ 945.816931][ T2223] read_part_sector+0xb6/0x2b0 [ 945.822242][ T2223] adfspart_check_ICS+0xa5/0xa40 [ 945.827730][ T2223] bdev_disk_changed+0x7ba/0x1550 [ 945.833315][ T2223] blkdev_get_whole+0x380/0x510 [ 945.838724][ T2223] bdev_open+0x31e/0xd30 [ 945.843523][ T2223] blkdev_open+0x470/0x610 [ 945.848492][ T2223] do_dentry_open+0x785/0x14e0 [ 945.853813][ T2223] vfs_open+0x3b/0x340 [ 945.858431][ T2223] path_openat+0x2e08/0x3860 [ 945.863564][ T2223] do_file_open+0x23e/0x4a0 [ 945.868615][ T2223] do_sys_openat2+0x113/0x200 [ 945.873847][ T2223] __x64_sys_openat+0x138/0x170 [ 945.879254][ T2223] do_syscall_64+0x14d/0xf80 [ 945.884512][ T2223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.890956][ T2223] [ 945.890956][ T2223] -> #3 (set->srcu){.+.+}-{0:0}: [ 945.898107][ T2223] __synchronize_srcu+0xca/0x300 [ 945.903626][ T2223] elevator_switch+0x1e8/0x7a0 [ 945.908953][ T2223] elevator_change+0x2cc/0x450 [ 945.914266][ T2223] elevator_set_default+0x36c/0x430 [ 945.920013][ T2223] blk_register_queue+0x366/0x430 [ 945.925596][ T2223] __add_disk+0x677/0xd50 [ 945.930474][ T2223] add_disk_fwnode+0xfb/0x480 [ 945.935710][ T2223] nbd_dev_add+0x72c/0xb50 [ 945.940670][ T2223] nbd_init+0x168/0x1f0 [ 945.945372][ T2223] do_one_initcall+0x250/0x8d0 [ 945.950711][ T2223] do_initcall_level+0x104/0x190 [ 945.956196][ T2223] do_initcalls+0x59/0xa0 [ 945.961073][ T2223] kernel_init_freeable+0x2a6/0x3e0 [ 945.966823][ T2223] kernel_init+0x1d/0x1d0 [ 945.971706][ T2223] ret_from_fork+0x51e/0xb90 [ 945.976847][ T2223] ret_from_fork_asm+0x1a/0x30 [ 945.982186][ T2223] [ 945.982186][ T2223] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 945.990046][ T2223] __mutex_lock+0x19f/0x1300 [ 945.995177][ T2223] elevator_change+0x1b3/0x450 [ 946.000488][ T2223] elevator_set_none+0xb5/0x140 [ 946.005884][ T2223] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 946.012243][ T2223] nbd_start_device+0x17f/0xb10 [ 946.017635][ T2223] nbd_genl_connect+0x165b/0x1cf0 [ 946.023200][ T2223] genl_family_rcv_msg_doit+0x22a/0x330 [ 946.029284][ T2223] genl_rcv_msg+0x61c/0x7a0 [ 946.034341][ T2223] netlink_rcv_skb+0x232/0x4b0 [ 946.039687][ T2223] genl_rcv+0x28/0x40 [ 946.044212][ T2223] netlink_unicast+0x80f/0x9b0 [ 946.049513][ T2223] netlink_sendmsg+0x813/0xb40 [ 946.054822][ T2223] ____sys_sendmsg+0x972/0x9f0 [ 946.060133][ T2223] ___sys_sendmsg+0x2a5/0x360 [ 946.065354][ T2223] __x64_sys_sendmsg+0x1bd/0x2a0 [ 946.070842][ T2223] do_syscall_64+0x14d/0xf80 [ 946.075977][ T2223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.082411][ T2223] [ 946.082411][ T2223] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 946.091042][ T2223] blk_alloc_queue+0x546/0x680 [ 946.096353][ T2223] __blk_mq_alloc_disk+0x197/0x390 [ 946.102017][ T2223] nbd_dev_add+0x499/0xb50 [ 946.106986][ T2223] nbd_init+0x168/0x1f0 [ 946.111685][ T2223] do_one_initcall+0x250/0x8d0 [ 946.117010][ T2223] do_initcall_level+0x104/0x190 [ 946.122509][ T2223] do_initcalls+0x59/0xa0 [ 946.127420][ T2223] kernel_init_freeable+0x2a6/0x3e0 [ 946.133190][ T2223] kernel_init+0x1d/0x1d0 [ 946.138102][ T2223] ret_from_fork+0x51e/0xb90 [ 946.143264][ T2223] ret_from_fork_asm+0x1a/0x30 [ 946.148597][ T2223] [ 946.148597][ T2223] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 946.155835][ T2223] __lock_acquire+0x15a5/0x2cf0 [ 946.161325][ T2223] lock_acquire+0xf0/0x2e0 [ 946.166319][ T2223] fs_reclaim_acquire+0x71/0x100 [ 946.171821][ T2223] prepare_alloc_pages+0x152/0x650 [ 946.177502][ T2223] __alloc_frozen_pages_noprof+0x12f/0x380 [ 946.184042][ T2223] __alloc_pages_noprof+0xa/0x30 [ 946.189538][ T2223] pcpu_populate_chunk+0x182/0xb30 [ 946.195203][ T2223] pcpu_alloc_noprof+0xc6c/0x19c0 [ 946.200799][ T2223] gro_cells_init+0x3e/0x290 [ 946.205948][ T2223] ip6_tnl_dev_init+0x85/0x870 [ 946.211275][ T2223] register_netdevice+0x6d1/0x1cf0 [ 946.216936][ T2223] register_netdev+0x40/0x60 [ 946.222074][ T2223] ip6_tnl_init_net+0x259/0x3b0 [ 946.227475][ T2223] ops_init+0x35c/0x5c0 [ 946.232200][ T2223] setup_net+0x118/0x340 [ 946.237008][ T2223] copy_net_ns+0x50e/0x730 [ 946.241970][ T2223] create_new_namespaces+0x3e7/0x6a0 [ 946.247813][ T2223] unshare_nsproxy_namespaces+0x11a/0x160 [ 946.254099][ T2223] ksys_unshare+0x51d/0x930 [ 946.259168][ T2223] __x64_sys_unshare+0x38/0x50 [ 946.264473][ T2223] do_syscall_64+0x14d/0xf80 [ 946.269602][ T2223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.276040][ T2223] [ 946.276040][ T2223] other info that might help us debug this: [ 946.276040][ T2223] [ 946.286283][ T2223] Chain exists of: [ 946.286283][ T2223] fs_reclaim --> sk_lock-AF_INET6 --> pcpu_alloc_mutex [ 946.286283][ T2223] [ 946.299090][ T2223] Possible unsafe locking scenario: [ 946.299090][ T2223] [ 946.306562][ T2223] CPU0 CPU1 [ 946.311947][ T2223] ---- ---- [ 946.317337][ T2223] lock(pcpu_alloc_mutex); [ 946.321875][ T2223] lock(sk_lock-AF_INET6); [ 946.328929][ T2223] lock(pcpu_alloc_mutex); [ 946.335987][ T2223] lock(fs_reclaim); [ 946.340010][ T2223] [ 946.340010][ T2223] *** DEADLOCK *** [ 946.340010][ T2223] [ 946.348257][ T2223] 3 locks held by syz.1.7307/2223: [ 946.353382][ T2223] #0: ffffffff8fbbc890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 946.362850][ T2223] #1: ffffffff8fbcb188 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 946.371930][ T2223] #2: ffffffff8e85db48 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 946.381978][ T2223] [ 946.381978][ T2223] stack backtrace: [ 946.387890][ T2223] CPU: 0 UID: 0 PID: 2223 Comm: syz.1.7307 Not tainted syzkaller #0 PREEMPT(full) [ 946.387921][ T2223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 946.387936][ T2223] Call Trace: [ 946.387948][ T2223] [ 946.387961][ T2223] dump_stack_lvl+0xe8/0x150 [ 946.387996][ T2223] print_circular_bug+0x2e1/0x300 [ 946.388053][ T2223] check_noncircular+0x12e/0x150 [ 946.388086][ T2223] __lock_acquire+0x15a5/0x2cf0 [ 946.388115][ T2223] ? __lock_acquire+0x6b5/0x2cf0 [ 946.388144][ T2223] lock_acquire+0xf0/0x2e0 [ 946.388167][ T2223] ? prepare_alloc_pages+0x152/0x650 [ 946.388195][ T2223] fs_reclaim_acquire+0x71/0x100 [ 946.388216][ T2223] ? prepare_alloc_pages+0x152/0x650 [ 946.388239][ T2223] prepare_alloc_pages+0x152/0x650 [ 946.388265][ T2223] __alloc_frozen_pages_noprof+0x12f/0x380 [ 946.388293][ T2223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 946.388319][ T2223] ? pcpu_chunk_refresh_hint+0x80b/0x950 [ 946.388349][ T2223] __alloc_pages_noprof+0xa/0x30 [ 946.388378][ T2223] pcpu_populate_chunk+0x182/0xb30 [ 946.388403][ T2223] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 946.388434][ T2223] pcpu_alloc_noprof+0xc6c/0x19c0 [ 946.388465][ T2223] gro_cells_init+0x3e/0x290 [ 946.388490][ T2223] ip6_tnl_dev_init+0x85/0x870 [ 946.388522][ T2223] register_netdevice+0x6d1/0x1cf0 [ 946.388545][ T2223] ? __pfx___mutex_lock+0x10/0x10 [ 946.388564][ T2223] ? __pfx_register_netdevice+0x10/0x10 [ 946.388585][ T2223] ? net_generic+0x1e/0x240 [ 946.388612][ T2223] ? net_generic+0x1e/0x240 [ 946.388637][ T2223] ? net_generic+0x1e/0x240 [ 946.388666][ T2223] register_netdev+0x40/0x60 [ 946.388682][ T2223] ip6_tnl_init_net+0x259/0x3b0 [ 946.388701][ T2223] ops_init+0x35c/0x5c0 [ 946.388730][ T2223] setup_net+0x118/0x340 [ 946.388753][ T2223] ? __pfx_setup_net+0x10/0x10 [ 946.388776][ T2223] ? preinit_net+0x492/0x7b0 [ 946.388799][ T2223] copy_net_ns+0x50e/0x730 [ 946.388822][ T2223] create_new_namespaces+0x3e7/0x6a0 [ 946.388850][ T2223] ? security_capable+0x7e/0x2c0 [ 946.388881][ T2223] unshare_nsproxy_namespaces+0x11a/0x160 [ 946.388908][ T2223] ksys_unshare+0x51d/0x930 [ 946.388942][ T2223] ? __pfx_ksys_unshare+0x10/0x10 [ 946.388970][ T2223] ? rcu_is_watching+0x15/0xb0 [ 946.389002][ T2223] __x64_sys_unshare+0x38/0x50 [ 946.389018][ T2223] do_syscall_64+0x14d/0xf80 [ 946.389041][ T2223] ? trace_irq_disable+0x3b/0x150 [ 946.389057][ T2223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.389076][ T2223] ? clear_bhb_loop+0x40/0x90 [ 946.389097][ T2223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.389116][ T2223] RIP: 0033:0x7f530df9c819 [ 946.389134][ T2223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.389151][ T2223] RSP: 002b:00007f530ede0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 946.389171][ T2223] RAX: ffffffffffffffda RBX: 00007f530e216090 RCX: 00007f530df9c819 [ 946.389185][ T2223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 946.389197][ T2223] RBP: 00007f530e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 946.389209][ T2223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.389221][ T2223] R13: 00007f530e216128 R14: 00007f530e216090 R15: 00007ffc226db408 [ 946.389243][ T2223] [ 946.730422][ T2230] netlink: 'syz.3.7309': attribute type 2 has an invalid length. [ 946.741722][ T2230] !: entered promiscuous mode [ 946.750330][ T2230] netlink: 'syz.3.7309': attribute type 2 has an invalid length. [ 946.762359][ T2230] __nla_validate_parse: 1 callbacks suppressed [ 946.762380][ T2230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7309'. [ 946.827330][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 946.835425][ C0] lec:lec_tx_timeout: lec0 [ 946.840198][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 951.847334][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 951.855376][ C0] lec:lec_tx_timeout: lec0 [ 951.860001][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 953.982145][T30123] Bluetooth: hci1: command 0x0406 tx timeout [ 953.982897][ T2237] Bluetooth: hci2: command 0x0406 tx timeout