last executing test programs: 9m1.334772552s ago: executing program 4 (id=3885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x7fe2, 0x3, 0x5a80}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x9, 0x7, 0x7, 0x0, r1, 0x100}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0xd}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100000076dfbb518bd26bf4056b78da4be9f867"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730121000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000121401002bbd7000fbdbdf250800150005000000080035"], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x10000000) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0xfef94000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000018c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="fc120000", @ANYRES16=r6, @ANYBLOB="080028bd7000ffdbdf251600000050000280080002001000000004000380240003800800010005000000080001004e700000080001008ecc000008000100050000001400038008000200000001000800020004000000080001000200000018010680c20003005c47e2127fa0b20c9d74c294b5a24dde165f8f3b35b1c8da7c8f67815251f7a3bca41f9b31276dc9b57111818b96d0ec35c6340bfa197ad50fc33da27694e690518c3decf8e32028d751fc0b63a5b6aa6ac30bb9d23bb21be4462b1aca18c09b39708883de288c009bbf5a4e83041ef69a0b6254f1b0f838417865994e45f9b8df4b09e71dba4b5eedce5cda3dbee831a74624f18a390ad7b1c5d753c4b4dc136999276b5e15392dd1290675e7ff408b4a7848132f15a32d6d59b3de913d00000800060004000000040002004400040067636d28616573290000000000000000000000000000000000000000000000001c00000008440fbbd23fd81444a6d0cbcaa4a08074022059171c7364d221a1db0c0002800800010005000000a80004800900010073797a31000000001300010062726f6164636173742d6c696e6b00002c0007800800030006000000080004000300000008000400f101000008000300008000000800040008000000240007800800020007000000080003000900000008000300030000000800030007000000340007800800040004000000080001001e000000080004000b00000008000400da0d000008000100130000000800030007000000100007800c0003000000006000000000040003ff597b94800c00040001000000000000800800010099000000a01006803d00040067636d286165732900000000000000000000000000000000000000000000000015000000847352b215a059a591849d758f214dfad2942a2c960000000400020008000600f8ffffff041003004df0207d92dae90bd655fa568dd75bcaa8df7722317d04159f6bc7ea5f0fe9bada464f608b762341a389f975fd5e97197fedce665be50b3c408c42d742505c6a2ade845c06ca4073c59316184735cffe15594cc46befb1f320fdd98ed932d4f52c3b12042316dff7aafb8c8cf2bf45f4dc9f25a874f855f2516301ab314873341dd4ac4ac6eae07714b8924c08559c02add249f91e578797591bd9ec8216471edc685057f09c9a387f527b1da08aa1fc1e1e46c2e3bc2945c607417e762d6f053119abda5a7eda5e0f78eac17c1fb165e847b3a4874a884020f7871e21a4917922152c71f12ce2898ce0e7c95f1b7884dd01d999960d01aace5a0418c20d4398b088b674dcf575373e7d5b97dd441c1733dacd9633eabdf24fe510cc9665eba07079ab41c7d2fd7917c0c4de07d373bbdb7b2245f4efff94cc1df29e90a10c40588b510809637ffc533f56e7d49ee037e6c3eaff06d68c1a8d10cf59d05e92815843228904cee2ce6a3e043ea7d1aa51b2036c0a116c583fbf9da20a28822a3af2fdf0d0e86df25ca69bd1aef747f1935c32f8630b99fd67efb93d3367641d183912affd7560afaaf4578e8a6e254bdf743c6ccb05c0d9cc0f9a33b8d7ff9654ed015e331dbd93b637aefbe77c1664b360f0a2aac2ed726a190a8434fad916d9441d5a5159e3f08934c54e849b27c05f910a7d452c001f3468eb2623e6571ca02f948242d12adbcfaad46b98398245a56440d94d317fb88f34309ca00b84443223903c26943900dec8a830619a5aaced6248426cc53b24af8fb71a6a708b71e94bfcc91c17891a2c2b8c2c214fec8e93c3da0955d1bcce9104e0c3e8b194122e2706417cdaf0e2626f88675c312b283a60cf66540708e3813a3129644e918b85980263f78135adfcc8b912a068bf9baa28c0634bb5f3a933e8e87214fe54b11c71e08eff2d4b0dc2fa06d284683662327285d61aec2754cfa7cee667bd431a771a86418fe2e4b883c79c2726771cf473f313aad32c72b0e51a39592c30f04a82870c3b6994a2658722ac578c8996dbc3ac8e1779a9e07a49a50db1d19ae3469cc7e1616de2c7389e87e3bf755666fffa70a2d7ec53e2c5a88877be101a34cb0cddc7071ff218bfbdea2c7ad735c4701d7a20d650c752062bd4cf028eba3498a7c4b19076817986e90f4eea25965f2a1933e8872fa5ef2f93853f1c794ee54a46f40c0e5f77a12dcdab4508f49d756798e232488054fdc21dcc99b40c102d260482fb42ff103038c24d6600ba4758e780c97a19bb57a34175fff43679c86daf35f0fd723ed047b2df8b97e05cdf95d6ba659bd3ca5fa2e3fab7bb75940fdae8cef6be0eac0d8e396795cd7a869153fb3b2378206aa74fa9a257e670e4e392401ecf5681ece751732183a6b5807046029209554160e0bef0a7af15d55b8b8dda588b6ea133981ff6e5c2bad934ad672ebb934838bb9ce0c745dc413c1ea8742393b1a750d2d4d0f92a5ce96761badd223e76f7d18b54ecf2d6972f4ad5288ea760a6aee525d46279c68b65d980d4e634b7dc2d9cb79a68d1a28a3ee36c67678a06e9debdf2c7de727538ea7ff5c6806502d6293cab0083267100cfd6451b32af6776abda78e2ef586f0b2fe2f678d6684bb411b35c6a80bca9ab9863cad75fe101acf40646dda790d009c2ce3fce9a2a7dc6f4dd362781dbc40db29e21d8ba86b91dd5233a2691ce0c35188adbe916e3cc5031f038105c1fc4ec2dcfde7e1288a938ec32330b100e444c7fa6d4309985ea51b83ff300e5a5253ef58743809e911055045b13e448f453d9219bac7678b42e28333d879b5563115ddc411ac48f4be73e5be460e114fdbcb8d054e6f1d5e7d378cbe0a9fe04c044ade3f6a2ca4f8087c599a42918de83cd9944bd614ed16f22aa4bbc97f66f46c06353473bedb6ae6d566311a57e49f026dd49b43ad36661faa8c0ca11d58d87fbecf7fb992a928c43cadd482fc3c041109d7ba60b098b4f29884cfba1cae81b2c3e0dbd9c2a117d2dfc448834d6f06acbf896bdf92a027815e93324ac350c3b150f253c1d2518e11f8ad55455d7544f870a15a73c973f5268eb65557837e9ae9ba6e9249b090f1b65c792300068481e6c2bede816366593522351a88ad74c860e3983f86f42e0ce76e8c4f70f3bb3c431bc1e5267d95658f7ac28cebab6c843ac0e4fb6aa875f47aaed37df4a15d4bdf8ded763d36dc0ca6f605fc58caf8ab754a229b4387832f4b62af9b8c7fb722644ea626467e9cde18adc07f984e7098532e36fa049ee282afa914b7e55b7ec55087b3c87f4a21c7141b58e1fae86468fcc6819675daef6f912a2f9939ee1ceb8e4e45458b5774cd0033b9c699c1bb596d940e751ce99b1ecf6d76e72d00444afa692178e92835fc95a5a98fb239ca793f40adc032561b40861f3a726ec8aa88174ff8e1b02392d2dd548c68054d8fdc65056e05bc26f46a7c914c5dd38678f58baca88e09c71725ad0777bee9b8124f2ca058fb8bf7618663f472a988532681c8fd107c2c6096d5d956bc5fa1e911678d2e45b402a215f0f75cccf63f54c85d579c4992b9fc16b2b97dbde6fefa73599aa25adb6e2e6f669025b9293d09cbecf04d349fde5d1fe1d466e69edb9ada197643a72a6e4057add378e371adecddc5d5e547e1c17c1a257532eced31aaa1afeb2e5bd564b83ed03b09c9aee00c28302479dbdff593295ca72de83a391a3a11365c7dbf72205f7d4969cdfc5827b9e83301dfd499fa009d396429405683f4b0412f9da537b4831cc1fbe6c3e7a6c8dce703ebe16d68cc2afb022beb8fc7912a36e6bfa2845952acde69491f544141a0e63ccfceb644ebe6f2f151067a82082bc97c7880700000000000000afc48cecf0eb60c389e2c1ee2d50736bd6ce926d7d2cb40d25e7dfeb8ce76abf1ad273e09e82e88b97d76a74c8fbdb22489bdffa207b63e83434afdcd0f32a0cdfd838c5a1c4970dc4ed4779498d54041c6b1d22cc0887ccb940c59f74050a6579286c72d254828cd97f3b5e718a605df2d1a610896bad0b28a376094d458a0d19e8ee6712dd8a4990c40b4e5c630f62269e8b7ad8a57152f5788c264bf56c964b9e04c9e5fdc72b42e0efe781b09d9563ad8b00d1669fbe4737c8cb0464e2c1e9bc559453804f80cef598ba7381addd1ac4c0fb59368aa61bc4cd85d552aab55d99cb32f788c3c4b0a091662d0982fe2e11f9aaf34e4b1dcb85163ab5479d87e06cecd0284faf561aa96a7749faf010224c6c1fe0fac763e8ea96ca5020f79a58617614e27dbbd010c372fba2d5aeea13f3d03a31f462434e061d113dddc1b95aaf2b38b4ea044385a5a70aad486f19a760fc2b90a7534fcd3a05aeb990b7ec894ed33ab29d104a93c3ad2334e0ca05840a3fe445b6afc2b7fbdf4bd43e59c3523e567c8a4d04d9abea0ea2a12923fafcc01d8711388a402b77ba7551b8f6a333c25c5a7eacee6f37c776a96cba5e5a50f83f9b2d20706d10485bcd1e10e8b873318ae85e26e4bcd509da201e3233b5db94d65347393da6cc52e39b6b101b9cdedd47c343f6f48aff4e5a98f8b3d54d47003ade97be64bae6b69765fdc9e84880a9b07dda114c94bd6c8fe9d1f7dca2f020b7f1e3212902d263da379607662e8b8fd93b901fb9dd3a74ad467b72dfaf96d2741a834d78e415a5ee40e13766a42e280dde9dfdf14ea89cc58c4153ed28617b32e7cf7c722a4f34944661c2471edd334ded16f16adc328f2932ff2cfc8ebb1cbc516667ab353272ae390b9f9fe5d7f8ebde662d414799216fa846af60a25e323976f8ed36380d5ac7df96cb3603d23586bf4ca9464f2d73f00402a5bc120e51e529630578a8affd66ebaf7720d782bc6b11efb0ac49ed4ba6cc577e6dda8a1a4213540c310d5f4c122766a93f4c9ec9fce930d182ce6ad8a03fff7a72413b69572068b549e9028b74a58d654a20eb4bca20dc5feaa69bd69d18169b5f4cf50ca982e47ad093cc8637934eb3b8c55f45b50b7232a2f8f76a1e4eb944e481f24c8b33711ac5d5a107fa829825283c4961046ba346122984a70b1c49643595b628d3012ce91bbcd4bed77bd4dedace954e4c5b377ed38dd3baabde4151d36a6b4a532de8dd5552c7c85a7953f6c654f031309ece2237bbf9a46e500eba89b3d8a7321cd2c971904eb633ac850768bb52896aee61fc31bcdeb564742705e4de63cf601766a0f913893322a994ba924661e28b97c7734f0c6b5c219bcb7a7ca4e1c2a1b0c79f726344cd967a0bb142c019e097cc6158e5dcf86eefb3518aa43c0dbc510d21bb11ae45254df2f8f51ea60497c4d5cc572480b07935e160ebbf9a192be7f7404ccdfaeff6a4bc28fe53d37d80f508a8c937a69da6a756c68168935a3599fc44b0d96f4ada06895ed4e1c25e3a0fcf2a66a4c423fc9ff3366e726f3d843f9c2a0701f8df1b0d09e631acb63e66a5ae12797ed82964a8a872b080cbee4c3f2f7c6080a5f0adf141e5a87f5ef94485e34ca1ba8fc7740fd5ec33a65c26644cb3ec47064d61e8e54f87755fb7dbe586d01ac418192d144374ff7230ca378471396bd32680f073fbc5366f24c212b1bc7608d17c2ba3b36521d591484d631d33f2fe72a9817e19962d3a6b5f549dcca008de09e60c85b375dc2a6c53a1f252578fba9791f337bf4e857f878d7672937b9eb7670a3f2136295097b5082df7e9c128db45ffd47e1764e55880c34257853dd6a8ed95ba4595c3fb3b96d9ddeebf934915d9d797f2b0ce0d0006ce065d561ecacec77e4347eb1a0504d1161c2cb55a77847350a75098a22d58808e5ebb07a41bfb14ae9ccf7d3423a4457ea2c2e8e88a28e20d4a5f60f7f65b2b76e010a457b2621f59780f0efbab86ca2972ab8578f7fe12775c97c1f7a8fa156fefbe2bd0effafe708bf46c042eb4bd0a15dfafe7b3b93580ecd8048f1752da40c51883e0a8b83e60fa3b9c513d1709da8f0d65dea4535d2444f4fd2db9179ce5397f94bc0215362da326ed69a5e7c41e37fccfe973d1509a35c3b860fae39227a62b5c41b88beb5470a89b33768b6465f145d2abe23eb07a947243dfbe0b2afc690f8381889b2b516a319fb33060d525a505f83604761a50da87dc10cead7d56f2be858cf4a2fab6cf05e2632097a442dbc3af644085e075c46995dd13fb22771bb4f18b27cfa9f4012086790218171ba889a2ffe568c80f9d93733a5d22f718fc22b7f090545f89aaf106b7be77c4bfd015aaa19c623b8ea45215985a7f678d87acba54a25ea2d69a5837b42d166c84ad73fec7faf6fbf750a60176ea606073497b855df92c370eaa5080ac01c8d3a52f1158b25d0938e351a72ddd37e59668d3d493482b460eedebb803d219ecbef90c9dcc48a8491b838e8b0b3df11b477bfa1d829f0337e96ac749062c5f6d135c5e2b9c96ac8cb26c45e3a4616ae6af2777a20149b3b4badb1e47d865b54f54786087427680fa45add083c7ccee9bbf2ac272a600140e5c27d58efdb83a3b001e49451514468c33eeed8f5468e3a7251bb46f3f4d1ba7901f97fa93e675c9034f6f057519676dce7d7218856cd283dc5a722dc678a7d2fe835433576f75f3fcd506bbb601056a2bf67c5abf13b8c446cb1c2734746f63e07fd58f6c1b9c2b9683b93d0732d816ae4a2733fa640dada5ca3fb5181ac20fa498c6cedb251a2fde033531641086dc3a826d0b4877082d3eb3b6d4690a157c63b0f260a3d863010e0813584c8b463dbd6a844b00040067636d286165732900000000000000000000000000000000000000000000000023000000376dbb42a6baa677fb8f39f1ae265c5baa05355939b8d642ccd81e7f3aaed975e20b4500adecabffc4b8d4ee8f7f3b4b412ac43ceb8ea73ab673dffadf88fb2eb515a9325f51bccf70dbf1bb4e64b02ac1d2e63c335b539e26000000000000"], 0x12fc}, 0x1, 0x0, 0x0, 0x40085}, 0x4000010) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r7) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000c223d80b304305000000000000000500000000000600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f00000007c0)=0x4, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, 0x0, 0x0) 8m59.014849732s ago: executing program 4 (id=3888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48441, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x4, 0x9, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd60670600000006000000", 0x1c}, {&(0x7f0000000100)="a1c6757dfaad23efff3b4653473c82c048f5340400f46cf0c0a85f932dcb0e", 0x1f}], 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES8=r4, @ANYRES16=r6], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff0200000000000000000000000000010420"], 0x7a) 8m55.752050582s ago: executing program 4 (id=3897): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{0x0, 0xdd12}], 0x1}, 0x200488d4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x1, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000001c0)=0x4000000) r10 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)={0x10000000}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0xc0, 0x24, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80000000}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x7, 0x3, 0x2, 0xfffffffc, 0xff, 0x3}}, {0xa, 0x2, [0x9, 0xd, 0x9]}}, {{0x1c, 0x1, {0xfe, 0xff, 0x0, 0x9, 0x1, 0x7, 0x99, 0x6}}, {0x10, 0x2, [0x5, 0x0, 0x6, 0x6000, 0x6, 0xf2d8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x20000000ec071, 0xffffffffffffffff, 0x40000000) 8m52.131317822s ago: executing program 4 (id=3907): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x80000000, @mcast2, 0x2975, 0x4}, 0x80, 0x0}, 0x24044040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r6, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) (async) write(r6, &(0x7f0000000400)="2b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000400)={0x1d, r8, 0x2, {0x1, 0x80, 0x1}, 0xff}, 0x18) write(0xca, &(0x7f0000000040)="04046e000200faff04001a0001", 0xd) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x40812}, 0x24000000) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r11, 0x9}, 0x8) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x23c, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40850) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESOCT=r2, @ANYRESHEX=r2], 0x50}, 0x1, 0x0, 0x0, 0x24004810}, 0x20000000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x4, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000084) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x64, r13, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x8004) 8m50.667303983s ago: executing program 4 (id=3912): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x40800, &(0x7f0000000080)={@align=0x4, {0x17, 0xa, 0xffffffcd, 0x80}}, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x7}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000040), &(0x7f0000000400)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008ec0)={0x38, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x2, 0x0, 0x1, [@generic="e51b"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) close(0x3) 8m49.96287785s ago: executing program 4 (id=3917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r1, &(0x7f0000001380)=ANY=[@ANYBLOB="000086dd0000110000080000000060e708510f982cfffea0000000000000000000000000000afc0100000000000000000000000000012babfb"], 0xfce) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r9, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)="7a0e", 0x2}], 0x1}, 0x4011) r11 = socket(0xf, 0x1, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x18, 0x4f, 0x1, 0x2, 0x0, {0x1c}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) 8m34.859401724s ago: executing program 32 (id=3917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r1, &(0x7f0000001380)=ANY=[@ANYBLOB="000086dd0000110000080000000060e708510f982cfffea0000000000000000000000000000afc0100000000000000000000000000012babfb"], 0xfce) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r9, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)="7a0e", 0x2}], 0x1}, 0x4011) r11 = socket(0xf, 0x1, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x18, 0x4f, 0x1, 0x2, 0x0, {0x1c}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) 7m17.472762927s ago: executing program 2 (id=4052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000140)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4002, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0x140}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2) 7m14.602121489s ago: executing program 2 (id=4058): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x65c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x630, 0x2, [@TCA_BPF_ACT={0x62c, 0x1, [@m_bpf={0x10c, 0x211, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x1, 0xffffffffffffffff, 0xf, 0x7f}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x118, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x9, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x104, 0x8, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x40}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10, 0x5, 0x5, 0x5, 0x7}, 0x2}}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x244, 0x13, 0x0, 0x0, {{0x7}, {0x1dc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc9, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd924c9446734f9e4568"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xb9, 0x6, {0x800, 'security\x00', 0x1, 0x3, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x41, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd02a67777e4d51dfa578f9f5021013f0c9a057bc84da50e9717ad55f6dba06dd18f82"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x65c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa6, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000091114900000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 7m13.003926694s ago: executing program 2 (id=4061): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1035}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x1}]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000000}, 0x0) 7m12.509781178s ago: executing program 2 (id=4064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0x8, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xa}}, 0x26) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 7m11.803949435s ago: executing program 2 (id=4066): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) connect$unix(r0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900840000000001000000940001000000fc13c40000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@enum64={0x5, 0x6, 0x0, 0x13, 0x0, 0xa, [{0x10, 0xfff, 0x3}, {0x5, 0x2, 0x237}, {0x9, 0x4, 0xfffffffc}, {0x5, 0x5, 0xffff}, {0xb, 0x5, 0x6}, {0x7, 0xa, 0x2}]}, @enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0x8, [{0xe, 0x1, 0x7}, {0x2, 0x4ef0, 0x1}, {0x9, 0x7cc, 0x1}]}, @union={0x6, 0x2, 0x0, 0x5, 0x0, 0x8, [{0xf, 0x4}, {0x8, 0x3, 0x9}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/22, 0xcf, 0x16, 0x0, 0x81, 0x10000}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={&(0x7f0000000400)=@l2tp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/38, 0x26}], 0x1, &(0x7f0000000500)=""/91, 0x5b}, 0x2100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfbd, '\x00', 0x0, r2, 0x2, 0x0, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x4f, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x28) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$nci(r4, &(0x7f0000000080)=""/64, 0x40) getsockname$unix(r3, &(0x7f00000005c0), &(0x7f0000000640)=0x6e) 7m10.754741581s ago: executing program 2 (id=4067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd2b, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a310000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440500000000600054050640000050007004685000005000100060000000900020073797a3100"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000007c0)=0x2) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r4) close(0x4) 6m54.98799542s ago: executing program 33 (id=4067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd2b, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a310000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440500000000600054050640000050007004685000005000100060000000900020073797a3100"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000007c0)=0x2) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r4) close(0x4) 6m1.103447354s ago: executing program 3 (id=4137): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000004520000504"], 0x20) 6m0.435460115s ago: executing program 3 (id=4138): socket$inet(0x2, 0x1, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280)="07a5", &(0x7f0000000300)=@udp6=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m59.287125538s ago: executing program 3 (id=4142): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20004080) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) pipe(0x0) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = socket(0x1f, 0x800, 0x0) (async, rerun: 32) r11 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) connect$inet(r11, &(0x7f0000000340)={0x2, 0xfffd, @private=0xa010100}, 0x10) listen(r11, 0x8) (async, rerun: 64) r12 = accept4(r11, 0x0, 0x0, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000700)=0x3a) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c8371a24", @ANYBLOB="000228bd70001bd7ec256600000008000300", @ANYRES32=0x0, @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x40080) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c"], 0x140}}, 0x0) 5m58.262915961s ago: executing program 3 (id=4145): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130002000000007988cec85400fbdbdf25fc00000000000000000000000000e022524d0000000000220000000000000009"], 0xb8}}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xd, @empty, 0x401}}, 0x80, 0x0, 0xffffffffffffff4e}, 0x54890) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0x200488c4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0500"], 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f00000009c0)={{r6, &(0x7f0000000140)='\x00', 0x400, &(0x7f0000000300)={@_ha_fsid={[0x18c, 0xfffffff7]}, {0x2, 0x3, 0x4, 0x1ff}}, 0xb95c, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x1}, {[0x5, 0x9, 0x7f7, 0x10001]}, 0x4d7, 0xbc, &(0x7f0000000900)=""/188}) connect$inet6(r2, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x168, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffc}}}}, 0x3f0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r11) sendmsg$TIPC_NL_MEDIA_SET(r11, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r12, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x11, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x4c0c0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 5m52.107336125s ago: executing program 3 (id=4147): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="a9c9700000000025ffe900"], 0x5) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1f0729bd7000fbdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x841) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 5m48.686200338s ago: executing program 3 (id=4152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x80, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "ffd71e876840c2d8bd85e5bafac335588aeed86b61dc842efda1fbb4124040a5860af5d9f1cb504e1dae2964111f8b1417ba164edab49ed9bb7d3c839025aa6621"}]}]}]}]}, 0x80}}, 0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac141442, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@polexpire={0x1c4, 0x1b, 0x400, 0x70bd2c, 0x25dfdbfb, {{{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e22, 0xb4, 0x0, 0x80, 0x10, 0x21}, {0x34fa, 0x0, 0x0, 0x4, 0x7ff, 0x5c0, 0x800, 0x6}, {0x1ff, 0x7, 0x7f, 0x7fff}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xf}, @mark={0xc, 0x15, {0x350759, 0x1}}, @sa={0xe4, 0x6, {{@in=@private=0xa010100, @in6=@local, 0x4e23, 0x1, 0x4e22, 0x101, 0x8, 0x20, 0x80, 0x33}, {@in6=@empty, 0x4d6, 0xff}, @in6=@remote, {0x372c, 0x8, 0x2, 0x7, 0xfea6, 0x0, 0x0, 0x9}, {0x1, 0xffffffffffffffff, 0x27c337d40, 0xd4e}, {0xe, 0x0, 0x7}, 0x70bd25, 0x0, 0xa, 0x3, 0xe0, 0xe8}}]}, 0x1c4}}, 0x44050) 5m33.534170358s ago: executing program 34 (id=4152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x80, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "ffd71e876840c2d8bd85e5bafac335588aeed86b61dc842efda1fbb4124040a5860af5d9f1cb504e1dae2964111f8b1417ba164edab49ed9bb7d3c839025aa6621"}]}]}]}]}, 0x80}}, 0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac141442, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@polexpire={0x1c4, 0x1b, 0x400, 0x70bd2c, 0x25dfdbfb, {{{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e22, 0xb4, 0x0, 0x80, 0x10, 0x21}, {0x34fa, 0x0, 0x0, 0x4, 0x7ff, 0x5c0, 0x800, 0x6}, {0x1ff, 0x7, 0x7f, 0x7fff}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xf}, @mark={0xc, 0x15, {0x350759, 0x1}}, @sa={0xe4, 0x6, {{@in=@private=0xa010100, @in6=@local, 0x4e23, 0x1, 0x4e22, 0x101, 0x8, 0x20, 0x80, 0x33}, {@in6=@empty, 0x4d6, 0xff}, @in6=@remote, {0x372c, 0x8, 0x2, 0x7, 0xfea6, 0x0, 0x0, 0x9}, {0x1, 0xffffffffffffffff, 0x27c337d40, 0xd4e}, {0xe, 0x0, 0x7}, 0x70bd25, 0x0, 0xa, 0x3, 0xe0, 0xe8}}]}, 0x1c4}}, 0x44050) 27.104667965s ago: executing program 0 (id=5570): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x6782}], 0x3, 0x20, 0x0) shutdown(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xee}, &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x871a15abc695fa1d, 0x0, 0x35dfdbfe, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x5, 0x5, 0xb273, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.103043618s ago: executing program 0 (id=5573): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x8, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[], 0x2c}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf253d0000000e0001006e65746465260cca814f8f3e630002006e657464647673696d3000021c008200736f758f63655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000200000000000000800000091115d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000001a40)=ANY=[@ANYBLOB="1800000008082295ae4906cac56e3a345580510a6ac812376f1caa96b7071f8c53043fd8661e9e12cf72478c90d29b5abca5b356336d"], &(0x7f0000001a80)='syzkaller\x00'}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40, 0x6f, 0x0, 0x1}, {0x50, 0x1, 0x2}, {0x6, 0x82, 0xfd, 0xfffffffd}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0xa) socket(0x22, 0x800, 0x340b) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000001ac0)='\x05\x01\aY=\x84\xcf_N\xaf\xa1\xc7\xd0\xdf\xf4\xc8\xea\xbe\xdf\\P\x02plP\x10\xfb\xa1\xa2R\x05\xd8\xafv\x9f;', 0x24) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/4093, 0xffd, 0x202df) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES64=r4, @ANYRESOCT, @ANYRESHEX=r4, @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000001a00), 0xffffffffffffffff) recvmsg(r4, &(0x7f0000000a80)={&(0x7f0000000040)=@sco, 0x80, &(0x7f0000000940)=[{&(0x7f0000000140)=""/193, 0xc1}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f00000006c0)=""/130, 0x82}, {&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/215, 0xd7}], 0x9, &(0x7f0000000a00)=""/76, 0x4c}, 0x40) listen(r0, 0x3) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) 25.498650827s ago: executing program 0 (id=5580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250f0000000e0001006e65740100000001000000000f0002006e657464657673696d30000008000b00768300000600f40095c20000"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x3a, 0x1, 0x20, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000ffff27bd7020fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c000280140007000000000000000000fffffffffffffffe1400060000000000000000000004"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 25.209238305s ago: executing program 0 (id=5584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000003740)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000200)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003200)=[{&(0x7f00000000c0)="83527807", 0x4}], 0x1}}], 0x2, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000340)={r4, 0xfffffffe, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r4, 0x2}, &(0x7f0000000040)=0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/28, 0x1c}, 0x2dc}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x74bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x12a13, 0x8005}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x3c}}, 0x20004000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x9da2f7991aa65289, &(0x7f0000000100)=[{0x20, 0x83, 0xfd, 0xfffff036}, {0x40, 0x4, 0x3, 0x7ff}, {0x8, 0x8, 0x7, 0x8}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 24.427166756s ago: executing program 0 (id=5592): socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0xe, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000001880)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0xff05, 0xc}}, @rdma_args={0x48, 0x114, 0x1, {{0xbbb9, 0x3}, {&(0x7f0000001940)=""/221, 0xdd}, &(0x7f0000000780)=[{&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000000640)=""/41, 0x29}, {&(0x7f0000000680)=""/213, 0xd5}], 0x6, 0x0, 0x7}}], 0x90}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000009000000000000000080000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500ebff00000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x8) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x0, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x400, 0x1, 0x1, 'syz0\x00', 0xda}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d00)=ANY=[@ANYBLOB="34010000", @ANYRES16=r14, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4004840}, 0x40082) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYBLOB="aaed565c856342f4f38a1b12875b6963a19be7491e85c8abeba02dda2d69bcfce8c48105953ca3901b7961e59699c573fdddbca7e7f91121ff", @ANYRESDEC=0x0, @ANYRES16=r11, @ANYRES64=r14, @ANYRESHEX=r14, @ANYRES32=r7], 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001b80)=r2, 0x4) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf040000", @ANYRESOCT=r11, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0xffffff5d, 0x94, &(0x7f0000000540)=""/148, 0x0, 0x1e, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x1, 0x1, 0x101, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[r3, r3, r3, r2, r3, r3, r3], 0x0, 0x10, 0x200}, 0x94) 22.93408193s ago: executing program 0 (id=5601): socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0x8}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x10, [{0xa, 0x1, 0x81}, {0x3, 0x5}, {0x8, 0x1, 0xe34b}, {0x4, 0x5, 0x5}, {0x5, 0x5, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000a00)=""/59, 0x99, 0x3b, 0x0, 0x4}, 0x28) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010080100700000000000000400000000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xa7, 0x9, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x80, 0x1, 0x7}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r9, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000004) (async) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f25000000000000000033700100007f0000017f00000100186371ae9b1c03"], 0x0) (async) getsockopt$inet_int(r6, 0x0, 0x34, &(0x7f0000000280), &(0x7f0000000300)=0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.984580956s ago: executing program 7 (id=5614): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfff9, 0x8, 0xb05, 0x4, 0x1ff}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0x9, @local, 0x10000}}, 0x5, 0x6, 0x8, 0xfff, 0x81}, &(0x7f0000000140)=0x98) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000008000000000000000800000091110d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_emit_ethernet(0x3f, &(0x7f0000000200)={@empty, @empty, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@llc={0x4, {@llc={0x0, 0x80, "ce", "0be058aedb3af80624faa5678d8628857c29dd4c3379805b9f290024cff93db1278883ebade677ff8895"}}}}}, &(0x7f0000000240)={0x0, 0x4, [0xa53, 0xfb5, 0x98a, 0x37a]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.906985324s ago: executing program 1 (id=5615): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800100006000000010000000300000b0000000000002e"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x28) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x4}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/243, 0xf3}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x6, 0x40018122, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x12) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f00000038c0)=[{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000380)="25d09e63c2", 0x5}], 0x1, &(0x7f0000002740)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x4, 0x200, 0x7, 0x7, 0x8, 0x0, 0x80}}], 0x30}], 0x1, 0x20000000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 19.692407633s ago: executing program 7 (id=5617): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x6, 0xe}, {0x0, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe0) listen(r0, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(0xffffffffffffffff, 0x101) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004810) shutdown(r0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x33, 0x0, &(0x7f0000000640)) 19.443142996s ago: executing program 1 (id=5618): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000004f80)=[{{&(0x7f00000012c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f00000024c0)=[{&(0x7f0000000300)="26c3ebd6f6b1d10e577f1efa5a4b533e49c973a301ad910a", 0x18}], 0x1}}, {{&(0x7f0000002540)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}]}}}], 0x20}}], 0x2, 0x4044880) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="e33110355bfcaaaaaaaaaa0086dd60cb653e00283a01fe800000000000cd5b6ed9a0d09aa32cfe8000000000000000000000000000aa890090780000000000f50000000000000000ffff0a010102fc0100"/94], 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100000000009500000000001b00060000004d90fcff00000000bf91000000002b4fdcdb14be83ea0000b702000003000000850000002a000000b7000000000000009500000009000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x3}, 0x94) 19.352707298s ago: executing program 6 (id=5620): unshare(0x2020600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3c, 0x8) r2 = accept4$vsock_stream(r1, &(0x7f0000000100), 0x10, 0x100800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x8, &(0x7f00000000c0)=0x80000000009, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000180)=0x2, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x1ff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x1780) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x7) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0xfffffffffffffe93) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000040), 0x3b) 18.634504278s ago: executing program 7 (id=5621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="441001000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="18a00300103294570f0001"], 0x68}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) (async) recvmmsg(r3, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) epoll_create1(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000000c0)) 18.295102545s ago: executing program 6 (id=5622): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0x42, 0x1, 0x70bd25, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x44, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000002c0000001d2bffc1264d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x64}}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="f59cfa740503ea8d25b8e85fa97ecaf5dd0d4f1068ab244852edef8813144238ba210a2208fbe64f3f84ec7c6bb61b41e438a316e0e1022dd60be7f96ecf8387e6e2681298e5da097f654fcd4e677821753bcd77afbb046ca51f272fd793a413c3491eb064f2c3e97264e04ef7f266ed38fc42af2f27", 0x76) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT=r6, @ANYRES8, @ANYRESDEC=r1, @ANYBLOB="c73fec4a239865268d356c1c21e06d085bb5064a8b3fdb5af789e42ee0dcf898c37086559b575462436709c59d3d5ebb6a0c186fdd5f3aebd202f0c36aee2b4a20e56c776f99bb78a845", @ANYRES32=r8, @ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005600010602000000fcdbdf250700000000efffa457bea87e00000004002c80"], 0x1c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18.294687243s ago: executing program 1 (id=5623): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000002000)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01010000000000000000010000000900200073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30"], 0x248}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xfefffffd, 0x5, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000080000200000000001900", 0x3c}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, 0x0, 0x0, 0xe0cba8b119564bb4, 0x0, 0x46, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x2d}, 0x60) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a92"], 0x70}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 17.934997683s ago: executing program 5 (id=5624): socketpair(0x29, 0x6, 0x40, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x0, 0xfffffffffffffffc}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 17.933197729s ago: executing program 1 (id=5625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="03", 0x1}, {&(0x7f00000002c0)="2ed8f77c7396c7002b896c726764df60", 0x10}], 0x2}, 0x20004014) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r10}]}, 0x40}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x2, 0x75f0, 0x8, 0x48}, 0x10) 17.767847627s ago: executing program 6 (id=5626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) getsockopt$inet6_opts(r2, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 17.683775991s ago: executing program 5 (id=5627): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa0, 0x1, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4) 17.515391424s ago: executing program 7 (id=5628): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd2b000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001800050401000000000000000a800000fe0300010000000014000100fd0000000000000000000000000000010800040001000000060015000700000014001680080001000300000008000300fe000000"], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010302000000000000000a000000"], 0x14}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r7, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 17.2849035s ago: executing program 6 (id=5629): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0xffd, 0x6, 0x1d, 0x5, 0x4, 0x27}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x9, 0x7, 0x7, 0x0, r4, 0x100}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0xd}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730121000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$alg(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="b7b43564fa451942494661b08d034d423508e9fbefd717c3189a18cbc5b49f0be9", 0x21}, {&(0x7f0000000080)="5a4d4d3c6019c8273dcfdc160de4d19509eee0f503ce33620b6efe8bda18e2c2dcbd30afec35b7d0e4c2323442dafd88ef81c5f75f50a663ddc3fe9958efea6980af8daac632f310bac51aa798eeb78691d4660ad54d5bf49ee4ae4efb54aa0cfcaf3652159c3968e2e040100485eccfa466293d021979ebdcbe16acea063035d617f2cbb1aee503d77834ec910358f2669ba1c49375776a789b5a41925c8bf51ec8a43d6bcc1b844737b8bf9c9eba75fbb56c4bdf6aab1ca3c764e184624101e5aa26bff88d4e034284ab136035e9ba4629d1f40312159278568ae4dc077ee1e2bb558ae671c9d52b53f2206f8d0beb77cb6c43f016f2e79018e37c1988", 0xfe}, {&(0x7f0000000280)="cb9b5ebf12781a47a9709a2738066702d03fd67725bdbc98d9c93e63fbb6520355de9a2e965009c7302dbb53b2df2f237314635d8c58569f2b8df5737c2560d124d7defece25332996fd58d270d47d1fd36679e19038338cb61c507a0d446d1475c054159de990b2b8c888f55a5717a4995cfc14b019647909182106766f9d54122f", 0x82}], 0x3, 0x0, 0x0, 0x1}, 0x8080) 17.247941611s ago: executing program 5 (id=5630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x20) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000300)={0x8, 0x400, 0x9, 0x2, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$nl_route(r5, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ff0000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000e9ffffffffffffff0000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 17.030870907s ago: executing program 7 (id=5631): unshare(0x2020600) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x5, 0xa, 0x70, @loopback, @mcast2, 0x40, 0x20, 0x3, 0x8}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r2, 0x5421, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000001000000060000000600000000e00000", @ANYRES32=r0, @ANYBLOB="ff03000f00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000010000000300"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000040), 0x3b) 16.940654775s ago: executing program 1 (id=5632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001000010029bd7000fbdbdf2500000000", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4c880) 16.70683615s ago: executing program 7 (id=5633): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f00000001c0)={r4, &(0x7f00000000c0)='\x00', 0x2, &(0x7f0000000100)={@align=0x7fffffff, {0x1, 0x6, 0x4, 0xff}}, 0x2, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 16.518787473s ago: executing program 6 (id=5634): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newqdisc={0x98, 0x24, 0x605, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x8, [0x1, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x2], [0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0x98}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newqdisc={0x98, 0x24, 0x605, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x8, [0x1, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x2], [0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0x98}}, 0x0) 16.444641582s ago: executing program 1 (id=5635): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x40000c4) r3 = socket$inet6(0xa, 0x80001, 0x0) sendto$l2tp6(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000600)={0xa, 0x0, 0xfffffdbb, @remote, 0x1}, 0x20) r4 = socket$inet(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x4, 0x80, 0x6, 0xffffffffffffffff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'rose0\x00', {0x2}, 0x80c}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x290, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1c0, 0x378, 0x378, 0x1c0, 0x378, 0x3, 0x0, {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'rose0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3b, 0x6, 0x1, 0x24}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0xab9, 0x0, '\x00', {0xfff}}}}], {{'\x00', 0x0, 0xa8, 0x1c0}, {0x28}}}}, 0x2f0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000e00)={0x80, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="1cdd0b4d31c5f59e85734a2bdf441a0aead7fcdc32bb9f88018f"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x860}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000004c0)=@ethtool_ringparam={0x10, 0xfffffff8, 0x5, 0x1, 0xfffffff8, 0x8, 0x1, 0x3, 0x9}}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302082100000000080002"], 0x30}}, 0x0) close(r8) 16.41267462s ago: executing program 5 (id=5636): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x34}}, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000000400)=@qipcrtr={0x2a, 0x0, 0x2}, 0x80, 0x0}, 0x0) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x471e, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000600)="6e901720a8e113502640dae3daaf9d5f314c8a7f2d8e12a6ab5ca9eebf73ae82904f762e2351a0162ee9b57f6271877f3a36863e9ce360f5987199e3059491664fc752c04893c8b3f06fd49702a5192b2726ab986ba1207abf750274b4b423a62e2af5", 0x63}], 0x2, 0x0, 0x0, 0x10000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000c04466"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8050) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) 15.90644955s ago: executing program 5 (id=5637): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) ppoll(&(0x7f0000001080)=[{r1, 0x21}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x8000, 0xff, 0x18}, 0x8) 15.628645954s ago: executing program 6 (id=5638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x10, &(0x7f0000000700)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xfe79, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000001c0)={'team_slave_0\x00', 0x80}) 15.420389891s ago: executing program 5 (id=5639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440), 0x400, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000002540)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) 656.836361ms ago: executing program 35 (id=5635): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x40000c4) r3 = socket$inet6(0xa, 0x80001, 0x0) sendto$l2tp6(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000600)={0xa, 0x0, 0xfffffdbb, @remote, 0x1}, 0x20) r4 = socket$inet(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x4, 0x80, 0x6, 0xffffffffffffffff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x0, 'rose0\x00', {0x2}, 0x80c}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x290, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1c0, 0x378, 0x378, 0x1c0, 0x378, 0x3, 0x0, {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'rose0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3b, 0x6, 0x1, 0x24}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0xab9, 0x0, '\x00', {0xfff}}}}], {{'\x00', 0x0, 0xa8, 0x1c0}, {0x28}}}}, 0x2f0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000e00)={0x80, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="1cdd0b4d31c5f59e85734a2bdf441a0aead7fcdc32bb9f88018f"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x860}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000004c0)=@ethtool_ringparam={0x10, 0xfffffff8, 0x5, 0x1, 0xfffffff8, 0x8, 0x1, 0x3, 0x9}}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302082100000000080002"], 0x30}}, 0x0) close(r8) 468.744229ms ago: executing program 36 (id=5633): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f00000001c0)={r4, &(0x7f00000000c0)='\x00', 0x2, &(0x7f0000000100)={@align=0x7fffffff, {0x1, 0x6, 0x4, 0xff}}, 0x2, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 87.10179ms ago: executing program 37 (id=5638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x10, &(0x7f0000000700)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xfe79, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000001c0)={'team_slave_0\x00', 0x80}) 0s ago: executing program 38 (id=5639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440), 0x400, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000002540)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) kernel console output (not intermixed with test programs): bridge0: port 1(bridge_slave_0) entered blocking state [ 988.842331][T10978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.870844][T10978] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.870946][T10978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.936555][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 988.939143][T26574] syz_tun: entered allmulticast mode [ 988.943029][T10978] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.943076][T10978] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.943112][T10978] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.943146][T10978] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.943274][T10978] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.943300][T10978] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 988.943335][T10978] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.943359][T10978] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 988.943648][T10982] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.943675][T10982] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 988.957600][ T8596] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.957631][ T8596] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 989.479574][T26585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4220'. [ 989.514623][T26053] veth0_vlan: entered promiscuous mode [ 989.649214][T26053] veth1_vlan: entered promiscuous mode [ 990.087217][T26591] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.087422][T26591] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.321063][T26591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.339321][T26591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.458744][T26610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.477845][T26591] batman_adv: batadv0: Interface deactivated: macvlan2 [ 990.482658][T26591] batman_adv: batadv0: Interface deactivated: macvlan3 [ 990.954336][T26591] v: left allmulticast mode [ 990.991742][T26591] gretap2: left promiscuous mode [ 991.026286][T26591] batman_adv: batadv0: Interface deactivated: macvlan5 [ 993.834415][T24396] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.834447][T24396] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 43486 - 0 [ 993.834473][T24396] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 993.838193][T24396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.838215][T24396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.080104][T24396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.080127][T24396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.124195][T24396] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.124232][T24396] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 43486 - 0 [ 994.124263][T24396] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 994.124322][T24396] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.124347][T24396] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 43486 - 0 [ 994.124372][T24396] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 994.124408][T24396] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.124433][T24396] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 43486 - 0 [ 994.124457][T24396] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 994.631039][T26053] veth0_macvtap: entered promiscuous mode [ 994.683635][T26053] veth1_macvtap: entered promiscuous mode [ 994.874645][T26053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.952645][T26053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.014465][ T8609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.014836][ T8609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.014909][ T8609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.173806][T26647] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4165'. [ 995.180193][ T8609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.337433][T26647] 8021q: VLANs not supported on gre0 [ 995.518711][T26659] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4231'. [ 995.677259][ T8596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.677281][ T8596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.680268][T25893] Bluetooth: hci4: unexpected cc 0x2060 length: 9 > 7 [ 995.857459][T26671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4232'. [ 995.991241][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 996.031263][T24396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.031285][T24396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.150893][T26671] tipc: Started in network mode [ 996.150933][T26671] tipc: Node identity 662259aa4276, cluster identity 4711 [ 996.151093][T26671] tipc: Enabled bearer , priority 0 [ 996.189696][T26667] tipc: Disabling bearer [ 996.649418][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4235'. [ 996.803849][T26705] netlink: zone id is out of range [ 996.803875][T26705] netlink: zone id is out of range [ 996.803902][T26705] netlink: zone id is out of range [ 996.804000][T26705] netlink: zone id is out of range [ 996.804009][T26705] netlink: zone id is out of range [ 996.804046][T26705] netlink: zone id is out of range [ 996.804082][T26705] netlink: zone id is out of range [ 996.811463][T26705] netlink: zone id is out of range [ 996.811496][T26705] netlink: zone id is out of range [ 996.811505][T26705] netlink: zone id is out of range [ 996.911675][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3925'. [ 996.911713][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3925'. [ 997.183915][T26712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4235'. [ 997.222968][ T8609] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 997.223018][ T8609] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 997.223055][ T8609] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 997.223090][ T8609] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 997.612106][T26716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4238'. [ 997.612164][T26716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4238'. [ 997.686160][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4240'. [ 997.769052][T26719] syzkaller0: entered promiscuous mode [ 997.769079][T26719] syzkaller0: entered allmulticast mode [ 998.059751][T26737] netlink: 'syz.1.4245': attribute type 1 has an invalid length. [ 998.137962][T10958] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.138802][T10958] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.138840][T10958] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.145002][T10978] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.882644][T26761] batman_adv: batadv0: Adding interface: macvtap1 [ 998.882665][T26761] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.882705][T26761] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 999.269626][T26761] batman_adv: batadv0: Removing interface: macvtap1 [ 999.361285][T26766] s: renamed from veth0 (while UP) [ 999.738636][T26795] syzkaller1: entered promiscuous mode [ 999.738664][T26795] syzkaller1: entered allmulticast mode [ 1000.423447][T26818] __nla_validate_parse: 5 callbacks suppressed [ 1000.423469][T26818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4262'. [ 1000.423487][T26818] batman_adv: batadv0: Interface deactivated: gretap1 [ 1000.423660][T26818] batman_adv: batadv0: Removing interface: gretap1 [ 1000.540967][T26826] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4264'. [ 1000.556195][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4264'. [ 1000.702756][T26830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4265'. [ 1000.792175][T26834] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4265'. [ 1001.402616][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4272'. [ 1001.646724][T26867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4274'. [ 1002.963900][T26918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4281'. [ 1003.220225][T26922] netlink: 'syz.5.4281': attribute type 1 has an invalid length. [ 1003.220251][T26922] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4281'. [ 1003.365366][T26936] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4284'. [ 1003.548730][T26934] Cannot find set identified by id 0 to match [ 1004.342346][T26964] 0ªX¹¦Dö»: renamed from gretap0 [ 1004.380131][T26964] 0ªX¹¦Dö»: entered allmulticast mode [ 1004.617504][T26974] netlink: 'syz.6.4292': attribute type 1 has an invalid length. [ 1005.628555][T27001] __nla_validate_parse: 5 callbacks suppressed [ 1005.628576][T27001] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4299'. [ 1005.628599][T27001] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1005.969342][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1006.174639][T27015] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4300'. [ 1006.174669][T27015] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4300'. [ 1006.174693][T27015] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4300'. [ 1006.301019][T27016] dummy0 speed is unknown, defaulting to 1000 [ 1006.450803][T27024] netlink: 'syz.0.4303': attribute type 10 has an invalid length. [ 1006.508402][T27024] team0: Device v is already a lower device of the team interface [ 1006.513726][T27025] netlink: 'syz.0.4303': attribute type 10 has an invalid length. [ 1006.777920][T27025] team0: Port device macvlan4 removed [ 1007.028799][ T158] IPVS: starting estimator thread 0... [ 1007.041209][T27043] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4306'. [ 1007.113093][T27044] IPVS: using max 28 ests per chain, 67200 per kthread [ 1007.183645][T27048] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1007.293491][T27043] IPVS: stopping master sync thread 27048 ... [ 1007.806478][T27055] dvmrp0: entered allmulticast mode [ 1007.980530][T27067] netlink: 'syz.1.4308': attribute type 4 has an invalid length. [ 1007.980553][T27067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4308'. [ 1007.991209][T27065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1007.998255][T27067] dvmrp0: left allmulticast mode [ 1007.998824][T27067] dvmrp8: left allmulticast mode [ 1008.771460][T27091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4314'. [ 1008.771495][T27091] netlink: 'syz.6.4314': attribute type 1 has an invalid length. [ 1008.771689][T27091] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4314'. [ 1008.800160][T27096] netlink: 'syz.5.4317': attribute type 2 has an invalid length. [ 1008.800180][T27096] netlink: 'syz.5.4317': attribute type 1 has an invalid length. [ 1008.800194][T27096] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4317'. [ 1009.594836][T27114] dummy0 speed is unknown, defaulting to 1000 [ 1010.514871][T27154] net_ratelimit: 5 callbacks suppressed [ 1010.514893][T27154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1011.629280][T27192] __nla_validate_parse: 4 callbacks suppressed [ 1011.629302][T27192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4337'. [ 1011.655907][T27189] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4335'. [ 1011.803814][T27194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1011.804880][T27194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1012.011116][T27194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1012.144734][T27208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1012.420227][T27216] xt_IDLETIMER: label is empty or not nul-terminated [ 1013.035559][T27227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4343'. [ 1013.083088][ T31] audit: type=1804 audit(1791071152.412:16): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4344" name="/newroot/22/cgroup.controllers" dev="tmpfs" ino=134 res=1 errno=0 [ 1013.084071][ T31] audit: type=1800 audit(1791071152.422:17): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4344" name="cgroup.controllers" dev="tmpfs" ino=134 res=0 errno=0 [ 1013.440842][T27233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4345'. [ 1013.784528][T26822] udevd[26822]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1014.658213][T27265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4351'. [ 1014.875719][T27276] netlink: 'syz.5.4353': attribute type 1 has an invalid length. [ 1014.875741][T27276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4353'. [ 1014.891485][T27276] ªªªªªª: renamed from vlan0 (while UP) [ 1015.949682][T27306] openvswitch: netlink: Message has 8 unknown bytes. [ 1015.987816][T27307] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1016.841446][T27325] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1019.255601][T27311] hsr_slave_1 (unregistering): left promiscuous mode [ 1019.293534][T27332] __nla_validate_parse: 4 callbacks suppressed [ 1019.293553][T27332] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4363'. [ 1019.318599][T27327] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1019.318639][T27327] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1019.318658][T27327] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1019.832459][T27362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4367'. [ 1019.832775][T27362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4367'. [ 1020.166963][T27349] netlink: 'syz.0.4366': attribute type 1 has an invalid length. [ 1020.166986][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1020.183359][T27350] x_tables: duplicate underflow at hook 1 [ 1020.446678][T27387] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1020.695045][T27388] syzkaller0: left promiscuous mode [ 1020.847557][T27400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1020.890003][T27402] openvswitch: netlink: Flow actions attr not present in new flow. [ 1021.173485][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4373'. [ 1021.253359][T27416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4374'. [ 1021.278559][T27416] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4374'. [ 1021.329578][T27414] tc_dump_action: action bad kind [ 1021.823307][T27421] netlink: 'syz.5.4375': attribute type 1 has an invalid length. [ 1021.823331][T27421] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4375'. [ 1022.044330][T27435] geneve2: entered promiscuous mode [ 1022.051755][T10981] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 36148 - 0 [ 1022.051831][T10981] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 36148 - 0 [ 1022.051883][T10981] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 36148 - 0 [ 1022.051917][T10981] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 36148 - 0 [ 1022.682401][T27459] netlink: 'syz.0.4381': attribute type 5 has an invalid length. [ 1022.682425][T27459] netlink: 'syz.0.4381': attribute type 9 has an invalid length. [ 1022.682440][T27459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4381'. [ 1022.847208][T27451] netlink: 'syz.1.4380': attribute type 1 has an invalid length. [ 1022.847237][T27451] netlink: 'syz.1.4380': attribute type 1 has an invalid length. [ 1023.071314][T27465] syzkaller1: entered promiscuous mode [ 1023.071339][T27465] syzkaller1: entered allmulticast mode [ 1023.232395][T27476] x_tables: duplicate entry at hook 1 [ 1023.471886][T27476] veth1_macvtap: entered allmulticast mode [ 1023.569327][T27484] netlink: 'syz.1.4386': attribute type 1 has an invalid length. [ 1023.849639][T27493] syzkaller0: entered promiscuous mode [ 1023.849662][T27493] syzkaller0: entered allmulticast mode [ 1024.040235][T27496] tc action pedit 'at' offset 5 out of bounds [ 1024.090518][T27496] ip6tnl2: entered allmulticast mode [ 1024.309111][ T7163] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.310917][ T7163] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.335724][T19315] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.451304][T27498] ip_tables: iptables: counters copy to user failed while replacing table [ 1024.675873][T21026] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.677161][T27524] __nla_validate_parse: 1 callbacks suppressed [ 1024.677179][T27524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1024.681966][T27523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1025.141711][T19315] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1025.269691][T27532] netlink: 'syz.5.4394': attribute type 1 has an invalid length. [ 1025.361960][T27542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4394'. [ 1025.443862][T27532] bond1: entered promiscuous mode [ 1025.448269][T27532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1025.699615][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 125 [ 1025.700816][T27556] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4398'. [ 1025.790508][T27542] bond1 (unregistering): Released all slaves [ 1026.829436][T27591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1026.834994][T27593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1026.949267][T27596] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1027.256252][T27616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4411'. [ 1027.793457][T27645] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4413'. [ 1028.091206][T27645] netlink: 'syz.6.4413': attribute type 1 has an invalid length. [ 1028.091233][T27645] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4413'. [ 1028.226356][T27658] netdevsim netdevsim6 netdevsim0: IPsec offload requires 128 bit authentication [ 1028.643022][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1029.187156][T27685] netlink: 'syz.6.4421': attribute type 11 has an invalid length. [ 1029.372466][T27691] syzkaller0: entered promiscuous mode [ 1029.372489][T27691] syzkaller0: entered allmulticast mode [ 1030.210470][T27714] block nbd2: server does not support multiple connections per device. [ 1030.215018][T27714] block nbd2: shutting down sockets [ 1030.281379][T27715] __nla_validate_parse: 1 callbacks suppressed [ 1030.281403][T27715] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4427'. [ 1030.855166][T27719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4429'. [ 1030.992375][T27723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4430'. [ 1031.524677][T27733] syzkaller0: entered promiscuous mode [ 1031.614566][T27732] tipc: Enabled bearer , priority 0 [ 1031.681275][T27732] tipc: Resetting bearer [ 1031.943743][T27737] netlink: 'syz.7.4436': attribute type 1 has an invalid length. [ 1032.043171][T27737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1032.162450][T27739] geneve1: entered promiscuous mode [ 1032.376234][T27737] bond1: (slave geneve3): making interface the new active one [ 1032.397584][T27737] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1032.403281][T27741] hsr0: entered promiscuous mode [ 1032.436699][T27751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1032.556564][T27751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1032.676750][T27751] netlink: 'syz.0.4440': attribute type 1 has an invalid length. [ 1032.676775][T27751] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1033.120965][T27765] netlink: 'syz.1.4443': attribute type 1 has an invalid length. [ 1033.120988][T27765] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4443'. [ 1033.121004][T27765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4443'. [ 1033.134579][T27765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1034.087114][T27798] macsec1: entered allmulticast mode [ 1034.087145][T27798] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1034.087308][T27798] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1034.093059][T27800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1034.105154][T27798] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1034.162329][T27801] netlink: 'syz.6.4451': attribute type 10 has an invalid length. [ 1034.211562][T27808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4448'. [ 1034.269057][T27809] netlink: 'syz.6.4451': attribute type 10 has an invalid length. [ 1034.519264][T27796] IPv6: addrconf: prefix option has invalid lifetime [ 1034.934464][T27798] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1035.080805][T26231] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1035.154703][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.180811][T27801] team0: Port device netdevsim1 added [ 1035.256343][T27809] team0: Port device netdevsim1 removed [ 1035.268821][T27809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.294891][T27809] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1035.352381][T27827] tunl0: Caught tx_queue_len zero misconfig [ 1036.792010][T27861] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1037.632658][T27880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4464'. [ 1037.729338][T27881] bond0: (slave ip6tnl0): refused to change device type [ 1037.762973][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1037.772289][T27883] netlink: 'syz.7.4464': attribute type 11 has an invalid length. [ 1037.772313][T27883] netlink: 'syz.7.4464': attribute type 4 has an invalid length. [ 1037.772328][T27883] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4464'. [ 1038.069845][T27883] xt_CT: No such helper "netbios-ns" [ 1039.266756][T27900] bridge_slave_0: left allmulticast mode [ 1039.266782][T27900] bridge_slave_0: left promiscuous mode [ 1039.266966][T27900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.543423][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 61 (since boot) is 1056 jiffies old. [ 1040.817391][T27900] bridge_slave_1: left promiscuous mode [ 1040.817592][T27900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.872663][T27900] bond0: (slave bond_slave_0): Releasing backup interface [ 1040.896769][T27900] bond0: (slave bond_slave_1): Releasing backup interface [ 1040.915520][T27900] team0: Port device team_slave_0 removed [ 1040.945074][T27900] team0: Port device team_slave_1 removed [ 1040.945907][T27900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.945926][T27900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.949105][T27900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.949124][T27900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.952135][T27900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1040.995571][T27924] bridge1: entered promiscuous mode [ 1041.069941][T27925] pim6reg: entered allmulticast mode [ 1041.231011][T27926] pim6reg: left allmulticast mode [ 1041.384467][ T4932] Bluetooth: hci6: link tx timeout [ 1041.384488][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1041.620618][T27948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.438359][T27959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4478'. [ 1042.874753][T27965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4478'. [ 1043.443441][T25893] Bluetooth: hci6: command 0x041b tx timeout [ 1043.473858][T27981] netlink: 9160 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1043.653559][T27981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1043.846155][T27993] netlink: 'syz.6.4483': attribute type 1 has an invalid length. [ 1043.846181][T27993] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1044.568552][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4488'. [ 1044.568578][T28012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4488'. [ 1044.697581][T28013] x_tables: unsorted underflow at hook 4 [ 1044.986940][T28013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4486'. [ 1045.127813][T28019] ip_tables: iptables: counters copy to user failed while replacing table [ 1045.418078][T28027] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1045.419117][T28028] x_tables: duplicate underflow at hook 3 [ 1045.770756][T28050] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4496'. [ 1045.883340][T28051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4497'. [ 1045.883364][T28051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4497'. [ 1045.883391][T28051] netlink: 'syz.7.4497': attribute type 11 has an invalid length. [ 1045.883405][T28051] netlink: 'syz.7.4497': attribute type 14 has an invalid length. [ 1047.091191][ T31] audit: type=1804 audit(1791071186.422:18): pid=28091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4505" name="/newroot/52/cgroup.controllers" dev="tmpfs" ino=282 res=1 errno=0 [ 1047.092467][ T31] audit: type=1800 audit(1791071186.422:19): pid=28091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4505" name="cgroup.controllers" dev="tmpfs" ino=282 res=0 errno=0 [ 1047.138343][ T31] audit: type=1800 audit(1791071186.482:20): pid=28091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4505" name="cgroup.controllers" dev="tmpfs" ino=282 res=0 errno=0 [ 1047.498168][T28101] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1047.789422][T28111] syzkaller0: entered promiscuous mode [ 1047.789597][T28111] syzkaller0: entered allmulticast mode [ 1047.808312][T28117] veth0: Caught tx_queue_len zero misconfig [ 1048.169147][T28129] netlink: 'syz.5.4513': attribute type 39 has an invalid length. [ 1048.321560][T28141] xt_hashlimit: size too large, truncated to 1048576 [ 1048.386918][T28145] __nla_validate_parse: 3 callbacks suppressed [ 1048.386938][T28145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4513'. [ 1048.969520][T28152] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1049.008888][T28152] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1049.174153][T28152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1049.409656][T28161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4519'. [ 1049.711544][T28167] tipc: Enabling of bearer rejected, already enabled [ 1049.727237][T28170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4521'. [ 1050.012296][T28174] Bluetooth: MGMT ver 1.23 [ 1050.883490][T28201] netlink: 460 bytes leftover after parsing attributes in process `syz.1.4528'. [ 1051.268250][T28212] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4530'. [ 1051.697900][T28214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1051.835941][T28232] netlink: 'syz.0.4534': attribute type 1 has an invalid length. [ 1051.835965][T28232] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1051.836001][T28232] netlink: 'syz.0.4534': attribute type 1 has an invalid length. [ 1051.836013][T28232] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1051.836037][T28214] bond2 (unregistering): Released all slaves [ 1051.981719][T28232] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1052.409048][T28246] geneve4: entered promiscuous mode [ 1052.409214][T28246] geneve4: entered allmulticast mode [ 1053.964490][T28289] syzkaller0: left promiscuous mode [ 1053.964515][T28289] syzkaller0: left allmulticast mode [ 1054.257828][T28300] __nla_validate_parse: 4 callbacks suppressed [ 1054.257849][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4546'. [ 1054.518262][T28311] ip6gretap1: entered allmulticast mode [ 1054.540746][T28311] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1054.540765][T28311] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.540799][T28311] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1054.634622][T28315] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1054.757940][T28311] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1054.808811][T28313] netlink: 'syz.6.4550': attribute type 16 has an invalid length. [ 1054.808835][T28313] netlink: 'syz.6.4550': attribute type 17 has an invalid length. [ 1055.090402][T28313] bridge_slave_1: left allmulticast mode [ 1055.498456][T28313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1055.532938][T28313] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 1055.683351][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1056.564864][T28384] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4560'. [ 1056.744720][T28392] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4561'. [ 1056.744752][T28392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4561'. [ 1056.837485][T28412] netlink: 'syz.6.4562': attribute type 1 has an invalid length. [ 1057.158981][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4563'. [ 1057.172110][T28412] bond2: entered promiscuous mode [ 1057.172133][T28412] bond2: entered allmulticast mode [ 1057.175982][T28412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1057.249597][T28407] dummy0 speed is unknown, defaulting to 1000 [ 1057.249880][T28417] netlink: 284 bytes leftover after parsing attributes in process `syz.5.4563'. [ 1057.459670][T28427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1057.628823][T28432] openvswitch: netlink: Message has 8 unknown bytes. [ 1058.676822][T28461] syzkaller0: entered promiscuous mode [ 1058.677008][T28461] syzkaller0: entered allmulticast mode [ 1058.937829][T28471] veth1: Caught tx_queue_len zero misconfig [ 1059.557571][T28496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4581'. [ 1060.258692][T28519] netlink: 'syz.7.4584': attribute type 25 has an invalid length. [ 1060.268668][T28511] udevd[28511]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1060.288734][T28357] udevd[28357]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1060.379206][T28518] vxcan2: entered allmulticast mode [ 1060.638343][T28534] ip6t_frag: unknown flags 4 [ 1060.827305][T28530] netlink: 'syz.0.4588': attribute type 12 has an invalid length. [ 1060.827330][T28530] netlink: 'syz.0.4588': attribute type 29 has an invalid length. [ 1060.827346][T28530] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4588'. [ 1061.068428][T28537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4590'. [ 1061.431836][T28559] syzkaller1: entered promiscuous mode [ 1061.432018][T28559] syzkaller1: entered allmulticast mode [ 1061.614792][ T4932] Bluetooth: hci4: command 0x0406 tx timeout [ 1063.968710][T28542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.295117][T28595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1064.328332][T28596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1064.328360][T28596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1064.416609][T28596] netlink: 'syz.0.4604': attribute type 1 has an invalid length. [ 1064.422413][T28603] C: renamed from veth1_to_team (while UP) [ 1064.519429][T28603] netlink: 'syz.1.4605': attribute type 1 has an invalid length. [ 1064.519455][T28603] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4605'. [ 1064.519921][T28603] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1065.321142][T28624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1065.339301][T28624] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1065.527661][T28630] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1066.530356][T28634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.531117][T28634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.559302][T28634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.559433][T28634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.559738][T28634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.559916][T28634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.635150][T28634] team0: Port device bridge0 added [ 1067.374337][T28695] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4621'. [ 1067.400956][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4618'. [ 1067.542331][T28699] netlink: 'syz.6.4622': attribute type 1 has an invalid length. [ 1067.542355][T28699] netlink: 'syz.6.4622': attribute type 2 has an invalid length. [ 1067.840622][T28701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1067.863254][T28702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1067.989990][T28701] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1068.468333][T28720] openvswitch: netlink: Key type 354 is out of range max 32 [ 1068.513593][T28730] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4626'. [ 1068.852288][T28739] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4632'. [ 1068.901228][T28739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4632'. [ 1071.007089][T28777] dummy0 speed is unknown, defaulting to 1000 [ 1071.195521][T28722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1072.387959][T28804] __nla_validate_parse: 1 callbacks suppressed [ 1072.387980][T28804] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4649'. [ 1073.381390][T28825] xt_LOG: level 125 >= 8 [ 1073.635488][T28829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4657'. [ 1073.661993][T28829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4657'. [ 1073.679776][T28829] netlink: 'syz.0.4657': attribute type 1 has an invalid length. [ 1073.750666][T28835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4657'. [ 1073.878291][T28829] bond7: entered promiscuous mode [ 1073.878824][T28829] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1073.964178][T28845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4662'. [ 1074.824601][T28845] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1074.837275][T28842] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1075.578152][T28867] netlink: zone id is out of range [ 1075.578277][T28867] netlink: zone id is out of range [ 1075.578318][T28867] netlink: zone id is out of range [ 1075.578326][T28867] netlink: zone id is out of range [ 1075.578334][T28867] netlink: zone id is out of range [ 1075.578343][T28867] netlink: zone id is out of range [ 1075.578351][T28867] netlink: zone id is out of range [ 1075.578359][T28867] netlink: zone id is out of range [ 1075.578368][T28867] netlink: zone id is out of range [ 1075.776943][T28879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4667'. [ 1076.035201][T28885] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4668'. [ 1076.139844][T28884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4669'. [ 1076.217451][T28884] nbd: must specify at least one socket [ 1077.061386][T28911] tipc: Enabling of bearer rejected, failed to enable media [ 1077.368551][T28925] macsec0: entered promiscuous mode [ 1077.369718][T28925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4676'. [ 1077.391558][T28925] veth1_macvtap: left promiscuous mode [ 1077.524129][T28929] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4676'. [ 1077.596561][T28930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4676'. [ 1077.607013][T28925] macsec0 (unregistering): left promiscuous mode [ 1077.629661][T28930] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4676'. [ 1077.729799][T28931] syzkaller0: entered promiscuous mode [ 1077.729979][T28931] syzkaller0: entered allmulticast mode [ 1077.863799][T28935] netlink: 'syz.0.4678': attribute type 1 has an invalid length. [ 1079.048295][T28975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 1079.117391][T28971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4687'. [ 1080.115874][T29001] netlink: 'syz.1.4698': attribute type 5 has an invalid length. [ 1080.162706][T29001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 1080.264531][T29006] net_ratelimit: 72 callbacks suppressed [ 1080.264553][T29006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.365121][T29005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4700'. [ 1080.704096][T29018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4701'. [ 1080.784145][T27580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1080.785038][T27580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1080.785078][T27580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1080.793687][ T8596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1081.166907][T29030] netlink: 'syz.6.4708': attribute type 2 has an invalid length. [ 1081.179672][T29032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1081.600858][T29043] ip_tables: iptables: counters copy to user failed while replacing table [ 1081.604820][ T4932] Bluetooth: hci6: command 0x041b tx timeout [ 1084.213585][T29034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1084.540629][T29083] netlink: 324 bytes leftover after parsing attributes in process `syz.5.4722'. [ 1084.857416][T29093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4723'. [ 1084.866067][T29093] netlink: 'syz.1.4723': attribute type 12 has an invalid length. [ 1084.866088][T29093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4723'. [ 1085.312711][T29101] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 1086.157414][T29119] syzkaller0: entered promiscuous mode [ 1086.157439][T29119] syzkaller0: entered allmulticast mode [ 1086.259549][T29121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4730'. [ 1086.603676][T29134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4732'. [ 1086.988437][T29137] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4732'. [ 1087.206863][T25893] Bluetooth: hci2: command 0x0406 tx timeout [ 1087.228935][T29150] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4734'. [ 1087.301492][T29150] netlink: 'syz.5.4734': attribute type 13 has an invalid length. [ 1087.439877][T29163] netlink: 'syz.7.4737': attribute type 3 has an invalid length. [ 1087.439904][T29163] netlink: 'syz.7.4737': attribute type 1 has an invalid length. [ 1087.439918][T29163] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4737'. [ 1087.784003][T29169] syzkaller0: entered promiscuous mode [ 1087.784188][T29169] syzkaller0: entered allmulticast mode [ 1088.164119][T29182] netlink: 'syz.6.4744': attribute type 1 has an invalid length. [ 1088.354807][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4744'. [ 1090.243375][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1090.449054][T29202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4747'. [ 1090.579286][T29203] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4747'. [ 1090.595117][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4747'. [ 1096.987642][T29203] vlan3: entered allmulticast mode [ 1096.987675][T29203] dummy0: entered allmulticast mode [ 1097.215855][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4748'. [ 1097.317218][ T4932] Bluetooth: hci6: unexpected event 0x04 length: 19 > 10 [ 1097.317256][ T4932] Bluetooth: unknown link type 128 [ 1097.428434][T29224] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4748'. [ 1097.511186][T29209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4748'. [ 1097.549850][T29229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1098.356239][T29250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4759'. [ 1099.327289][T29286] openvswitch: netlink: ufid size 30 bytes exceeds the range (1, 16) [ 1099.327314][T29286] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1099.362874][ T4932] Bluetooth: hci6: command 0x041b tx timeout [ 1099.888222][T29296] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1099.890308][T29296] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 1100.892190][T29317] netlink: 'syz.7.4776': attribute type 1 has an invalid length. [ 1100.892212][T29317] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4776'. [ 1101.044778][T29319] netlink: 'syz.1.4777': attribute type 49 has an invalid length. [ 1101.921778][T29326] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4780'. [ 1102.023221][T29326] netlink: 'syz.7.4780': attribute type 21 has an invalid length. [ 1102.023247][T29326] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4780'. [ 1102.023327][T29326] netlink: 'syz.7.4780': attribute type 4 has an invalid length. [ 1102.023341][T29326] netlink: 'syz.7.4780': attribute type 5 has an invalid length. [ 1102.023354][T29326] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4780'. [ 1102.312193][T29334] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1102.400783][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4784'. [ 1102.600721][T29345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4784'. [ 1102.930659][T29347] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4785'. [ 1103.087892][T29338] geneve1: left promiscuous mode [ 1103.729404][T29359] netlink: 'syz.0.4789': attribute type 4 has an invalid length. [ 1103.761689][T29359] netlink: 'syz.0.4789': attribute type 4 has an invalid length. [ 1103.916902][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1104.138917][T29375] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4791'. [ 1104.159303][T29368] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4791'. [ 1104.736569][T29394] netlink: 'syz.1.4795': attribute type 8 has an invalid length. [ 1105.429504][T29417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1105.518803][T29412] netlink: zone id is out of range [ 1105.518846][T29412] netlink: zone id is out of range [ 1105.518958][T29412] netlink: zone id is out of range [ 1105.518996][T29412] netlink: zone id is out of range [ 1105.519005][T29412] netlink: zone id is out of range [ 1105.519020][T29412] netlink: zone id is out of range [ 1105.519028][T29412] netlink: zone id is out of range [ 1105.519036][T29412] netlink: zone id is out of range [ 1105.519044][T29412] netlink: zone id is out of range [ 1105.535598][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4800'. [ 1105.535629][T29417] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1105.863146][T29425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4802'. [ 1106.161097][T29431] netlink: 'syz.6.4805': attribute type 29 has an invalid length. [ 1106.325822][T29429] netlink: 'syz.1.4803': attribute type 1 has an invalid length. [ 1107.232382][T29460] SET target dimension over the limit! [ 1107.308676][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4814'. [ 1107.308701][T29466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4814'. [ 1107.308726][T29466] netlink: 'syz.7.4814': attribute type 11 has an invalid length. [ 1107.548082][T29465] syzkaller0: entered promiscuous mode [ 1107.548108][T29465] syzkaller0: entered allmulticast mode [ 1107.585890][T29465] syzkaller1: entered promiscuous mode [ 1107.585915][T29465] syzkaller1: entered allmulticast mode [ 1109.471008][T29524] __nla_validate_parse: 1 callbacks suppressed [ 1109.471030][T29524] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4828'. [ 1109.471049][T29524] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4828'. [ 1109.712738][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4830'. [ 1110.554768][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4833'. [ 1110.554793][T29544] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4833'. [ 1111.247028][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4835'. [ 1111.247150][T29562] bond0: Caught tx_queue_len zero misconfig [ 1111.746220][T29576] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1111.746247][T29576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1111.812709][T29581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1111.812732][T29581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1113.385815][T29612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.385998][T29612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.389804][T29612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.389983][T29612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.293802][T29624] netlink: 'syz.7.4856': attribute type 10 has an invalid length. [ 1114.454888][T29631] netlink: 'syz.7.4856': attribute type 10 has an invalid length. [ 1114.488309][T29624] team0 (unregistering): Port device team_slave_0 removed [ 1114.519369][T29624] team0 (unregistering): Port device team_slave_1 removed [ 1114.540674][T29624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.541023][T29624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.601139][T29624] team0 (unregistering): Port device bridge0 removed [ 1114.937112][T29614] __nla_validate_parse: 2 callbacks suppressed [ 1114.937135][T29614] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4852'. [ 1115.355334][T29645] batadv_slave_1: entered promiscuous mode [ 1115.355532][T29647] batadv_slave_1: left promiscuous mode [ 1115.401911][T29645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'. [ 1115.559953][T29654] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4859'. [ 1115.981308][T29665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4863'. [ 1116.001362][T29665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4863'. [ 1116.016719][T29665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4863'. [ 1116.105687][T29668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4865'. [ 1116.145049][T29668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4865'. [ 1116.212421][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880582a9c00: rx timeout, send abort [ 1116.231895][T29680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4863'. [ 1116.355941][T29682] netlink: 1096 bytes leftover after parsing attributes in process `syz.7.4866'. [ 1116.365551][T29682] net_ratelimit: 64 callbacks suppressed [ 1116.365569][T29682] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1116.712471][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880582a9c00: abort rx timeout. Force session deactivation [ 1116.712608][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880798bf400: rx timeout, send abort [ 1117.212638][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880798bf400: abort rx timeout. Force session deactivation [ 1118.650831][T29726] netlink: 'syz.7.4875': attribute type 8 has an invalid length. [ 1120.076531][T29748] __nla_validate_parse: 3 callbacks suppressed [ 1120.076554][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1120.076572][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1120.404662][T29738] bridge0: port 1(syz_tun) entered disabled state [ 1121.319069][T29760] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4884'. [ 1121.452639][T29738] v: left promiscuous mode [ 1122.397894][T29738] tipc: Resetting bearer [ 1122.594992][ T8596] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.595029][ T8596] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.595676][ T158] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.595833][ T158] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.595878][ T158] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.595903][ T158] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.595939][ T158] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.595963][ T158] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.743561][T27585] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1122.744448][T27585] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1122.744494][T27585] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1122.744530][T27585] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1123.025811][T29764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1123.118121][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1123.344469][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1123.747421][T29785] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1123.788396][T29785] bond3 (unregistering): Released all slaves [ 1124.003401][T29792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4891'. [ 1124.079813][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1124.153997][ T4932] Bluetooth: hci6: link tx timeout [ 1124.256899][T29788] vxcan3: entered promiscuous mode [ 1124.270587][T29792] bridge_slave_1: left allmulticast mode [ 1124.270616][T29792] bridge_slave_1: left promiscuous mode [ 1124.270852][T29792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.397551][T29792] bridge_slave_0: left allmulticast mode [ 1124.397582][T29792] bridge_slave_0: left promiscuous mode [ 1124.397819][T29792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.124721][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1125.125046][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1125.400162][T29830] bridge0: port 3(bond0) entered blocking state [ 1125.400559][T29830] bridge0: port 3(bond0) entered disabled state [ 1125.400924][T29830] bond0: entered allmulticast mode [ 1125.400941][T29830] bond_slave_0: entered allmulticast mode [ 1125.401279][T29830] ¬0Ù: entered allmulticast mode [ 1125.408013][T29830] bond0: entered promiscuous mode [ 1125.408034][T29830] bond_slave_0: entered promiscuous mode [ 1125.408805][T29830] ¬0Ù: entered promiscuous mode [ 1125.458613][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1126.380947][T29852] dvmrp8: entered allmulticast mode [ 1126.663855][T29866] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4904'. [ 1126.708544][T29869] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4905'. [ 1126.708568][T29869] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4905'. [ 1126.970407][T29874] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4907'. [ 1127.015378][T29884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4907'. [ 1127.389762][T29889] netlink: 'syz.0.4909': attribute type 1 has an invalid length. [ 1127.571729][T29896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4909'. [ 1127.613599][T29890] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4908'. [ 1127.672666][T29889] netlink: 'syz.0.4909': attribute type 12 has an invalid length. [ 1127.840226][T29891] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1127.851244][T29891] bond8: (slave bond9): making interface the new active one [ 1127.858606][T29891] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1127.874241][T29896] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1128.042454][T29911] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4911'. [ 1128.762181][T29946] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4915'. [ 1129.091131][T29955] veth0_to_bridge: entered promiscuous mode [ 1129.091335][T29955] macvtap1: entered allmulticast mode [ 1129.091350][T29955] veth0_to_bridge: entered allmulticast mode [ 1129.159913][T29955] veth0_to_bridge: left allmulticast mode [ 1129.159947][T29955] veth0_to_bridge: left promiscuous mode [ 1129.443841][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1129.724497][T29977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1130.129564][T29978] syzkaller0: entered promiscuous mode [ 1130.129591][T29978] syzkaller0: entered allmulticast mode [ 1130.130753][T10981] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1130.130836][T10981] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1130.130872][T10981] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1130.130906][T10981] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1130.199159][T29972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1131.048660][T30006] pim6reg: entered allmulticast mode [ 1131.858563][T30024] syzkaller0: entered promiscuous mode [ 1131.858589][T30024] syzkaller0: entered allmulticast mode [ 1132.345476][T30049] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4937'. [ 1132.428589][T30051] netlink: 'syz.1.4939': attribute type 1 has an invalid length. [ 1132.523605][T30053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.612065][T30051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1132.612643][T30058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.652239][ T4932] Bluetooth: hci2: unexpected cc 0x2003 length: 10 > 9 [ 1132.652293][ T4932] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1132.715525][T30053] bond3: (slave gretap4): making interface the new active one [ 1132.718770][T30053] bond3: (slave gretap4): Enslaving as an active interface with an up link [ 1132.936883][T30065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4941'. [ 1133.542168][T30076] netlink: 'syz.5.4946': attribute type 1 has an invalid length. [ 1133.542191][T30076] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.4946'. [ 1133.542209][T30076] netlink: 'syz.5.4946': attribute type 1 has an invalid length. [ 1133.542223][T30076] netlink: 2016 bytes leftover after parsing attributes in process `syz.5.4946'. [ 1133.567625][T30076] IPVS: length: 231 != 8 [ 1133.650089][T30077] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1133.731255][T30081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4946'. [ 1133.759764][T30079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4947'. [ 1134.083390][T30089] syzkaller0: entered promiscuous mode [ 1134.083565][T30089] syzkaller0: entered allmulticast mode [ 1134.783477][T30105] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4951'. [ 1134.783664][T30105] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4951'. [ 1134.783828][T30105] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4951'. [ 1134.784015][T30105] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4951'. [ 1137.006656][T30111] bridge0: port 3(bond0) entered blocking state [ 1137.006811][T30111] bridge0: port 3(bond0) entered forwarding state [ 1137.010320][T30111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.020868][T30111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.006330][T30111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.008609][T30111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.012001][T30111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.017946][T30111] veth1_vlan: left promiscuous mode [ 1138.019040][T30111] veth0_vlan: left promiscuous mode [ 1138.022457][T30111] veth0_vlan: entered promiscuous mode [ 1138.032038][T30111] veth1_vlan: entered promiscuous mode [ 1138.049338][T30111] geneve0: left promiscuous mode [ 1138.079881][T30111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1138.085821][T30111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1138.089160][T30111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1138.091855][T30111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1138.092542][T30111] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1138.114212][T27584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.114334][T27584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.118434][T27584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.118546][T27584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.205163][T30123] __nla_validate_parse: 61 callbacks suppressed [ 1138.205188][T30123] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4953'. [ 1138.214561][T27584] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1138.214610][T27584] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1138.214645][T27584] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1138.214680][T27584] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1138.266957][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1139.254733][T30169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4968'. [ 1139.298750][T30155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.642927][T30174] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1139.765964][T30175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1140.130655][T30177] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4967'. [ 1140.138907][T30173] syzkaller0: left promiscuous mode [ 1140.138932][T30173] syzkaller0: left allmulticast mode [ 1140.316404][T30164] syzkaller1: entered promiscuous mode [ 1140.316576][T30164] syzkaller1: entered allmulticast mode [ 1141.298313][T30208] netlink: 'syz.7.4977': attribute type 11 has an invalid length. [ 1141.360334][T30207] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 1141.899080][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4981'. [ 1141.923307][T30223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4981'. [ 1141.976605][T30227] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1142.035996][T30231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4983'. [ 1142.054438][T30227] veth0_to_bridge: entered promiscuous mode [ 1142.054672][T30227] macvtap1: entered allmulticast mode [ 1142.054688][T30227] veth0_to_bridge: entered allmulticast mode [ 1142.062378][T30231] netlink: 'syz.5.4983': attribute type 1 has an invalid length. [ 1142.170854][T30227] veth0_to_bridge: left allmulticast mode [ 1142.170888][T30227] veth0_to_bridge: left promiscuous mode [ 1142.391514][T30240] block nbd2: server does not support multiple connections per device. [ 1142.392035][T30240] block nbd2: shutting down sockets [ 1142.521989][T30231] bond1: entered promiscuous mode [ 1142.525755][T30231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1143.107451][T30255] ip_tables: iptables: counters copy to user failed while replacing table [ 1143.132574][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.132613][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.133529][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.133563][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.133587][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134477][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134506][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134532][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134557][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134740][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134768][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134794][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134826][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134852][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134877][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.134913][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135368][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135400][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135426][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135451][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135477][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135502][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135525][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135698][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135725][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135751][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135776][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135802][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135835][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.135859][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136045][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136074][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136099][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136124][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136151][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136176][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136373][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136400][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136427][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136452][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136477][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136503][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.136528][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.141153][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.141187][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.141213][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.141238][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.141264][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.141290][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.141313][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.213990][T30253] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 1143.214836][T30253] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 1143.214865][T30253] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 1143.214888][T30253] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 1143.214911][T30253] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 1143.214933][T30253] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 1143.220090][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220129][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220154][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220179][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220202][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220226][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220250][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220274][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220298][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220321][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220345][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220369][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220393][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220417][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1143.220441][T30249] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:20000 [ 1144.195021][T30287] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4997'. [ 1144.225402][T30292] x_tables: duplicate entry at hook 1 [ 1144.504006][T30298] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4996'. [ 1144.504838][T30298] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4996'. [ 1144.859188][T30310] netlink: 'syz.1.4999': attribute type 4 has an invalid length. [ 1146.458972][T30328] netlink: 'syz.0.5003': attribute type 1 has an invalid length. [ 1146.458997][T30328] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5003'. [ 1146.628007][T30331] netlink: 'syz.1.5005': attribute type 4 has an invalid length. [ 1146.651047][T30331] netlink: 'syz.1.5005': attribute type 4 has an invalid length. [ 1147.510220][T30357] bond2: option fail_over_mac: invalid value (127) [ 1147.525751][T30357] bond2 (unregistering): Released all slaves [ 1147.574584][T30364] netlink: Unknown conntrack attr (type=13062, max=9) [ 1147.574624][T30364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1147.762526][T30360] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1148.069006][T30364] syzkaller1: entered promiscuous mode [ 1148.069032][T30364] syzkaller1: entered allmulticast mode [ 1148.760542][T30389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1149.078672][T30411] netlink: 'syz.0.5019': attribute type 1 has an invalid length. [ 1149.078727][T30411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1150.039358][T30429] tc_dump_action: action bad kind [ 1150.932447][T30438] veth1_macvtap: entered promiscuous mode [ 1150.932579][T30438] macsec0: entered promiscuous mode [ 1151.642273][T30475] hsr0: entered promiscuous mode [ 1153.341427][T30492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1153.399662][T30493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1153.458211][T30494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1153.615094][T30497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1154.829130][T30470] hsr0: left promiscuous mode [ 1155.052662][T30502] bond2: entered allmulticast mode [ 1155.054230][T30502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1155.292434][T30523] ip_tables: iptables: counters copy to user failed while replacing table [ 1155.523947][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1155.867229][T30539] netlink: 'syz.1.5052': attribute type 1 has an invalid length. [ 1155.867348][T30539] netlink: 'syz.1.5052': attribute type 1 has an invalid length. [ 1155.867446][T30539] netlink: 'syz.1.5052': attribute type 1 has an invalid length. [ 1156.225902][T30544] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1156.736250][T30550] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5054'. [ 1157.134442][T30557] netlink: 'syz.0.5055': attribute type 2 has an invalid length. [ 1157.274570][T30560] xt_hashlimit: size too large, truncated to 1048576 [ 1157.317940][T30556] ip_tables: iptables: counters copy to user failed while replacing table [ 1157.711382][T30570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5058'. [ 1158.102682][T30580] netlink: NAT attribute has 1 unknown bytes [ 1158.103634][T30580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.131028][T30585] netlink: ct family unspecified [ 1158.131062][T30585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.499342][T30600] ip_tables: iptables: counters copy to user failed while replacing table [ 1158.505043][T30601] ip_tables: iptables: counters copy to user failed while replacing table [ 1158.646962][T30604] netlink: 'syz.1.5067': attribute type 1 has an invalid length. [ 1158.646986][T30604] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5067'. [ 1158.769643][T30610] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1158.938005][T30613] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5068'. [ 1158.972063][T30613] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5068'. [ 1158.973343][T30614] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5068'. [ 1159.492595][T30627] netlink: 'syz.5.5069': attribute type 1 has an invalid length. [ 1160.045585][T30632] bond3: option arp_validate: invalid value (1048579) [ 1160.081509][T30632] bond3 (unregistering): Released all slaves [ 1160.215938][T30661] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1160.237709][T30662] netlink: 'syz.1.5074': attribute type 4 has an invalid length. [ 1160.237732][T30662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5074'. [ 1160.394087][T30665] net_ratelimit: 2 callbacks suppressed [ 1160.394108][T30665] ip_tables: iptables: counters copy to user failed while replacing table [ 1160.476170][T30631] bond3: option arp_validate: invalid value (1048579) [ 1160.481613][T30631] bond3 (unregistering): Released all slaves [ 1160.556317][T30643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5072'. [ 1160.995799][T30662] tipc: Enabled bearer , priority 26 [ 1161.785769][T30697] macsec0: entered allmulticast mode [ 1161.785802][T30697] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1161.786214][T30697] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 1161.854775][T30697] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1161.922992][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1162.378221][T30714] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5087'. [ 1163.805309][T30751] sctp: [Deprecated]: syz.6.5096 (pid 30751) Use of int in maxseg socket option. [ 1163.805309][T30751] Use struct sctp_assoc_value instead [ 1163.839401][T30751] netlink: 'syz.6.5096': attribute type 39 has an invalid length. [ 1164.016460][T30756] xt_socket: unknown flags 0x4c [ 1164.019790][T30747] xt_socket: unknown flags 0x4c [ 1164.042168][T30760] xt_hashlimit: size too large, truncated to 1048576 [ 1164.226442][T30764] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5096'. [ 1164.745075][T30778] team0: entered allmulticast mode [ 1164.745100][T30778] team_slave_0: entered allmulticast mode [ 1164.745387][T30778] team_slave_1: entered allmulticast mode [ 1164.883445][T30778] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1165.095397][T30788] ip6t_hbh: Not strict - not implemented [ 1165.114327][T30790] netlink: 'syz.7.5104': attribute type 10 has an invalid length. [ 1165.120981][T30790] netlink: 'syz.7.5104': attribute type 10 has an invalid length. [ 1165.197187][T30785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5105'. [ 1165.351625][T30794] netlink: 'syz.5.5106': attribute type 1 has an invalid length. [ 1166.070730][T30812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5110'. [ 1167.181346][T30842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5117'. [ 1167.798984][T30863] lo: entered allmulticast mode [ 1167.900703][T30864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5123'. [ 1168.164950][T30878] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:21 [ 1168.188181][T30878] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5126'. [ 1168.204979][T30880] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1168.306888][T30873] IPVS: stopping master sync thread 30880 ... [ 1168.331187][T30885] netlink: 'syz.7.5128': attribute type 1 has an invalid length. [ 1168.514681][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5128'. [ 1168.753372][T30885] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1168.819445][T30885] bond3 (unregistering): Released all slaves [ 1168.936837][T30901] netlink: 'syz.0.5131': attribute type 13 has an invalid length. [ 1169.388170][T30915] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1170.362294][T30940] openvswitch: netlink: Missing valid actions attribute. [ 1170.362338][T30940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.376010][T30940] netlink: 'syz.1.5139': attribute type 2 has an invalid length. [ 1171.630349][T30980] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5148'. [ 1171.655792][T30980] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5148'. [ 1171.718526][T30983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1171.791178][T30987] 8021q: VLANs not supported on ip6gre0 [ 1171.927721][T30980] dummy0 speed is unknown, defaulting to 1000 [ 1172.292793][T30971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.814182][T31011] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5154'. [ 1173.054886][T31013] nbd2: detected capacity change from 0 to 63 [ 1173.405208][ T158] IPVS: starting estimator thread 0... [ 1173.472306][T31031] netlink: 'syz.1.5158': attribute type 23 has an invalid length. [ 1173.494424][T31033] IPVS: using max 33 ests per chain, 79200 per kthread [ 1173.562636][T31031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5158'. [ 1173.584999][ T4932] block nbd2: Receive control failed (result -104) [ 1174.064401][T31043] netlink: 'syz.6.5162': attribute type 4 has an invalid length. [ 1174.290187][T31051] netlink: 'syz.5.5163': attribute type 1 has an invalid length. [ 1174.386343][T31051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1174.549354][T31053] batman_adv: batadv0: Removing interface: macvlan2 [ 1174.879457][T31054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1174.880620][T31054] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 1174.894135][T31054] bond3: (slave gre1): Error -95 calling set_mac_address [ 1175.152064][T31051] gretap1: entered promiscuous mode [ 1175.239389][T31065] bond3 (unregistering): Released all slaves [ 1175.470214][T31081] batman_adv: batadv0: Adding interface: syzkaller0 [ 1175.470235][T31081] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.470434][T31081] batman_adv: batadv0: Interface activated: syzkaller0 [ 1175.568622][T31083] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5165'. [ 1175.596469][T31070] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1175.755561][T31100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1175.762490][T31100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1175.909467][T31104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1176.069857][T31070] batman_adv: batadv0: Removing interface: syzkaller0 [ 1176.609943][T31118] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5175'. [ 1177.536542][T31126] erspan1: entered promiscuous mode [ 1177.912096][T31129] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1177.932705][T31129] team0: Port device bond10 added [ 1180.159278][T31162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5186'. [ 1180.255558][T31166] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5189'. [ 1180.597434][T31162] netlink: 'syz.5.5186': attribute type 1 has an invalid length. [ 1180.597459][T31162] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5186'. [ 1180.842347][T31186] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20001 [ 1180.923556][T31191] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5191'. [ 1181.194323][T31174] erspan0: entered promiscuous mode [ 1181.197372][T31174] vlan0: entered promiscuous mode [ 1182.074505][T31207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1182.191571][T31213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5199'. [ 1182.201618][T31213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5199'. [ 1182.337305][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5199'. [ 1182.454762][T31227] netlink: 'syz.0.5202': attribute type 2 has an invalid length. [ 1182.511104][T31227] netlink: 'syz.0.5202': attribute type 2 has an invalid length. [ 1182.511128][T31227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1182.827194][T31244] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5203'. [ 1183.167626][T31251] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5206'. [ 1183.167653][T31251] openvswitch: netlink: Flow actions attr not present in new flow. [ 1183.349583][T31247] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1183.873493][T31247] bond11 (unregistering): Released all slaves [ 1183.973620][T31251] batadv_slave_0: entered promiscuous mode [ 1183.981918][T31254] batadv_slave_0: left promiscuous mode [ 1184.922122][T31308] netlink: 'syz.6.5216': attribute type 1 has an invalid length. [ 1185.108559][T31319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5218'. [ 1185.763677][ T4932] Bluetooth: hci6: command 0x041b tx timeout [ 1186.038412][T31342] netlink: 'syz.1.5221': attribute type 12 has an invalid length. [ 1186.808062][T31359] xt_recent: hitcount (2147483650) is larger than allowed maximum (65535) [ 1187.299221][T31378] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1187.299689][T31378] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1188.175982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.444825][T31408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5234'. [ 1188.671770][T31419] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5235'. [ 1188.691503][T31416] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.5236'. [ 1188.691895][T31421] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.5236'. [ 1188.696931][T31416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5236'. [ 1191.405833][T31506] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5247'. [ 1192.707654][T31532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5251'. [ 1192.707681][T31532] openvswitch: netlink: Flow key attr not present in new flow. [ 1192.850663][T31534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5252'. [ 1193.167817][T31454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1193.499001][T31540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5254'. [ 1193.579529][ T4932] Bluetooth: hci6: link tx timeout [ 1193.579549][ T4932] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1193.597503][ T4932] Bluetooth: hci6: link tx timeout [ 1193.876609][T31550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5257'. [ 1193.905347][T31544] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5256'. [ 1194.185095][T31555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1194.424089][T31560] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1195.461029][T31597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1195.607706][ T4932] Bluetooth: hci6: command 0x041b tx timeout [ 1195.888946][T31606] netlink: 'syz.1.5271': attribute type 1 has an invalid length. [ 1195.888969][T31606] netlink: 'syz.1.5271': attribute type 4 has an invalid length. [ 1195.888981][T31606] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5271'. [ 1196.469026][T31620] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5274'. [ 1197.058488][T31645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5280'. [ 1197.153125][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5280'. [ 1198.148354][T31680] netlink: 'syz.5.5285': attribute type 3 has an invalid length. [ 1198.148388][T31680] netlink: 'syz.5.5285': attribute type 2 has an invalid length. [ 1198.473013][T31686] Unsupported ieee802154 address type: 0 [ 1198.473327][T31686] Unsupported ieee802154 address type: 0 [ 1198.473646][T31686] Unsupported ieee802154 address type: 0 [ 1198.473977][T31686] Unsupported ieee802154 address type: 0 [ 1198.474320][T31686] Unsupported ieee802154 address type: 0 [ 1198.474634][T31686] Unsupported ieee802154 address type: 0 [ 1198.474866][T31686] Unsupported ieee802154 address type: 0 [ 1198.475193][T31686] Unsupported ieee802154 address type: 0 [ 1198.475516][T31686] Unsupported ieee802154 address type: 0 [ 1198.475825][T31686] Unsupported ieee802154 address type: 0 [ 1198.476150][T31686] Unsupported ieee802154 address type: 0 [ 1198.476478][T31686] Unsupported ieee802154 address type: 0 [ 1198.476804][T31686] Unsupported ieee802154 address type: 0 [ 1198.477132][T31686] Unsupported ieee802154 address type: 0 [ 1198.477450][T31686] Unsupported ieee802154 address type: 0 [ 1198.477767][T31686] Unsupported ieee802154 address type: 0 [ 1198.478094][T31686] Unsupported ieee802154 address type: 0 [ 1198.478417][T31686] Unsupported ieee802154 address type: 0 [ 1198.478740][T31686] Unsupported ieee802154 address type: 0 [ 1198.479061][T31686] Unsupported ieee802154 address type: 0 [ 1198.479383][T31686] Unsupported ieee802154 address type: 0 [ 1198.479691][T31686] Unsupported ieee802154 address type: 0 [ 1198.480007][T31686] Unsupported ieee802154 address type: 0 [ 1198.480339][T31686] Unsupported ieee802154 address type: 0 [ 1198.480650][T31686] Unsupported ieee802154 address type: 0 [ 1198.480976][T31686] Unsupported ieee802154 address type: 0 [ 1198.481326][T31686] Unsupported ieee802154 address type: 0 [ 1198.481658][T31686] Unsupported ieee802154 address type: 0 [ 1198.514041][T31686] Unsupported ieee802154 address type: 0 [ 1198.514378][T31686] Unsupported ieee802154 address type: 0 [ 1198.514691][T31686] Unsupported ieee802154 address type: 0 [ 1198.515007][T31686] Unsupported ieee802154 address type: 0 [ 1198.515321][T31686] Unsupported ieee802154 address type: 0 [ 1198.984599][T31696] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5287'. [ 1199.124074][T31699] openvswitch: netlink: Missing valid actions attribute. [ 1199.124120][T31699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.125062][T31699] openvswitch: netlink: Missing valid actions attribute. [ 1199.125104][T31699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.132422][T31699] openvswitch: netlink: Missing valid actions attribute. [ 1199.132458][T31699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.150168][T31699] openvswitch: netlink: Missing valid actions attribute. [ 1199.212402][T31699] net_ratelimit: 11 callbacks suppressed [ 1199.212424][T31699] openvswitch: netlink: Missing valid actions attribute. [ 1199.212459][T31699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.306236][T31703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5289'. [ 1199.323218][T31706] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5289'. [ 1199.620478][T31715] tipc: Started in network mode [ 1199.620726][T31715] tipc: Node identity c28f634cf021, cluster identity 4711 [ 1199.652011][T31715] tipc: Enabled bearer , priority 0 [ 1200.123579][T31723] syzkaller1: entered promiscuous mode [ 1200.123765][T31723] syzkaller1: entered allmulticast mode [ 1200.362154][T31741] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1200.373762][T31745] netlink: 'syz.5.5298': attribute type 1 has an invalid length. [ 1200.383821][T31744] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1200.416723][T31738] syzkaller0: entered promiscuous mode [ 1200.416910][T31738] syzkaller0: entered allmulticast mode [ 1200.930291][T31740] syzkaller1: entered promiscuous mode [ 1200.930316][T31740] syzkaller1: entered allmulticast mode [ 1200.944439][T31748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5299'. [ 1200.969452][T26231] tipc: Node number set to 850289484 [ 1201.112107][T31763] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5301'. [ 1201.240309][T31766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5301'. [ 1201.810403][T31780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5305'. [ 1201.939885][T31782] xt_policy: output policy not valid in PREROUTING and INPUT [ 1202.039812][T31796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5305'. [ 1203.393361][T31833] netlink: 'syz.7.5316': attribute type 1 has an invalid length. [ 1203.508689][T31837] xt_HMARK: proto mask must be zero with L3 mode [ 1203.538467][ T2011] block nbd2: Possible stuck request ffff888027a75080: control (read@0,4096B). Runtime 30 seconds [ 1207.101730][T31847] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1207.912536][T31894] netlink: 'syz.5.5328': attribute type 1 has an invalid length. [ 1208.016213][T31897] __nla_validate_parse: 68 callbacks suppressed [ 1208.016236][T31897] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5329'. [ 1208.120132][T31907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5331'. [ 1209.062466][T31929] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5336'. [ 1209.110177][T31929] netlink: 'syz.0.5336': attribute type 1 has an invalid length. [ 1209.110199][T31929] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5336'. [ 1210.099240][T31963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5342'. [ 1210.505287][T31982] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1211.058569][T32000] bond0: option miimon: invalid value (18446744073709551614) [ 1211.058598][T32000] bond0: option miimon: allowed values 0 - 2147483647 [ 1211.368640][ T8596] IPVS: starting estimator thread 0... [ 1211.453612][T32012] IPVS: using max 27 ests per chain, 64800 per kthread [ 1211.734832][T32028] Cannot find add_set index 0 as target [ 1212.009133][T32038] : renamed from bridge_slave_1 (while UP) [ 1214.873853][T32049] netlink: 988 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1215.172521][T32062] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5360'. [ 1215.190860][T32053] syzkaller0: entered promiscuous mode [ 1215.190885][T32053] syzkaller0: entered allmulticast mode [ 1215.245211][T32065] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5362'. [ 1215.349679][T32071] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5362'. [ 1215.700538][T32081] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5366'. [ 1215.700722][T32081] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5366'. [ 1215.747911][T32083] netlink: 'syz.1.5364': attribute type 10 has an invalid length. [ 1215.747932][T32083] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5364'. [ 1215.756480][T32084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5366'. [ 1215.947015][T32086] netlink: 136 bytes leftover after parsing attributes in process `syz.7.5366'. [ 1215.961850][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5366'. [ 1216.066926][T32089] netlink: 'syz.7.5366': attribute type 10 has an invalid length. [ 1216.233353][ T31] audit: type=1804 audit(1791071355.562:21): pid=32092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5369" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1168 res=1 errno=0 [ 1216.233515][ T31] audit: type=1800 audit(1791071355.562:22): pid=32092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5369" name="cgroup.controllers" dev="tmpfs" ino=1168 res=0 errno=0 [ 1216.397964][T32090] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1225.861877][T32083] team0: Port device wg2 added [ 1225.934324][T32101] bond0: (slave bond_slave_0): Releasing backup interface [ 1226.050080][T32101] bond0: (slave bond_slave_1): Releasing backup interface [ 1226.086030][T32101] team_slave_0: left allmulticast mode [ 1226.107888][T32101] team0: Port device team_slave_0 removed [ 1226.115458][T32101] team_slave_1: left allmulticast mode [ 1226.147118][T32101] team0: Port device team_slave_1 removed [ 1226.167929][T32101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1226.426017][T32113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5374'. [ 1226.558099][T32119] xt_bpf: check failed: parse error [ 1226.709637][T32119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1226.726130][T32119] bridge0: port 1(bond4) entered blocking state [ 1226.726242][T32119] bridge0: port 1(bond4) entered disabled state [ 1226.757708][T32119] bond4: entered allmulticast mode [ 1226.775595][T32119] bond4: entered promiscuous mode [ 1226.805757][T32119] bridge0: port 1(bond4) entered blocking state [ 1226.805876][T32119] bridge0: port 1(bond4) entered forwarding state [ 1226.874842][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5377'. [ 1227.156845][ T8605] bridge0: port 1(bond4) entered disabled state [ 1227.307704][T32138] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 1227.631348][T32138] bond4: option mode: invalid value (7) [ 1227.649368][T32138] bond4 (unregistering): Released all slaves [ 1228.226104][T32159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5386'. [ 1228.449617][T32159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5386'. [ 1228.821055][T32171] netlink: 'syz.7.5389': attribute type 7 has an invalid length. [ 1229.021334][T32175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5390'. [ 1229.059774][T32175] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5390'. [ 1229.196860][T32181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5391'. [ 1229.217144][T32179] tipc: Enabling of bearer rejected, already enabled [ 1229.219760][T32179] syzkaller0: entered promiscuous mode [ 1229.219781][T32179] syzkaller0: entered allmulticast mode [ 1229.600198][T32199] pim6reg: entered allmulticast mode [ 1229.808913][T32201] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1230.159274][T32209] netlink: 'syz.6.5398': attribute type 1 has an invalid length. [ 1230.468091][T32198] pim6reg: left allmulticast mode [ 1231.618249][T32247] netlink: 'syz.0.5407': attribute type 1 has an invalid length. [ 1231.620242][T32233] bridge0: port 1(syz_tun) entered blocking state [ 1231.620364][T32233] bridge0: port 1(syz_tun) entered forwarding state [ 1231.662407][T32233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.870779][T32233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1231.870808][T32233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1231.905746][T32233] veth1_vlan: left promiscuous mode [ 1231.910640][T32233] v: entered promiscuous mode [ 1231.930430][T32233] veth1_vlan: entered promiscuous mode [ 1231.984511][T32233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1231.999962][T32233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1232.029405][T32233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1232.049402][T32233] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1232.423529][T10967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.423582][T10967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.423621][T10967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.667763][T32248] veth1: entered allmulticast mode [ 1232.805238][T10981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.316605][T32275] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1233.367366][T32276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5412'. [ 1233.609276][ T2011] block nbd2: Possible stuck request ffff888027a75080: control (read@0,4096B). Runtime 60 seconds [ 1233.922414][T32287] xt_CT: No such helper "snmp" [ 1235.358636][T32354] bridge_slave_0: left allmulticast mode [ 1235.358665][T32354] bridge_slave_0: left promiscuous mode [ 1235.358870][T32354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.423513][ T4982] udevd[4982]: worker [30853] /devices/virtual/block/nbd2 is taking a long time [ 1235.427906][T32354] bridge_slave_1: left allmulticast mode [ 1235.427929][T32354] bridge_slave_1: left promiscuous mode [ 1235.428135][T32354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.532123][T32354] bond0: (slave bond_slave_0): Releasing backup interface [ 1235.644238][T32354] bond0: (slave bond_slave_1): Releasing backup interface [ 1235.670804][T32354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1235.670831][T32354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.721845][T32354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1235.721871][T32354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.742014][T32354] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1235.928570][T32369] netlink: 'syz.0.5425': attribute type 1 has an invalid length. [ 1236.166905][T32377] netlink: 'syz.0.5425': attribute type 10 has an invalid length. [ 1236.166932][T32377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5425'. [ 1236.322460][T32379] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 1236.566249][T32372] dummy0 speed is unknown, defaulting to 1000 [ 1236.740762][T32392] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1236.896821][T32397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5431'. [ 1238.137904][T32417] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5435'. [ 1238.215191][T32416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5436'. [ 1238.215485][T32416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5436'. [ 1238.523795][T32428] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5438'. [ 1238.780911][T32422] can: request_module (can-proto-0) failed. [ 1239.092591][T32446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 1239.652560][T32457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1240.501731][T32481] can: request_module (can-proto-0) failed. [ 1240.511366][T32481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5448'. [ 1240.631801][T32501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5455'. [ 1241.037357][T32502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1241.412387][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5456'. [ 1242.000486][T32539] dummy0 speed is unknown, defaulting to 1000 [ 1242.071728][T32542] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5464'. [ 1242.612457][T32557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5467'. [ 1242.612498][T32557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5467'. [ 1242.710031][T32555] openvswitch: netlink: Actions may not be safe on all matching packets [ 1244.237609][T32583] dummy0 speed is unknown, defaulting to 1000 [ 1245.343097][T32583] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5475'. [ 1245.348446][T32612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.385727][T32583] netlink: 'syz.0.5475': attribute type 16 has an invalid length. [ 1245.385751][T32583] netlink: 'syz.0.5475': attribute type 17 has an invalid length. [ 1245.425825][T32617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.496339][T32583] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1246.083053][ T4932] Bluetooth: hci6: command 0x041b tx timeout [ 1246.084311][T32622] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1247.249979][T32654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5491'. [ 1249.244128][T32627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1249.936650][T32677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5492'. [ 1250.081878][T32671] syz.5.5493 (32671) used obsolete PPPIOCDETACH ioctl [ 1251.168302][T32702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5498'. [ 1251.303595][T32709] IPv6: NLM_F_CREATE should be specified when creating new route [ 1251.303856][T32709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1251.303871][T32709] IPv6: NLM_F_CREATE should be set when creating new route [ 1251.517523][T32715] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1251.740664][T32722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1251.770826][T32726] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1252.124107][T32735] ip_tables: iptables: counters copy to user failed while replacing table [ 1252.134120][T32736] ip_tables: iptables: counters copy to user failed while replacing table [ 1252.591916][T32745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5509'. [ 1252.668306][T32745] syzkaller1: entered promiscuous mode [ 1252.668329][T32745] syzkaller1: entered allmulticast mode [ 1252.779723][T32747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5509'. [ 1252.804841][T32753] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5511'. [ 1253.172330][ T302] netlink: 'syz.0.5512': attribute type 11 has an invalid length. [ 1254.145287][ T324] batman_adv: batadv0: Adding interface: syzkaller0 [ 1254.145309][ T324] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.145343][ T324] batman_adv: batadv0: Interface activated: syzkaller0 [ 1254.597258][ T322] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1254.754253][ T322] batman_adv: batadv0: Removing interface: syzkaller0 [ 1254.857601][ T336] ip6gre1: entered promiscuous mode [ 1254.857656][ T336] ip6gre1: entered allmulticast mode [ 1255.210124][ T332] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1255.599467][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5528'. [ 1256.093272][ T393] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5533'. [ 1256.093305][ T393] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5533'. [ 1257.309628][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5540'. [ 1257.371041][ T434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5540'. [ 1259.394044][ T399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1260.315122][ T413] tipc: Resetting bearer [ 1260.530688][ T484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1260.777784][ T8596] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1260.777821][ T8596] netdevsim netdevsim5 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1260.777853][ T8596] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.777888][ T8596] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1260.777912][ T8596] netdevsim netdevsim5 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1260.777937][ T8596] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.777996][ T8596] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1260.778022][ T8596] netdevsim netdevsim5 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1260.778047][ T8596] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.778079][ T8596] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1260.778104][ T8596] netdevsim netdevsim5 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1260.778128][ T8596] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.241857][ T488] dummy0 speed is unknown, defaulting to 1000 [ 1261.382653][ T503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1261.514092][ T506] žÿ: renamed from team_slave_1 [ 1261.572217][ T503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1261.650668][ T504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1261.749357][ T510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1262.087920][ T518] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5553'. [ 1262.190299][ T488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5547'. [ 1262.380281][ T518] ip_tables: iptables: counters copy to user failed while replacing table [ 1262.708490][ T537] sctp: [Deprecated]: syz.1.5559 (pid 537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1262.708490][ T537] Use struct sctp_sack_info instead [ 1262.770908][ T536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1262.778631][ T539] syz_tun: entered allmulticast mode [ 1263.097182][ T546] FAULT_INJECTION: forcing a failure. [ 1263.097182][ T546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.097216][ T546] CPU: 1 UID: 0 PID: 546 Comm: syz.7.5560 Not tainted syzkaller #0 PREEMPT(full) [ 1263.097249][ T546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1263.097266][ T546] Call Trace: [ 1263.097274][ T546] [ 1263.097281][ T546] dump_stack_lvl+0xe8/0x150 [ 1263.097312][ T546] should_fail_ex+0x410/0x560 [ 1263.097340][ T546] _copy_from_user+0x2d/0xb0 [ 1263.097368][ T546] sk_setsockopt+0x2b5/0x2f20 [ 1263.097399][ T546] ? __pfx_sk_setsockopt+0x10/0x10 [ 1263.097422][ T546] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 1263.097447][ T546] ? sb_end_write+0xe8/0x190 [ 1263.097469][ T546] ? vfs_write+0x9ce/0xba0 [ 1263.097501][ T546] ? __pfx_vfs_write+0x10/0x10 [ 1263.097528][ T546] ? do_sys_openat2+0x14e/0x200 [ 1263.097546][ T546] ? kmem_cache_free+0x182/0x650 [ 1263.097569][ T546] unix_setsockopt+0x15f/0x340 [ 1263.097739][ T546] ? __pfx_unix_setsockopt+0x10/0x10 [ 1263.097769][ T546] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1263.097793][ T546] ? __pfx_unix_setsockopt+0x10/0x10 [ 1263.097819][ T546] do_sock_setsockopt+0x17c/0x1b0 [ 1263.097846][ T546] __x64_sys_setsockopt+0x13d/0x1b0 [ 1263.097873][ T546] do_syscall_64+0x166/0x520 [ 1263.097898][ T546] ? trace_irq_disable+0x3b/0x140 [ 1263.097916][ T546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.097935][ T546] ? clear_bhb_loop+0x70/0xc0 [ 1263.097956][ T546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.097973][ T546] RIP: 0033:0x7f1cd279e159 [ 1263.097991][ T546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.098006][ T546] RSP: 002b:00007f1cd3610028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1263.098026][ T546] RAX: ffffffffffffffda RBX: 00007f1cd2a25fa0 RCX: 00007f1cd279e159 [ 1263.098038][ T546] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000003 [ 1263.098049][ T546] RBP: 00007f1cd3610090 R08: 000000000000003b R09: 0000000000000000 [ 1263.098059][ T546] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1263.098071][ T546] R13: 00007f1cd2a26038 R14: 00007f1cd2a25fa0 R15: 00007ffca16f4448 [ 1263.098100][ T546] [ 1263.557409][ T523] syz_tun: left allmulticast mode [ 1263.691312][ T2011] block nbd2: Possible stuck request ffff888027a75080: control (read@0,4096B). Runtime 90 seconds [ 1264.136292][ T576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5564'. [ 1264.178231][ T578] netlink: 15672 bytes leftover after parsing attributes in process `syz.5.5565'. [ 1264.178262][ T578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5565'. [ 1264.178280][ T578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5565'. [ 1264.178296][ T578] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5565'. [ 1266.079604][ T609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5574'. [ 1266.116333][ T607] dummy0: entered allmulticast mode [ 1266.160784][ T611] netlink: 'syz.0.5573': attribute type 16 has an invalid length. [ 1266.160808][ T611] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5573'. [ 1266.519272][ T629] netlink: 15672 bytes leftover after parsing attributes in process `syz.6.5577'. [ 1266.519301][ T629] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5577'. [ 1266.519321][ T629] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5577'. [ 1266.777565][ T7718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1266.918811][ T638] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1266.952379][ T638] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1266.962706][ T638] bond0 (unregistering): Released all slaves [ 1267.688146][T10967] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1267.844148][ T7718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1268.724014][T32024] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1268.724265][T32024] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1268.786146][ T675] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1269.180320][ T714] dummy0 speed is unknown, defaulting to 1000 [ 1269.364934][ T720] __nla_validate_parse: 5 callbacks suppressed [ 1269.364955][ T720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5601'. [ 1269.421578][ T721] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5602'. [ 1269.592796][ T716] dummy0 speed is unknown, defaulting to 1000 [ 1269.683842][ T7718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1270.930231][ T757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1270.947219][ T757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1270.950341][ T757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1270.951304][ T757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1270.966082][ T760] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5609'. [ 1270.988667][ T757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1271.417431][ T769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5612'. [ 1271.519413][ T770] IPv6: NLM_F_CREATE should be specified when creating new route [ 1271.519504][ T770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1271.519516][ T770] IPv6: NLM_F_CREATE should be set when creating new route [ 1271.519553][ T770] IPv6: NLM_F_CREATE should be set when creating new route [ 1271.519583][ T770] IPv6: NLM_F_CREATE should be set when creating new route [ 1271.569298][ T770] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5612'. [ 1272.788585][ T799] xt_hashlimit: size too large, truncated to 1048576 [ 1272.962883][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1273.124987][ T757] Bluetooth: hci0: command tx timeout [ 1273.230902][T10967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1273.230939][T10967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1273.586796][ T818] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5621'. [ 1273.591251][T10967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1273.591285][T10967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1273.632164][ T818] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5621'. [ 1273.857968][ T755] dummy0 speed is unknown, defaulting to 1000 [ 1273.917986][ T824] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5623'. [ 1274.170634][T10967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1274.170671][T10967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1274.580724][T10967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1274.580763][T10967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1274.661136][ T832] syzkaller0: entered promiscuous mode [ 1274.661164][ T832] syzkaller0: entered allmulticast mode [ 1274.792594][ T836] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 1274.913593][ T840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5628'. [ 1275.115855][ T846] tipc: Failed to remove unknown binding: 66,1,1/0:3126487663/3126487665 [ 1275.115897][ T846] tipc: Failed to remove unknown binding: 66,1,1/0:3126487663/3126487665 [ 1275.203821][ T757] Bluetooth: hci0: command tx timeout [ 1275.408139][ T852] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5632'. [ 1275.917870][ T868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5636'. [ 1276.068520][ T860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5635'. [ 1276.068548][ T860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5635'. [ 1276.341763][T10967] bond0: left allmulticast mode [ 1276.341790][T10967] bond_slave_0: left allmulticast mode [ 1276.341806][T10967] ¬0Ù: left allmulticast mode [ 1276.369548][T10967] bond0: left promiscuous mode [ 1276.369571][T10967] bond_slave_0: left promiscuous mode [ 1276.369786][T10967] ¬0Ù: left promiscuous mode [ 1276.370200][T10967] bridge0: port 3(bond0) entered disabled state [ 1276.475118][T10967] bridge_slave_1: left promiscuous mode [ 1276.475989][T10967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.702410][T10967] bridge_slave_0: left allmulticast mode [ 1276.703854][T10967] bridge_slave_0: left promiscuous mode [ 1276.706516][T10967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.287026][ T757] Bluetooth: hci0: command tx timeout [ 1277.988399][T10967] pim6reg: left allmulticast mode [ 1277.988554][T10967] dvmrp8: left allmulticast mode [ 1277.988703][T10967] pimreg9: left allmulticast mode [ 1279.384132][ T757] Bluetooth: hci0: command tx timeout [ 1292.314090][T25893] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1292.341277][T25893] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1292.350206][T25893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1292.352398][T25893] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1292.353843][T25893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1292.546594][T25893] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1292.559758][T25893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1292.564817][T25893] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1292.567603][T25893] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1292.568224][T25893] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1292.960424][T25893] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1292.972036][T25893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1292.977825][T25893] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1292.980580][T25893] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1292.990710][T25893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1293.166937][ T757] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1293.177252][ T757] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1293.213695][ T757] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1293.281545][ T757] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1293.284584][ T757] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1293.790755][ T2011] block nbd2: Possible stuck request ffff888027a75080: control (read@0,4096B). Runtime 120 seconds [ 1294.584525][ T757] Bluetooth: hci1: command tx timeout [ 1294.742626][ T757] Bluetooth: hci5: command tx timeout [ 1295.044342][ T757] Bluetooth: hci7: command tx timeout [ 1295.372855][ T757] Bluetooth: hci8: command tx timeout [ 1296.643101][ T757] Bluetooth: hci1: command tx timeout [ 1296.803465][ T757] Bluetooth: hci5: command tx timeout [ 1297.132907][ T757] Bluetooth: hci7: command tx timeout [ 1297.462750][ T757] Bluetooth: hci8: command tx timeout [ 1298.722839][ T757] Bluetooth: hci1: command tx timeout [ 1298.882921][ T757] Bluetooth: hci5: command tx timeout [ 1299.202806][ T757] Bluetooth: hci7: command tx timeout [ 1299.522992][ T757] Bluetooth: hci8: command tx timeout [ 1300.817805][T25893] Bluetooth: hci1: command tx timeout [ 1300.963472][T25893] Bluetooth: hci5: command tx timeout [ 1301.296150][T25893] Bluetooth: hci7: command tx timeout [ 1301.603067][T25893] Bluetooth: hci8: command tx timeout [ 1323.871772][ T2011] block nbd2: Possible stuck request ffff888027a75080: control (read@0,4096B). Runtime 150 seconds [ 1330.882200][ T757] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1330.899535][ T757] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1330.901227][ T757] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1330.903874][ T757] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1330.905325][ T757] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1332.977652][ T757] Bluetooth: hci9: command tx timeout [ 1335.043416][ T757] Bluetooth: hci9: command tx timeout [ 1337.134371][ T757] Bluetooth: hci9: command tx timeout [ 1339.223795][ T757] Bluetooth: hci9: command tx timeout [ 1352.455912][T25893] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1352.470514][T25893] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1352.471463][T25893] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1352.533674][T25893] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1352.544308][T25893] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1352.837003][T25893] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1352.858079][T25893] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1352.876694][T25893] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1352.927201][T25893] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1352.931593][T25893] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1353.610615][ T757] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1353.666052][ T757] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1353.669858][ T757] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1353.674126][ T757] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1353.684562][ T757] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1353.790732][ T757] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1353.802589][ T757] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1353.810692][ T757] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1353.814134][ T757] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1353.825696][ T757] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1353.939902][ T2011] block nbd2: Possible stuck request ffff888027a75080: control (read@0,4096B). Runtime 180 seconds [ 1354.642837][ T757] Bluetooth: hci10: command tx timeout [ 1355.042780][ T757] Bluetooth: hci11: command tx timeout [ 1355.762854][ T757] Bluetooth: hci12: command tx timeout [ 1355.927790][ T757] Bluetooth: hci13: command tx timeout [ 1356.722752][ T757] Bluetooth: hci10: command tx timeout [ 1356.859669][ T4982] udevd[4982]: worker [30853] /devices/virtual/block/nbd2 timeout; kill it [ 1356.859762][ T4982] udevd[4982]: seq 36583 '/devices/virtual/block/nbd2' killed [ 1357.122898][ T757] Bluetooth: hci11: command tx timeout [ 1357.842873][ T757] Bluetooth: hci12: command tx timeout [ 1358.002915][ T757] Bluetooth: hci13: command tx timeout [ 1358.802810][ T757] Bluetooth: hci10: command tx timeout [ 1359.205563][ T757] Bluetooth: hci11: command tx timeout [ 1359.923664][ T757] Bluetooth: hci12: command tx timeout [ 1360.082761][ T757] Bluetooth: hci13: command tx timeout [ 1360.882834][ T757] Bluetooth: hci10: command tx timeout [ 1361.282751][ T757] Bluetooth: hci11: command tx timeout [ 1362.002949][ T757] Bluetooth: hci12: command tx timeout [ 1362.162931][ T757] Bluetooth: hci13: command tx timeout [ 1384.029794][ T2011] block nbd2: Possible stuck request ffff888027a75080: control (read@0,4096B). Runtime 210 seconds [ 1391.026520][T25893] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1391.068913][T25893] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1391.080493][T25893] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1391.081490][T25893] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1391.082091][T25893] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1393.204089][ T757] Bluetooth: hci14: command tx timeout [ 1394.425130][ T757] Bluetooth: hci0: command 0x0406 tx timeout [ 1395.283357][T25893] Bluetooth: hci14: command tx timeout [ 1397.364123][T25893] Bluetooth: hci14: command tx timeout [ 1399.448441][T25893] Bluetooth: hci14: command tx timeout [ 1413.338349][T25893] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1413.358018][ T974] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1413.370160][ T974] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1413.371132][ T974] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1413.372127][ T974] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1413.392061][ T976] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1413.392226][ T974] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1413.394409][ T974] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1413.394511][ T974] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1413.414260][ T976] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1413.429729][ T976] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1413.483346][ T977] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1413.485352][ T977] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1413.487079][ T976] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1413.487353][ T976] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1414.109309][ T2011] block nbd2: Possible stuck request ffff888027a75080: control (read@0,4096B). Runtime 240 seconds [ 1414.677731][ T979] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1414.695491][ T979] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1414.696449][ T979] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1414.697421][ T979] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1414.698516][ T979] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1414.923277][ T979] Bluetooth: hci1: command 0x0406 tx timeout [ 1414.923331][ T979] Bluetooth: hci5: command 0x0406 tx timeout [ 1415.533920][ T757] Bluetooth: hci15: command tx timeout [ 1415.615114][ T757] Bluetooth: hci16: command tx timeout [ 1415.618256][ T4932] Bluetooth: hci17: command tx timeout [ 1416.887937][ T757] Bluetooth: hci18: command tx timeout [ 1417.634954][ T757] Bluetooth: hci15: command tx timeout [ 1417.684203][ T757] Bluetooth: hci16: command tx timeout [ 1417.684253][ T757] Bluetooth: hci17: command tx timeout [ 1418.963580][ T979] Bluetooth: hci18: command tx timeout [ 1419.689564][ T979] Bluetooth: hci15: command tx timeout [ 1419.770319][ T979] Bluetooth: hci17: command tx timeout [ 1419.770357][ T979] Bluetooth: hci16: command tx timeout [ 1420.011895][T25893] Bluetooth: hci7: command 0x0406 tx timeout [ 1420.011943][T25893] Bluetooth: hci8: command 0x0406 tx timeout [ 1421.052667][ T757] Bluetooth: hci18: command tx timeout [ 1421.769049][ T757] Bluetooth: hci15: command tx timeout [ 1421.850031][ T757] Bluetooth: hci16: command tx timeout [ 1421.850067][ T757] Bluetooth: hci17: command tx timeout [ 1423.127892][ T4932] Bluetooth: hci18: command tx timeout [ 1435.843824][ T32] INFO: task dhcpcd:5277 blocked for more than 143 seconds. [ 1435.843852][ T32] Not tainted syzkaller #0 [ 1435.843864][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.843875][ T32] task:dhcpcd state:D stack:21384 pid:5277 tgid:5277 ppid:5276 task_flags:0x400140 flags:0x00080000 [ 1435.843930][ T32] Call Trace: [ 1435.843938][ T32] [ 1435.843953][ T32] __schedule+0x17db/0x58f0 [ 1435.844013][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 1435.844051][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.844088][ T32] ? schedule+0x90/0x2b0 [ 1435.844119][ T32] schedule+0x164/0x2b0 [ 1435.844148][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.844189][ T32] __mutex_lock+0x7c1/0x1550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1435.844225][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.844258][ T32] ? devinet_ioctl+0x2fb/0x1c50 [ 1435.844419][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.844459][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1435.844480][ T32] ? security_capable+0x7e/0x2c0 [ 1435.844515][ T32] devinet_ioctl+0x2fb/0x1c50 [ 1435.844558][ T32] ? __pfx_devinet_ioctl+0x10/0x10 [ 1435.844592][ T32] ? get_user_ifreq+0x12b/0x180 [ 1435.844627][ T32] inet_ioctl+0x42a/0x560 [ 1435.844653][ T32] ? __pfx_inet_ioctl+0x10/0x10 [ 1435.844700][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1435.844732][ T32] sock_do_ioctl+0x101/0x320 [ 1435.844762][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1435.844781][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 1435.844824][ T32] sock_ioctl+0x57a/0x7e0 [ 1435.844858][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1435.844892][ T32] ? fd_install+0x94/0x3d0 [ 1435.844918][ T32] ? fd_install+0x309/0x3d0 [ 1435.844947][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1435.844975][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1435.845006][ T32] __se_sys_ioctl+0xfc/0x170 [ 1435.845032][ T32] do_syscall_64+0x166/0x520 [ 1435.845062][ T32] ? trace_irq_disable+0x3b/0x140 [ 1435.845084][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.845106][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1435.845132][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.845154][ T32] RIP: 0033:0x7fa5227fd378 [ 1435.845173][ T32] RSP: 002b:00007ffe753a3e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1435.845219][ T32] RAX: ffffffffffffffda RBX: 000000000000002e RCX: 00007fa5227fd378 [ 1435.845235][ T32] RDX: 00007ffe753b4090 RSI: 0000000000008914 RDI: 000000000000002e [ 1435.845249][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1435.845261][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe753c4230 [ 1435.845275][ T32] R13: 00007fa5226fd708 R14: 0000000000000028 R15: 0000000000008914 [ 1435.845309][ T32] [ 1435.845344][ T32] INFO: task kworker/1:10:7718 blocked for more than 143 seconds. [ 1435.845359][ T32] Not tainted syzkaller #0 [ 1435.845371][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.845380][ T32] task:kworker/1:10 state:D stack:24456 pid:7718 tgid:7718 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1435.845434][ T32] Workqueue: events switchdev_deferred_process_work [ 1435.845538][ T32] Call Trace: [ 1435.845546][ T32] [ 1435.845559][ T32] __schedule+0x17db/0x58f0 [ 1435.845590][ T32] ? update_protect_slice+0x128/0x210 [ 1435.845638][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1435.845673][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.845710][ T32] ? schedule+0x90/0x2b0 [ 1435.845741][ T32] schedule+0x164/0x2b0 [ 1435.845777][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.845805][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.845839][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.845873][ T32] ? switchdev_deferred_process_work+0xe/0x20 [ 1435.845908][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.845938][ T32] ? lock_acquire+0x115/0x350 [ 1435.845968][ T32] ? rcu_is_watching+0x16/0xb0 [ 1435.845996][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.846025][ T32] switchdev_deferred_process_work+0xe/0x20 [ 1435.846056][ T32] process_scheduled_works+0xc3d/0x1630 [ 1435.846114][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1435.846148][ T32] ? assign_work+0x3cf/0x5d0 [ 1435.846179][ T32] worker_thread+0xa47/0xfb0 [ 1435.846234][ T32] kthread+0x38b/0x480 [ 1435.846254][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1435.846280][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.846301][ T32] ret_from_fork+0x514/0xb70 [ 1435.846344][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.846375][ T32] ? __switch_to+0xc89/0x1420 [ 1435.846421][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.846442][ T32] ret_from_fork_asm+0x1a/0x30 [ 1435.846491][ T32] [ 1435.846538][ T32] INFO: task kworker/1:17:22442 blocked for more than 143 seconds. [ 1435.846553][ T32] Not tainted syzkaller #0 [ 1435.846564][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.846574][ T32] task:kworker/1:17 state:D stack:23456 pid:22442 tgid:22442 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1435.846625][ T32] Workqueue: events ovs_dp_masks_rebalance [ 1435.846714][ T32] Call Trace: [ 1435.846721][ T32] [ 1435.846735][ T32] __schedule+0x17db/0x58f0 [ 1435.846785][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.846814][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1435.846849][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.846886][ T32] ? schedule+0x90/0x2b0 [ 1435.846917][ T32] schedule+0x164/0x2b0 [ 1435.846946][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.846974][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.847009][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.847043][ T32] ? ovs_dp_masks_rebalance+0x31/0x120 [ 1435.847072][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.847109][ T32] ? lock_acquire+0x115/0x350 [ 1435.847140][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.847167][ T32] ovs_dp_masks_rebalance+0x31/0x120 [ 1435.847193][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.847219][ T32] process_scheduled_works+0xc3d/0x1630 [ 1435.847278][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1435.847311][ T32] ? assign_work+0x3cf/0x5d0 [ 1435.847343][ T32] worker_thread+0xa47/0xfb0 [ 1435.847384][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1435.847423][ T32] kthread+0x38b/0x480 [ 1435.847444][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1435.847469][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.847491][ T32] ret_from_fork+0x514/0xb70 [ 1435.847524][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.847555][ T32] ? __switch_to+0xc89/0x1420 [ 1435.847585][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.847607][ T32] ret_from_fork_asm+0x1a/0x30 [ 1435.847654][ T32] [ 1435.847664][ T32] INFO: task kworker/u8:0:24396 blocked for more than 143 seconds. [ 1435.847679][ T32] Not tainted syzkaller #0 [ 1435.847690][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.847700][ T32] task:kworker/u8:0 state:D stack:21544 pid:24396 tgid:24396 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1435.847750][ T32] Workqueue: events_unbound linkwatch_event [ 1435.847819][ T32] Call Trace: [ 1435.847827][ T32] [ 1435.847840][ T32] __schedule+0x17db/0x58f0 [ 1435.847896][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.847933][ T32] ? schedule+0x90/0x2b0 [ 1435.847964][ T32] schedule+0x164/0x2b0 [ 1435.847994][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.848021][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.848056][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.848090][ T32] ? linkwatch_event+0xe/0x60 [ 1435.848112][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.848143][ T32] ? lock_acquire+0x115/0x350 [ 1435.848173][ T32] ? rcu_is_watching+0x16/0xb0 [ 1435.848199][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.848226][ T32] linkwatch_event+0xe/0x60 [ 1435.848245][ T32] process_scheduled_works+0xc3d/0x1630 [ 1435.848302][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1435.848335][ T32] ? assign_work+0x3cf/0x5d0 [ 1435.848367][ T32] worker_thread+0xa47/0xfb0 [ 1435.848407][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1435.848446][ T32] kthread+0x38b/0x480 [ 1435.848467][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1435.848492][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.848513][ T32] ret_from_fork+0x514/0xb70 [ 1435.848546][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.848577][ T32] ? __switch_to+0xc89/0x1420 [ 1435.848608][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.848629][ T32] ret_from_fork_asm+0x1a/0x30 [ 1435.848675][ T32] [ 1435.848695][ T32] INFO: task kworker/1:0:26231 blocked for more than 143 seconds. [ 1435.848710][ T32] Not tainted syzkaller #0 [ 1435.848720][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.848730][ T32] task:kworker/1:0 state:D stack:22600 pid:26231 tgid:26231 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1435.848788][ T32] Workqueue: events ovs_dp_masks_rebalance [ 1435.848813][ T32] Call Trace: [ 1435.848820][ T32] [ 1435.848833][ T32] __schedule+0x17db/0x58f0 [ 1435.848875][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.848904][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1435.848939][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.848976][ T32] ? schedule+0x90/0x2b0 [ 1435.849007][ T32] schedule+0x164/0x2b0 [ 1435.849036][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.849064][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.849099][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.849132][ T32] ? ovs_dp_masks_rebalance+0x31/0x120 [ 1435.849161][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.849198][ T32] ? lock_acquire+0x115/0x350 [ 1435.849229][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.849256][ T32] ovs_dp_masks_rebalance+0x31/0x120 [ 1435.849282][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.849308][ T32] process_scheduled_works+0xc3d/0x1630 [ 1435.849367][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1435.849400][ T32] ? assign_work+0x3cf/0x5d0 [ 1435.849432][ T32] worker_thread+0xa47/0xfb0 [ 1435.849473][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1435.849512][ T32] kthread+0x38b/0x480 [ 1435.849531][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1435.849557][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.849578][ T32] ret_from_fork+0x514/0xb70 [ 1435.849612][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.849642][ T32] ? __switch_to+0xc89/0x1420 [ 1435.849672][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.849694][ T32] ret_from_fork_asm+0x1a/0x30 [ 1435.849740][ T32] [ 1435.849797][ T32] INFO: task kworker/1:12:475 blocked for more than 143 seconds. [ 1435.849813][ T32] Not tainted syzkaller #0 [ 1435.849824][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.849834][ T32] task:kworker/1:12 state:D stack:26032 pid:475 tgid:475 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1435.849887][ T32] Workqueue: events netdev_work_proc [ 1435.849938][ T32] Call Trace: [ 1435.849945][ T32] [ 1435.849958][ T32] __schedule+0x17db/0x58f0 [ 1435.849988][ T32] ? update_protect_slice+0x128/0x210 [ 1435.850034][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1435.850069][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.850105][ T32] ? schedule+0x90/0x2b0 [ 1435.850135][ T32] schedule+0x164/0x2b0 [ 1435.850165][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.850192][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.850227][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.850260][ T32] ? netdev_work_proc+0x209/0x780 [ 1435.850282][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.850311][ T32] ? kthread+0x38b/0x480 [ 1435.850337][ T32] ? netdev_work_proc+0x12b/0x780 [ 1435.850359][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1435.850391][ T32] netdev_work_proc+0x209/0x780 [ 1435.850415][ T32] ? __pfx_netdev_work_proc+0x10/0x10 [ 1435.850439][ T32] ? rcu_is_watching+0x16/0xb0 [ 1435.850465][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.850492][ T32] process_scheduled_works+0xc3d/0x1630 [ 1435.850550][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1435.850584][ T32] ? assign_work+0x3cf/0x5d0 [ 1435.850615][ T32] worker_thread+0xa47/0xfb0 [ 1435.850670][ T32] kthread+0x38b/0x480 [ 1435.850690][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1435.850715][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.850736][ T32] ret_from_fork+0x514/0xb70 [ 1435.850776][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.850806][ T32] ? __switch_to+0xc89/0x1420 [ 1435.850837][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.850857][ T32] ret_from_fork_asm+0x1a/0x30 [ 1435.850904][ T32] [ 1435.850913][ T32] INFO: task kworker/1:13:478 blocked for more than 143 seconds. [ 1435.850927][ T32] Not tainted syzkaller #0 [ 1435.850938][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.850947][ T32] task:kworker/1:13 state:D stack:27232 pid:478 tgid:478 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1435.850999][ T32] Workqueue: events ovs_dp_masks_rebalance [ 1435.851024][ T32] Call Trace: [ 1435.851031][ T32] [ 1435.851044][ T32] __schedule+0x17db/0x58f0 [ 1435.851087][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.851115][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1435.851150][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.851186][ T32] ? schedule+0x90/0x2b0 [ 1435.851216][ T32] schedule+0x164/0x2b0 [ 1435.851245][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.851272][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.851306][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.851340][ T32] ? ovs_dp_masks_rebalance+0x31/0x120 [ 1435.851369][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.851406][ T32] ? lock_acquire+0x115/0x350 [ 1435.851436][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.851462][ T32] ovs_dp_masks_rebalance+0x31/0x120 [ 1435.851489][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.851514][ T32] process_scheduled_works+0xc3d/0x1630 [ 1435.851572][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1435.851605][ T32] ? assign_work+0x3cf/0x5d0 [ 1435.851636][ T32] worker_thread+0xa47/0xfb0 [ 1435.851692][ T32] kthread+0x38b/0x480 [ 1435.851712][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1435.851736][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.851762][ T32] ret_from_fork+0x514/0xb70 [ 1435.851796][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.851827][ T32] ? __switch_to+0xc89/0x1420 [ 1435.851856][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.851877][ T32] ret_from_fork_asm+0x1a/0x30 [ 1435.851924][ T32] [ 1435.851932][ T32] INFO: task kworker/1:14:479 blocked for more than 143 seconds. [ 1435.851947][ T32] Not tainted syzkaller #0 [ 1435.851958][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.851966][ T32] task:kworker/1:14 state:D stack:28136 pid:479 tgid:479 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1435.852020][ T32] Workqueue: events ovs_dp_masks_rebalance [ 1435.852045][ T32] Call Trace: [ 1435.852053][ T32] [ 1435.852065][ T32] __schedule+0x17db/0x58f0 [ 1435.852094][ T32] ? update_protect_slice+0x128/0x210 [ 1435.852140][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1435.852175][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.852211][ T32] ? schedule+0x90/0x2b0 [ 1435.852242][ T32] schedule+0x164/0x2b0 [ 1435.852271][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.852298][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.852333][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.852366][ T32] ? ovs_dp_masks_rebalance+0x31/0x120 [ 1435.852395][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.852432][ T32] ? lock_acquire+0x115/0x350 [ 1435.852461][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.852489][ T32] ovs_dp_masks_rebalance+0x31/0x120 [ 1435.852515][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1435.852541][ T32] process_scheduled_works+0xc3d/0x1630 [ 1435.852599][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1435.853401][ T32] ? assign_work+0x3cf/0x5d0 [ 1435.853436][ T32] worker_thread+0xa47/0xfb0 [ 1435.853491][ T32] kthread+0x38b/0x480 [ 1435.853512][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1435.853537][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.853559][ T32] ret_from_fork+0x514/0xb70 [ 1435.853593][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.853624][ T32] ? __switch_to+0xc89/0x1420 [ 1435.853654][ T32] ? __pfx_kthread+0x10/0x10 [ 1435.853676][ T32] ret_from_fork_asm+0x1a/0x30 [ 1435.853723][ T32] [ 1435.853734][ T32] INFO: task syz-executor:755 blocked for more than 143 seconds. [ 1435.853756][ T32] Not tainted syzkaller #0 [ 1435.853767][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.853777][ T32] task:syz-executor state:D stack:23208 pid:755 tgid:755 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1435.853828][ T32] Call Trace: [ 1435.853835][ T32] [ 1435.853847][ T32] __schedule+0x17db/0x58f0 [ 1435.853891][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1435.853975][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.854012][ T32] ? schedule+0x90/0x2b0 [ 1435.854041][ T32] schedule+0x164/0x2b0 [ 1435.854071][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.854098][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.854133][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.854180][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 1435.854239][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.854279][ T32] ? ns_capable+0x89/0xe0 [ 1435.854327][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1435.854354][ T32] ? refcount_inc+0x46/0x70 [ 1435.854379][ T32] rtnl_newlink+0xc1d/0x1c30 [ 1435.854418][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1435.854448][ T32] ? __lock_acquire+0x747/0x2de0 [ 1435.854537][ T32] ? __kernel_text_address+0xd/0x30 [ 1435.854559][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1435.854591][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1435.854613][ T32] ? arch_stack_walk+0xfb/0x150 [ 1435.854665][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1435.854690][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1435.854716][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1435.854742][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1435.854776][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1435.854804][ T32] ? __lock_acquire+0x747/0x2de0 [ 1435.854838][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1435.854861][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1435.854889][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1435.854924][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1435.854945][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1435.854972][ T32] netlink_unicast+0x7bd/0x940 [ 1435.855014][ T32] netlink_sendmsg+0x813/0xb40 [ 1435.855046][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.855076][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1435.855104][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.855125][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1435.855149][ T32] __sys_sendto+0x408/0x5a0 [ 1435.855181][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1435.855205][ T32] ? errseq_sample+0x40/0x70 [ 1435.855260][ T32] ? rcu_is_watching+0x16/0xb0 [ 1435.855291][ T32] __x64_sys_sendto+0xde/0x100 [ 1435.855321][ T32] do_syscall_64+0x166/0x520 [ 1435.855351][ T32] ? trace_irq_disable+0x3b/0x140 [ 1435.855371][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.855393][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1435.855419][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.855440][ T32] RIP: 0033:0x7f9631f5e98e [ 1435.855458][ T32] RSP: 002b:00007ffd48b49c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1435.855479][ T32] RAX: ffffffffffffffda RBX: 0000555579176500 RCX: 00007f9631f5e98e [ 1435.855495][ T32] RDX: 000000000000008c RSI: 00007f9632d54670 RDI: 0000000000000003 [ 1435.855510][ T32] RBP: 0000000000000001 R08: 00007ffd48b49c94 R09: 000000000000000c [ 1435.855523][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1435.855536][ T32] R13: 0000000000000000 R14: 00007f9632d54670 R15: 0000000000000000 [ 1435.855568][ T32] [ 1435.855579][ T32] INFO: task syz.7.5633:855 blocked for more than 143 seconds. [ 1435.855594][ T32] Not tainted syzkaller #0 [ 1435.855605][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.855615][ T32] task:syz.7.5633 state:D stack:25720 pid:855 tgid:853 ppid:26052 task_flags:0x400140 flags:0x00080002 [ 1435.855667][ T32] Call Trace: [ 1435.855675][ T32] [ 1435.855687][ T32] __schedule+0x17db/0x58f0 [ 1435.855731][ T32] ? kasan_save_track+0x3e/0x80 [ 1435.855772][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.855809][ T32] ? schedule+0x90/0x2b0 [ 1435.855840][ T32] schedule+0x164/0x2b0 [ 1435.855870][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.855897][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.855931][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.855965][ T32] ? tipc_nl_bearer_enable+0x17/0x40 [ 1435.856000][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.856030][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1435.856054][ T32] ? __nla_parse+0x40/0x60 [ 1435.856086][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1435.856114][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1435.856148][ T32] tipc_nl_bearer_enable+0x17/0x40 [ 1435.856178][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1435.856213][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1435.856253][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1435.856272][ T32] ? security_capable+0x7e/0x2c0 [ 1435.856304][ T32] genl_rcv_msg+0x614/0x7a0 [ 1435.856337][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1435.856363][ T32] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 1435.856408][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1435.856430][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1435.856459][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1435.856495][ T32] ? down_r ** replaying previous printk message ** [ 1435.856495][ T32] ? down_read+0x2be/0x330 [ 1435.856520][ T32] genl_rcv+0x28/0x40 [ 1435.856545][ T32] netlink_unicast+0x7bd/0x940 [ 1435.856587][ T32] netlink_sendmsg+0x813/0xb40 [ 1435.856619][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.856649][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1435.856675][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.856696][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1435.856720][ T32] ____sys_sendmsg+0x54e/0x850 [ 1435.856759][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1435.856798][ T32] ? import_iovec+0x73/0xa0 [ 1435.856828][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1435.856854][ T32] ? __lock_acquire+0x747/0x2de0 [ 1435.856880][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1435.856913][ T32] ? futex_wake+0x51b/0x5f0 [ 1435.856973][ T32] ? __fget_files+0x2a/0x420 [ 1435.857001][ T32] ? __fget_files+0x3a2/0x420 [ 1435.857040][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1435.857072][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1435.857122][ T32] do_syscall_64+0x166/0x520 [ 1435.857151][ T32] ? trace_irq_disable+0x3b/0x140 [ 1435.857171][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.857193][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1435.857232][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.857252][ T32] RIP: 0033:0x7f1cd279e159 [ 1435.857265][ T32] RSP: 002b:00007f1cd3610028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1435.857283][ T32] RAX: ffffffffffffffda RBX: 00007f1cd2a25fa0 RCX: 00007f1cd279e159 [ 1435.857299][ T32] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 1435.857313][ T32] RBP: 00007f1cd283506b R08: 0000000000000000 R09: 0000000000000000 [ 1435.857326][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.857339][ T32] R13: 00007f1cd2a26038 R14: 00007f1cd2a25fa0 R15: 00007ffca16f4448 [ 1435.857373][ T32] [ 1435.857381][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1435.857392][ T32] INFO: task syz.1.5635:859 blocked for more than 143 seconds. [ 1435.857407][ T32] Not tainted syzkaller #0 [ 1435.857418][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.857428][ T32] task:syz.1.5635 state:D stack:24360 pid:859 tgid:859 ppid:20689 task_flags:0x400040 flags:0x00080002 [ 1435.857479][ T32] Call Trace: [ 1435.857486][ T32] [ 1435.857498][ T32] __schedule+0x17db/0x58f0 [ 1435.857540][ T32] ? arch_stack_walk+0xfb/0x150 [ 1435.857575][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.857612][ T32] ? schedule+0x90/0x2b0 [ 1435.857642][ T32] schedule+0x164/0x2b0 [ 1435.857671][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.857698][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.857733][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.857773][ T32] ? ip_mc_drop_socket+0x80/0x280 [ 1435.857843][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.857894][ T32] ip_mc_drop_socket+0x80/0x280 [ 1435.857929][ T32] inet_release+0x4b/0x190 [ 1435.857955][ T32] __sock_release+0xa0/0x1f0 [ 1435.857976][ T32] ? __pfx_sock_close+0x10/0x10 [ 1435.857996][ T32] sock_close+0x1c/0x30 [ 1435.858014][ T32] __fput+0x418/0xa50 [ 1435.858049][ T32] task_work_run+0x1d9/0x270 [ 1435.858074][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1435.858107][ T32] exit_to_user_mode_loop+0x204/0x770 [ 1435.858130][ T32] ? rcu_is_watching+0x16/0xb0 [ 1435.858159][ T32] do_syscall_64+0x328/0x520 [ 1435.858188][ T32] ? trace_irq_disable+0x3b/0x140 [ 1435.858208][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.858230][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1435.858255][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.858276][ T32] RIP: 0033:0x7f8af5d9e159 [ 1435.858293][ T32] RSP: 002b:00007fff977abb28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1435.858314][ T32] RAX: 0000000000000000 RBX: 00007f8af6027da0 RCX: 00007f8af5d9e159 [ 1435.858329][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1435.858342][ T32] RBP: 00007f8af6027da0 R08: 0000000000000006 R09: 0000000000000000 [ 1435.858356][ T32] R10: 00007f8af6027cb0 R11: 0000000000000246 R12: 0000000000137bd8 [ 1435.858371][ T32] R13: 00007f8af602636c R14: 0000000000137ba1 R15: 00007f8af6026360 [ 1435.858404][ T32] [ 1435.858412][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1435.858422][ T32] INFO: task syz.1.5635:860 blocked for more than 143 seconds. [ 1435.858437][ T32] Not tainted syzkaller #0 [ 1435.858447][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.858456][ T32] task:syz.1.5635 state:D stack:25344 pid:860 tgid:859 ppid:20689 task_flags:0x400140 flags:0x00080002 [ 1435.858508][ T32] Call Trace: [ 1435.858515][ T32] [ 1435.858528][ T32] __schedule+0x17db/0x58f0 [ 1435.858583][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.858620][ T32] ? schedule+0x90/0x2b0 [ 1435.858650][ T32] schedule+0x164/0x2b0 [ 1435.858680][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.858707][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.858735][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1435.858805][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.858839][ T32] ? dev_ethtool+0x3a0/0x29e0 [ 1435.858866][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.858904][ T32] ? dev_get_by_name+0x21/0x200 [ 1435.858951][ T32] ? dev_get_by_name+0x21/0x200 [ 1435.858980][ T32] dev_ethtool+0x3a0/0x29e0 [ 1435.859005][ T32] ? __lock_acquire+0x747/0x2de0 [ 1435.859041][ T32] ? __pfx_dev_ethtool+0x10/0x10 [ 1435.859068][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 1435.859095][ T32] ? lock_acquire+0x115/0x350 [ 1435.859127][ T32] ? dev_load+0x21/0x1f0 [ 1435.859182][ T32] ? dev_load+0x21/0x1f0 [ 1435.859209][ T32] dev_ioctl+0x392/0x1150 [ 1435.859239][ T32] sock_do_ioctl+0x23e/0x320 [ 1435.859260][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1435.859279][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 1435.859320][ T32] sock_ioctl+0x57a/0x7e0 [ 1435.859354][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1435.859386][ T32] ? __fget_files+0x2a/0x420 [ 1435.859413][ T32] ? __fget_files+0x3a2/0x420 [ 1435.859440][ T32] ? __fget_files+0x2a/0x420 [ 1435.859471][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1435.859500][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1435.859532][ T32] __se_sys_ioctl+0xfc/0x170 [ 1435.859557][ T32] do_syscall_64+0x166/0x520 [ 1435.859586][ T32] ? trace_irq_disable+0x3b/0x140 [ 1435.859606][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.859627][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1435.859653][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.859674][ T32] RIP: 0033:0x7f8af5d9e159 [ 1435.859691][ T32] RSP: 002b:00007f8af3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1435.859712][ T32] RAX: ffffffffffffffda RBX: 00007f8af6025fa0 RCX: 00007f8af5d9e159 [ 1435.859727][ T32] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 000000000000000e [ 1435.859741][ T32] RBP: 00007f8af5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1435.859760][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.859774][ T32] R13: 00007f8af6026038 R14: 00007f8af6025fa0 R15: 00007fff977ab9c8 [ 1435.859807][ T32] [ 1435.859815][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1435.859826][ T32] INFO: task syz.1.5635:869 blocked for more than 143 seconds. [ 1435.859841][ T32] Not tainted syzkaller #0 [ 1435.859851][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.859861][ T32] task:syz.1.5635 state:D stack:28064 pid:869 tgid:859 ppid:20689 task_flags:0x400140 flags:0x00080002 [ 1435.859915][ T32] Call Trace: [ 1435.859922][ T32] [ 1435.859935][ T32] __schedule+0x17db/0x58f0 [ 1435.859990][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.860028][ T32] ? schedule+0x90/0x2b0 [ 1435.860058][ T32] schedule+0x164/0x2b0 [ 1435.860088][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.860114][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.860149][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.860182][ T32] ? do_ip_setsockopt+0xe95/0x2e30 [ 1435.860249][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.860280][ T32] ? futex_wait+0x2a2/0x390 [ 1435.860314][ T32] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1435.860353][ T32] do_ip_setsockopt+0xe95/0x2e30 [ 1435.860386][ T32] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1435.860410][ T32] ? do_futex+0x3e7/0x4e0 [ 1435.860442][ T32] ? lock_acquire+0x115/0x350 [ 1435.860473][ T32] ? aa_sock_opt_perm+0xe8/0x1e0 [ 1435.860503][ T32] ip_setsockopt+0x66/0x110 [ 1435.860528][ T32] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1435.860555][ T32] do_sock_setsockopt+0x17c/0x1b0 [ 1435.860588][ T32] __x64_sys_setsockopt+0x13d/0x1b0 [ 1435.860620][ T32] do_syscall_64+0x166/0x520 [ 1435.860648][ T32] ? trace_irq_disable+0x3b/0x140 [ 1435.860669][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.860690][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1435.860715][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.860736][ T32] RIP: 0033:0x7f8af5d9e159 [ 1435.860759][ T32] RSP: 002b:00007f8af3fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1435.860779][ T32] RAX: ffffffffffffffda RBX: 00007f8af6026090 RCX: 00007f8af5d9e159 [ 1435.860795][ T32] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 000000000000000b [ 1435.860808][ T32] RBP: 00007f8af5e3506b R08: 0000000000000110 R09: 0000000000000000 [ 1435.860823][ T32] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 1435.860836][ T32] R13: 00007f8af6026128 R14: 00007f8af6026090 R15: 00007fff977ab9c8 [ 1435.860870][ T32] [ 1435.860878][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1435.860889][ T32] INFO: task syz.1.5635:871 blocked for more than 143 seconds. [ 1435.860903][ T32] Not tainted syzkaller #0 [ 1435.860913][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1435.860923][ T32] task:syz.1.5635 state:D stack:25872 pid:871 tgid:859 ppid:20689 task_flags:0x400140 flags:0x00080002 [ 1435.860976][ T32] Call Trace: [ 1435.860982][ T32] [ 1435.860995][ T32] __schedule+0x17db/0x58f0 [ 1435.861051][ T32] ? __pfx___schedule+0x10/0x10 [ 1435.861088][ T32] ? schedule+0x90/0x2b0 [ 1435.861118][ T32] schedule+0x164/0x2b0 [ 1435.861148][ T32] schedule_preempt_disabled+0x13/0x30 [ 1435.861174][ T32] __mutex_lock+0x7c1/0x1550 [ 1435.861209][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1435.861244][ T32] ? nl80211_pre_doit+0x5e/0x890 [ 1435.861339][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1435.861370][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1435.861393][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1435.861417][ T32] ? __nla_parse+0x40/0x60 [ 1435.861450][ T32] nl80211_pre_doit+0x5e/0x890 [ 1435.861488][ T32] genl_family_rcv_msg_doit+0x1db/0x340 [ 1435.861524][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1435.861564][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1435.861583][ T32] ? security_capable+0x7e/0x2c0 [ 1435.861615][ T32] genl_rcv_msg+0x614/0x7a0 [ 1435.861648][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1435.861674][ T32] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1435.861703][ T32] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1435.861761][ T32] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1435.861806][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1435.861830][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1435.861858][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1435.861895][ T32] ? down_read+0x2be/0x330 [ 1435.861920][ T32] genl_rcv+0x28/0x40 [ 1435.861944][ T32] netlink_unicast+0x7bd/0x940 [ 1435.861986][ T32] netlink_sendmsg+0x813/0xb40 [ 1435.862019][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.862049][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1435.862075][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.862095][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1435.862120][ T32] ____sys_sendmsg+0x54e/0x850 [ 1435.862154][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1435.862192][ T32] ? import_iovec+0x73/0xa0 [ 1435.862222][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1435.862249][ T32] ? __lock_acquire+0x747/0x2de0 [ 1435.862275][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1435.862307][ T32] ? futex_wait+0x2a2/0x390 [ 1435.862367][ T32] ? __fget_files+0x2a/0x420 [ 1435.862394][ T32] ? __fget_files+0x3a2/0x420 [ 1435.862433][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1435.862464][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1435.862514][ T32] do_syscall_64+0x166/0x520 [ 1435.862543][ T32] ? trace_irq_disable+0x3b/0x140 [ 1435.862564][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.862585][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1435.862610][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.024350][ T32] RIP: 0033:0x7f8af5d9e159 [ 1437.024378][ T32] RSP: 002b:00007f8af3fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.024401][ T32] RAX: ffffffffffffffda RBX: 00007f8af6026180 RCX: 00007f8af5d9e159 [ 1437.024418][ T32] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 000000000000000d [ 1437.024432][ T32] RBP: 00007f8af5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1437.024446][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.024458][ T32] R13: 00007f8af6026218 R14: 00007f8af6026180 R15: 00007fff977ab9c8 [ 1437.024493][ T32] [ 1437.024501][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1437.024544][ T32] INFO: task syz.1.5635:873 blocked for more than 144 seconds. [ 1437.024561][ T32] Not tainted syzkaller #0 [ 1437.024571][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.024581][ T32] task:syz.1.5635 state:D stack:26152 pid:873 tgid:859 ppid:20689 task_flags:0x400140 flags:0x00080002 [ 1437.024635][ T32] Call Trace: [ 1437.024643][ T32] [ 1437.024656][ T32] __schedule+0x17db/0x58f0 [ 1437.024702][ T32] ? internal_dev_create+0x89/0x480 [ 1437.024820][ T32] ? new_vport+0x1a/0x190 [ 1437.024845][ T32] ? genl_rcv_msg+0x614/0x7a0 [ 1437.024871][ T32] ? genl_rcv+0x28/0x40 [ 1437.024894][ T32] ? netlink_unicast+0x7bd/0x940 [ 1437.024929][ T32] ? __pfx___schedule+0x10/0x10 [ 1437.024966][ T32] ? schedule+0x90/0x2b0 [ 1437.024996][ T32] schedule+0x164/0x2b0 [ 1437.025026][ T32] schedule_preempt_disabled+0x13/0x30 [ 1437.025053][ T32] __mutex_lock+0x7c1/0x1550 [ 1437.025089][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1437.025122][ T32] ? internal_dev_create+0x278/0x480 [ 1437.025161][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1437.025193][ T32] ? alloc_netdev_mqs+0xd5b/0x1240 [ 1437.025231][ T32] internal_dev_create+0x278/0x480 [ 1437.025266][ T32] ovs_vport_add+0xea/0x230 [ 1437.228041][ T32] new_vport+0x1a/0x190 [ 1437.228082][ T32] ovs_dp_cmd_new+0x693/0xb00 [ 1437.228125][ T32] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1437.228159][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1437.228189][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1437.228225][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1437.228260][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1437.228301][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1437.228320][ T32] ? security_capable+0x7e/0x2c0 [ 1437.228360][ T32] genl_rcv_msg+0x614/0x7a0 [ 1437.228393][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1437.228419][ T32] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1437.228460][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1437.228483][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1437.228511][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1437.228548][ T32] ? down_read+0x2be/0x330 [ 1437.228573][ T32] genl_rcv+0x28/0x40 [ 1437.228598][ T32] netlink_unicast+0x7bd/0x940 [ 1437.228640][ T32] netlink_sendmsg+0x813/0xb40 [ 1437.228672][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1437.228702][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1437.228729][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1437.228750][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1437.228775][ T32] ____sys_sendmsg+0x54e/0x850 [ 1437.228810][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1437.228847][ T32] ? import_iovec+0x73/0xa0 [ 1437.228878][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1437.228904][ T32] ? __lock_acquire+0x747/0x2de0 [ 1437.228931][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1437.228963][ T32] ? futex_wait+0x2a2/0x390 [ 1437.229024][ T32] ? __fget_files+0x2a/0x420 [ 1437.229052][ T32] ? __fget_files+0x3a2/0x420 [ 1437.229090][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1437.229121][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1437.229171][ T32] do_syscall_64+0x166/0x520 [ 1437.229200][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.229222][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1437.229247][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.229268][ T32] RIP: 0033:0x7f8af5d9e159 [ 1437.229287][ T32] RSP: 002b:00007f8af3b91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.229309][ T32] RAX: ffffffffffffffda RBX: 00007f8af6026270 RCX: 00007f8af5d9e159 [ 1437.229325][ T32] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000c [ 1437.229345][ T32] RBP: 00007f8af5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1437.229358][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.229371][ T32] R13: 00007f8af6026308 R14: 00007f8af6026270 R15: 00007fff977ab9c8 [ 1437.229406][ T32] [ 1437.229414][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1437.229431][ T32] INFO: task syz.6.5638:886 blocked for more than 144 seconds. [ 1437.229447][ T32] Not tainted syzkaller #0 [ 1437.229458][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.229468][ T32] task:syz.6.5638 state:D stack:26000 pid:886 tgid:884 ppid:25892 task_flags:0x400140 flags:0x00080002 [ 1437.323792][ T32] Call Trace: [ 1437.323802][ T32] [ 1437.323816][ T32] __schedule+0x17db/0x58f0 [ 1437.323871][ T32] ? __kasan_slab_free+0x5c/0x80 [ 1437.323896][ T32] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1437.324006][ T32] ? do_syscall_64+0x166/0x520 [ 1437.324045][ T32] ? __pfx___schedule+0x10/0x10 [ 1437.324082][ T32] ? schedule+0x90/0x2b0 [ 1437.324113][ T32] schedule+0x164/0x2b0 [ 1437.324140][ T32] schedule_preempt_disabled+0x13/0x30 [ 1437.324166][ T32] __mutex_lock+0x7c1/0x1550 [ 1437.324199][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1437.324229][ T32] ? dev_ioctl+0x7a4/0x1150 [ 1437.324257][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1437.324293][ T32] ? dev_load+0x21/0x1f0 [ 1437.324319][ T32] ? dev_load+0x21/0x1f0 [ 1437.324344][ T32] dev_ioctl+0x7a4/0x1150 [ 1437.324371][ T32] sock_do_ioctl+0x23e/0x320 [ 1437.324394][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1437.324412][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 1437.324451][ T32] sock_ioctl+0x57a/0x7e0 [ 1437.324484][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1437.324515][ T32] ? __fget_files+0x2a/0x420 [ 1437.324540][ T32] ? __fget_files+0x3a2/0x420 [ 1437.324566][ T32] ? __fget_files+0x2a/0x420 [ 1437.324595][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1437.324625][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 1437.324654][ T32] __se_sys_ioctl+0xfc/0x170 [ 1437.324679][ T32] do_syscall_64+0x166/0x520 [ 1437.324706][ T32] ? trace_irq_disable+0x3b/0x140 [ 1437.324726][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.324747][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1437.324771][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.324791][ T32] RIP: 0033:0x7f35fd79e159 [ 1437.324809][ T32] RSP: 002b:00007f35fe636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1437.324838][ T32] RAX: ffffffffffffffda RBX: 00007f35fda25fa0 RCX: 00007f35fd79e159 [ 1437.324853][ T32] RDX: 00002000000001c0 RSI: 0000000000008922 RDI: 0000000000000006 [ 1437.324867][ T32] RBP: 00007f35fd83506b R08: 0000000000000000 R09: 0000000000000000 [ 1437.324880][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.324893][ T32] R13: 00007f35fda26038 R14: 00007f35fda25fa0 R15: 00007ffee43e3c38 [ 1437.324926][ T32] [ 1437.324934][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1437.324946][ T32] INFO: task syz.5.5639:889 blocked for more than 144 seconds. [ 1437.324962][ T32] Not tainted syzkaller #0 [ 1437.324971][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.324981][ T32] task:syz.5.5639 state:D stack:27656 pid:889 tgid:888 ppid:26053 task_flags:0x400040 flags:0x00080002 [ 1437.325033][ T32] Call Trace: [ 1437.325040][ T32] [ 1437.325052][ T32] __schedule+0x17db/0x58f0 [ 1437.325092][ T32] ? trace_irq_disable+0x3b/0x140 [ 1437.325124][ T32] ? __pfx___schedule+0x10/0x10 [ 1437.325158][ T32] ? schedule+0x90/0x2b0 [ 1437.325186][ T32] schedule+0x164/0x2b0 [ 1437.325214][ T32] schedule_preempt_disabled+0x13/0x30 [ 1437.325240][ T32] __mutex_lock+0x7c1/0x1550 [ 1437.325272][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1437.325304][ T32] ? rtnl_dumpit+0x92/0x200 [ 1437.325330][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1437.325364][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 1437.325385][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1437.325405][ T32] ? netlink_dump+0x1e7/0xee0 [ 1437.325423][ T32] ? netlink_dump+0x1e7/0xee0 [ 1437.325445][ T32] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 1437.325545][ T32] rtnl_dumpit+0x92/0x200 [ 1437.325574][ T32] netlink_dump+0x711/0xee0 [ 1437.325591][ T32] ? __netlink_lookup+0xc6/0x8b0 [ 1437.325622][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 1437.325653][ T32] ? netlink_lookup+0x30/0x200 [ 1437.325671][ T32] ? netlink_lookup+0x30/0x200 [ 1437.325695][ T32] __netlink_dump_start+0x589/0x7b0 [ 1437.325721][ T32] rtnetlink_rcv_msg+0xa48/0xc00 [ 1437.325744][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1437.325766][ T32] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 1437.325789][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1437.325812][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1437.325843][ T32] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1437.325867][ T32] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 1437.325901][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1437.325923][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1437.325950][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1437.325982][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1437.326002][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1437.326027][ T32] netlink_unicast+0x7bd/0x940 [ 1437.326067][ T32] netlink_sendmsg+0x813/0xb40 [ 1437.326096][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1437.326125][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1437.326151][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1437.326170][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1437.326194][ T32] ____sys_sendmsg+0x54e/0x850 [ 1437.326225][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1437.326261][ T32] ? import_iovec+0x73/0xa0 [ 1437.326290][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1437.326314][ T32] ? __lock_acquire+0x747/0x2de0 [ 1437.326340][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1437.326370][ T32] ? futex_wait+0x2a2/0x390 [ 1437.326427][ T32] ? __fget_files+0x2a/0x420 [ 1437.326453][ T32] ? __fget_files+0x3a2/0x420 [ 1437.326489][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1437.326518][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1437.326566][ T32] do_syscall_64+0x166/0x520 [ 1437.326593][ T32] ? trace_irq_disable+0x3b/0x140 [ 1437.326613][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.326632][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1437.326657][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.326676][ T32] RIP: 0033:0x7ff5ce39e159 [ 1437.326693][ T32] RSP: 002b:00007ff5cf1bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.326714][ T32] RAX: ffffffffffffffda RBX: 00007ff5ce625fa0 RCX: 00007ff5ce39e159 [ 1437.326728][ T32] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1437.326741][ T32] RBP: 00007ff5ce43506b R08: 0000000000000000 R09: 0000000000000000 [ 1437.326754][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.326766][ T32] R13: 00007ff5ce626038 R14: 00007ff5ce625fa0 R15: 00007ffe372cfc08 [ 1437.326799][ T32] [ 1437.326806][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1437.326816][ T32] INFO: task syz.5.5639:890 blocked for more than 144 seconds. [ 1437.326835][ T32] Not tainted syzkaller #0 [ 1437.326846][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1437.326855][ T32] task:syz.5.5639 state:D stack:26552 pid:890 tgid:888 ppid:26053 task_flags:0x400140 flags:0x00080002 [ 1437.326905][ T32] Call Trace: [ 1437.326912][ T32] [ 1437.326925][ T32] __schedule+0x17db/0x58f0 [ 1437.326978][ T32] ? __pfx___schedule+0x10/0x10 [ 1437.327013][ T32] ? schedule+0x90/0x2b0 [ 1437.327041][ T32] schedule+0x164/0x2b0 [ 1437.327069][ T32] schedule_preempt_disabled+0x13/0x30 [ 1437.327095][ T32] __mutex_lock+0x7c1/0x1550 [ 1437.327128][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1437.327180][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 1437.327207][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1437.327244][ T32] ? ns_capable+0x89/0xe0 [ 1437.327283][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1437.327309][ T32] ? refcount_inc+0x46/0x70 [ 1437.327332][ T32] rtnl_newlink+0xc1d/0x1c30 [ 1437.327369][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1437.327398][ T32] ? __lock_acquire+0x747/0x2de0 [ 1437.327425][ T32] ? __lock_acquire+0x747/0x2de0 [ 1437.327459][ T32] ? lock_acquire+0x115/0x350 [ 1437.327486][ T32] ? lock_acquire+0x115/0x350 [ 1437.327515][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 1437.327546][ T32] ? __lock_acquire+0x747/0x2de0 [ 1437.327571][ T32] ? __kernel_text_address+0xd/0x30 [ 1437.327592][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1437.327615][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1437.327635][ T32] ? arch_stack_walk+0xfb/0x150 [ 1437.327667][ T32] ? lock_acquire+0x115/0x350 [ 1437.327687][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1437.327724][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1437.327747][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1437.327770][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 1437.327793][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1437.327817][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1437.327891][ T32] ? __lock_acquire+0x747/0x2de0 [ 1437.327925][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1437.327961][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1437.328001][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1437.328034][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1437.328054][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1437.328079][ T32] netlink_unicast+0x7bd/0x940 [ 1437.328131][ T32] netlink_sendmsg+0x813/0xb40 [ 1437.328163][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1437.328191][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1437.328215][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1437.328235][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1437.328258][ T32] __sys_sendto+0x408/0x5a0 [ 1437.328288][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1437.328352][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 1437.328389][ T32] __x64_sys_sendto+0xde/0x100 [ 1437.328416][ T32] do_syscall_64+0x166/0x520 [ 1437.328444][ T32] ? trace_irq_disable+0x3b/0x140 [ 1437.328463][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.328483][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1437.328507][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.328526][ T32] RIP: 0033:0x7ff5ce35e98e [ 1437.328543][ T32] RSP: 002b:00007ff5cf19ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1437.328562][ T32] RAX: ffffffffffffffda RBX: 00007ff5cf19c6c0 RCX: 00007ff5ce35e98e [ 1437.328577][ T32] RDX: 0000000000000020 RSI: 00007ff5cf19b000 RDI: 0000000000000003 [ 1437.328590][ T32] RBP: 0000000000000000 R08: 00007ff5cf19af04 R09: 000000000000000c [ 1437.328614][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1437.328627][ T32] R13: 00007ff5cf19af58 R14: 00007ff5cf19b000 R15: 0000000000000000 [ 1437.328659][ T32] [ 1437.328666][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1437.328700][ T32] [ 1437.328700][ T32] Showing all locks held in the system: [ 1437.328710][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 1437.328725][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1437.328776][ T32] #1: ffffffff9ad312d8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1437.328943][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1437.328958][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1437.329025][ T32] locks held by kworker/u8:5/158: 3, last CPU#1: [ 1437.329038][ T32] #0: ffff888029a90940 ((wq_completion)krds_cp_wq#17/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.329088][ T32] #1: ffffc90002fafc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.329139][ T32] #2: ffff888033716480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1437.329263][ T32] locks held by dhcpcd/5277: 1, on CPU#1: [ 1437.329278][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1437.329332][ T32] locks held by getty/5370: 2, on CPU#1: [ 1437.329345][ T32] #0: ffff8880293c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1437.329454][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1437.329505][ T32] locks held by syz-executor/5599: 3, last CPU#1: [ 1437.329519][ T32] #0: ffff8880764e0240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1437.329569][ T32] #1: ffff88807d74a960 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1437.329652][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1437.329705][ T32] locks held by kworker/1:9/7717: 1, last CPU#1: [ 1437.329719][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 1437.329769][ T32] locks held by kworker/1:10/7718: 3, on CPU#1: [ 1437.329784][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.329841][ T32] #1: ffffc9001019fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.329892][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1437.329948][ T32] locks held by kworker/u8:22/8596: 4, last CPU#1: [ 1437.329963][ T32] #0: ffff888029a90140 ((wq_completion)krds_cp_wq#17/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.330013][ T32] #1: ffffc90010307c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.330064][ T32] #2: ffff888033715b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1437.330118][ T32] #3: ffff88802c178fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1437.330198][ T32] locks held by kworker/u8:30/8605: 3, last CPU#1: [ 1437.330212][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.984903][ T32] #1: ffffc90010137c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.984959][ T32] #2: ffff888021f6e258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1437.985186][ T32] locks held by kworker/u8:34/8609: 3, last CPU#1: [ 1437.985202][ T32] #0: ffff888029a95140 ((wq_completion)krds_cp_wq#17/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.985252][ T32] #1: ffffc900059f7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.985304][ T32] #2: ffff888058a45b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1437.985363][ T32] locks held by kworker/u8:61/10967: 4, last CPU#1: [ 1437.985378][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.985427][ T32] #1: ffffc90006987c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.985477][ T32] #2: ffffffff90246248 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1437.985561][ T32] #3: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1437.985612][ T32] locks held by kworker/u8:72/10981: 4, last CPU#0: [ 1437.985627][ T32] #0: ffff888054583140 ((wq_completion)krds_cp_wq#17/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.985677][ T32] #1: ffffc90005bb7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.985726][ T32] #2: ffff888058a45e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1437.985778][ T32] #3: ffff888085c16e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1437.985834][ T32] locks held by kworker/1:17/22442: 3, on CPU#1: [ 1437.985849][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.985901][ T32] #1: ffffc9000f177c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.985955][ T32] #2: ffffffff905b8fa0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 1437.986009][ T32] locks held by kworker/u8:0/24396: 3, on CPU#1: [ 1437.986024][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986077][ T32] #1: ffffc90004a0fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986136][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1437.986187][ T32] locks held by kworker/1:0/26231: 3, on CPU#1: [ 1437.986201][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986254][ T32] #1: ffffc900000e7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986305][ T32] #2: ffffffff905b8fa0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 1437.986357][ T32] locks held by kworker/u8:2/27582: 3, last CPU#0: [ 1437.986371][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986420][ T32] #1: ffffc90005f57c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986471][ T32] #2: ffff888023719258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1437.986530][ T32] locks held by kworker/u8:3/27583: 3, last CPU#1: [ 1437.986544][ T32] #0: ffff888029a90940 ((wq_completion)krds_cp_wq#17/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986594][ T32] #1: ffffc90005f67c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986644][ T32] #2: ffff888033716480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1437.986703][ T32] locks held by udevd/30853: 1, on CPU#1: [ 1437.986717][ T32] #0: ffff888026cfe350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1437.986823][ T32] locks held by kworker/u8:9/32021: 3, last CPU#1: [ 1437.986837][ T32] #0: ffff888029a94940 ((wq_completion)krds_cp_wq#17/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986888][ T32] #1: ffffc9000d80fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.986938][ T32] #2: ffff888058a45880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1437.986993][ T32] locks held by kworker/u8:10/32023: 3, on CPU#1: [ 1437.987007][ T32] #0: ffff888032656140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987057][ T32] #1: ffffc9000d98fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987114][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1437.987199][ T32] locks held by kworker/u8:12/32025: 5, last CPU#1: [ 1437.987213][ T32] #0: ffff888029a90140 ((wq_completion)krds_cp_wq#17/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987263][ T32] #1: ffffc9000a587c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987314][ T32] #2: ffff888033715b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1437.987368][ T32] #3: ffff888033168fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1437.987411][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30 [ 1437.987454][ T32] locks held by kworker/u8:13/32026: 3, last CPU#1: [ 1437.987467][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987517][ T32] #1: ffffc9000a567c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987567][ T32] #2: ffff8880576a7258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1437.987630][ T32] locks held by kworker/1:12/475: 3, on CPU#1: [ 1437.987644][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987693][ T32] #1: ffffc9000dcbfc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987743][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 1437.987787][ T32] locks held by kworker/1:13/478: 3, on CPU#1: [ 1437.987800][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987851][ T32] #1: ffffc9000db0fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.987901][ T32] #2: ffffffff905b8fa0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 1437.987951][ T32] locks held by kworker/1:14/479: 3, on CPU#1: [ 1437.987965][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.988014][ T32] #1: ffffc9000dd8fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1437.988065][ T32] #2: ffffffff905b8fa0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 1437.988123][ T32] locks held by syz-executor/755: 2, on CPU#0: [ 1437.988137][ T32] #0: ffffffff8f9bbae8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1437.988192][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1437.988243][ T32] locks held by syz.7.5633/855: 3, on CPU#0: [ 1437.988257][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1437.988306][ T32] #1: ffffffff902b8d20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1437.988355][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_bearer_enable+0x17/0x40 [ 1437.988408][ T32] locks held by syz.1.5635/859: 2, on CPU#1: [ 1437.988421][ T32] #0: ffff888050609f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1437.988472][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x80/0x280 [ 1437.988524][ T32] locks held by syz.1.5635/860: 1, on CPU#1: [ 1437.988538][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29e0 [ 1437.988587][ T32] locks held by syz.1.5635/869: 1, on CPU#0: [ 1437.988600][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 1437.988651][ T32] locks held by syz.1.5635/871: 2, on CPU#1: [ 1437.988665][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1437.988712][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 1437.988766][ T32] locks held by syz.1.5635/873: 3, on CPU#0: [ 1437.988780][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1437.988826][ T32] #1: ffffffff905b8fa0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_cmd_new+0x65c/0xb00 [ 1437.988875][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_create+0x278/0x480 [ 1437.988929][ T32] locks held by syz.6.5638/886: 1, on CPU#1: [ 1437.988943][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1437.988992][ T32] locks held by syz.5.5639/889: 2, on CPU#1: [ 1437.989005][ T32] #0: ffff888091dbe6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1437.989049][ T32] #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1437.989106][ T32] locks held by syz.5.5639/890: 1, on CPU#1: [ 1437.989120][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1437.989169][ T32] locks held by syz-executor/902: 1, on CPU#1: [ 1437.989183][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989227][ T32] locks held by syz-executor/904: 1, on CPU#0: [ 1437.989241][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989285][ T32] locks held by syz-executor/910: 1, on CPU#1: [ 1437.989299][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989343][ T32] locks held by syz-executor/914: 1, on CPU#1: [ 1437.989357][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989401][ T32] locks held by syz-executor/926: 1, on CPU#1: [ 1437.989415][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989459][ T32] locks held by syz-executor/935: 1, on CPU#1: [ 1437.989473][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989517][ T32] locks held by syz-executor/941: 1, on CPU#1: [ 1437.989530][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989574][ T32] locks held by syz-executor/950: 1, on CPU#0: [ 1437.989588][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989632][ T32] locks held by syz-executor/953: 1, on CPU#1: [ 1437.989646][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989690][ T32] locks held by syz-executor/960: 2, last CPU#1: [ 1437.989704][ T32] #0: ffff888053f30f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1437.989758][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1437.989810][ T32] locks held by syz-executor/961: 1, on CPU#1: [ 1437.989824][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.989868][ T32] locks held by syz-executor/965: 2, last CPU#1: [ 1437.989882][ T32] #0: ffff888053f33440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1437.989934][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1437.989984][ T32] locks held by syz-executor/966: 2, last CPU#1: [ 1437.989997][ T32] #0: ffff888031d2e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1437.990048][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1437.990104][ T32] locks held by syz-executor/967: 2, last CPU#1: [ 1437.990118][ T32] #0: ffff888031d28f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1437.990169][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1437.990220][ T32] locks held by syz-executor/968: 1, on CPU#1: [ 1437.990233][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.990277][ T32] locks held by syz-executor/969: 1, on CPU#1: [ 1437.990290][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.990335][ T32] locks held by syz-executor/970: 1, on CPU#1: [ 1437.990349][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1437.990394][ T32] locks held by syz-executor/985: 2, last CPU#1: [ 1437.990409][ T32] #0: ffff888050e30f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1437.990460][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1437.990511][ T32] locks held by syz-executor/986: 1, on CPU#1: [ 1437.990524][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1438.189622][ T32] [ 1438.189633][ T32] ============================================= [ 1438.189633][ T32] [ 1438.189657][ T32] NMI backtrace for cpu 1 [ 1438.189673][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1438.189695][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1438.189708][ T32] Call Trace: [ 1438.189717][ T32] [ 1438.189727][ T32] dump_stack_lvl+0xe8/0x150 [ 1438.189761][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1438.189861][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1438.189895][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1438.189923][ T32] sys_info+0x135/0x170 [ 1438.189944][ T32] watchdog+0xfd7/0x1030 [ 1438.189973][ T32] ? watchdog+0x1c7/0x1030 [ 1438.190000][ T32] kthread+0x38b/0x480 [ 1438.190020][ T32] ? __pfx_watchdog+0x10/0x10 [ 1438.190038][ T32] ? __pfx_kthread+0x10/0x10 [ 1438.190058][ T32] ret_from_fork+0x514/0xb70 [ 1438.190094][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1438.190124][ T32] ? __switch_to+0xc89/0x1420 [ 1438.190154][ T32] ? __pfx_kthread+0x10/0x10 [ 1438.190174][ T32] ret_from_fork_asm+0x1a/0x30 [ 1438.190219][ T32] [ 1438.190236][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1438.190270][ C0] NMI backtrace for cpu 0 [ 1438.190284][ C0] CPU: 0 UID: 0 PID: 10981 Comm: kworker/u8:72 Not tainted syzkaller #0 PREEMPT(full) [ 1438.190305][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1438.190317][ C0] Workqueue: krds_cp_wq#17/0 rds_connect_worker [ 1438.190391][ C0] RIP: 0010:lock_acquire+0xb7/0x350 [ 1438.190412][ C0] Code: 67 5e f1 11 85 c0 0f 85 d5 00 00 00 65 48 8b 2d a7 19 f1 11 83 bd a4 0b 00 00 00 0f 85 c0 00 00 00 48 89 5c 24 08 4c 89 fb 9c <41> 5f fa 48 c7 c7 ba f9 41 8e e8 6a bd 42 0a 65 ff 05 2b 5e f1 11 [ 1438.190429][ C0] RSP: 0018:ffffc90000007ce0 EFLAGS: 00000046 [ 1438.190445][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 8000000000000104 [ 1438.190458][ C0] RDX: 0000000000000000 RSI: ffffffff8be89d80 RDI: 1ffffffff35946a6 [ 1438.190472][ C0] RBP: ffff888055fc5dc0 R08: 0000000000000001 R09: 0000000000000000 [ 1438.190485][ C0] R10: ffffc90000007db0 R11: fffff52000000fb8 R12: ffffffff9aca3530 [ 1438.190500][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 1438.190512][ C0] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 1438.190528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1438.190541][ C0] CR2: 0000564395477f40 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1438.190558][ C0] Call Trace: [ 1438.190566][ C0] [ 1438.190581][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1438.190606][ C0] ? debug_object_activate+0xb7/0x420 [ 1438.190673][ C0] debug_object_activate+0xb7/0x420 [ 1438.190702][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 1438.190731][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 1438.190766][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1438.190794][ C0] handle_softirqs+0x226/0x860 [ 1438.190819][ C0] ? do_softirq+0x77/0xd0 [ 1438.190843][ C0] ? __inet6_bind+0x301/0xf30 [ 1438.190862][ C0] do_softirq+0x77/0xd0 [ 1438.190883][ C0] [ 1438.190890][ C0] [ 1438.190897][ C0] __local_bh_enable_ip+0x100/0x140 [ 1438.190920][ C0] __inet6_bind+0x301/0xf30 [ 1438.190944][ C0] kernel_bind+0x13e/0x1c0 [ 1438.190972][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1438.191006][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1438.191036][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1438.191084][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1438.191115][ C0] ? lock_acquire+0x115/0x350 [ 1438.191139][ C0] rds_connect_worker+0x1d8/0x290 [ 1438.191162][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1438.191185][ C0] process_scheduled_works+0xc3d/0x1630 [ 1438.191224][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1438.191250][ C0] ? assign_work+0x3cf/0x5d0 [ 1438.191274][ C0] worker_thread+0xa47/0xfb0 [ 1438.191311][ C0] kthread+0x38b/0x480 [ 1438.191328][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1438.191351][ C0] ? __pfx_kthread+0x10/0x10 [ 1438.191368][ C0] ret_from_fork+0x514/0xb70 [ 1438.191396][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1438.191422][ C0] ? __switch_to+0xc89/0x1420 [ 1438.191447][ C0] ? __pfx_kthread+0x10/0x10 [ 1438.191464][ C0] ret_from_fork_asm+0x1a/0x30 [ 1438.191499][ C0] [ 1438.410774][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1443.000937][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1443.010037][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1443.020079][ T32] Call Trace: [ 1443.023345][ T32] [ 1443.026269][ T32] vpanic+0x56d/0xa60 [ 1443.030250][ T32] ? __pfx___schedule+0x10/0x10 [ 1443.035101][ T32] ? __pfx_vpanic+0x10/0x10 [ 1443.039607][ T32] panic+0xc5/0xd0 [ 1443.043321][ T32] ? __pfx_panic+0x10/0x10 [ 1443.047730][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1443.053185][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1443.058561][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1443.064710][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1443.070860][ T32] watchdog+0x1030/0x1030 [ 1443.075187][ T32] ? watchdog+0x1c7/0x1030 [ 1443.079598][ T32] kthread+0x38b/0x480 [ 1443.083656][ T32] ? __pfx_watchdog+0x10/0x10 [ 1443.088319][ T32] ? __pfx_kthread+0x10/0x10 [ 1443.092895][ T32] ret_from_fork+0x514/0xb70 [ 1443.097481][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1443.102590][ T32] ? __switch_to+0xc89/0x1420 [ 1443.107267][ T32] ? __pfx_kthread+0x10/0x10 [ 1443.111849][ T32] ret_from_fork_asm+0x1a/0x30 [ 1443.116623][ T32] [ 1443.119783][ T32] Kernel Offset: disabled [ 1443.124102][ T32] Rebooting in 86400 seconds..