last executing test programs: 7m57.952835205s ago: executing program 2 (id=6402): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x8, 0x70bd28, 0x9, {0x1, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) r1 = socket(0x28, 0x3, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1, 0x8, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x87efc3571c644e91}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004010) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x100, 0x70bd2b, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x60810) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000340)={0xa428, 0x8001, 0x80, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000380)={0x0, 0x8, 0x101}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x2}, &(0x7f0000000400)=0x8) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000500)={&(0x7f0000000480)='\x00', &(0x7f00000004c0)='&\\/}&^/*)[]}](({.$\\,\x00', 0x10001}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000540)=0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x1411, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x44040}, 0x48000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000740)='blkio.throttle.io_serviced\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000780)={r2, @in6={{0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0x5}}, [0xb, 0x3, 0x5, 0x4, 0x2, 0x1000, 0x8, 0x1, 0x5, 0x3, 0x9, 0x8, 0x0, 0x9, 0xb3]}, &(0x7f0000000880)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000008c0)={r7}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000940)={r2, 0x7ff, 0x20, 0x4, 0x7ff}, &(0x7f0000000980)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000009c0)={r2, 0xfffffff8, 0x5, 0x8, 0xc, 0x24f8, 0x30, 0x1812847e, {r8, @in6={{0xa, 0x4e23, 0xfffffff9, @empty, 0x64c0}}, 0x1000000, 0xef81, 0x7, 0x100, 0x4}}, &(0x7f0000000a80)=0xb0) ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f0000000ac0)={@empty, @remote}) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000b00)) clock_gettime(0x0, &(0x7f0000000b40)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000b80)={r9, 0x57c, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000bc0)=0x1, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000d80)={{r1, &(0x7f0000000c00)='%\x00', 0x90840, &(0x7f0000000c40)={@_ha_fsid={[0x3, 0x1]}, {0x4, 0x6, 0x200, 0xffffffffffffffff}}, 0x8, &(0x7f0000000c80), &(0x7f0000000cc0)=0x8001}, {[0x100, 0xf9f, 0xffff, 0x6]}, 0x9, 0x5c, &(0x7f0000000d00)=""/92}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r4) sendmsg$TIPC_CMD_SET_LINK_PRI(r10, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x68, r11, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xe8f0, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48080}, 0x884) connect$can_j1939(r6, &(0x7f0000000fc0)={0x1d, 0x0, 0x3, {0x1, 0xf0}, 0x1}, 0x18) 7m57.691948583s ago: executing program 2 (id=6406): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b004439ece93a079c5c1de585bb0180ffffffffffff616476f0ff0c000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 7m57.319714375s ago: executing program 2 (id=6410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x639f0}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c68100100008004cb4004400b30000a3069078ac1414bbac1414aa441ca2430000000000000007e000000200000006e0000002000000014e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r1, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x7, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r1, r5, 0x2f, 0x2008, 0x4, @value=r7}, 0x20) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={&(0x7f0000000440)="1b7adc32c80978a21097f355f608bb6f6c879b", &(0x7f00000005c0)=""/126, &(0x7f0000000800)="078b833d60d2172a57e669201af46026738a07ef8c943a8bda443f32e4f6ce8f1f5076b1ddb1ea375016643e56eba381905a978e500fec", &(0x7f0000000840)="a7b32d583162f4f2161877e54831ac049ecce17de6f384fd4276c1ea6ae9eac5f5d0d53d521dcf20b5219ee85c93cc53806b08ff5ee97bff0b796615c11365c431e349ded68bc9752e67118ffb6b5671e4d6ba1febfe2eb6d1d90fa7552062ccc361f6dbe999cd336147b0335b9876dd55ba00cad453144397fa262c56800fc7416212d03f0d490a1a08adefafb613aa68d750e5b3439dfc55e2e00a370617a4c261ca1cdc34d3ff2a551f9687a2c2d1250ef435f61035e9fb0f13c6908a6a04f053677fd8bc0aaa54f0e77ee97082b88b0b7c0c9b32041fd46bf97e756ae9a0f87f64c351c6369b1e7bb8e3f32d2c7935bcbbad9f", 0x2820, r9, 0x4}, 0x38) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0140000000000000018005000200000000000400010018000180140002007369743000"/46], 0x44}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r14, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000000200)={r12, 0x7, 0x3, 0x3}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r15, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x23, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x1, 0x1, 0x4, 0xc, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xb, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, r16}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7m56.789970852s ago: executing program 2 (id=6414): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x8, 0x25dfdbfc, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x44}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x120, 0x30, 0x101, 0x70bd2c, 0x25dfdbfe, {0x15}, [@typed={0x8, 0xf7, 0x0, 0x0, @pid=r4}, @typed={0xc, 0xc4, 0x0, 0x0, @u64=0x8ee1}, @typed={0x4, 0xdb}, @typed={0x14, 0x13b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="a7e4541953a8ae4e0559ea27c959bb103bd08ea85418f944d33675b82741189712ddf722246b69898509c7e2566c349dc71047ae1439386362af2f30da1e4e2c231c235b4bcf0389eaf124de6869a19c47840d27ca7abcbb72b8190b2640f8cd65c0f1c49a5d982cc500edc74e11409d40ea711c30159caf3849cfc518ced4d841f6f44618b097c64f8fe3eb53e027a71d97b1b10183d21accbb2a1e2f0d8918af08fa0410c91afa70fcf1f8688619d7507dba1c24a7648dfecb52e04ff435bf9a6d24d01cb2fe23fcee8a", @typed={0x14, 0xf8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x120}, 0x1, 0x0, 0x0, 0xc044}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x50) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x20004804) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r12, @ANYBLOB="01002dbd7000fedbda250800000000000180"], 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) (async, rerun: 64) r13 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) (async) r14 = socket(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m56.446079548s ago: executing program 2 (id=6417): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r4, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="2344d5058249bf0673b6a0ee9b0d9c527bf1cefbbadf6679035e18c003300fefcd48e66bf21e8a4e16b89c47936339d0a21006", 0x33}], 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000040)=0x283a6ce3, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r6, 0x0, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x50) 7m56.113934796s ago: executing program 2 (id=6422): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r1, &(0x7f0000001480)=""/4096, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x804) 7m40.857585972s ago: executing program 32 (id=6422): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r1, &(0x7f0000001480)=""/4096, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x804) 4m13.478430314s ago: executing program 3 (id=8592): ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'veth0_to_team\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 4m13.44578812s ago: executing program 3 (id=8593): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x3c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 4m13.33724198s ago: executing program 3 (id=8596): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @loopback}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m13.198248762s ago: executing program 3 (id=8600): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000500)={0xfffffffa, 0x7fff, 0xfffffe00, 0xf, 0x8, 0x0, 0x4}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x84f}]}}}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f00000004c0)={&(0x7f0000000200)=0x3, 0x5c3a, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000480)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000}, [@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x3f, 0x0, 0x41000, 0x62}, 0x94) 4m10.625138714s ago: executing program 3 (id=8609): r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000006400)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000d80)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000c80)=""/220, 0xdc}], 0x2, &(0x7f0000000dc0)=""/136, 0x88}, 0x401}, {{&(0x7f0000000e80)=@can, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000f00)=""/199, 0xc7}, {&(0x7f0000001000)=""/173, 0xad}, {&(0x7f00000010c0)=""/166, 0xa6}, {&(0x7f0000001180)=""/71, 0x47}, {&(0x7f0000001200)=""/2, 0x2}, {&(0x7f0000001240)=""/91, 0x5b}, {&(0x7f00000012c0)=""/231, 0xe7}], 0x7, &(0x7f0000001440)=""/166, 0xa6}, 0x9}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001500)=""/25, 0x19}, {&(0x7f0000001540)=""/17, 0x11}, {&(0x7f0000001580)=""/193, 0xc1}, {&(0x7f0000001680)=""/46, 0x2e}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/85, 0x55}], 0x6, &(0x7f0000002980)=""/113, 0x71}, 0x2}, {{&(0x7f0000002a00)=@caif=@rfm, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002a80)=""/4, 0x4}, {&(0x7f0000002ac0)=""/2, 0x2}, {&(0x7f0000002b00)=""/135, 0x87}, {&(0x7f0000002bc0)=""/97, 0x61}, {&(0x7f0000002c40)=""/87, 0x57}, {&(0x7f0000002cc0)=""/212, 0xd4}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/182, 0xb6}, {&(0x7f0000003e80)=""/57, 0x39}], 0x9, &(0x7f0000003f80)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1}, 0x7f}, {{&(0x7f0000005140)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000005200)=[{&(0x7f00000051c0)=""/5, 0x5}], 0x1, &(0x7f0000005240)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000006240)=@x25={0x9, @remote}, 0x80, &(0x7f0000006380)=[{&(0x7f00000062c0)=""/7, 0x7}, {&(0x7f0000006300)=""/111, 0x6f}], 0x2}, 0x24d}, {{0x0, 0x0, &(0x7f00000063c0)}, 0x8}], 0x8, 0x10002, &(0x7f0000006600)={0x0, 0x989680}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x4c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r3, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_regs}) sendto$inet6(r4, 0x0, 0x0, 0x8c0, 0xfffffffffffffffd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) 4m9.59024482s ago: executing program 3 (id=8623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x120, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0x50}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x4008804) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) readv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/195, 0xc3}], 0x1) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[], 0xfe33) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x4004804) 3m54.495905043s ago: executing program 33 (id=8623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x120, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0x50}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x4008804) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) readv(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/195, 0xc3}], 0x1) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[], 0xfe33) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x4004804) 2m31.025978426s ago: executing program 6 (id=9258): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000240)='u', 0x1}], 0x1, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f0000000680)="4eded3380304", 0x6) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(r1, &(0x7f00000028c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000400)="314457a8036e4ed92a3b8a12099cb3f5477eaa16b67595b7d29d859e51da30b5c0b12bbce96d717e15fc07b189f0ff7fcbdecb889aad72c2287e0c0e285ba476e9752e733f037d3c6b3a23c696c947b276d8c2b64c02fd187222875c63322eee4244329f6bcfee9d9aee640a373c1adc699dd9c8b1b3021f04854912cccfbde5ece8ec", 0x83}, {&(0x7f00000014c0)="5bb5d85e1a42a482aec4c0fff24b3056ff695ce755a1e7e8e2e72dee5c0d507765595f74c267132d7673c64ef175f12ebedcfb8e8c13e7a97d29ee1e7044acdaaae76893ba5d16f6731a2cf5c1", 0x4d}, {&(0x7f0000001680)="10358cba4c3259ff6d7581de26d655f54a2908d01f1dbae8c5e12190358476eafe9d070a6d3f06789b47063a35ddb026a7925e70b90e540db9d21bda1d12ad110ef97e434707dc7b9d4db74c81aaf86d1259b435f524cbdb1c265a73bdacc90f0a62c0f2ce34fb086552c34ab40706ecc9805ad56e4e2ff94e6e210c6d05131a91c8115ff5d8a2cf74902f614db9a6ec982398f422eb4985505bbd8824b6375eeefad5dbbc514b2743c8943ea0d84c3f9281d613f75e3ebbe47cb113184f11e622ce9d1d01ee31669fe61ad2dd9bce71c1b3affdce672408052884ff9fc94d31467d87a233a904b79dc15afd460deb0a81739de95f4d9551401d828cd078aa49dd074e662ec2f9b31fac6fdd1f260dd285bc51048e152d153a182affcadcecad930f0b0f73c2d7964f291f02f41248a508fbadab38ae5d1c067b8e458fd03a1584593840e0f16c66635ba96ad29b281ce651fa2b81581749d282268955fb2e4d73473bf2789b88620a57410123f0ee6160c4eb7b92ee711adf10f40c7c526fd6ce88220a523624847d7fb279b5717362f3bb049c72fe7555c5bb0eda78032f3ca36ac01e9373c57a3b100ce8440e24a9dd03f7dc8d46424aa60fa660c63b85bf02baffe22220b9e232cdf1e08757538e238e08c1e398b7791816bedd89299ecb8933d63759329952f6476cb69e0a983ccfe16cebac6ae61e94075f33c5f8c0ee2a86f8e6fb2c1d53362c056f6861c605feb66669a9d345a778e0ac61294f7c0d3ce2a4a7a676fd10fd6806860c1b535207f284ce7686f04d0916771177e5400681038939bf1f57db46f499ff8a3caae4fdecedf29ef7e8df808f516a1fee0c3851720b475edb5784bf53604c5fabf178767c185a0f32834d442ce877859adaedfe68ce59ba99660d61e54a29e92d7917682cf8dc19a744de579959d08b6282815b71ff4ba34f7a12a37c088f847070419558a0b6425e4fe1a19583ca950e1d2e0c9ef6c511884ea79c6a5a5a67cc284f3f5c906d305219075153da5fe59b72e45734eefd9985672b0948780b962f1636ef2228f822a3b7e9aeb4cf916dd6698736a4bd293df89229e62845ff0c1237536f009af0443ae801cfe8401dbf7948e8d39cd36857db39e58e93b289fdf8c13ec0ebdf730eca7e03388167a5505a4d9ad08e94b8777a3d8d0e6313be1e63f0c17a1fece987557198f8c9806a77348587eb4b531cb597aa088cef6d70912cc192f5a3779a5c8bf1929ce9532a284c588488818b8b1de7c8d377642edd89ce3fe2e8ab14060818b56d88f02adaf92442fd71a16dd9cd850da73900042c6cb37e68d2569d81a4ba994c95c9055e8bb2bde389d14b1951cbc15a39e396a6ba836f7df2f81988b482a32eb89176d6add6a2f6d76266e3a455d6978604cc8fd058fd65a05bd061fc0fdb2ce71823f10fc56cbaa1af40bb6ce71df3f9bb9d149f917f468b2e804a6f7f4239398d880b3b91d1390e6ee3bc10fe1d1bcfc0c8c87512086c77dc5db7000f5452fb4c703cb39bc44a72972239a5a81d754aa43706b0e9961c7c3c7941235d99d1946e97d8b7df511a477305e816a5a8a8c4fd38e9cb3d39843d51b5fcf0fa3e23e8385197c00e3afd74994a1e105a9beefba2705f467c9f5f770d5001120e34d2e9ef75a6c2c9d5c0e572e5d4265ff4fc6122efb416a40840e95f940bd0b6648d378a6b231a78ecd0dbde9dfb5cfb3f58a0f516650a7d2b335fa12c5b4bd4190686225a1c4094716ee5c151d4221b8f051302bb600426ed0a22d03e808be8342e31e0d458f253da59d79fa674b177217fa9f0a7a7617f06021341658319bcc9bf887d853222bcbf8ce481f491d2be26dfa393e7efd863e111969fdc140e29066f6faa20ad63e7f75fa066d9f73d683b5e9b7458076bcad2b36c9a9044dd5d92cb291a36a4dc1970cdc03965b639b5877ffad96ea4ebef32c11be2634a23ffa77790041bf86214260d2111b90cd829dfcdb79bc24e8f814cfbe9540c59e88e5dd46f6248c1ba93176fee0bc5c77c4f9c4336fcad9409b38b4fdfd25c6c2998f8ecc5e28c67e99c2bf48c3d7b49a27bbef07da5fbfc50dc0ae2745378fa874d8edb42f3203fb26201b3b5ea2d494214a8906ab4ffe4ea7f775a19f9c759edd88818f53eddb48447245fab8fa90c05988f6e2f350c410b71bcadb074214a2f4ac3b648af4e33591f638fd35e5ab64edb1703a21f233fb5923ab284fd0aa81475ecde701a6995c67a59b873fd838169e5c18c733c3af006614d98bb71c8d60619942376be6567ccd8857362ad55fd2cfb508c87c62ed5355c5ffcfb4083d5367cefc00d83e5a935bc28412ffe9e7349401a763859cc910b6b809de97fc9ba1b2c7bdb1928d776e953cbbf920b8eb2020603a879a768f8aa50af93ab674de825162131b1cdd565735bcdd3c2e5ba7212d140bceafecb58a42220694541396b43e19fa729ce3cbb0b8ada7f7bbf718955233c897eb35366bb51c279c006ec3f5776e6917fe05ac2aebf405cccfecdeeb9e1d4e93ae5f3f3588d870ebe3f9a79c36a26c7f99a5927b9f842978c4d707d466ea363ac5e1558b08453c331ffb9a68b67e19d26fd3b64d327002074d5d12cc3a47a00e12c7a6dbbb4857b88b27d0e699e13f36d48942c44e1ba243762e6794d28983e131e65c7e7d2da98b5c7306fb9f6bad8090cf85191f5e8437defd256935d5b9253f472bd0d17cdbfe00c12ad9d4faf89215806307802ca2104c3760722568a1750722f4340bb07385922506b0f94d22dc2af4c45111b1d6fcc111e879eac961c0b2072c054a61ce9b52530dd71b949d1c105f62d6cca30427bff4d119523ae5642ec1ccc3c5785c3d488185918b3f7abecc6740df9d3c0b18486cd698ff4b91c8d2d746475390f202f286bf786b1cd9acbc74cdc8f8481134b39893df5815aa36cf497a904c4dab6eb0448f8cbd54ae557cd9dc7bbb23809ae5f48fbba33f84c5225e125e34b811a1a3c2fbe044bbd703ebee1ffb4e013310b32bf83a6f90c42297a89a09e008f6a9959ac16c311dfe1ee6251bfe74b62adf6107e7f4ad0fa5cf72d4baee3cca86c408798e7cb803bccacbd89393866cf41bd638d7c925edb23c55b490d91c69a8692cc9a7d20b77a01d5b6dafb1bc52f69e5af1f7d665f2159f3f18482a1701719b04fe755038d6da39ff0c9a87c7de74be85399791e8c30822a8e960198ec681ac144ba693e11fec87e19630520071618cf623a1b601c5b715355be1e5ea9666c19d26ff37fb0256bea6392e8bf430cd206e99b7ec9c76eb898961ff1ffb0eec75485a5cc1e94298471a9afa234de4356755c8e9e1b075fc898aa3459187e2bf90f9b9ea072a1c4772cade78fe524a74d19e82ae8a0d935f75632b2398d3ceed171a5ab82edcdc005dd82a24398e0981bb80ad7f38467748c4003ba02433a0e94acafb70ae72c6e205932911fd5e4ec1c4212b45b8b46811df9272b45edbee258f43b72f61aa652496c59888eee4cead2e87945e7a6b9f58d1f3a7dc1cef55ee531161ed97421382b65ec42167789b3940883a57bb25f20c09711aed7bf4a3cc858fa0136c8ce1551db31be0f03630d6ddd384bdcc0c9284f3bad5da4c12740703a1fce4ab032491d209f9acf397c19337e38590da015cc308b5c23e68edb2dc1f836c70d3712982fbd8ec48bbc2ff369c7a1963af0cdea6b718d75ebf9baa118df8eb6a65113b34b8e0db82e2cd82fb07fdc042e942cbe52a5a1115dc8f445d77685dfb19a6d7300bfa20e42be0e4f390bfae3a00448702df9742ca607739683200102a2c9cf4ccc59deca76b57c43bdf4f5ab723ddf78c0463b58756a57ff065971d1b8a748b7c0dcda27e02600f0ed8ab3be19f027e97bc4f5f9268e7db6832b958f09f9859be3ef71f9640d31a354f6af9669aa6f7d2f58b09a26e220f6f41ba06a71fbed2ccd7e214be73d8f8cfa2ce5779395a4f1daad243e50d59eeaa03977b56c933acafd0515a9786af191261f5a9d35a9d18b3d0ea5223c3f5195c983658d5d9b0db86b205504a0647627151591afe5996794c3bd548f5d782549b4ae810ad54cef956985d49396f310d2707a19a916c2ac8407a14d2b16d793454983eed084deb998a8b5388ad0a1d5c74bc01203a87808250b97de940df3add5a3bfb0c701342dcde1d6a91660844bc90cdfae9f1eaa2898e5768d38e2f5e175525893961d130257a56d2dca3e9a12a518ee83597192dc400df28e14b41c14d261933635abe6b12cc6fd6638920727986f8d038814706e11dbe7aa733d9f1cc65004adb97d95188fd762ead0700bcf3d3807cffcf5b87d0b25f4a96738a51fe780359edc923ae7ed5d3436b22c9cc071d21a7f5f5b2589c7e93882d7776ec8d6c23c3e331156e1fcf02951bb99c6f3e59e4c29e03fbdbbce507dcf2cc4eba13e7f0f16c778b3afb96ff47c6493c1859227edfa5ecb9e743ed117e27855be34810c90486459480ccaa5a63b1c6592f0c7c381ddfc7099abea2305d91f19acce96bf8188203abb1137e3995c69503de6169d4455ebb7ce1f983e6f4c95101b2663a89a9654f0315d7427f22fbc65bb2592f52f5dc12b4ad155fd477e8b9333dfe91c9ece35f4df05ddffb001d1d2c36b4edd5c76d73af356de263a2a0c40059eaab87090a552e3bd3a6bbab12029bae2d9ba46af1ff75d0ed8d512bb5f3bc80ad596aad988a43e6f3de7ff1c898e39960d7234f3b7ccb92362b1532e5d41aa53439d67a98858e1c06db75a32e7e4a8121ccc72d3a7dd80d31154a1c4779ebabce8013fb79bdc2dea894c72c8b66a53779b6a6487aa5c1ca58a669432cc3a32ab26cb9ea366f105697143e6c05be2464f5aa0672e7d0d2bd449d94bc8775cb628ba4a290e3a987e52170a790a79838fd3e3ab50316dbaa24fd4f53829b9e175879bc51e4f2b37a764881e1303e28921ed96dec243ac179cb66415741e4693f8006e15e4ffe19fe5e27a0b35d14f2c68fa2aaa2ea176aefc051175dd440ec47f980e0d8e23780b67c038b4d0518a918ccfaa8a670fae4f7a7ba2b1f9f293150a3034324dddcd32fab4b34503dcf9f94d6d23c41a044a1b807f7d2f7613d0a5a20bf7a1a86a9f9d7ee6ea60188cc0646843c2d1a0f0bdf9c6f39c5461ce6f86016f62207a2c503cf610ab743e7135826df8f5efd13bad535938107df5da015c8a3bf7d1084119e4440a03be9c475f69faa37e404bfeff8c7bcc52aac6be37caab1d1197de9b3fd4ef27c4732a07623e4f9cc607730a4df8544ca395daa6ce6424cd53f2c118a921695bbfc9719cbc7b6707ae88bf7c1acaace5359f008c58a0bda2fa2727269df523675c0b509084d984bfc4eff2e16f7b4bcf067fe454ebfbfafeb9ac324fdc31bf33e9abd147954caa963653637adb462b00ffa7016661a6b7ef784420bbffdfadefa295e0b5574f3b9d25648f0e0817044fb2fbc48f702cd83789c1924ff82a215e7e2d3047e69310f1e954177fa492f45c0d258a24cdc60213fb32614643a1b6005f560682f82a69da29a9d09924ad4acee6bd2f9eacfd8c438e9fc85ae0ebc396200f997f683af298ad2bc5c00ed208a6bc57ecfa8909bc3e41e5ead456e04de983addcaea3e0dcc7ea836a8679c0a7017c6637a1a51dfa379d06be0ee67ae2dd99165e901121dbc037b7796c75c6c7f3c254fb3ed7ef268ed34d2c266e20331e281c5f5c6f9ff018426155a534c8c96d40a7d4c8ed3b013e0aedfd2d79edcd63da7f895dd77acfddaa0a", 0x1000}, {&(0x7f0000002680)="7e81942921d48b290bd3", 0xa}, {&(0x7f00000026c0)="a38eb282abb41e13aae3ef82934ece3a88ccd39c96110417b426495050a9b30a6370aeeef97e5be7cd13bbd82603e1b86209fdf42f32d45c723f0c662c1fff78788f8b0c532c11dd7615b55995ac9d62410f95bd", 0x54}], 0x5, &(0x7f0000002a40)=ANY=[@ANYBLOB="000000000000000017010000020000000000000098035a9e0c76869ecc1e62fe14ea9a2898fa6ab008a8a31375606b41c697236a240b46ea395695645e8cb8f206d4e4ad5ef14c7e0fe1d6a8cd1dd4ea3de57b4c35a44f3fe864b0bbc36fd15275bbd86d241315f0276f426b6240b3f25b8ef05fed9b5cd39140f99351b9d0cab25f9b5ba7d192a5ce1f4b2bb3e9ed85c8efda97261abc01af21fc957924f08de06baf37063dd8c8457df84b2600000000000000000000001701000003000000000000000000000079e9b9fdd4680e3db710a55a856ab057a48ff0c9225725d7d302f40e599ae0330aff56000765595f8c229e592464630fd48ab8f3a10c00d37133a49d"], 0x0, 0x4004010}], 0x2, 0x20044881) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r6 = socket(0x6, 0x2, 0x400000) splice(0xffffffffffffffff, &(0x7f0000000300)=0x3, r6, &(0x7f0000000340)=0x8, 0xe432, 0x1) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000002a00)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000240)="11", 0x1, 0x8010, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)=ANY=[@ANYRES16=r2, @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdfd63300000008000300", @ANYRES64=r5, @ANYBLOB], 0x1c}}, 0x8000) 2m29.421875184s ago: executing program 6 (id=9275): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r1}, 0x10) (async) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000017000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c0001800b0001006e756d67656e00001c0002800800024000000004080001400000000908000340000000010900010073797a300000000038000000020a05000000000000000000170000060900010073797a30000000000c00044000000000000000020900010073797a310000000004030000050a0103000000000000000005000005ff000c00558e808ddc630a32d1921a3776bccf8cf8a0865ab17572f524aa9faa4ba6d28e7e776ee3d2e02e217ea2137405b3c930b9cfedbf0a1b33ee610bc0064819e5f7931a7cc79f0aa5f128dda77cce1bc95903e132e01ab53b0ae904fdc5edc93e7992f4956f3eee5ca4f26c9e2cc87cb2d9ec55962769ecad412791aff4644a0e4d157d59057e969dd0345a9893b5eab3978069310dfec47c59845ca2a318c70ff3b35dfe5f665c413978ff21f2231d5acc9b476ba7dd993dde3454f3c80bd2d8e4964b6d43f6706a9d8687dd4f76f4926f2ce5d9f5e1ad18cb645d39aa654a3aa5bbfe555f326740114f3b4cadff728565a2f73b90a4c14bd3dde3b1000900010073797a3100000000400008800c00014000000000000000080c00014000000000000000060c000140ffffffffffffffff0c00014000000000000000030c00014000000000000000030c000240000000000000000108000a40000000040900010073797a30"], 0x46c}}, 0x0) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x13a5d29f, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000011142e020100000000000800"], 0x10}}, 0x4001) 2m29.101447084s ago: executing program 6 (id=9279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001740)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a7089182ea"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x18) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) (async) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@l2={0x1f, 0x8, @any, 0x3, 0x1}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="a6650d7b6472c8a10574ca036824d0a9d19d43c3bcec5e7aa35bb81c43342b9835b5268f6683db92006a9109beadc4d4b51a449c167bd18dab0bc8d05a9702d79b016c0fa1f0066fc624590dd39c28c55d908d5fbeb4938943abe46193d32e8f695cb4f91d88e5c42ce7fa034110fc5de7f786c8b1d91fc3bd67eed17faaea5312dc2c324b636a7e9e8179d3a5b7a390c6267ac5495d86d53e655773e2888e8e4dcca22e7d0f0e9d289320a8982d2b75b4dd49b12f716108a819c94ff60c2fb0b62d4f97b993e606bc3721f2e9068f7eca630d6149f13668c025e2d02ba05c146c8269e1d75a", 0xe6}], 0x2, &(0x7f0000001380)=[{0x20, 0x1, 0x8, "7646e0dc751700ad885ecc39"}, {0x58, 0x117, 0x7, "d84085e4ce2046157514f04515e1653b197c1b6f312fc9f75efe096457389a939d8426224b05f46b6443b4ee9c1d1ce9dd66d227336ab1950e35ed2191c88a6afc3a95cb5b24"}, {0x10, 0x119, 0x6}, {0x90, 0x10a, 0xa2be, "d90af91f6b7b8fc260b39440e8f79b565f61dc9be02a34a5be5a5bd07a1a9e0ddf6197ab6312fb3c704bcf8f24b41af80fa52c1bef5217e6a0998ccb5d5ca96bb267298b448d87ff40be4d004f52f073c5058224390c0c78eda3ec8cd820e366127f6f5d72477d1fa430e6986a6f69c9dea4f85dae5be2997a72498929d163"}, {0xf8, 0x1, 0x3, "9996ccfe8ff6db9b50d248cba182bc5034e4be09357259e40a8ff1f2ae5f1c985eed3dce727005e72e9461a9dbdeea8f84f63921536ff63f7c805175cdcbc02e9a2e9a66cff1b7ba0acb9c59e1517a91e84b82572eeff57cacd9f6da3f6c7c8fcaf502dc3842cbd26c14b5995c2fdff1cb56afd7931f407c3370bffa8f30d5382671d505003c6535ff995fa2460d902df2bc53eeaccb5171a4fdf217b1b8e0b0862bb6687df1390f4c70389b6a81c161ca58a32c4d7977899d04ebcf83db5b9285fa209e8beb12c8676047132a52b4e63bc18f114cb0d86a4cce34fd58cfcadfdb746c37c274"}], 0xffffffffffffff0e}, 0x4000805) 2m28.871991829s ago: executing program 6 (id=9282): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) 2m28.593856887s ago: executing program 6 (id=9284): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa35eeaf8b8e16a0c}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\\$-$'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x70}}, 0x4004000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000040fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000800"/112], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff93, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29, 0x0, 0xee00}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2c9, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000000)={0x7, 'gretap0\x00', {0x4}, 0x4}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000002c0)=0x7, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4048051}, 0x4800) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 2m28.135400237s ago: executing program 6 (id=9288): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) (async) unshare(0x24020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000180)) (async) pipe(&(0x7f0000000000)) poll(&(0x7f0000000080), 0x0, 0x2) 2m12.601875747s ago: executing program 34 (id=9288): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) (async) unshare(0x24020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000180)) (async) pipe(&(0x7f0000000000)) poll(&(0x7f0000000080), 0x0, 0x2) 9.172872611s ago: executing program 5 (id=10684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) splice(r1, 0x0, r1, &(0x7f0000000100)=0x4, 0x7, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@delqdisc={0x140, 0x25, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0xf}, {0x87b745c8e9d94dd0, 0xd}, {0x3, 0x4}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2e}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xacfcf77b2f69c563}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x68, 0x1, 0x16}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3000}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbe3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x24040011) recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="14000200fe80"], 0x48}}, 0x20004000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x50}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r8, @ANYBLOB="00042cbd7000fbdbdf25040000003c00018014000400fe8000000000000000000000000000aa0800060011000000060005004e22000014000400fe80000000000000000000000000001c0800030002000000050005000d00000008000200038000000800030008000000300006800600010002000000060005004e23000014000400fc01000000000000000000000000000108000300ffffffff0800040006000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20004}, 0x8801) sendmmsg(r5, &(0x7f0000000000), 0x400000000000047, 0x0) 9.001805637s ago: executing program 5 (id=10686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="40017100100000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 8.813741184s ago: executing program 5 (id=10690): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x10c, 0x41, 0x200, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @generic="0b7b462ebb69340612a765afcebf211484646ba1f4e7511be3f180ed6a2367acd521dd4b47cbfa791d6462da8f250a4f85f2f3fd67d4ece798b405b6385c76b88e7efa6886812245acf8b946bcfa50b08c78c6ac02344f804c0cb06b93c624e471479ae7cf11e0cd121698221b1f8e0da200c5ebd48ac84402b5d02f08cb372aa5c7a4e99c2f520cacc3167163c599371144eb5653a214d3060621b6e7a32d22865e3c8ce34b9bb73010ac3a2779f10898ffee5a804374e54242042b0da9fdb948251d44e9b29adf82b7f8829f0ef8869e920444dc0e1f"]}, 0x10c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 8.566283856s ago: executing program 5 (id=10693): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r0, 0xff, 0x3, &(0x7f0000000900)="7c73c6e9", 0x4) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) unshare(0x22020600) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) (rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) (async) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 7.825379131s ago: executing program 5 (id=10702): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x80}}, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) (async, rerun: 64) socketpair(0xf, 0x5, 0x1, &(0x7f00000003c0)) (rerun: 64) 4.838354065s ago: executing program 5 (id=10708): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) (async) 4.836745237s ago: executing program 4 (id=10710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1c, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRESHEX=r1], 0x38}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r5, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x64}, 0x1, 0x620b}, 0x0) 4.604099848s ago: executing program 4 (id=10714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4004081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4.350124643s ago: executing program 4 (id=10719): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa58, 0x8e8, 0xffffffff, 0xffffffff, 0x8e8, 0xffffffff, 0x9c0, 0xffffffff, 0xffffffff, 0x9c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xffffffff], [0xffffffff], 'bridge_slave_1\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x2, 0x3}, {0x80}, {0x4, 0x3}, {0x6, 0x2}, {0x250, 0x3}, {0x80, 0x2}, {0x800, 0x2}, {0x4}, {}, {0x2, 0x2}, {0x0, 0x2}], [{0x92, 0x5}, {0x7, 0x7}, {0xffffffff, 0x1}, {0x9, 0x98}, {0x9, 0x6}, {0xeb, 0x6}, {0x683f}, {0x0, 0xffff7d1d}, {0x36, 0x28000000}, {0x8}, {0x4, 0x400}], 0x0, 0x8}, {[{0x1a, 0x2}, {0x9a4c, 0x3}, {}, {0xfffffffd}, {0x4, 0x3}, {0x7, 0x2}, {0x9, 0x1}, {0x8, 0x3}, {0x26}, {0x8, 0x2}, {0x9, 0x3}], [{0x0, 0x443}, {0x4, 0x3}, {0x8, 0x7}, {0x7fffffff, 0x6}, {0x0, 0x5}, {0x4, 0x3}, {0xa5d, 0x7}, {0x22cd, 0x5}, {0xc0a5, 0x1}, {0x3, 0x8}, {0x8, 0xffff5503}], 0x8, 0x7}, {[{0xc5cf, 0x1}, {0x20000000, 0x2}, {0x40000004}, {0x2, 0x2}, {0xc, 0x3}, {0x40, 0x1}, {0x3, 0x2}, {0x1000}, {0x200, 0x3}, {0x3}, {0x6302}], [{0x61d, 0x2}, {0x81, 0x4}, {0x6, 0x10}, {0xfe, 0x7efb46fd}, {0x7ff, 0xd}, {0xfffffffb, 0x5}, {0x8, 0x7fffffff}, {0xa, 0x2}, {0xf978, 0x6cd}, {0x20fe6746, 0x6}, {0x0, 0x8}], 0xe, 0x9}, {[{0x6, 0x3}, {0x10, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x8a, 0x3}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x1}, {0x3}, {0xd, 0x2}, {0x0, 0x2}], [{0x0, 0x1}, {0xf, 0x572}, {0x3, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x1000, 0x6}, {0x7, 0x7b}, {0xa, 0x8}, {0x2, 0x2}, {0x7, 0x6}, {0xfffffffd, 0x7}], 0x1, 0xa}, {[{0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x400, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x5}, {0xffff, 0x2}, {0x6, 0x1}, {0xb}, {0x2, 0x1}], [{0x8, 0x6}, {0x8001, 0xfffffff6}, {0x4, 0x4}, {0x0, 0x7819a7b5}, {0x101, 0x2}, {0xb1, 0x9}, {}, {0x0, 0x3}, {0x0, 0x9}, {0x1ff}, {0xc, 0x9}], 0x2, 0x1}, {[{0x7fffffff, 0x3}, {0x1000}, {0x4, 0x2a2c5dee0a026e93}, {0x401, 0x3}, {0x3, 0x1}, {0x10001, 0x1}, {0x81, 0x3}, {0x6, 0x3}, {0x8, 0x3}, {0xfffff000}, {0x216, 0x2}], [{0x81, 0x4}, {0x7f, 0x3}, {0x4}, {0xfffffff7}, {0x99, 0x81}, {0x479, 0x3}, {0x3, 0x3}, {0xfffffffc, 0x80000001}, {0xa, 0x8}, {0x8, 0x2}, {0x7, 0x7fffffff}], 0x8, 0xb}, {[{0x7fffffff}, {0xfffffb5c, 0x2}, {0xfff}, {0x3, 0x3}, {0x101, 0x1}, {0x7f, 0x1}, {0x6, 0x3}, {0x8}, {0x9, 0x3}, {0x6, 0x2}, {0x6, 0x3}], [{0x4, 0x200}, {0x100, 0x20cc}, {0xc, 0x3}, {0x6f1c, 0xa0a}, {0x8, 0xfb}, {0x36, 0x1}, {0xc8, 0xe}, {0x2, 0x3}, {0x1}, {0x2, 0x6}, {0x2, 0x5}], 0x6, 0x9}, {[{0x101, 0x2}, {0x9, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {}, {0x4, 0x1}, {0x3, 0x2}, {0xfffffff4, 0x3}, {0x1, 0x2}], [{0x80000000, 0x9}, {0x3, 0x4}, {0x7, 0x7ff}, {0x2, 0x6}, {0x10000, 0x3}, {0xb, 0xa1}, {0x6, 0x25b}, {0x6, 0xe}, {0x8, 0xff7f}, {0x52c3cc9b, 0x6}, {0x80000000, 0x80}], 0x6, 0x8}, {[{0x7fff, 0x2}, {0xd5, 0x2}, {0x3ff, 0x1}, {0xfffff87e, 0x2}, {0x7fff, 0x2}, {0xd, 0x2}, {0x8000}, {0x1}, {0x2, 0x1}, {0xf72, 0x3}, {0xfff, 0x3}], [{0x7fffffff, 0x18d}, {0x7, 0x4}, {0x5, 0x7}, {0x9, 0x9543}, {0x9, 0x2}, {0xb51a, 0x401}, {0x4, 0x5}, {0x4, 0xe26f}, {0x0, 0x80}, {0x1, 0x6}, {0x60, 0x100}], 0x9, 0x2}, {[{0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x2}, {0x80}, {0x3, 0x2}, {0x9, 0x3}, {0x1, 0x2}, {0x6, 0x3}, {0x5}, {0xfffffff8, 0x3}], [{0x9, 0x80}, {0x4d6, 0x6}, {0x1, 0x3}, {0xd3, 0xfcf}, {0x3, 0x4}, {0xbd36, 0xca26}, {0x2, 0x102}, {0xed40, 0x5}, {0x5}, {0x1, 0x401}, {0x2a1c1ca8, 0x3}], 0x5, 0x7}, {[{0x1ee, 0x2}, {0x8}, {0x3, 0x1}, {0xa0000, 0x3}, {0x4, 0x3}, {0x4}, {0xfffffff7}, {0x4}, {0xfffffffa, 0x3}, {0x8600, 0x2}, {0xead4, 0x1}], [{0x3, 0x8001}, {0x4, 0x5}, {0x0, 0x1}, {0xa333, 0x5}, {0x5, 0x8}, {0x6, 0x37e9}, {0x2, 0xfffffffd}, {0x1, 0xa2d6}, {0x4, 0x2}, {0x4, 0x7}, {0x8001, 0x7}], 0x3, 0xb}], 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', '\x00', {}, {}, 0x0, 0xf7, 0x3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="5001", @ANYRES32=r1], 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x13c, 0x30, 0x9, 0x0, 0x0, {}, [{0x128, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}, @m_vlan={0xd8, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff243, 0x0, 0x20000000, 0x5, 0xfffff0d4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x79d}]}, {0x85, 0x6, "18b71932c16864fcb60ecd133bc5b098fa5bfaf60994b80f983f23665bb886b74521494d68b0a01f43b93f575fe91a7007b2996517fa7e8e19eb46e494fbaf9de6e0205c1810b9c83bfbd3c34967511c9bb285fc563f9404a3c0a8bea0b7c711dcb9c1a403788ca60f0dcd70aa239de2751531849fe7d5af1e2bc16057ddb59f42"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x13c}}, 0x0) 1.647479714s ago: executing program 7 (id=10763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020202000900010073797a09"], 0x2c}, 0x1, 0x40030000000000}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0xe24, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x420}, 0x420}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a3100000000300000000e0a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000", @ANYRES32=r2], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x20000894) 1.481693354s ago: executing program 7 (id=10766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local, 'batadv_slave_0\x00'}}, 0x1e) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 1.407076059s ago: executing program 7 (id=10769): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f00000086c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = accept(r1, &(0x7f00000003c0)=@hci, &(0x7f00000004c0)=0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000040)) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="4c22cd3b", 0x4}], 0x1}, 0xc4) r11 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f00000001c0)={0x6fb4, {{0xa, 0x4e21, 0x5, @mcast2, 0x8}}, 0x1}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f00000002c0)=r8}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 1.111596869s ago: executing program 4 (id=10771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a050000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000200)={0x0, 'syzkaller1\x00', {0xfffffffd}}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg(r3, &(0x7f00000014c0)={&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x7, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000)="e6", 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8598}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0xc05247624bbaf0d2}, 0x40880) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a050000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000200)={0x0, 'syzkaller1\x00', {0xfffffffd}}) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) sendmsg(r3, &(0x7f00000014c0)={&(0x7f0000001100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x7, @mcast2, 0x6}}}, 0x80, 0x0}, 0x20008000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000)="e6", 0x0}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8598}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0xc05247624bbaf0d2}, 0x40880) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) 1.046434218s ago: executing program 7 (id=10772): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r0, 0x5, 0x0, @val=@tcx}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="030000000400000005"], 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 998.439674ms ago: executing program 1 (id=10773): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) 913.018356ms ago: executing program 1 (id=10775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x1, 0x3784, 0x4e23, 0x5, 0x0, 0x10, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 884.213272ms ago: executing program 0 (id=10776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 803.531731ms ago: executing program 4 (id=10777): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x15) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)={0x14, 0x1, 0x9, 0x401}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x300}, {0xffff, 0xffff}, {0xa, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0) 790.46442ms ago: executing program 1 (id=10778): syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000001c0007800c00040000000000000000000c000300000400000000000004000280040004e201000580040002800c000280080020001f0000000000000000000000000d9f326b191667fb355ad2f064c1d33f158e18ee895d75ad4b11cfa3f51b9e3257c3dab94a7011f81f3ef950"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x6, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x27, 0x5}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x4, 0x2}, @datasec={0xd, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x7}, {0x5, 0x8000, 0x6}], '3'}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x7}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x30, 0x61, 0x61, 0x0]}}, &(0x7f0000000300)=""/93, 0x9a, 0x5d, 0x1, 0x2, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x5b, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @fallback=0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 727.935373ms ago: executing program 0 (id=10779): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="98010000100013070000000000002000fe8000000000000000000000000000aafe8000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x198}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @remote, 0x400}, 0x1c) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r7, &(0x7f0000009400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000000000001101000006000000b52e9e43fd6d01dcd53561a89a446e8673277a14c3c75b9f45fdf90e105a13dcd3356043fc8b0f40876209236f19503c196cd27fd4ef236704742ab846b0bf6665d42f084105a407147eb24171bfd57bef4ce0ade39db1bb444af69745f7f068a372ebe117f56d6a41bf035c4c9d06d41e62852a0605159ce4b45736d8b49de6b0923eb8fb2dff25aa07a3427860e54b79"], 0x10}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000014c0)="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", 0x2a1}], 0x1}}], 0x2, 0x80) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3) getpeername$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="01f2ff0f858bf1000000", @ANYRES16=r8, @ANYBLOB="100029bd7000fcdbdf25030000001400018008000700", @ANYRES32=r9, @ANYBLOB="0800060000000000040001800800040002000000080004000100000008000300030000000800020003000000140001800600010002000000060005004e22000004000680"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000080)={'ip6gre0\x00', 0x3}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x40, 0x7fffffff, 0x0, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 590.847936ms ago: executing program 1 (id=10780): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x40, r9, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x74) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r11, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r4, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r11, 0x1, 0xe9, 0x6, @local}, 0x14) 492.272269ms ago: executing program 0 (id=10781): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r3, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}}, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 424.099041ms ago: executing program 4 (id=10782): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000040)={@remote, @dev={0xac, 0x14, 0x14, 0x3c}, 0x1, "d5a33efde334072d4e5e385dc0454672c48449d469295d47d2baca8ba9fa4e4f", 0x3ff, 0x8, 0x8, 0x7}, 0x3c) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) (async) recvfrom$inet(r6, 0x0, 0x1f, 0x40000120, 0x0, 0xfffffe91) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) 190.197608ms ago: executing program 1 (id=10783): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000380), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x40000) ioctl$sock_inet_tcp_SIOCINQ(r5, 0xff02, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6b0ac4f378b3fdbdff000051360256160000000000950000"], &(0x7f0000000480)='GPL\x00'}, 0x80) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f0000000380), 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) socket(0xa, 0x3, 0xff) (async) sendmsg$inet6(r6, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x40000) (async) ioctl$sock_inet_tcp_SIOCINQ(r5, 0xff02, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6b0ac4f378b3fdbdff000051360256160000000000950000"], &(0x7f0000000480)='GPL\x00'}, 0x80) (async) 183.227586ms ago: executing program 7 (id=10784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@ipv6_newnexthop={0x2c, 0x68, 0x100, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x3, 0x0, 0xd}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x201, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x42010) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x40005}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000b00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000860}, 0x280000c4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x88, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xee1e}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4880) 161.543562ms ago: executing program 0 (id=10785): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2b, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x0, 0x7, 0x67}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_FAMILY={0xfe62, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c090}, 0x20000020) 30.811338ms ago: executing program 7 (id=10786): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x20200041}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a010400000900000000000a0000010900010073797a31000000004c00048020000180070001006374000014000280080002400000001708000140000000091800018007000100727400000c0002800800014000000009100001800a0001006c696d69740000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) 29.222012ms ago: executing program 1 (id=10787): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000500", @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20014040) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 28.274439ms ago: executing program 0 (id=10788): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x37, 0x301, 0x70bd27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) 0s ago: executing program 0 (id=10789): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4001) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x0, 0xa8, 0xffffffff, 0xa8, 0x150, 0x340, 0x340, 0xffffffff, 0x340, 0x340, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0xff, 0xffffff00, '\x00', 'ip_vti0\x00', {}, {0xff}, 0x2f, 0x3, 0x8}, 0x0, 0x70, 0xa8, 0x48}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @multicast1, 0xffffffff, 0xc1ec491f9ac4400f, 'gre0\x00', 'syzkaller0\x00', {0x1fe}, {0x456e362c4fbc4540}, 0x1, 0x1, 0x4a}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @port=0x4e24}}}}, {{@ip={@empty, @empty, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x1, 0x15}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x6, 0x7, 0x3, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x28}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "1542", 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x18, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @gre_key=0x7, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x2, @val=@tcx={@void, @value=r3}}, 0x99) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x20008000) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0xfffffffc, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ibute type 5 has an invalid length. [ 973.682242][ T6617] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9023'. [ 973.685998][ T6613] netlink: 'syz.4.9022': attribute type 5 has an invalid length. [ 973.702784][ T6613] netlink: 'syz.4.9022': attribute type 5 has an invalid length. [ 973.840661][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9024'. [ 974.258348][ T6642] veth3: entered promiscuous mode [ 974.269456][ T6642] veth3: entered allmulticast mode [ 974.280012][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9030'. [ 974.404476][T12381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.435301][ T6649] syzkaller0: entered promiscuous mode [ 974.448155][ T6649] syzkaller0: entered allmulticast mode [ 974.522154][ T6653] batadv_slave_1: entered promiscuous mode [ 974.623223][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9036'. [ 974.882634][ T6652] batadv_slave_1: left promiscuous mode [ 975.245071][ T8021] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 975.407702][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9050'. [ 975.419604][ T6725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.448230][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.653678][ T8021] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 975.843895][ T8021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.884832][ T6690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 976.136085][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9052'. [ 976.261880][ T6752] netlink: 'syz.1.9057': attribute type 11 has an invalid length. [ 976.343946][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9058'. [ 976.367294][ T6756] openvswitch: netlink: Key type 153 is out of range max 32 [ 976.380931][ T6754] syzkaller0: entered promiscuous mode [ 976.489548][T12379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.527277][ T6762] IPVS: length: 239 != 24 [ 976.620107][ T6763] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 976.621622][ T6762] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 977.152790][ T6795] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 977.190422][ T6795] bond2 (unregistering): Released all slaves [ 978.135414][ T6858] nbd: must specify a device to reconfigure [ 978.792651][ T6903] __nla_validate_parse: 10 callbacks suppressed [ 978.792669][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9103'. [ 978.939151][ T6914] validate_nla: 30 callbacks suppressed [ 978.939168][ T6914] netlink: 'syz.0.9107': attribute type 2 has an invalid length. [ 978.974460][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9107'. [ 979.038394][ T6914] team0: Port device team_slave_0 removed [ 979.258354][ T6933] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9110'. [ 979.423067][ T6946] netlink: 'syz.0.9118': attribute type 39 has an invalid length. [ 979.709435][ T6962] ieee802154 phy0 wpan0: encryption failed: -126 [ 979.728090][ T6962] netlink: 'syz.1.9120': attribute type 1 has an invalid length. [ 979.860262][ T6967] netlink: 'syz.6.9124': attribute type 1 has an invalid length. [ 979.869353][ T6967] netlink: 'syz.6.9124': attribute type 1 has an invalid length. [ 979.993038][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9125'. [ 980.290342][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9131'. [ 980.461373][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9130'. [ 981.019773][ T7015] xt_connbytes: Forcing CT accounting to be enabled [ 981.028492][ T7015] Cannot find set identified by id 65534 to match [ 983.027872][ T6993] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 983.029748][ T6988] tipc: Enabling of bearer rejected, failed to enable media [ 983.251167][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9134'. [ 983.346391][ T7029] syzkaller1: entered promiscuous mode [ 983.371160][ T7029] syzkaller1: entered allmulticast mode [ 983.397620][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9138'. [ 983.521413][ T7050] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9142'. [ 983.571496][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9142'. [ 983.782840][ T7054] team0: left allmulticast mode [ 983.789580][ T7054] team_slave_1: left allmulticast mode [ 983.798411][ T7054] team0: left promiscuous mode [ 983.825455][ T7054] team_slave_1: left promiscuous mode [ 983.839886][ T7054] bridge0: port 3(team0) entered disabled state [ 983.852254][ T7054] team0: Cannot enslave team device to itself [ 983.861827][ T7058] team0: Cannot enslave team device to itself [ 983.934077][ T7068] __nla_validate_parse: 2 callbacks suppressed [ 983.934093][ T7068] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9146'. [ 984.044885][ T7071] sctp: [Deprecated]: syz.6.9148 (pid 7071) Use of int in maxseg socket option. [ 984.044885][ T7071] Use struct sctp_assoc_value instead [ 984.072277][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9149'. [ 984.169779][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9151'. [ 984.238571][ T7084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9151'. [ 984.400917][ T7106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9156'. [ 984.489901][ T7106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9156'. [ 984.833223][ T1582] IPVS: starting estimator thread 0... [ 984.953533][ T7128] IPVS: using max 28 ests per chain, 67200 per kthread [ 985.446633][ T7155] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 985.612490][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9172'. [ 986.058920][ T7185] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9174'. [ 986.374790][T30539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 986.387934][T30539] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 986.397744][T30539] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 986.417060][T30539] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 986.425611][T30539] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 986.501561][ T7184] tipc: Enabled bearer , priority 0 [ 986.692909][ T7187] syzkaller0: entered promiscuous mode [ 986.699834][ T7187] syzkaller0: entered allmulticast mode [ 986.706841][ T7187] tipc: Resetting bearer [ 986.796203][ T7175] tipc: Resetting bearer [ 986.987111][ T30] audit: type=1804 audit(1784622986.305:31): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.9183" name="/newroot/66/cgroup.controllers" dev="tmpfs" ino=353 res=1 errno=0 [ 986.997398][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9184'. [ 987.029679][ T30] audit: type=1800 audit(1784622986.325:32): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9183" name="cgroup.controllers" dev="tmpfs" ino=353 res=0 errno=0 [ 987.413108][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9188'. [ 988.489942][T31471] Bluetooth: hci6: command tx timeout [ 989.506053][ T7175] tipc: Disabling bearer [ 989.551379][T12381] tipc: Node number set to 3758096385 [ 989.608859][T15549] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.658525][T15549] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.756785][ T7236] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9192'. [ 989.769774][ T7235] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9192'. [ 989.779468][ T7230] bridge0: port 3(ipvlan2) entered blocking state [ 989.822245][ T7230] bridge0: port 3(ipvlan2) entered disabled state [ 989.864690][ T7230] ipvlan2: entered allmulticast mode [ 989.880279][ T7230] bridge0: entered allmulticast mode [ 989.909184][ T7230] ipvlan2: left allmulticast mode [ 989.928686][ T7230] bridge0: left allmulticast mode [ 989.942524][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9191'. [ 989.977035][T15549] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.001709][T15549] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.078187][ T7252] netlink: ct family unspecified [ 990.102804][ T7252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.123846][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9191'. [ 990.167365][ T7241] netlink: 'syz.6.9191': attribute type 3 has an invalid length. [ 990.189554][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9191'. [ 990.212317][ T7241] netlink: 'syz.6.9191': attribute type 3 has an invalid length. [ 990.233824][ T7249] pim6reg: left allmulticast mode [ 990.287927][T15549] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.312171][T15549] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.411418][T15549] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.430445][ T7260] netlink: 'syz.6.9196': attribute type 1 has an invalid length. [ 990.446991][T15549] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.525843][ T7265] netlink: 'syz.1.9197': attribute type 10 has an invalid length. [ 990.544517][ T7260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 990.563957][T31471] Bluetooth: hci6: command tx timeout [ 990.637726][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9198'. [ 990.652346][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9198'. [ 990.911825][T15549] bridge_slave_1: left promiscuous mode [ 990.931589][T15549] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.939609][ T7281] xt_l2tp: invalid flags combination: 0 [ 990.951002][T15549] bridge_slave_0: left promiscuous mode [ 990.957379][T15549] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.332364][T15549] bond2 (unregistering): (slave geneve2): Releasing active interface [ 991.389296][T15549] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 991.405933][T15549] team0: Port device bridge4 removed [ 991.431424][T15549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.442519][T15549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.456978][T15549] bond0 (unregistering): Released all slaves [ 991.468871][T15549] bond1 (unregistering): Released all slaves [ 991.484753][T15549] bond2 (unregistering): Released all slaves [ 991.499847][T15549] bond3 (unregistering): Released all slaves [ 991.512834][T15549] bond4 (unregistering): Released all slaves [ 991.530331][T15549] bond5 (unregistering): Released all slaves [ 991.661214][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888045572c00: rx timeout, send abort [ 991.671597][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888045572c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 991.687297][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888045573000: rx timeout, send abort [ 991.696076][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888045573000: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 991.778122][ T7301] netlink: 'syz.0.9205': attribute type 1 has an invalid length. [ 992.072414][ T7302] bond1: (slave veth0_to_bond): making interface the new active one [ 992.082987][ T7302] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 992.092932][T15549] IPVS: stopping master sync thread 2152 ... [ 992.644879][T31471] Bluetooth: hci6: command tx timeout [ 992.771781][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9216'. [ 992.810690][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.030561][ T7355] 8021q: adding VLAN 0 to HW filter on device bond6 [ 993.082562][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9214'. [ 993.267173][ T7380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9219'. [ 993.328066][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 993.472286][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.483848][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.491712][ T7189] bridge_slave_0: entered allmulticast mode [ 993.528192][ T7189] bridge_slave_0: entered promiscuous mode [ 993.558290][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.597737][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.633197][ T7189] bridge_slave_1: entered allmulticast mode [ 993.683208][ T7189] bridge_slave_1: entered promiscuous mode [ 993.993267][ T7411] syzkaller0: entered promiscuous mode [ 994.030867][ T7411] syzkaller0: entered allmulticast mode [ 994.198896][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.442664][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.723985][T31471] Bluetooth: hci6: command tx timeout [ 994.733617][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 994.799683][T15549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.813188][T15549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.935512][T15549] vlan0: left allmulticast mode [ 994.953362][T15549] veth0_vlan: left allmulticast mode [ 994.962419][T15549] vlan0: left promiscuous mode [ 994.978253][T15549] veth0_macvtap: left promiscuous mode [ 994.995011][T15549] veth1_vlan: left promiscuous mode [ 995.007056][T15549] veth0_vlan: left promiscuous mode [ 995.057304][ T7471] __nla_validate_parse: 4 callbacks suppressed [ 995.057320][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9238'. [ 995.899468][T15549] team0 (unregistering): Port device team_slave_1 removed [ 996.055583][ T7189] team0: Port device team_slave_0 added [ 996.090911][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 996.124718][ T7189] team0: Port device team_slave_1 added [ 996.267456][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.280074][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.323383][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.351661][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.371310][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.391540][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9241'. [ 996.401445][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9239'. [ 996.416778][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.434990][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9239'. [ 996.460443][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9241'. [ 996.847196][ T7491] syzkaller0: entered promiscuous mode [ 996.859528][ T7491] syzkaller0: entered allmulticast mode [ 999.401912][ T7189] hsr_slave_0: entered promiscuous mode [ 999.413033][ T7189] hsr_slave_1: entered promiscuous mode [ 999.424223][ T7189] debugfs: 'hsr0' already exists in 'hsr' [ 999.430044][ T7189] Cannot create hsr debugfs directory [ 999.498301][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 999.517626][ T7526] netlink: 'syz.5.9247': attribute type 1 has an invalid length. [ 999.557982][ T7526] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9247'. [ 999.579690][T15549] IPVS: stop unused estimator thread 0... [ 999.992370][ T7544] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9248'. [ 1000.081211][ T7552] syzkaller0: entered promiscuous mode [ 1000.108227][ T7552] syzkaller0: entered allmulticast mode [ 1000.335671][ T7570] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9256'. [ 1000.371932][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9256'. [ 1000.547222][ T7581] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9259'. [ 1001.257855][ T7610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9267'. [ 1001.356343][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9267'. [ 1001.946770][ T7649] netlink: 'syz.0.9272': attribute type 1 has an invalid length. [ 1002.006691][ T7651] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9273'. [ 1002.037363][ T7651] xt_policy: neither incoming nor outgoing policy selected [ 1002.095115][ T7649] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1002.154140][ T7663] netlink: 388 bytes leftover after parsing attributes in process `syz.6.9275'. [ 1002.194903][ T7189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1002.220546][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1002.249647][ T7189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1002.310627][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1002.347942][ T7189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1002.369462][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.397871][ T7189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1002.436565][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1002.485877][ T7683] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1002.655816][ T7691] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1002.690381][ T7691] bond7 (unregistering): Released all slaves [ 1002.768506][ T7700] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9283'. [ 1002.871099][ T7700] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9283'. [ 1003.021917][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.142477][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9285'. [ 1003.222982][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.271231][ T7711] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1003.330128][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.337322][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.436466][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.443658][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.531070][ T7729] netlink: 'syz.6.9288': attribute type 7 has an invalid length. [ 1003.939284][ T7750] netlink: 'syz.0.9294': attribute type 24 has an invalid length. [ 1004.670633][ T7795] netlink: 'syz.0.9299': attribute type 1 has an invalid length. [ 1004.785741][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.836129][ T7803] xt_hashlimit: size too large, truncated to 1048576 [ 1005.232390][ T7819] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 1005.439965][ T7189] veth0_vlan: entered promiscuous mode [ 1005.509214][ T7189] veth1_vlan: entered promiscuous mode [ 1005.665992][ T7189] veth0_macvtap: entered promiscuous mode [ 1005.701307][ T7189] veth1_macvtap: entered promiscuous mode [ 1005.790431][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.833254][ T7849] rB: renamed from lo [ 1005.861362][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.916810][T15568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.946955][T15568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.988391][ T9070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.030142][ T9070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.261290][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9316'. [ 1006.301556][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.309899][ T7874] netlink: 'syz.5.9317': attribute type 1 has an invalid length. [ 1006.330688][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.339118][ T7875] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9317'. [ 1006.392656][ T7874] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1006.442669][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9316'. [ 1006.457650][T15549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.483098][T15549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.676254][ T7887] bond8: entered allmulticast mode [ 1006.682859][ T7887] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1006.705273][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9177'. [ 1006.716012][ T7893] 8021q: VLANs not supported on gre0 [ 1006.718708][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9319'. [ 1007.159846][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9324'. [ 1007.243581][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9327'. [ 1007.326439][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1007.335785][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1007.356808][ T7918] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 1007.379004][T15549] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.381896][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1007.398734][T15549] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.411963][T15549] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.437382][T15549] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.577656][ T7933] team_slave_1: entered promiscuous mode [ 1007.622155][ T7935] netlink: 'syz.4.9331': attribute type 27 has an invalid length. [ 1007.643241][ T7933] team_slave_1: left promiscuous mode [ 1007.761862][ T7945] mac80211_hwsim hwsim68 : renamed from wlan1 [ 1008.436047][ T7978] macsec0: entered promiscuous mode [ 1008.451801][ T7978] macsec0: entered allmulticast mode [ 1008.460509][ T7984] xt_l2tp: unknown flags: 10 [ 1008.513959][ T7971] macsec0: left promiscuous mode [ 1008.545513][ T7971] macsec0: left allmulticast mode [ 1008.579003][ T7987] tipc: Enabling of bearer rejected, media not registered [ 1009.771377][ T8059] ipvlan2: entered promiscuous mode [ 1009.911089][ T8067] netlink: 'syz.5.9368': attribute type 1 has an invalid length. [ 1009.956151][ T5287] veth0_vlan: left promiscuous mode [ 1010.117546][ T8067] bond10: option mode: invalid value (8) [ 1010.129527][ T8067] bond10 (unregistering): Released all slaves [ 1010.173424][T12383] veth0_vlan: entered promiscuous mode [ 1010.221789][ T8077] : renamed from dummy0 [ 1010.244630][T30539] Bluetooth: hci3: command 0x0406 tx timeout [ 1010.598889][ T8102] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1010.640236][ T8102] syzkaller1: linktype set to 823 [ 1010.678340][ T8111] tipc: Enabled bearer , priority 0 [ 1010.716940][ T8111] syzkaller0: entered promiscuous mode [ 1010.741628][ T8111] syzkaller0: entered allmulticast mode [ 1010.821020][ T8111] tipc: Resetting bearer [ 1010.921940][ T8106] tipc: Resetting bearer [ 1010.964246][ T8106] tipc: Disabling bearer [ 1011.135961][ T8134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1011.396900][ T8148] netlink: 'syz.4.9385': attribute type 1 has an invalid length. [ 1011.441183][ T8148] __nla_validate_parse: 17 callbacks suppressed [ 1011.441200][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9385'. [ 1011.596769][T30539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1011.615400][T30539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1011.631779][T30539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1011.640872][T30539] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1011.649746][T30539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1011.761008][ T8160] syzkaller0: entered promiscuous mode [ 1011.793251][ T8160] syzkaller0: entered allmulticast mode [ 1012.108386][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9392'. [ 1012.281878][T29587] bond4: (slave syz_tun): Removing an active aggregator [ 1012.291778][T29587] bond4: (slave syz_tun): Releasing backup interface [ 1012.311598][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1012.429216][ T8186] netlink: 'syz.4.9393': attribute type 12 has an invalid length. [ 1012.453442][ T8186] netlink: 'syz.4.9393': attribute type 29 has an invalid length. [ 1012.488480][ T8186] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1012.499923][ T8186] netlink: 'syz.4.9393': attribute type 1 has an invalid length. [ 1012.508570][ T8186] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1012.675453][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.687583][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.698787][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1012.880970][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.933082][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.963605][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1013.271003][ T8223] xt_nat: multiple ranges no longer supported [ 1013.320064][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.356741][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.409936][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1013.669389][ T8239] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1013.765546][T30539] Bluetooth: hci2: command tx timeout [ 1013.835929][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9407'. [ 1013.898271][ T8243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.898811][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.044656][ T13] bridge_slave_1: left allmulticast mode [ 1014.058874][ T13] bridge_slave_1: left promiscuous mode [ 1014.076462][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.117384][ T13] bridge_slave_0: left promiscuous mode [ 1014.136755][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.779524][ T13] dvmrp0: left allmulticast mode [ 1014.797498][ T13] pimreg: left allmulticast mode [ 1014.809054][ T13] pimreg3: left allmulticast mode [ 1015.263163][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1015.404573][ T13] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 1015.412672][ T13] bridge6 (unregistering): left promiscuous mode [ 1015.428468][ T13] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 1015.448644][ T13] bond1 (unregistering): Released all slaves [ 1015.473787][ T13] bond2 (unregistering): Released all slaves [ 1015.487318][ T13] bond3 (unregistering): Released all slaves [ 1015.504843][ T13] bond4 (unregistering): Released all slaves [ 1015.520674][ T13] bond5 (unregistering): Released all slaves [ 1015.548701][ T13] bond6 (unregistering): Released all slaves [ 1015.562290][ T13] bond7 (unregistering): Released all slaves [ 1015.593167][ T13] bond0 (unregistering): Released all slaves [ 1015.607972][ T13] bond8 (unregistering): Released all slaves [ 1015.621021][ T13] bond9 (unregistering): Released all slaves [ 1015.834944][ T13] tipc: Left network mode [ 1015.856816][T30539] Bluetooth: hci2: command tx timeout [ 1015.938653][ T8293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9415'. [ 1016.054207][ T8296] syzkaller0: entered promiscuous mode [ 1016.080286][ T8296] syzkaller0: entered allmulticast mode [ 1016.145640][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9416'. [ 1016.246975][ T8311] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9418'. [ 1016.296792][ T8311] netlink: 'syz.4.9418': attribute type 8 has an invalid length. [ 1016.323401][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9418'. [ 1016.369240][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.376943][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.834765][ T8327] ipt_rpfilter: unknown options [ 1017.140483][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.159778][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.184027][ T8151] bridge_slave_0: entered allmulticast mode [ 1017.185804][ T5740] IPVS: starting estimator thread 0... [ 1017.199559][ T8151] bridge_slave_0: entered promiscuous mode [ 1017.246451][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.281562][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.302623][ T8151] bridge_slave_1: entered allmulticast mode [ 1017.305902][ T8348] IPVS: using max 33 ests per chain, 79200 per kthread [ 1017.345616][ T8151] bridge_slave_1: entered promiscuous mode [ 1017.371681][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1017.561907][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.616997][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.866001][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.899198][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.924068][T30539] Bluetooth: hci2: command tx timeout [ 1018.069961][ T8151] team0: Port device team_slave_0 added [ 1018.116718][ T8151] team0: Port device team_slave_1 added [ 1018.259626][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.285880][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.319408][ T8377] netlink: 'syz.0.9431': attribute type 1 has an invalid length. [ 1018.343699][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.371624][ T13] hsr_slave_0: left promiscuous mode [ 1018.386561][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.411809][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.430427][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.445211][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.480539][ T13] veth1_macvtap: left promiscuous mode [ 1018.493114][ T13] veth0_macvtap: left promiscuous mode [ 1018.499202][ T13] veth1_vlan: left promiscuous mode [ 1018.505282][ T13] veth0_vlan: left promiscuous mode [ 1019.123120][T31471] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1019.152781][T31471] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1019.161267][T31471] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1019.178268][T31471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1019.190944][T31471] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1019.294639][ T8399] netlink: 'syz.4.9434': attribute type 11 has an invalid length. [ 1019.309746][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.317929][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.345946][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.372292][ T8377] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1019.378372][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1019.619574][ T8151] hsr_slave_0: entered promiscuous mode [ 1019.662258][ T8151] hsr_slave_1: entered promiscuous mode [ 1019.694421][ T8151] debugfs: 'hsr0' already exists in 'hsr' [ 1019.714418][ T8151] Cannot create hsr debugfs directory [ 1019.889023][ T8417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.011792][T30539] Bluetooth: hci2: command tx timeout [ 1020.083116][ T8422] netlink: 'syz.0.9438': attribute type 2 has an invalid length. [ 1020.147272][ T13] IPVS: stop unused estimator thread 0... [ 1020.249311][ T8422] syzkaller0: entered promiscuous mode [ 1020.255134][ T8422] syzkaller0: entered allmulticast mode [ 1021.294683][T30539] Bluetooth: hci0: command tx timeout [ 1022.843110][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1023.298744][ T8462] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1023.363965][T30539] Bluetooth: hci0: command tx timeout [ 1023.417809][ T8468] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 1023.886872][ T8484] macvlan2: entered promiscuous mode [ 1023.903888][ T8484] macvlan2: entered allmulticast mode [ 1023.928799][ T8490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9450'. [ 1025.066462][ T8151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1025.081716][ T8151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.128876][ T8151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1025.155166][ T8151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.171301][ T8151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1025.229326][ T8151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.268729][ T8151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1025.292550][ T8151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1025.312353][ T8541] netlink: 'syz.4.9459': attribute type 1 has an invalid length. [ 1025.447245][T30539] Bluetooth: hci0: command tx timeout [ 1025.457801][ T8552] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1025.496786][ T8552] bond2 (unregistering): Released all slaves [ 1025.605556][ T8563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9459'. [ 1025.682330][ T8560] netlink: 'syz.4.9459': attribute type 9 has an invalid length. [ 1025.710664][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9460'. [ 1025.726928][ T8560] netlink: 'syz.4.9459': attribute type 2 has an invalid length. [ 1025.751469][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9460'. [ 1025.752240][ T8560] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9459'. [ 1025.761054][ T8568] netlink: 'syz.0.9460': attribute type 3 has an invalid length. [ 1025.780613][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9460'. [ 1025.812200][ T8568] netlink: 'syz.0.9460': attribute type 3 has an invalid length. [ 1026.067393][ T8582] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1026.140869][ T8586] geneve2: entered promiscuous mode [ 1026.268986][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.277355][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.296297][ T8393] bridge_slave_0: entered allmulticast mode [ 1026.329457][ T8393] bridge_slave_0: entered promiscuous mode [ 1026.379431][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.407610][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.434175][ T8393] bridge_slave_1: entered allmulticast mode [ 1026.458805][ T8393] bridge_slave_1: entered promiscuous mode [ 1026.464910][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9467'. [ 1026.514302][ T8603] mac80211_hwsim hwsim91 : renamed from wlan1 (while UP) [ 1026.613218][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.666281][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.705683][ T8619] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1026.715256][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.778562][ T8624] netlink: 'syz.0.9469': attribute type 1 has an invalid length. [ 1026.815016][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.943870][ T8393] team0: Port device team_slave_0 added [ 1026.982698][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.989858][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.049248][ T8393] team0: Port device team_slave_1 added [ 1027.130012][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.137213][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.168298][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.195894][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.319728][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.378526][ T8657] netlink: 'syz.1.9476': attribute type 39 has an invalid length. [ 1027.415158][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.422216][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.473712][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.524895][T30539] Bluetooth: hci0: command tx timeout [ 1027.666033][ T8393] hsr_slave_0: entered promiscuous mode [ 1027.676932][ T8393] hsr_slave_1: entered promiscuous mode [ 1027.704282][ T8393] debugfs: 'hsr0' already exists in 'hsr' [ 1027.716714][ T8393] Cannot create hsr debugfs directory [ 1027.950462][ T8683] tipc: New replicast peer: 255.255.255.255 [ 1027.961559][ T8683] tipc: Enabled bearer , priority 10 [ 1028.140966][ T8693] netlink: 'syz.4.9484': attribute type 1 has an invalid length. [ 1028.238673][ T8693] bond2: entered promiscuous mode [ 1028.246009][ T8693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1028.343959][ T8697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1028.365895][ T8697] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1028.416639][ T8697] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1028.452200][ T8697] bond2: (slave ip6gre1): making interface the new active one [ 1028.470830][ T8697] ip6gre1: entered promiscuous mode [ 1028.487307][ T8697] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1028.690101][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9488'. [ 1028.699266][ T8721] bond0: (slave gre0): refused to change device type [ 1028.789158][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9490'. [ 1028.859217][ T8730] netlink: 'syz.1.9491': attribute type 1 has an invalid length. [ 1029.010508][ T8737] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1029.042738][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1029.082944][ T8741] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1029.145765][ T8733] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1029.201239][ T8733] bond7 (unregistering): Released all slaves [ 1029.328147][ T8754] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9494'. [ 1029.598399][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.622820][ T8393] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1029.661346][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.688829][ T8393] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1029.722265][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.826612][ T8775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1029.846732][ T8393] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1029.880236][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.909045][ T8393] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1029.965748][ T8393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.010972][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9498'. [ 1030.093067][ T8796] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9498'. [ 1030.346513][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.604550][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.628615][ T8151] veth0_vlan: entered promiscuous mode [ 1030.668030][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.675281][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.718086][ T8151] veth1_vlan: entered promiscuous mode [ 1030.723931][T30539] Bluetooth: hci4: command 0x0406 tx timeout [ 1030.749245][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9505'. [ 1030.762898][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.770107][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.031392][ T8151] veth0_macvtap: entered promiscuous mode [ 1031.058317][ T8151] veth1_macvtap: entered promiscuous mode [ 1031.147298][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.233020][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.311153][ T9067] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.343242][ T9067] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.378715][ T9067] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.408210][ T9067] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.802537][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.847933][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.029641][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.061296][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.081479][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9511'. [ 1032.703991][ T8916] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9512'. [ 1032.807445][ T8925] Bluetooth: MGMT ver 1.23 [ 1032.870351][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9513'. [ 1032.899053][ T8925] Cannot find add_set index 65532 as target [ 1033.080558][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.572220][ T8953] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1034.036501][ T8976] __nla_validate_parse: 4 callbacks suppressed [ 1034.036518][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9520'. [ 1034.072293][ T8975] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.9522'. [ 1034.159591][ T8978] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1034.268957][ T8393] veth0_vlan: entered promiscuous mode [ 1034.332357][ T8393] veth1_vlan: entered promiscuous mode [ 1034.519306][ T8393] veth0_macvtap: entered promiscuous mode [ 1034.578786][ T8393] veth1_macvtap: entered promiscuous mode [ 1034.671023][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.755037][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.821313][ T9068] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.857153][ T9068] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.883203][ T9068] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.945482][ T9068] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.226735][ T9011] syzkaller0: entered promiscuous mode [ 1035.249764][ T9011] syzkaller0: entered allmulticast mode [ 1035.281241][ T9017] x_tables: duplicate entry at hook 2 [ 1035.308834][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9532'. [ 1035.374449][ T9017] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1035.399037][ T9068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.423155][ T9068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.560041][ T9068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.598558][ T9068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.624147][ T9028] IPVS: Unknown mcast interface: caif0 [ 1035.782514][ T9027] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1035.980154][ T9043] netlink: 'syz.7.9432': attribute type 2 has an invalid length. [ 1036.156755][T30539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1036.171056][T30539] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1036.182088][T30539] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1036.192562][T30539] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1036.215080][T30539] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1037.440527][ T9088] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9545'. [ 1037.470574][ T9088] netlink: 'syz.5.9545': attribute type 7 has an invalid length. [ 1037.483170][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9545'. [ 1037.528332][ T9094] netlink: 'syz.4.9547': attribute type 33 has an invalid length. [ 1037.829242][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9551'. [ 1037.838674][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9551'. [ 1037.850987][ T9108] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9551'. [ 1037.868924][ T9110] netlink: 'syz.7.9552': attribute type 11 has an invalid length. [ 1037.880989][ T9110] netlink: 'syz.7.9552': attribute type 4 has an invalid length. [ 1037.899711][ T9110] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9552'. [ 1038.224376][ T9124] netlink: 'syz.4.9556': attribute type 2 has an invalid length. [ 1038.244758][T31471] Bluetooth: hci7: command tx timeout [ 1038.282438][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9556'. [ 1038.965997][ T9154] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1038.975706][ T9154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1039.032282][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.043083][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.066716][ T9047] bridge_slave_0: entered allmulticast mode [ 1039.094415][ T9047] bridge_slave_0: entered promiscuous mode [ 1039.105233][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.112371][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.119835][ T9047] bridge_slave_1: entered allmulticast mode [ 1039.128418][ T9047] bridge_slave_1: entered promiscuous mode [ 1039.215638][ T9047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.228236][ T9047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.260012][ T9047] team0: Port device team_slave_0 added [ 1039.269691][ T9047] team0: Port device team_slave_1 added [ 1039.303897][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.310864][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.337326][ T9047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.349192][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.356513][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.384187][ T9047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.431752][ T9047] hsr_slave_0: entered promiscuous mode [ 1039.438364][ T9047] hsr_slave_1: entered promiscuous mode [ 1039.445759][ T9047] debugfs: 'hsr0' already exists in 'hsr' [ 1039.451488][ T9047] Cannot create hsr debugfs directory [ 1039.589723][ T9047] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.666403][ T9047] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.739912][ T9047] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.817277][ T9047] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.323426][T30539] Bluetooth: hci7: command tx timeout [ 1040.861096][ T9110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1040.892617][ T9047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1040.930970][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1040.942762][ T9047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1040.975137][T30539] Bluetooth: hci5: command 0x0406 tx timeout [ 1041.056291][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.086761][ T9047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1041.100210][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.124941][ T9047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1041.158898][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1041.407511][ T9186] syzkaller0: entered promiscuous mode [ 1041.434544][ T9186] syzkaller0: entered allmulticast mode [ 1041.470863][ T9047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.548101][ T9047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.591526][T15564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.599005][T15564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.669800][ T9202] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9575'. [ 1041.705400][T15548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.712553][T15548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.404826][T31471] Bluetooth: hci7: command tx timeout [ 1042.432118][ T9225] veth3: entered allmulticast mode [ 1042.778733][ T9250] netlink: 'syz.7.9586': attribute type 20 has an invalid length. [ 1042.798623][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9586'. [ 1042.867038][ T9245] syzkaller0: entered promiscuous mode [ 1042.872653][ T9245] syzkaller0: entered allmulticast mode [ 1042.935145][ T9250] netlink: 'syz.7.9586': attribute type 20 has an invalid length. [ 1042.953704][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9586'. [ 1043.701859][ T9265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9590'. [ 1044.487533][T31471] Bluetooth: hci7: command tx timeout [ 1045.574237][T15548] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.587869][ T9258] lo: entered promiscuous mode [ 1045.597057][ T9258] tunl0: entered promiscuous mode [ 1045.605515][ T9258] gre0: entered promiscuous mode [ 1045.624375][ T9258] gretap0: entered promiscuous mode [ 1045.645426][ T9258] erspan0: entered promiscuous mode [ 1045.660524][ T9258] ip_vti0: entered promiscuous mode [ 1045.671142][T15548] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.711048][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9591'. [ 1045.713178][T15548] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.775719][ T9047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.799078][ T9273] netlink: 'syz.5.9593': attribute type 24 has an invalid length. [ 1045.811859][T15548] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.933728][ T9276] syzkaller0: entered promiscuous mode [ 1045.941962][ T9276] syzkaller0: entered allmulticast mode [ 1045.942263][ T9270] netlink: 'syz.0.9592': attribute type 1 has an invalid length. [ 1045.968115][ T9270] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1046.020629][ T9270] netlink: 'syz.0.9592': attribute type 2 has an invalid length. [ 1046.043234][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1046.166128][ T9047] veth0_vlan: entered promiscuous mode [ 1046.222639][ T9047] veth1_vlan: entered promiscuous mode [ 1046.334346][ T9047] veth0_macvtap: entered promiscuous mode [ 1046.366533][ T9047] veth1_macvtap: entered promiscuous mode [ 1046.449033][ T9047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.481448][ T9310] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9605'. [ 1046.506480][ T9047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.593159][ T9312] pim6reg: entered allmulticast mode [ 1046.620785][T15568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.638024][T15568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.710753][T15568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.741948][T15568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.017604][ T9067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.034325][ T9067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.253888][T15568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.280301][T15568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.494332][ T9351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.534636][ T9351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.550661][ T9351] bond0 (unregistering): Released all slaves [ 1048.044464][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9627'. [ 1048.054594][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9627'. [ 1048.107011][ T9391] netlink: 'syz.5.9628': attribute type 34 has an invalid length. [ 1048.132108][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9628'. [ 1048.159743][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9628'. [ 1048.180004][ T9393] netlink: 'syz.0.9629': attribute type 1 has an invalid length. [ 1048.240813][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9629'. [ 1048.265264][ T9391] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1048.410580][ T9393] bond2: entered promiscuous mode [ 1048.457366][ T9393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1048.468845][ T9410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9632'. [ 1048.489106][ T9397] bond2: entered allmulticast mode [ 1048.599725][ T9406] bond2: (slave bridge3): making interface the new active one [ 1048.612971][ T9406] bridge3: entered promiscuous mode [ 1048.619148][ T9406] bridge3: entered allmulticast mode [ 1048.626221][ T9406] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1048.916071][ T9425] netlink: 'syz.0.9637': attribute type 1 has an invalid length. [ 1048.993837][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9637'. [ 1049.150079][ T9435] team0: Port device syz_tun added [ 1049.320851][ T9442] Cannot find set identified by id 65534 to match [ 1049.632120][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9646'. [ 1049.977210][ T9473] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9653'. [ 1049.988635][ T9473] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9653'. [ 1050.002130][ T9473] tipc: Started in network mode [ 1050.025907][ T9473] tipc: Node identity 7f0003, cluster identity 4711 [ 1050.035797][ T9473] tipc: Node number set to 8323075 [ 1050.724779][ T1582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.378095][ T9551] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1051.507508][ T9533] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1051.548655][ T9561] tls_set_device_offload_rx: netdev not found [ 1051.764528][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.864449][ T9571] vlan2: entered promiscuous mode [ 1051.894949][ T9571] geneve1: entered promiscuous mode [ 1051.918376][ T9571] vlan2: entered allmulticast mode [ 1051.938531][ T9571] geneve1: entered allmulticast mode [ 1052.647680][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.648545][ T9621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.796697][ T9621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.805493][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.883832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.953831][ T9634] openvswitch: netlink: Flow key attr not present in new flow. [ 1053.156692][ T9640] netlink: 'syz.4.9704': attribute type 12 has an invalid length. [ 1053.195273][ T9640] netlink: 'syz.4.9704': attribute type 29 has an invalid length. [ 1053.226909][ T9654] netlink: 'syz.7.9708': attribute type 33 has an invalid length. [ 1053.235100][ T9640] __nla_validate_parse: 9 callbacks suppressed [ 1053.235114][ T9640] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9704'. [ 1053.251764][ T9640] netlink: 59 bytes leftover after parsing attributes in process `syz.4.9704'. [ 1053.284242][ T9654] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1053.309209][ T9654] bond1 (unregistering): Released all slaves [ 1053.480596][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9713'. [ 1053.556463][ T9680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9713'. [ 1053.643581][ T9685] netlink: 25 bytes leftover after parsing attributes in process `syz.0.9710'. [ 1053.849810][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.246501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.255789][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.579210][ T9671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.613105][ T9671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.915505][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.151872][ T9070] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.198824][ T9070] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.231240][ T5748] syz0: Port: 1 Link DOWN [ 1055.236921][ T9070] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.260237][ T9070] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.310944][ T9697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.800999][ T9722] net_ratelimit: 2 callbacks suppressed [ 1055.801015][ T9722] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1055.930643][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.938220][ T9730] sctp: [Deprecated]: syz.0.9728 (pid 9730) Use of int in max_burst socket option. [ 1055.938220][ T9730] Use struct sctp_assoc_value instead [ 1056.003650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.128665][ T9737] bond1: Unable to set up delay as MII monitoring is disabled [ 1056.155752][ T9737] bond1 (unregistering): Released all slaves [ 1056.177048][ T9748] netlink: 'syz.5.9733': attribute type 1 has an invalid length. [ 1056.207627][ T9748] netlink: 'syz.5.9733': attribute type 1 has an invalid length. [ 1056.220792][ T9748] netlink: 'syz.5.9733': attribute type 1 has an invalid length. [ 1056.230014][ T9748] netlink: 'syz.5.9733': attribute type 2 has an invalid length. [ 1056.231765][ T9738] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1056.239159][ T9753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9736'. [ 1056.239503][ T9748] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9733'. [ 1056.285270][ T9753] vlan3: entered promiscuous mode [ 1056.303112][ T9753] gretap0: entered promiscuous mode [ 1056.317512][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9737'. [ 1056.336105][ T9745] netlink: 'syz.7.9734': attribute type 2 has an invalid length. [ 1056.364738][ T9757] syz_tun: Device is already in use. [ 1056.459121][ T9763] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9739'. [ 1056.476975][ T9763] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9739'. [ 1056.493186][ T9763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.500928][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.594094][ T9771] netlink: 'syz.7.9740': attribute type 1 has an invalid length. [ 1056.606553][ T9774] Cannot find add_set index 0 as target [ 1056.795358][ T9782] netlink: 'syz.7.9747': attribute type 3 has an invalid length. [ 1056.805365][ T8021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.814410][T12383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.825170][ T9689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.964924][ T8021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.056069][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.085058][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.131464][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.166218][ T9797] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1057.194119][ T9797] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1057.222241][ T9797] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1057.275402][ T9797] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 1057.448443][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.489894][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.548552][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.580224][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.596496][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.627699][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.640622][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.672372][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.739513][ T9832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1057.783062][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.821585][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.858064][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.870332][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.885845][ T9797] lo speed is unknown, defaulting to 1000 [ 1057.997518][ T9847] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 1058.003646][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.132361][ T9854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1058.508407][ T9883] validate_nla: 2 callbacks suppressed [ 1058.508424][ T9883] netlink: 'syz.7.9776': attribute type 1 has an invalid length. [ 1058.524663][ T9883] netlink: 'syz.7.9776': attribute type 1 has an invalid length. [ 1058.716016][ T9898] __nla_validate_parse: 10 callbacks suppressed [ 1058.716034][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9779'. [ 1058.758790][ T9906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9777'. [ 1058.900614][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9783'. [ 1058.919063][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9783'. [ 1059.366354][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1059.613436][ T9956] ip6gre2: entered promiscuous mode [ 1059.625031][ T9956] ip6gre2: entered allmulticast mode [ 1059.859926][ T9968] syzkaller1: tun_chr_ioctl cmd 1079531642 [ 1060.155874][ T9986] syzkaller0: entered promiscuous mode [ 1060.181517][ T9986] syzkaller0: entered allmulticast mode [ 1060.325526][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9807'. [ 1060.595327][T10015] netlink: 'syz.1.9813': attribute type 1 has an invalid length. [ 1060.632618][T10015] netlink: 756 bytes leftover after parsing attributes in process `syz.1.9813'. [ 1060.653528][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9812'. [ 1060.687065][T10011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9812'. [ 1060.820598][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9816'. [ 1061.009520][T10037] macvlan0: entered promiscuous mode [ 1061.639299][T10076] netlink: 'syz.7.9832': attribute type 83 has an invalid length. [ 1061.779614][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9836'. [ 1061.916861][T10093] nbd: nbd7 already in use [ 1061.952261][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d328400: rx timeout, send abort [ 1062.123575][T10110] tipc: Started in network mode [ 1062.129694][T10110] tipc: Node identity 525d4d6e5b8, cluster identity 4711 [ 1062.137951][T10110] tipc: Enabled bearer , priority 0 [ 1062.151070][T10107] veth0_to_bridge: entered promiscuous mode [ 1062.159801][T10107] veth0_to_bridge: entered allmulticast mode [ 1062.184783][T10107] tipc: Resetting bearer [ 1062.198952][T10105] tipc: Disabling bearer [ 1062.258743][T10120] syzkaller0: entered promiscuous mode [ 1062.283554][T10120] syzkaller0: entered allmulticast mode [ 1062.452400][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d329800: rx timeout, send abort [ 1062.460923][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d328400: abort rx timeout. Force session deactivation [ 1062.960682][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d329800: abort rx timeout. Force session deactivation [ 1063.329799][T10177] netlink: 'syz.5.9862': attribute type 6 has an invalid length. [ 1063.850169][T10196] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1063.862004][T10196] netlink: 'syz.0.9868': attribute type 83 has an invalid length. [ 1063.888183][T10201] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1063.942487][T10203] netlink: 'syz.4.9867': attribute type 1 has an invalid length. [ 1064.063625][T10203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.088714][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e538c00: rx timeout, send abort [ 1064.097636][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e538c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1064.108281][T10203] __nla_validate_parse: 9 callbacks suppressed [ 1064.108296][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9867'. [ 1064.112262][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880545a5800: rx timeout, send abort [ 1064.135806][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880545a5800: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 1065.425147][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804d695c00: rx timeout, send abort [ 1065.433859][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804d695c00: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 1065.549955][T10249] netlink: 'syz.7.9881': attribute type 1 has an invalid length. [ 1065.553376][T10250] netlink: 'syz.7.9881': attribute type 1 has an invalid length. [ 1065.559491][T10249] netlink: 'syz.7.9881': attribute type 3 has an invalid length. [ 1065.567976][T10250] netlink: 'syz.7.9881': attribute type 3 has an invalid length. [ 1065.574331][T10249] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9881'. [ 1065.581571][T10250] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9881'. [ 1065.648537][T10249] IPv6: addrconf: prefix option has invalid lifetime [ 1065.655268][T10249] IPv6: addrconf: prefix option has invalid lifetime [ 1066.846208][T10194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.060315][T10265] x_tables: duplicate underflow at hook 3 [ 1067.079962][T10265] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9884'. [ 1067.129345][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9883'. [ 1067.137685][T10266] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9884'. [ 1067.179716][T10266] 0{X: renamed from gretap0 [ 1067.181543][T10272] netlink: 'syz.5.9883': attribute type 5 has an invalid length. [ 1067.206026][T10266] 0{X: entered allmulticast mode [ 1067.221628][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9883'. [ 1067.249498][T10266] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1067.323113][T10273] netlink: 'syz.1.9886': attribute type 27 has an invalid length. [ 1067.537695][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9890'. [ 1067.708141][T10303] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1067.812298][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9894'. [ 1067.864139][T10311] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1068.363045][ T5287] veth0_vlan: left promiscuous mode [ 1068.416982][ T5740] veth0_vlan: entered promiscuous mode [ 1068.674654][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9903'. [ 1069.009031][T10358] bond2 (unregistering): Released all slaves [ 1069.198078][T10366] netlink: 'syz.5.9907': attribute type 1 has an invalid length. [ 1069.627322][T10391] veth1_to_bond: entered allmulticast mode [ 1069.645532][T10391] veth1_to_bond: entered promiscuous mode [ 1069.665715][T10391] veth1_to_bond: left promiscuous mode [ 1069.706072][T10391] veth1_to_bond: left allmulticast mode [ 1069.875482][T10403] netlink: 'syz.7.9909': attribute type 7 has an invalid length. [ 1069.944552][T10403] netlink: 'syz.7.9909': attribute type 8 has an invalid length. [ 1069.971853][T10408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9912'. [ 1070.561915][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9922'. [ 1070.609843][T10439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1070.826997][T10452] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9925'. [ 1070.888015][T10452] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9925'. [ 1070.917208][T10452] tipc: Started in network mode [ 1070.938956][T10452] tipc: Node identity 7f0003, cluster identity 4711 [ 1070.947509][T10452] tipc: Node number set to 8323075 [ 1070.990158][T10454] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1071.017353][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.339584][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9935'. [ 1072.356405][T10504] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1072.382305][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9935'. [ 1072.391581][T10508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input14 [ 1072.392987][T10510] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1072.413511][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9938'. [ 1072.495614][ T5287] v: left promiscuous mode [ 1072.495632][T10510] netlink: 'syz.7.9936': attribute type 10 has an invalid length. [ 1072.566238][T10517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9940'. [ 1072.578557][ T8021] v: entered promiscuous mode [ 1072.658867][T10510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.719605][T10510] bond0: (slave team0): Enslaving as an active interface with an up link [ 1072.875023][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9943'. [ 1073.562453][T10581] ieee802154 phy0 wpan0: encryption failed: -126 [ 1073.842578][T10605] netlink: 'syz.4.9960': attribute type 21 has an invalid length. [ 1073.858049][T10602] netlink: 'syz.1.9961': attribute type 10 has an invalid length. [ 1073.938613][T10604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.002840][T10604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.052088][T10604] bond0 (unregistering): Released all slaves [ 1074.211661][T10597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.232742][T10597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.264226][T10597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.299945][T10597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.322478][T10597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.356364][T10597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1074.376101][T10597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1074.426802][T10597] veth1_vlan: left promiscuous mode [ 1074.440127][T10597] veth0_vlan: left promiscuous mode [ 1074.458182][T10597] veth0_vlan: entered promiscuous mode [ 1074.466650][T10597] veth1_vlan: entered promiscuous mode [ 1074.507236][T10597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.530191][T10597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.553162][T10597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1074.565576][T10597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1074.613043][T10597] veth3: left promiscuous mode [ 1074.643029][T10597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1074.653237][T10597] erspan0: entered promiscuous mode [ 1074.664031][T10597] geneve2: left promiscuous mode [ 1074.699086][T10597] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1074.761677][T10597] bond2: left promiscuous mode [ 1074.769109][T10597] bridge3: left promiscuous mode [ 1074.775719][T10597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1074.787466][T10597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1074.797389][T10597] vlan3: left promiscuous mode [ 1074.802215][T10597] 0{X: left promiscuous mode [ 1074.816297][T10613] tipc: Enabling of bearer rejected, failed to enable media [ 1074.839769][T15548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.846957][T15548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.886094][T15548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.893290][T15548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.043015][ T1582] syz0: Port: 1 Link ACTIVE [ 1075.048500][ T9889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.058974][ T8021] lo speed is unknown, defaulting to 1000 [ 1075.086617][ T9889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.096425][ T8021] sy2: Port: 1 Link ACTIVE [ 1075.176013][ T9889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.216746][ T9889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.968367][T10698] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20004 [ 1076.066610][T10707] __nla_validate_parse: 6 callbacks suppressed [ 1076.066626][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9983'. [ 1076.138693][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9983'. [ 1076.221891][T10703] netlink: 'syz.0.9981': attribute type 1 has an invalid length. [ 1076.259325][T10703] netlink: 'syz.0.9981': attribute type 1 has an invalid length. [ 1076.276653][T10716] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1076.298005][T10716] bond3 (unregistering): Released all slaves [ 1076.354452][T10722] netlink: 'syz.0.9988': attribute type 1 has an invalid length. [ 1076.364973][T10722] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9988'. [ 1076.369672][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9986'. [ 1076.374775][T10722] netlink: 'syz.0.9988': attribute type 1 has an invalid length. [ 1076.374793][T10722] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.9988'. [ 1076.436183][ T8015] IPVS: starting estimator thread 0... [ 1076.529008][T10729] IPVS: using max 33 ests per chain, 79200 per kthread [ 1076.583637][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9989'. [ 1076.599100][T10733] netlink: 'syz.0.9990': attribute type 1 has an invalid length. [ 1076.619429][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9989'. [ 1076.658334][T10733] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1076.699821][T10741] bond4: (slave geneve3): making interface the new active one [ 1076.710239][T10741] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1076.812124][T10748] openvswitch: netlink: IP tunnel dst address not specified [ 1076.884457][ T48] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1076.960529][ T9072] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1077.006160][ T9072] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1077.250579][ T9072] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1077.430846][T10781] "syz.7.10000" (10781) uses obsolete ecb(arc4) skcipher [ 1077.509977][T10780] syzkaller1: entered promiscuous mode [ 1077.558386][T10780] syzkaller1: entered allmulticast mode [ 1077.930603][T10806] vlan2: entered allmulticast mode [ 1077.974948][T10806] veth1_virt_wifi: entered allmulticast mode [ 1078.019086][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1078.154058][T10820] gretap1: entered promiscuous mode [ 1078.191142][T10820] batman_adv: batadv0: Adding interface: gretap1 [ 1078.218740][T10820] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.257239][T10820] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1078.783755][T10858] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10020'. [ 1078.791775][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10019'. [ 1078.845779][T10858] tipc: Enabling of bearer rejected, failed to enable media [ 1079.017704][T10870] netlink: 'syz.1.10024': attribute type 11 has an invalid length. [ 1079.039940][T10872] netlink: 'syz.4.10025': attribute type 16 has an invalid length. [ 1079.049566][T10872] netlink: 'syz.4.10025': attribute type 3 has an invalid length. [ 1079.099600][T10870] netlink: 'syz.1.10024': attribute type 1 has an invalid length. [ 1079.124074][T10870] netlink: 'syz.1.10024': attribute type 1 has an invalid length. [ 1079.266893][T10882] netlink: 'syz.4.10029': attribute type 10 has an invalid length. [ 1079.425195][T10882] geneve2: entered promiscuous mode [ 1079.443834][T10882] geneve2: entered allmulticast mode [ 1079.580416][T10901] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1079.949382][T10923] bridge0: port 3(dummy0) entered blocking state [ 1079.964938][T10923] bridge0: port 3(dummy0) entered disabled state [ 1079.980563][T10923] dummy0: entered allmulticast mode [ 1079.990788][T10923] dummy0: entered promiscuous mode [ 1079.996789][T10923] bridge0: port 3(dummy0) entered blocking state [ 1080.005004][T10923] bridge0: port 3(dummy0) entered forwarding state [ 1080.115713][T10929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1080.129918][T10923] bond1: (slave veth0_to_bond): making interface the new active one [ 1080.139747][T10923] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1080.180513][T10923] bond1: entered promiscuous mode [ 1080.191861][T10923] veth0_to_bond: entered promiscuous mode [ 1080.201879][T10923] bond1: entered allmulticast mode [ 1080.208080][T10923] veth0_to_bond: entered allmulticast mode [ 1080.784622][T10972] openvswitch: netlink: Actions may not be safe on all matching packets [ 1080.819101][T10977] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 1080.881130][T10972] syz.4.10055: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1080.919589][T10972] CPU: 0 UID: 0 PID: 10972 Comm: syz.4.10055 Not tainted syzkaller #0 PREEMPT(full) [ 1080.919616][T10972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1080.919628][T10972] Call Trace: [ 1080.919636][T10972] [ 1080.919644][T10972] dump_stack_lvl+0xe8/0x150 [ 1080.919681][T10972] warn_alloc+0x24c/0x270 [ 1080.919708][T10972] ? stack_depot_save_flags+0x33/0x800 [ 1080.919736][T10972] ? __pfx_warn_alloc+0x10/0x10 [ 1080.919761][T10972] ? kasan_save_track+0x3e/0x80 [ 1080.919782][T10972] ? __kasan_kmalloc+0x93/0xb0 [ 1080.919812][T10972] ? xsk_setsockopt+0x52a/0x960 [ 1080.919837][T10972] ? do_sock_setsockopt+0x17c/0x1b0 [ 1080.919866][T10972] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1080.919892][T10972] ? do_syscall_64+0x174/0x580 [ 1080.919909][T10972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.919937][T10972] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1080.919985][T10972] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1080.920010][T10972] ? __kasan_kmalloc+0x93/0xb0 [ 1080.920033][T10972] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1080.920056][T10972] ? __kmalloc_cache_noprof+0x150/0x660 [ 1080.920080][T10972] vmalloc_user_noprof+0xad/0xe0 [ 1080.920103][T10972] ? xskq_create+0xbf/0x170 [ 1080.920127][T10972] xskq_create+0xbf/0x170 [ 1080.920157][T10972] xsk_init_queue+0x8a/0xe0 [ 1080.920185][T10972] xsk_setsockopt+0x52a/0x960 [ 1080.920210][T10972] ? __fget_files+0x2a/0x420 [ 1080.920235][T10972] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1080.920261][T10972] ? __pfx_aa_sk_perm+0x10/0x10 [ 1080.920303][T10972] ? aa_sock_opt_perm+0xff/0x1a0 [ 1080.920326][T10972] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1080.920347][T10972] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1080.920374][T10972] do_sock_setsockopt+0x17c/0x1b0 [ 1080.920405][T10972] __x64_sys_setsockopt+0x13d/0x1b0 [ 1080.920433][T10972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.920453][T10972] do_syscall_64+0x174/0x580 [ 1080.920469][T10972] ? trace_irq_disable+0x3b/0x140 [ 1080.920492][T10972] ? clear_bhb_loop+0x40/0x90 [ 1080.920515][T10972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.920533][T10972] RIP: 0033:0x7f70faf9de99 [ 1080.920551][T10972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.920567][T10972] RSP: 002b:00007f70fbe68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1080.920588][T10972] RAX: ffffffffffffffda RBX: 00007f70fb225fa0 RCX: 00007f70faf9de99 [ 1080.920602][T10972] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1080.920614][T10972] RBP: 00007f70fb033eaf R08: 0000000000000004 R09: 0000000000000000 [ 1080.920626][T10972] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.920636][T10972] R13: 00007f70fb226038 R14: 00007f70fb225fa0 R15: 00007ffccd87b4e8 [ 1080.920666][T10972] [ 1080.920696][T10972] Mem-Info: [ 1081.036741][T10988] syzkaller0: entered promiscuous mode [ 1081.123672][T10987] __nla_validate_parse: 11 callbacks suppressed [ 1081.123688][T10987] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10055'. [ 1081.172301][T10972] active_anon:6837 inactive_anon:0 isolated_anon:0 [ 1081.172301][T10972] active_file:3 inactive_file:43693 isolated_file:0 [ 1081.172301][T10972] unevictable:768 dirty:79 writeback:0 [ 1081.172301][T10972] slab_reclaimable:13843 slab_unreclaimable:153028 [ 1081.172301][T10972] mapped:39917 shmem:1307 pagetables:3781 [ 1081.172301][T10972] sec_pagetables:0 bounce:0 [ 1081.172301][T10972] kernel_misc_reclaimable:0 [ 1081.172301][T10972] free:1232931 free_pcp:9371 free_cma:0 [ 1081.182259][T10988] syzkaller0: entered allmulticast mode [ 1081.284058][T10972] Node 0 active_anon:27448kB inactive_anon:0kB active_file:12kB inactive_file:174568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160768kB dirty:316kB writeback:0kB shmem:3692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20136kB pagetables:14976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1081.324411][T10994] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10059'. [ 1081.378750][T10970] tunl0: entered promiscuous mode [ 1081.391899][T10972] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1081.404333][T10970] validate_nla: 6 callbacks suppressed [ 1081.404347][T10970] netlink: 'syz.0.10054': attribute type 4 has an invalid length. [ 1081.473127][T10996] ieee802154 phy0 wpan0: encryption failed: -126 [ 1081.490176][T10970] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10054'. [ 1081.500053][T10972] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1081.554798][T10972] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1081.567519][T10972] Node 0 DMA32 free:980996kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27548kB inactive_anon:0kB active_file:12kB inactive_file:174568kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2548684kB mlocked:0kB bounce:0kB free_pcp:29660kB local_pcp:19784kB free_cma:0kB [ 1081.609952][T10972] lowmem_reserve[]: 0 0 0 0 0 [ 1081.625529][T10972] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1081.740177][T10972] lowmem_reserve[]: 0 0 0 0 0 [ 1081.775215][T10972] Node 1 Normal free:3931072kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6040kB local_pcp:6040kB free_cma:0kB [ 1081.835663][T10972] lowmem_reserve[]: 0 0 0 0 0 [ 1081.856035][T10972] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 1081.894839][T10972] Node 0 DMA32: 1626*4kB (UME) 854*8kB (UME) 416*16kB (UM) 344*32kB (UME) 232*64kB (UME) 239*128kB (UM) 407*256kB (UME) 134*512kB (UM) 108*1024kB (UM) 7*2048kB (UM) 148*4096kB (UM) = 980376kB [ 1081.917413][T10972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1082.017795][T10972] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3931072kB [ 1082.075185][T10972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.107239][T10972] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1082.156616][T10972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.191049][T11023] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10065'. [ 1082.202406][T10972] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1082.225719][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10067'. [ 1082.229918][T10972] 44999 total pagecache pages [ 1082.261657][T10972] 0 pages in swap cache [ 1082.277154][T10972] Free swap = 124996kB [ 1082.288469][T10972] Total swap = 124996kB [ 1082.301458][T10972] 2097051 pages RAM [ 1082.307969][T11026] netlink: 68 bytes leftover after parsing attributes in process `syz.7.10067'. [ 1082.326026][T10972] 0 pages HighMem/MovableOnly [ 1082.340775][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10067'. [ 1082.340888][T10972] 428200 pages reserved [ 1082.358910][T10972] 0 pages cma reserved [ 1082.683780][T11039] netlink: 'syz.0.10070': attribute type 3 has an invalid length. [ 1082.735269][T11050] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10073'. [ 1082.867131][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10076'. [ 1083.598170][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10086'. [ 1083.896163][T11081] netlink: 'syz.7.10080': attribute type 16 has an invalid length. [ 1083.913138][T11117] syzkaller0: entered promiscuous mode [ 1083.914336][T11121] sctp: [Deprecated]: syz.0.10090 (pid 11121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1083.914336][T11121] Use struct sctp_sack_info instead [ 1083.924032][T11117] syzkaller0: entered allmulticast mode [ 1083.977731][T11125] syzkaller1: entered promiscuous mode [ 1083.993994][T11125] syzkaller1: entered allmulticast mode [ 1084.094714][T11130] netlink: 'syz.0.10092': attribute type 21 has an invalid length. [ 1085.236656][T11193] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 1085.388167][T11203] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1087.806139][T11168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1087.816028][T11179] __nla_validate_parse: 12 callbacks suppressed [ 1087.816044][T11179] netlink: 524 bytes leftover after parsing attributes in process `syz.7.10106'. [ 1088.045772][T11246] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1088.779910][T11267] openvswitch: netlink: Multiple metadata blocks provided [ 1089.056715][T11284] netlink: 524 bytes leftover after parsing attributes in process `syz.1.10129'. [ 1089.302297][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804fe4ec00: rx timeout, send abort [ 1089.312036][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804fe4ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1089.895028][T11303] ip6_vti0: Master is either lo or non-ether device [ 1090.199592][T11312] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 1090.288081][T11321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1090.617780][T11337] netlink: 252 bytes leftover after parsing attributes in process `syz.7.10143'. [ 1090.912977][T11348] netlink: 524 bytes leftover after parsing attributes in process `syz.5.10145'. [ 1090.977042][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10146'. [ 1091.159809][T11350] xt_TCPMSS: Only works on TCP SYN packets [ 1091.250280][T11352] bridge_slave_1: left allmulticast mode [ 1091.256873][T11352] bridge_slave_1: left promiscuous mode [ 1091.263029][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.294587][T11352] bridge_slave_0: left allmulticast mode [ 1091.314629][T11352] bridge_slave_0: left promiscuous mode [ 1091.325942][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.465836][T11371] sctp: [Deprecated]: syz.4.10153 (pid 11371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1091.465836][T11371] Use struct sctp_sack_info instead [ 1091.489224][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10151'. [ 1091.510652][T11370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10153'. [ 1091.667815][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10155'. [ 1091.999032][T11383] syzkaller0: entered promiscuous mode [ 1092.022391][T11383] syzkaller0: entered allmulticast mode [ 1092.053504][T11399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10162'. [ 1092.165969][T11401] x_tables: duplicate entry at hook 1 [ 1092.175585][T11402] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10162'. [ 1092.537308][T11413] netlink: 'syz.1.10167': attribute type 5 has an invalid length. [ 1093.588576][T11425] No such timeout policy "syz0" [ 1093.600733][T11425] No such timeout policy "syz0" [ 1093.619047][T11425] No such timeout policy "syz0" [ 1093.631370][T11425] No such timeout policy "syz0" [ 1093.644605][T11425] No such timeout policy "syz0" [ 1093.657730][T11425] No such timeout policy "syz0" [ 1093.672006][T11425] No such timeout policy "syz0" [ 1093.686533][T11425] No such timeout policy "syz0" [ 1093.708028][T11425] No such timeout policy "syz0" [ 1093.720288][T11425] No such timeout policy "syz0" [ 1095.789390][T11444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.817874][T11444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.823697][T11447] __nla_validate_parse: 3 callbacks suppressed [ 1095.823712][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1095.853632][T11449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1095.878031][T11444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.882668][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1095.909378][T11444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.910218][T11456] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10179'. [ 1095.946387][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1095.978850][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1096.002271][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1096.030203][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1096.050420][T11460] netlink: 524 bytes leftover after parsing attributes in process `syz.4.10180'. [ 1096.053367][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1097.117133][T11459] lo speed is unknown, defaulting to 1000 [ 1097.218915][T11495] netlink: 'syz.0.10191': attribute type 1 has an invalid length. [ 1097.368354][T11495] bond5: entered promiscuous mode [ 1097.385245][T11495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1097.439764][T11507] bond5: (slave bridge5): making interface the new active one [ 1097.447877][T11507] bridge5: entered promiscuous mode [ 1097.458598][T11507] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1097.496203][T11512] syzkaller0: entered promiscuous mode [ 1097.505289][T11512] syzkaller0: entered allmulticast mode [ 1098.573787][T11534] ip6t_rpfilter: unknown options [ 1099.027364][T11567] netlink: 'syz.5.10211': attribute type 10 has an invalid length. [ 1099.103607][T11573] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1099.188435][T11567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.224509][T11567] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1099.787261][T11595] netlink: 'syz.4.10216': attribute type 1 has an invalid length. [ 1099.839539][T11599] x_tables: duplicate underflow at hook 1 [ 1099.852690][T11595] bond3: entered promiscuous mode [ 1099.872359][T11595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1099.948526][T11600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1099.978378][T11600] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 1099.989100][T11600] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1100.021592][T11600] bond3: (slave vti0): making interface the new active one [ 1100.050017][T11600] vti0: entered promiscuous mode [ 1100.068248][T11600] bond3: (slave vti0): Enslaving as an active interface with an up link [ 1101.131847][T11656] __nla_validate_parse: 102 callbacks suppressed [ 1101.131866][T11656] netlink: 524 bytes leftover after parsing attributes in process `syz.5.10233'. [ 1101.329265][T11664] bond0: entered promiscuous mode [ 1101.341802][T11664] batadv0: entered promiscuous mode [ 1101.352213][T11664] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1101.364506][T11664] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1101.380312][T11664] bond0: left promiscuous mode [ 1101.387960][T11664] batadv0: left promiscuous mode [ 1101.572634][T11678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10243'. [ 1101.741191][ T8021] IPVS: starting estimator thread 0... [ 1101.843691][T11688] IPVS: using max 28 ests per chain, 67200 per kthread [ 1101.928447][T11698] netlink: 'syz.0.10249': attribute type 21 has an invalid length. [ 1101.938917][T11698] IPv6: NLM_F_CREATE should be specified when creating new route [ 1101.982548][T11700] syzkaller0: entered promiscuous mode [ 1101.988369][T11700] syzkaller0: entered allmulticast mode [ 1102.012481][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10249'. [ 1102.035711][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10249'. [ 1102.589736][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10258'. [ 1102.724641][T11737] netlink: 524 bytes leftover after parsing attributes in process `syz.4.10260'. [ 1102.743169][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10262'. [ 1102.757194][T11739] netlink: 'syz.7.10262': attribute type 10 has an invalid length. [ 1102.768191][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10262'. [ 1102.851296][T11741] geneve2: entered promiscuous mode [ 1102.859671][ T57] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 60022 - 0 [ 1102.875557][ T48] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 60022 - 0 [ 1102.895242][ T48] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 60022 - 0 [ 1102.912495][ T48] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 60022 - 0 [ 1102.961877][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10265'. [ 1102.988726][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10265'. [ 1103.033782][T11713] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1103.125385][T11751] openvswitch: netlink: Message has 4 unknown bytes. [ 1103.139545][T11751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1103.141485][T11749] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20001 [ 1103.578087][T11767] hsr0: entered allmulticast mode [ 1103.627626][T11767] hsr_slave_0: entered allmulticast mode [ 1103.668171][T11767] hsr_slave_1: entered allmulticast mode [ 1103.807306][T11779] netlink: 'syz.1.10274': attribute type 1 has an invalid length. [ 1103.948957][T11779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.002886][T11790] bond0: (slave geneve2): making interface the new active one [ 1104.026257][T11790] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1104.041082][T11779] netlink: 'syz.1.10274': attribute type 14 has an invalid length. [ 1104.218248][T15548] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.253887][T15548] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.283101][T11801] tipc: Enabling of bearer rejected, media not registered [ 1104.320079][T15548] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.387609][T15548] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.931955][T11840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.997463][T11843] netlink: 'syz.4.10289': attribute type 8 has an invalid length. [ 1105.010109][T11840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.041634][T31818] syz0: Port: 1 Link DOWN [ 1105.062614][T11842] syzkaller1: entered promiscuous mode [ 1105.085217][T11842] syzkaller1: entered allmulticast mode [ 1105.219992][T11772] lo speed is unknown, defaulting to 1000 [ 1105.242186][ T9072] smc: removing ib device syz0 [ 1105.347850][ T9072] smbdirect: ib_dev[syz0] removed [ 1106.203126][T11885] sit0: entered promiscuous mode [ 1106.225218][T11885] netlink: 'syz.4.10301': attribute type 1 has an invalid length. [ 1106.244314][T11885] __nla_validate_parse: 10 callbacks suppressed [ 1106.244328][T11885] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10301'. [ 1106.451760][T11894] netlink: 524 bytes leftover after parsing attributes in process `syz.7.10303'. [ 1106.501187][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10304'. [ 1106.998299][T11907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.013691][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10308'. [ 1107.022770][T11907] netlink: 'syz.1.10308': attribute type 9 has an invalid length. [ 1107.223138][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10310'. [ 1107.374502][T11919] ip6t_srh: unknown srh match flags 5F28 [ 1107.487615][T11921] block nbd10: server does not support multiple connections per device. [ 1107.541379][T11921] block nbd10: shutting down sockets [ 1107.765499][T11929] netlink: 'syz.1.10315': attribute type 4 has an invalid length. [ 1107.773926][T11929] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10315'. [ 1107.878831][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10317'. [ 1108.130999][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10319'. [ 1108.205000][T11957] netlink: 516 bytes leftover after parsing attributes in process `syz.1.10321'. [ 1109.165568][T11980] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1109.427793][T11986] tun0: tun_chr_ioctl cmd 1074025675 [ 1109.434087][T11986] tun0: persist disabled [ 1110.070777][T12013] netlink: 524 bytes leftover after parsing attributes in process `syz.7.10336'. [ 1110.347918][T12018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input15 [ 1110.776069][T12034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.057171][T12037] syzkaller0: entered promiscuous mode [ 1111.066268][T12037] syzkaller0: entered allmulticast mode [ 1111.306913][T12048] sctp: [Deprecated]: syz.7.10346 (pid 12048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1111.306913][T12048] Use struct sctp_sack_info instead [ 1111.639013][ T30] audit: type=1107 audit(1784623110.955:33): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ݶ\\oOSQy\*BJxci "݆ e͂J=jxi8J`ЉIFiS/W =zKU^^}kK.~3+"enlDg [ 1111.639013][ T30] xYO5Ah̊%fG+ղX05uLctyFyE@%9)S,' [ 1111.769215][T12040] lo speed is unknown, defaulting to 1000 [ 1111.838856][T12060] xt_TCPMSS: Only works on TCP SYN packets [ 1112.197878][T12076] __nla_validate_parse: 3 callbacks suppressed [ 1112.197896][T12076] netlink: 516 bytes leftover after parsing attributes in process `syz.1.10354'. [ 1112.271309][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10355'. [ 1112.334852][T12091] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10358'. [ 1112.360068][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10359'. [ 1112.365934][T12078] syzkaller0: entered promiscuous mode [ 1112.377748][T12078] syzkaller0: entered allmulticast mode [ 1112.646012][T12027] Bluetooth: hci6: command 0x0406 tx timeout [ 1112.832042][T12102] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa3e error=-28 [ 1113.128274][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10367'. [ 1113.210034][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10370'. [ 1113.237373][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10370'. [ 1113.322730][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10367'. [ 1113.373152][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10371'. [ 1113.453589][T12128] netlink: 'syz.1.10373': attribute type 1 has an invalid length. [ 1113.538115][T12128] bond2: entered promiscuous mode [ 1113.543817][T12128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1113.631147][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10374'. [ 1113.766109][T12102] infiniband syz0: set active [ 1113.790150][T12102] infiniband syz0: added batadv_slave_0 [ 1113.813988][T12102] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1113.818868][T12102] infiniband syz0: Couldn't open port 1 [ 1113.837948][T12147] nbd: couldn't find a device at index 0 [ 1113.866510][T12102] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1113.905468][T12102] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1113.946811][T12102] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1113.990627][T12102] RDS/IB: syz0: added [ 1113.995548][T12102] smc: adding ib device syz0 with port count 1 [ 1114.007444][T12102] smc: ib device syz0 port 1 has no pnetid [ 1114.193967][T12160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.667967][T12168] pimreg: entered allmulticast mode [ 1115.108052][T12186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.679426][T12210] bond0: option ad_select: unable to set because the bond device is up [ 1115.704412][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.228624][T12234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.418860][T12241] gretap0: entered promiscuous mode [ 1116.432976][T12245] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1116.464376][T12241] gretap0: left promiscuous mode [ 1117.116236][T12275] netlink: 'syz.0.10414': attribute type 2 has an invalid length. [ 1117.211185][T12279] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 1117.244945][T12279] syzkaller0: entered promiscuous mode [ 1117.258698][T12279] syzkaller0: entered allmulticast mode [ 1117.349583][T12285] __nla_validate_parse: 12 callbacks suppressed [ 1117.349602][T12285] netlink: 516 bytes leftover after parsing attributes in process `syz.0.10417'. [ 1117.710513][T12292] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1118.001271][T12304] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10424'. [ 1118.152288][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10426'. [ 1118.387440][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10430'. [ 1118.450642][T12327] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1118.871697][T12348] netlink: 516 bytes leftover after parsing attributes in process `syz.1.10439'. [ 1119.439292][T12365] netlink: 'syz.7.10445': attribute type 7 has an invalid length. [ 1119.450918][T12365] netlink: 140 bytes leftover after parsing attributes in process `syz.7.10445'. [ 1119.466017][T12365] netlink: 'syz.7.10445': attribute type 21 has an invalid length. [ 1119.769701][T12369] syzkaller0: entered promiscuous mode [ 1119.787933][T12369] syzkaller0: entered allmulticast mode [ 1119.844108][T12027] Bluetooth: hci7: command 0x0405 tx timeout [ 1120.569898][T12406] syzkaller0: entered promiscuous mode [ 1120.593060][T12406] syzkaller0: entered allmulticast mode [ 1120.804020][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1120.833182][T12412] netlink: 516 bytes leftover after parsing attributes in process `syz.7.10459'. [ 1120.912463][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10461'. [ 1120.972246][T12420] ip6t_srh: unknown srh match flags 5F28 [ 1120.997257][T12421] ip6t_srh: unknown srh match flags 5F28 [ 1121.032426][T12423] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1121.055610][T12423] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1121.163020][T12438] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10469'. [ 1121.521776][T12464] SET target dimension over the limit! [ 1121.617858][T12466] xt_bpf: check failed: parse error [ 1121.716707][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10478'. [ 1121.767585][T12476] netlink: 'syz.7.10480': attribute type 9 has an invalid length. [ 1121.776251][T12475] netlink: 'syz.4.10477': attribute type 83 has an invalid length. [ 1121.806001][T12469] veth3: entered promiscuous mode [ 1122.420925][T12514] __nla_validate_parse: 6 callbacks suppressed [ 1122.420943][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10492'. [ 1125.538647][T12555] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10501'. [ 1125.656199][T12558] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.679250][T12558] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.710855][T12565] rdma_rxe: rxe_newlink: failed to add wg2 [ 1125.778114][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.142154][T12582] bridge0: entered allmulticast mode [ 1126.352980][T12593] netlink: 516 bytes leftover after parsing attributes in process `syz.7.10505'. [ 1126.719941][T12618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1126.742176][T12618] : renamed from bond_slave_0 [ 1126.788650][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10513'. [ 1126.988977][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1127.080575][T12633] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 1127.178952][T12621] lo speed is unknown, defaulting to 1000 [ 1127.222514][T12634] syzkaller0: entered promiscuous mode [ 1127.228745][T12634] syzkaller0: entered allmulticast mode [ 1127.558302][T12642] sctp: [Deprecated]: syz.4.10518 (pid 12642) Use of int in max_burst socket option. [ 1127.558302][T12642] Use struct sctp_assoc_value instead [ 1129.268730][T12590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1129.292175][T12636] netlink: 'syz.7.10517': attribute type 1 has an invalid length. [ 1129.329972][T12636] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10517'. [ 1129.360667][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10517'. [ 1129.679840][T12669] netlink: 516 bytes leftover after parsing attributes in process `syz.0.10527'. [ 1131.325358][T12694] netlink: 'syz.0.10534': attribute type 1 has an invalid length. [ 1131.409894][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10537'. [ 1131.745054][T12724] netlink: 516 bytes leftover after parsing attributes in process `syz.7.10538'. [ 1131.763678][T12685] bond1: (slave veth0_to_bond): Releasing active interface [ 1131.788586][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10534'. [ 1131.825857][T12685] bond6: (slave veth0_to_bond): making interface the new active one [ 1131.836603][T12685] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1132.044133][T12728] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.10541'. [ 1132.072111][T12728] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.10541'. [ 1132.098347][T12731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10542'. [ 1132.129360][T12735] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10544'. [ 1132.211760][T12732] nbd: device at index 64 is going down [ 1132.235535][T12733] nbd: device at index 64 is going down [ 1132.460835][ T7538] udevd[7538]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1132.771994][T12773] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1133.001393][T12784] netlink: 'syz.0.10554': attribute type 10 has an invalid length. [ 1133.374523][T12796] xt_limit: Overflow, try lower: 271964/0 [ 1133.644856][T12784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1133.705422][T12784] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1133.786150][T12792] syzkaller0: entered promiscuous mode [ 1133.802306][T12792] syzkaller0: entered allmulticast mode [ 1134.289150][T12824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.300683][T12824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1134.338068][T12830] veth1_macvtap: left promiscuous mode [ 1134.346082][T12830] macsec0: entered promiscuous mode [ 1134.351509][T12830] macsec0: entered allmulticast mode [ 1134.369391][T12830] veth1_macvtap: entered promiscuous mode [ 1134.388439][T12830] veth1_macvtap: entered allmulticast mode [ 1134.410307][T12830] macsec0: left promiscuous mode [ 1134.415708][T12830] macsec0: left allmulticast mode [ 1134.423516][T12830] veth1_macvtap: left allmulticast mode [ 1134.550865][T12824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.566167][T12843] __nla_validate_parse: 7 callbacks suppressed [ 1134.566191][T12843] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10571'. [ 1134.571988][T12824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1134.787824][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10574'. [ 1135.007792][T12824] bond0: (slave netdevsim1): Releasing backup interface [ 1135.026517][T12854] netlink: 'syz.4.10574': attribute type 13 has an invalid length. [ 1135.042188][T12824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.063472][T12824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1135.115044][T12854] gretap0: refused to change device tx_queue_len [ 1135.127534][T12854] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1135.319684][T12877] netlink: 'syz.7.10580': attribute type 1 has an invalid length. [ 1135.394077][T12824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.405252][T12824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1135.470332][T12882] netlink: 'syz.4.10582': attribute type 12 has an invalid length. [ 1135.530487][T12877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1135.828942][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1135.841787][T12887] netlink: 'syz.5.10581': attribute type 2 has an invalid length. [ 1135.861430][ T48] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1135.885952][T12897] netlink: 516 bytes leftover after parsing attributes in process `syz.7.10584'. [ 1135.927876][ T9896] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1135.936321][ T9896] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1135.947887][T12896] syzkaller0: entered promiscuous mode [ 1135.958053][T12896] syzkaller0: entered allmulticast mode [ 1136.007170][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1136.027458][ T48] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1136.100916][T12906] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10587'. [ 1136.122759][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1136.135447][ T48] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1136.314871][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10591'. [ 1136.392798][T12922] netlink: 524 bytes leftover after parsing attributes in process `syz.4.10592'. [ 1136.522571][T12931] netlink: 'syz.4.10595': attribute type 1 has an invalid length. [ 1136.588065][T12932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10595'. [ 1136.622797][T12928] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1136.642365][T12940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10595'. [ 1136.768934][T12944] netlink: 'syz.7.10596': attribute type 1 has an invalid length. [ 1136.787053][T12945] netlink: 'syz.7.10596': attribute type 1 has an invalid length. [ 1137.017933][T12944] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1137.092468][T12963] netlink: 'syz.1.10599': attribute type 11 has an invalid length. [ 1137.504410][T12975] netlink: 1 bytes leftover after parsing attributes in process `syz.7.10604'. [ 1137.518634][T12975] xt_policy: neither incoming nor outgoing policy selected [ 1137.587324][T12982] netlink: 516 bytes leftover after parsing attributes in process `syz.0.10606'. [ 1137.635005][T12981] veth0_macvtap: left promiscuous mode [ 1137.736581][T12985] netlink: 'syz.7.10607': attribute type 24 has an invalid length. [ 1137.774217][T12987] netlink: 'syz.7.10607': attribute type 24 has an invalid length. [ 1138.070559][T12998] syzkaller0: entered promiscuous mode [ 1138.076778][T12998] syzkaller0: entered allmulticast mode [ 1138.108279][T12998] netlink: 'syz.4.10610': attribute type 19 has an invalid length. [ 1138.243565][T31471] Bluetooth: hci2: command 0x0406 tx timeout [ 1139.030850][T13053] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1139.077143][T13057] SET target dimension over the limit! [ 1139.246562][T13062] debugfs: '1^!' already exists in 'ieee80211' [ 1139.399519][T13064] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1139.424767][T13065] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1139.909399][T13081] __nla_validate_parse: 8 callbacks suppressed [ 1139.909418][T13081] netlink: 168 bytes leftover after parsing attributes in process `syz.5.10639'. [ 1140.022760][T13081] ip6gre1: entered promiscuous mode [ 1140.055751][T13081] ip6gre1: entered allmulticast mode [ 1140.223098][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10645'. [ 1140.232574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.337383][T13104] validate_nla: 3 callbacks suppressed [ 1140.337398][T13104] netlink: 'syz.5.10647': attribute type 1 has an invalid length. [ 1140.394150][T13104] netlink: 84 bytes leftover after parsing attributes in process `syz.5.10647'. [ 1140.412428][T13104] netlink: 'syz.5.10647': attribute type 2 has an invalid length. [ 1140.422888][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10647'. [ 1140.468244][T13117] netlink: 516 bytes leftover after parsing attributes in process `syz.0.10649'. [ 1140.590772][T13124] netlink: 'syz.4.10653': attribute type 1 has an invalid length. [ 1140.604645][T13128] netlink: 'syz.1.10655': attribute type 1 has an invalid length. [ 1140.612672][T13128] netlink: 'syz.1.10655': attribute type 3 has an invalid length. [ 1140.621611][T13128] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10655'. [ 1140.645570][T31471] Bluetooth: hci7: command 0x0405 tx timeout [ 1140.665820][T13124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1140.667077][T13128] NCSI netlink: No device for ifindex 813332851 [ 1140.851939][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10657'. [ 1140.923357][T13139] bond6: entered promiscuous mode [ 1140.928643][T13139] bond6: entered allmulticast mode [ 1141.110127][T13154] netlink: 'syz.1.10662': attribute type 11 has an invalid length. [ 1141.286313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.328916][T13170] netlink: 'syz.1.10666': attribute type 1 has an invalid length. [ 1141.390002][T13174] netlink: 'syz.1.10666': attribute type 83 has an invalid length. [ 1141.405144][T13162] netlink: 'syz.7.10663': attribute type 16 has an invalid length. [ 1141.415568][T13162] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10663'. [ 1141.606388][T13170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1141.898704][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10675'. [ 1141.920667][T13193] bond7: Unable to set down delay as MII monitoring is disabled [ 1141.946720][T13205] netlink: 516 bytes leftover after parsing attributes in process `syz.7.10677'. [ 1141.990073][T13193] bond7 (unregistering): Released all slaves [ 1142.323313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.012645][T13231] netlink: 'syz.1.10683': attribute type 4 has an invalid length. [ 1143.750026][T13301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1143.797662][T13307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1144.551910][T13322] openvswitch: netlink: Message has 4 unknown bytes. [ 1144.567614][T13322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.532043][T13312] kthread_run failed with err -4 [ 1147.082926][T13360] __nla_validate_parse: 9 callbacks suppressed [ 1147.082943][T13360] netlink: 516 bytes leftover after parsing attributes in process `syz.7.10716'. [ 1147.296052][T13379] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10721'. [ 1147.319444][T13383] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10721'. [ 1147.367473][T13385] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10723'. [ 1147.381084][T13385] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10723'. [ 1147.930727][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10732'. [ 1147.986663][T13412] x_tables: unsorted underflow at hook 4 [ 1148.010767][T13420] netlink: 'syz.1.10735': attribute type 39 has an invalid length. [ 1149.031222][T13471] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1149.042589][T13471] smc: net device vlan1 erased user defined pnetid SYZ2 [ 1149.053523][T13473] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1149.311429][T13487] tls_set_device_offload_rx: netdev not found [ 1149.319077][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10753'. [ 1149.330689][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10753'. [ 1149.471157][T13498] netlink: 'syz.1.10758': attribute type 1 has an invalid length. [ 1149.484551][T13498] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10758'. [ 1149.592094][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10760'. [ 1149.810932][T13513] veth0: entered promiscuous mode [ 1149.820188][T13512] veth0: left promiscuous mode [ 1150.079015][T13527] netlink: 'syz.7.10769': attribute type 1 has an invalid length. [ 1150.125774][T13527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1150.139709][T13368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1150.279176][T13527] bond5: (slave geneve2): making interface the new active one [ 1150.290429][T13527] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1150.622991][T13555] netlink: 'syz.0.10776': attribute type 11 has an invalid length. [ 1150.653356][T13555] netlink: 'syz.0.10776': attribute type 4 has an invalid length. [ 1150.833085][T13566] x_tables: duplicate underflow at hook 4 [ 1150.869458][T13566] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1151.473527][T13600] netlink: 'syz.1.10787': attribute type 2 has an invalid length. [ 1151.534412][ T31] INFO: task syz.6.9288:7728 blocked for more than 143 seconds. [ 1151.559645][T13600] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1151.579079][ T31] Not tainted syzkaller #0 [ 1151.594942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1151.612452][ T31] task:syz.6.9288 state:D stack:27200 pid:7728 tgid:7726 ppid:5511 task_flags:0x400140 flags:0x00080002 [ 1151.630594][ T31] Call Trace: [ 1151.638965][ T31] [ 1151.642024][ T31] __schedule+0x17d9/0x56c0 [ 1151.647087][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1151.652124][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1151.665959][ T31] ? __pfx___schedule+0x10/0x10 [ 1151.675410][ T31] ? schedule+0x90/0x2b0 [ 1151.680062][ T31] schedule+0x164/0x2b0 [ 1151.691483][ T31] schedule_preempt_disabled+0x13/0x30 [ 1151.697301][ T31] __mutex_lock+0x7bf/0x1550 [ 1151.702228][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1151.707560][ T31] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1151.713967][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1151.719143][ T31] ? net_generic+0x1e/0x240 [ 1151.724107][ T31] ? net_generic+0x1e/0x240 [ 1151.728702][ T31] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1151.737502][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 1151.744167][ T31] ? rcu_is_watching+0x15/0xb0 [ 1151.749157][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1151.753874][ T31] ? __kmalloc_noprof+0x396/0x720 [ 1151.758948][ T31] ? __nla_parse+0x40/0x60 [ 1151.763488][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1151.769914][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1151.776395][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1151.781971][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1151.788141][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1151.792841][ T31] ? security_capable+0x7e/0x2c0 [ 1151.797931][ T31] genl_rcv_msg+0x614/0x7a0 [ 1151.802457][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1151.807566][ T31] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 1151.814058][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1151.819454][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1151.824318][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1151.829366][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1151.834738][ T31] ? down_read+0x2be/0x330 [ 1151.839172][ T31] genl_rcv+0x28/0x40 [ 1151.843181][ T31] netlink_unicast+0x7bb/0x940 [ 1151.851532][ T31] netlink_sendmsg+0x813/0xb40 [ 1151.856411][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.861718][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1151.866750][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.872063][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1151.877193][ T31] ____sys_sendmsg+0x54e/0x850 [ 1151.881981][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1151.888169][ T31] ? import_iovec+0x73/0xa0 [ 1151.892721][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1151.897432][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1151.902382][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1151.907673][ T31] ? futex_wait+0x2a2/0x390 [ 1151.912252][ T31] ? __fget_files+0x2a/0x420 [ 1151.916918][ T31] ? __fget_files+0x3a2/0x420 [ 1151.921608][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1151.927407][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1151.932917][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.939053][ T31] do_syscall_64+0x174/0x580 [ 1151.944108][ T31] ? trace_irq_disable+0x3b/0x140 [ 1151.949182][ T31] ? clear_bhb_loop+0x40/0x90 [ 1151.955948][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.961884][ T31] RIP: 0033:0x7fb3c959de99 [ 1151.966393][ T31] RSP: 002b:00007fb3ca53b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.974860][ T31] RAX: ffffffffffffffda RBX: 00007fb3c9825fa0 RCX: 00007fb3c959de99 [ 1151.982830][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 1151.990974][ T31] RBP: 00007fb3c9633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1151.998999][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.007130][ T31] R13: 00007fb3c9826038 R14: 00007fb3c9825fa0 R15: 00007ffef3b26b38 [ 1152.015160][ T31] [ 1152.018250][ T31] [ 1152.018250][ T31] Showing all locks held in the system: [ 1152.038746][T13605] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1152.055639][ T31] 1 lock held by khungtaskd/31: [ 1152.070605][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1152.086573][ T31] 2 locks held by kworker/u9:0/50: [ 1152.091710][ T31] #0: ffff8880203da140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.106696][ T31] #1: ffffc90000ba7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.118832][ T31] 1 lock held by syslogd/4974: [ 1152.133280][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1152.147023][ T31] 2 locks held by getty/5380: [ 1152.151707][ T31] #0: ffff88803214e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1152.161671][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1152.172247][ T31] 2 locks held by kworker/u9:2/5629: [ 1152.177790][ T31] #0: ffff888026bee940 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.189092][ T31] #1: ffffc90003f27c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.200927][ T31] 2 locks held by kworker/u9:4/5636: [ 1152.206331][ T31] #0: ffff8880203da140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.217922][ T31] #1: ffffc90003f97c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.231331][ T31] 2 locks held by kworker/u9:3/26739: [ 1152.236792][ T31] #0: ffff888026bee940 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.249288][ T31] #1: ffffc90002ec7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.261228][ T31] 2 locks held by syz.3.8623/4938: [ 1152.266414][ T31] #0: ffffffff9009d588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1152.274755][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 1152.285193][ T31] 2 locks held by syz.6.9288/7728: [ 1152.290313][ T31] #0: ffffffff9009d588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1152.298545][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1152.308880][ T31] 2 locks held by syz.5.10708/13328: [ 1152.314206][ T31] #0: ffffffff9009d588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1152.322414][ T31] #1: ffffffff8ee8e5e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1152.332798][ T31] [ 1152.335292][ T31] ============================================= [ 1152.335292][ T31] [ 1152.343800][ T31] NMI backtrace for cpu 0 [ 1152.343816][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1152.343846][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1152.343856][ T31] Call Trace: [ 1152.343863][ T31] [ 1152.343871][ T31] dump_stack_lvl+0xe8/0x150 [ 1152.343900][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1152.344005][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1152.344041][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1152.344066][ T31] sys_info+0x135/0x170 [ 1152.344113][ T31] watchdog+0xfd7/0x1030 [ 1152.344141][ T31] ? watchdog+0x1c7/0x1030 [ 1152.344169][ T31] kthread+0x388/0x470 [ 1152.344194][ T31] ? __pfx_watchdog+0x10/0x10 [ 1152.344214][ T31] ? __pfx_kthread+0x10/0x10 [ 1152.344240][ T31] ret_from_fork+0x514/0xb70 [ 1152.344282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1152.344308][ T31] ? __switch_to+0xc89/0x1420 [ 1152.344332][ T31] ? __pfx_kthread+0x10/0x10 [ 1152.344358][ T31] ret_from_fork_asm+0x1a/0x30 [ 1152.344391][ T31] [ 1152.344399][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1152.454284][ C1] NMI backtrace for cpu 1 [ 1152.454297][ C1] CPU: 1 UID: 0 PID: 9896 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 1152.454321][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1152.454332][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1152.454360][ C1] RIP: 0010:kasan_check_range+0x1d0/0x2c0 [ 1152.454386][ C1] Code: 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 ff 00 [ 1152.454401][ C1] RSP: 0018:ffffc9000592f6d8 EFLAGS: 00000056 [ 1152.454414][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8178e5df [ 1152.454426][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801b059628 [ 1152.454437][ C1] RBP: 000000000000000c R08: ffff88801b05962f R09: 1ffff1100360b2c5 [ 1152.454448][ C1] R10: dffffc0000000000 R11: ffffed100360b2c6 R12: 0000000000000001 [ 1152.454460][ C1] R13: ffff88801b058cc0 R14: 00002aaaaaaac000 R15: 00002aaaaaaab000 [ 1152.454473][ C1] FS: 0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000 [ 1152.454486][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1152.454498][ C1] CR2: 00007fb25ffef4b8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1152.454513][ C1] Call Trace: [ 1152.454520][ C1] [ 1152.454526][ C1] flush_tlb_mm_range+0x4f/0x1090 [ 1152.454564][ C1] ? switch_mm_irqs_off+0x4cd/0x680 [ 1152.454584][ C1] ? switch_ldt+0xc0/0x1c0 [ 1152.454603][ C1] ? kmem_cache_alloc_noprof+0xba/0x5f0 [ 1152.454621][ C1] __text_poke+0x71f/0x9b0 [ 1152.454643][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1152.454660][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1152.454684][ C1] ? kmem_cache_alloc_noprof+0xba/0x5f0 [ 1152.454702][ C1] ? __pfx___text_poke+0x10/0x10 [ 1152.454726][ C1] smp_text_poke_batch_finish+0xd0e/0x1110 [ 1152.454746][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1152.454767][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1152.454791][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1152.454814][ C1] ? __jump_label_update+0x347/0x370 [ 1152.454847][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1152.454869][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 1152.454893][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1152.454911][ C1] static_key_enable+0x1a/0x20 [ 1152.454935][ C1] toggle_allocation_gate+0xab/0x290 [ 1152.454958][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1152.454981][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1152.455004][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 1152.455023][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1152.455041][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1152.455074][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1152.455096][ C1] ? assign_work+0x3cf/0x5d0 [ 1152.455116][ C1] worker_thread+0xa47/0xfb0 [ 1152.455149][ C1] kthread+0x388/0x470 [ 1152.455172][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1152.455189][ C1] ? __pfx_kthread+0x10/0x10 [ 1152.455212][ C1] ret_from_fork+0x514/0xb70 [ 1152.455237][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1152.455260][ C1] ? __switch_to+0xc89/0x1420 [ 1152.455280][ C1] ? __pfx_kthread+0x10/0x10 [ 1152.455304][ C1] ret_from_fork_asm+0x1a/0x30 [ 1152.455333][ C1] [ 1152.783410][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1152.790264][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1152.799355][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1152.809400][ T31] Call Trace: [ 1152.812683][ T31] [ 1152.815622][ T31] vpanic+0x56c/0xa60 [ 1152.819614][ T31] ? __pfx___schedule+0x10/0x10 [ 1152.824452][ T31] ? __pfx_vpanic+0x10/0x10 [ 1152.828950][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1152.835104][ T31] panic+0xc5/0xd0 [ 1152.838846][ T31] ? __pfx_panic+0x10/0x10 [ 1152.843266][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1152.848739][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1152.854103][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1152.860265][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1152.866418][ T31] watchdog+0x1030/0x1030 [ 1152.870746][ T31] ? watchdog+0x1c7/0x1030 [ 1152.875160][ T31] kthread+0x388/0x470 [ 1152.879221][ T31] ? __pfx_watchdog+0x10/0x10 [ 1152.883887][ T31] ? __pfx_kthread+0x10/0x10 [ 1152.888488][ T31] ret_from_fork+0x514/0xb70 [ 1152.893072][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1152.898182][ T31] ? __switch_to+0xc89/0x1420 [ 1152.902848][ T31] ? __pfx_kthread+0x10/0x10 [ 1152.907427][ T31] ret_from_fork_asm+0x1a/0x30 [ 1152.912187][ T31] [ 1152.915440][ T31] Kernel Offset: disabled [ 1152.919748][ T31] Rebooting in 86400 seconds..